Registry DataBase : HKEY_USERS = HKU
System : 95, 95+IE4.x, 98, ME
Contains the names of user accounts registered in the system. Only the subkey \.Default is necessary. You will see subkeys corresponding to the different users, but those are not coded as in Windows NT.
.Default Contains default user information.
Name Contains the information of one particular user.

Those 2 keys have the following subkeys : 

AppEvents   Contains path and file names for system sounds.
Control Panel   Contains settings of some Control Panel applets.
InstallLocationsMRU   Lists the last 5 installed Windows components.
Keyboard Layout   Contains keyboard national values from CurrentControlSet.
Network   \Persistent lists the permanent connections, \Recent lists the most recent ones.
RemoteAccess   Contains addresses and remote access configuration profiles which have been defined.
Software   Contains individual settings corresponding to each registered user's software configuration. Also refers to HKLM.
Default   Contains default user information.
SID   Contains the configuration specific to one user.
 
System : NT, 2K
Contains the SID, single user identification, which looks like S-1-5-21-673061268-245729164-666378214-1000. It can only be edited by an administrator. Windows NT uses user accounts and also needs a \.Default subkey.
AppEvents   Contains path and file names for system sounds.
Console   Contains the MS-DOS console settings.
Control Panel   Contains the settings of some Control Panel applets, as well as sounds and screensavers.
Environment   Contains %SystemDrive% \TMP and %SystemDrive% \TEMP among other items.
Keyboard Layout   Contains the keyboard national values from CurrentControlSet.
Software   Contains individual settings corresponding to each registered user's software configuration, except for common applications.
Unicode Program Groups   Contains current user UNICODE information.

 

© Franck Kiechel 2000-2001