| Registry
DataBase : HKEY_USERS = HKU |
System : 95, 95+IE4.x,
98, ME
Contains the names of user accounts registered in the
system. Only the subkey \.Default is
necessary. You will see subkeys corresponding to the
different users, but those are not coded as in Windows
NT.
| .Default |
Contains default user
information. |
| Name |
Contains the
information of one particular user. |
Those 2 keys have the following
subkeys :
|
| AppEvents |
|
Contains path and file
names for system sounds. |
| Control Panel |
|
Contains settings of
some Control Panel applets. |
| InstallLocationsMRU |
|
Lists the last 5
installed Windows components. |
| Keyboard Layout |
|
Contains keyboard
national values from CurrentControlSet. |
| Network |
|
\Persistent
lists the permanent connections, \Recent
lists the most recent ones. |
| RemoteAccess |
|
Contains addresses and
remote access configuration profiles which have
been defined. |
| Software |
|
Contains individual
settings corresponding to each registered user's
software configuration. Also refers to HKLM. |
| Default |
|
Contains default user
information. |
| SID |
|
Contains the
configuration specific to one user. |
|
| |
System : NT, 2K
Contains the SID, single user
identification, which looks like S-1-5-21-673061268-245729164-666378214-1000.
It can only be edited by an administrator. Windows
NT uses user accounts and also needs a \.Default
subkey.
| AppEvents |
|
Contains path and file
names for system sounds. |
| Console |
|
Contains the MS-DOS
console settings. |
| Control Panel |
|
Contains the settings
of some Control Panel applets,
as well as sounds and screensavers. |
| Environment |
|
Contains %SystemDrive%
\TMP and %SystemDrive% \TEMP
among other items. |
| Keyboard Layout |
|
Contains the keyboard
national values from CurrentControlSet. |
| Software |
|
Contains individual
settings corresponding to each registered user's
software configuration, except for common
applications. |
| Unicode Program
Groups |
|
Contains current user UNICODE
information. |
|