Registry files in Windows server 2003

975 pts.
Boot disk
Microsoft Windows
Microsoft Windows Server 2003
Registry editor
Registry settings
Where are the registry files stored in Windows 2003? Can they be modified offline with a boot disk? Can we backup and restore them offline as well? If so is this a security issue? Can someone inject a registry entry with a username and password?

Answer Wiki

Thanks. We'll let you know when a new response is added.

For backup and restore / edit Registry files:
Backup Utility: Backup is a utility included with Windows Server 2003 that you can use to back up and restore the entire registry. Backup can create backup files on many kinds of media, including local and networked disk resources. Backup can create backups of files that are open and in use, in addition to closed files, so it is your best choice for creating a complete backup copy without disturbing active users or processes.

1. To back up the registry by using Backup, when you select the drives, files, and folders that you want to include in a backup set, also select System State. When you choose to back up or restore System State data, all of the data that is relevant to your system configuration is backed up or restored.
2. To restore the registry by using Backup, restore System State.

For more information about using the Backup utility and System State to backup and restore your registry, see Backup overview and System State data in Help and Support Center for Windows Server 2003.

3. Ntbackup.exe : Ntbackup.exe is a command-line tool that allows you to create backup files of your registry. Ntbackup.exe cannot be used to restore your registry, but Ntbackup.exe files can be used with Backup to perform the restoration.

4. Manually Copying Files: can back up the registry by manually copying the registry files from their storage location in the file system to another location. However, to make use of these files in the event of registry failure, you need to be able to start the computer by using an operating system that can read both the file system of the backup media and of the partition in which the non-working operating system is installed. To copy these files, you must shutdown the operating system and use boot disk or utility that can access and read the file system. To back up the registry by manually copying files, copy all files in Systemroot\System32\Config to removable media, a network share, or a compatible partition. Be sure to note the actual path to these files, because Systemroot resolves differently when your computer is running a different operating system.
To restore the registry by manually copying files, copy the backed up registry files from their backup location to their original location (the location indicated by Systemroot \ System32\Config when the associated operating system was running). This overwrites all registry settings with those in the backed up registry files.

5. Regedit.exe and Reg.exe : Regedit.exe and the command-line tool Reg.exe allow you to back up and restore individual subkeys, keys, or whole subtrees by saving parts of your registry as files on your computer, removable media, or network shares.

Reg.exe can only be used to modify local registries, but Regedit.exe can be used to modify both local and remote registries. The tools are RegBack.exe, RegRest.exe, & Regedt32.exe

There is must a security issue. Before doing anything must take registry backup via File > export > Save

Hope after reading this article you get you all of your answers!

Discuss This Question:  

There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.


Share this item with your network: