• HKEY_CLASSES_ROOT
- Administrator Group - Full Control, Read
- Power User Group - Read, Special Permissions
- User Group - Read
- System Account - Full Control, Read
• HKEY_CURRENT_CONFIG
- Administrator Group- Full Control, Read
- Power User Group - Read
- User Group - Read
- System Account - Full Control, Read
• HKEY_CURRENT_USER
- Administrator Group - Full Control, Read
- Current User - Full Control, Read
- System Account - Full Control, Read
• HKEY_LOCAL_MACHINE
- Administrator Group - Full Control, Read
- Everyone Group - Read
- System Account - Full Control, Read
• HKEY_USERS
- Administrator Group - Full Control, Read
- Everyone Group - Read
- System Account - Full Control, Read
引用
using Microsoft.Win32
写入和查寻
// Creates a subkey named myApplication under HKEY_CURRENT_USER.
HKEY_CLASSES_ROOT – virtual key. Actual location is in HKEY_LOCAL_MACHINE\Software\Classes (see below);
HKEY_CURRENT_USER – the key corresponds to C:\Documents and Settings\UserName\NTUSER.DAT of user currently logged in. You may access registry data of any user;
HKEY_LOCAL_MACHINE – virtual key. Is combined from few files:
HKEY_LOCAL_MACHINE\HARDWARE – virtual branch; no file there.
HKEY_LOCAL_MACHINE\SAM – corresponds to C:\WINDOWS\system32\config\sam file;
HKEY_LOCAL_MACHINE\SECURITY – corresponds to C:\WINDOWS\system32\config\SECURITY file;
HKEY_LOCAL_MACHINE\SOFTWARE – corresponds to C:\WINDOWS\system32\config\software file;
HKEY_LOCAL_MACHINE\SYSTEM – corresponds to C:\WINDOWS\system32\config\SYSTEM file;
Note: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet is just symbolic link to HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001.
Other files are mainly not so important for users/administrators. You may find other file conponents in C:\WINDOWS\system32\config\ directory.
To access the file you have to open it. You now may browse and recover data from the file (select key and choose ‘Export key’ or select value and choose ‘Save’).
When you do key export, you have to select ‘virtual Windows registry prefix’ to make it work with RegEdit Windows utility correctly.