COKEDUDEUSF Posted August 23, 2008 Posted August 23, 2008 Can someone please explain what the HKEY_USERS\.DEFAULT is for. My interpretation from everything that I read is any time you create a new account on your computer the HKEY_USERS\.DEFAULT will be copied over to the HKEY_CURRENT_USER. Is that correct? If it is, then my computer is not behaving, I have created 3 accounts and my hive from HKEY_USERS\.DEFAULT is not being copied over to the HKEY_CURRENT_USER hive.
Noise Posted August 23, 2008 Posted August 23, 2008 Can someone please explain what the HKEY_USERS\.DEFAULT is for. My interpretation from everything that I read is any time you create a new account on your computer the HKEY_USERS\.DEFAULT will be copied over to the HKEY_CURRENT_USER. Is that correct? If it is, then my computer is not behaving, I have created 3 accounts and my hive from HKEY_USERS\.DEFAULT is not being copied over to the HKEY_CURRENT_USER hive.It's "supposed" to work that way, but it doesn't. The default hive loaded when you create a new user is located in:C:\Documents and Settings\Default User\NTUSER.DATNTUSER.DAT is a registry hive and can be opened with regedit if you need to make changes, but its tricky to do:Open Registry Editor.In the registry tree (on the left), click either the HKEY_USERS or HKEY_LOCAL_MACHINE keys.On the File menu, click Load Hive.In Look in, click the drive, folder, or network computer and folder that contains the hive you want to load.Click Open.In Key Name, type the name that you want to assign to the hive (I use TEMPLATE), and then click OK.
COKEDUDEUSF Posted August 24, 2008 Author Posted August 24, 2008 Can someone please explain what the HKEY_USERS\.DEFAULT is for. My interpretation from everything that I read is any time you create a new account on your computer the HKEY_USERS\.DEFAULT will be copied over to the HKEY_CURRENT_USER. Is that correct? If it is, then my computer is not behaving, I have created 3 accounts and my hive from HKEY_USERS\.DEFAULT is not being copied over to the HKEY_CURRENT_USER hive.It's "supposed" to work that way, but it doesn't. The default hive loaded when you create a new user is located in:C:\Documents and Settings\Default User\NTUSER.DATNTUSER.DAT is a registry hive and can be opened with regedit if you need to make changes, but its tricky to do:Open Registry Editor.In the registry tree (on the left), click either the HKEY_USERS or HKEY_LOCAL_MACHINE keys.On the File menu, click Load Hive.In Look in, click the drive, folder, or network computer and folder that contains the hive you want to load.Click Open.In Key Name, type the name that you want to assign to the hive (I use TEMPLATE), and then click OK.What kind of program do you need if you wnt to view the NTUSER.DAT?
nospoon Posted August 24, 2008 Posted August 24, 2008 Can someone please explain what the HKEY_USERS\.DEFAULT is for. My interpretation from everything that I read is any time you create a new account on your computer the HKEY_USERS\.DEFAULT will be copied over to the HKEY_CURRENT_USER. Is that correct? If it is, then my computer is not behaving, I have created 3 accounts and my hive from HKEY_USERS\.DEFAULT is not being copied over to the HKEY_CURRENT_USER hive.The HKU\.DEFAULT is for the Local System account--when no users are logged on:The .Default user is not the default userIf you ever gone spelunking in the HKEY_USERS registry key, you've no doubt found the user named HKEY_USERS\.Default. Who is this guy?Despite its name, the profile for the .Default user is not the default user profile. It's actually the profile for the Local System account and is an alias for HKEY_USERS\S-1-5-18. (S-1-5-18 is the security identifier for the Local System account.) Consequently, settings in HKEY_USERS\.Default are used by programs and services that run as Local System. The most visible examples of programs that run as Local System are winlogon and logonui, the programs that display the interface for logging onto the system. Whatever color scheme and screen saver you choose for the Local System profile get used at the logon screen.Unfortunately, the name .Default has led people to believe that this user's settings are the basis for new user profiles. In retrospect, calling it .Default was probably a bad decision. It just gave people the wrong idea.http://blogs.msdn.com/oldnewthing/archive/...02/1786493.aspxSee also:http://support.microsoft.com/kb/305709http://support.microsoft.com/kb/291586
COKEDUDEUSF Posted August 24, 2008 Author Posted August 24, 2008 Can someone please explain what the HKEY_USERS\.DEFAULT is for. My interpretation from everything that I read is any time you create a new account on your computer the HKEY_USERS\.DEFAULT will be copied over to the HKEY_CURRENT_USER. Is that correct? If it is, then my computer is not behaving, I have created 3 accounts and my hive from HKEY_USERS\.DEFAULT is not being copied over to the HKEY_CURRENT_USER hive.The HKU\.DEFAULT is for the Local System account--when no users are logged on:The .Default user is not the default userIf you ever gone spelunking in the HKEY_USERS registry key, you've no doubt found the user named HKEY_USERS\.Default. Who is this guy?Despite its name, the profile for the .Default user is not the default user profile. It's actually the profile for the Local System account and is an alias for HKEY_USERS\S-1-5-18. (S-1-5-18 is the security identifier for the Local System account.) Consequently, settings in HKEY_USERS\.Default are used by programs and services that run as Local System. The most visible examples of programs that run as Local System are winlogon and logonui, the programs that display the interface for logging onto the system. Whatever color scheme and screen saver you choose for the Local System profile get used at the logon screen.Unfortunately, the name .Default has led people to believe that this user's settings are the basis for new user profiles. In retrospect, calling it .Default was probably a bad decision. It just gave people the wrong idea.http://blogs.msdn.com/oldnewthing/archive/...02/1786493.aspxSee also:http://support.microsoft.com/kb/305709http://support.microsoft.com/kb/291586Thx for the links.
Ascii2 Posted August 25, 2008 Posted August 25, 2008 (edited) What kind of program do you need if you wnt to view the NTUSER.DAT?A registry editor. In Windows 2000, the hive may be loaded using REGEDT32.EXE or REG.EXE. Edited August 25, 2008 by Ascii2
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now