Thursday, January 1, 2015

Interesting regedit.exe tricks

I read an interesting post by Tim Barrett regarding regedit.exe tricks – here (new window).  You can spend hours looking at regedit.exe, but i never paid attention to the favourites menu!  My favourite trick is to use the export as text function to determine the last write time to that particular registry key.  EG: To determine when a change was made, right click on the key in question, and select export

In the Export Registry File window, select the location you wish to save the file, and select Save as type Text files (*.txt).  Give the file a name and click Save.

Open the saved file in notepad.  In the example, you can see the registry key was last written on the 03/12/2014 at 1815. 

This can help determine when some issues occurred, or in particular cases …. who made the change.

No comments:

Post a Comment