---

---

Regedit

Export the entire Registry

regedit /e c:\RegData_bak.reg

Hives

%systemroot%\system32\config directory has the most of the hives.

DEFAULT

DEFAULT.SAV

SAM

SAM.SAV

SECURITY

SECURITY.SAV

SOFTWARE

SOFTWARE.SAV

SYSTEM

SYSTEM.SAV

The files with .sav extension represent the post-installation state of the registry. You can return your computer to a clean state by applying all the hives with .SAV extension. Starting the computer with PE, navigate to %SystemRoot%\system32\config directory and do the following:

Copy /Y DEFAULT.SAV DEFAULT

Copy /Y SAM.SAV SAM

COPY /Y Security.sav Security

Copy /Y Software.sav Software

Copy /Y System.sav System

Other hive files are stored in individual user profile with name NTuser.dat.

Backup systemstate to F drive

WBADMIN START SYSTEMSTATEBACKUP -backupTarget:f:

The C:\Windows\System32\config\RegBack folder has the registry backup.

Connect to a network computer

In a domain environment, the domain administrator can connect to a member computer by Regedit tool.