Page 1 of 1 1
Topic Options
#20924 - 2002-04-30 07:22 PM Registry Detective
Satz Offline
Fresh Scripter

Registered: 2002-04-08
Posts: 20
Loc: Calgary, Canada
Hi,

This is not a KixTart script question but I am sure many would benefit from this.

There are several instances where I have to hunt down where in a registry(per O/S) a certain value lies.

Ex: (Test PC Win98SE fresh booted PC)
I export the contents of the registry to a file.

Go into Network Neighborhood and add a new gateway IP(current field is blank) or I could add domain by the host name in DNS. Either or...

I exported the registry before I changed the network settings. After I reboot, I export the new settings and compare the files for differences.

Now, my question:

What is the most efficient way(among the users of this board) to cross reference WHERE that registry value has been changed?

Is my method wasting time? What are some other admin's ways of doing this? Is there a web site with comprehensive registry info you visit?

Thanks in advance,
_________________________
-30-

Top
#20925 - 2002-04-30 07:28 PM Re: Registry Detective
Shawn Administrator Offline
Administrator
*****

Registered: 1999-08-13
Posts: 8611
That's exactly the way I do it. Quiet the machine, regedit->export, make change, regedit->export then use FC.EXE. Works a charm. I've tried things like REGMON from the reskit - there are other tools too, but in my experience, this method is the easiest and fastest.

-Shawn

[ 30 April 2002, 19:29: Message edited by: Shawn ]

Top
#20926 - 2002-04-30 07:30 PM Re: Registry Detective
Les Offline
KiX Master
*****

Registered: 2001-06-11
Posts: 12734
Loc: fortfrances.on.ca
There are delta deploy tools available to do that sort of thing. SysDiff or Windiff, or WinInstall or something like that. They will generate a delta .reg file. I use RegMon from SysInternals. It's not a delta tool but rather reports all reg I/O.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.

Top
#20927 - 2002-04-30 08:39 PM Re: Registry Detective
BrianTX Offline
Korg Regular

Registered: 2002-04-01
Posts: 895
I do it the same way.. make the change.. check the value. Sure, there are tools that check this sort of thing for you, but I find that this is the BEST and most accurate way.

On a side note.. if anyone wants to know registry settings for McAfee VirusScan 4.5 and 4.5.1, how to disable it, how to enable it, how to do anything with it, let me know and I'll get with you. I'm not sure the wisdom of posting it publicly (for security reasons), but a lot of things can be done....

Brian

Top
#20928 - 2002-04-30 09:39 PM Re: Registry Detective
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11624
Loc: CA
Here is a FREE program from PC Magazine that monitors
any change you make to the system, whether it be a Registry modification
or a file add/remove on the system.

I use it quite frequently and it works quite well to know exactly what has
changed on the system.

PC Magazine's InCtrl5 1.0
http://downloads-zdnet.com.com/3000-2096-5930307.html?tag=lst-0-3

Description
InCtrl5 is the fifth incarnation of one of the most popular PC Magazine utilities.
By monitoring the changes made to your system when you install new software, it enables
you to troubleshoot any unexpected problems that come up. Virtually every modern program
uses an install utility that installs or updates files, and also may record data in the
Registry, and update INI files or other essential text files. A companion uninstall utility
should precisely reverse the effects of the install utility. When a newly installed program
causes existing applications to fail, or when the supplied uninstall utility can't complete
its task, to restore your system you need a record of exactly what the original install
utility did. InCtrl5 can provide this record. This new version offers a variety of new
features, including an attractive new interface, the ability to track changes to text files
such as AUTOEXEC.BAT and CONFIG.SYS, HTML reports, and command-line switches. If you are
running Windows NT 4.0 or Windows 95, you will need Internet Explorer 4.0 or higher to
preview HTML reports within the program. InCtrl5 was written by Neil J. Rubenking and
first appeared in "PC Magazine," December 5, 2000. Source code is included.

Top
#20929 - 2002-05-01 03:45 PM Re: Registry Detective
Satz Offline
Fresh Scripter

Registered: 2002-04-08
Posts: 20
Loc: Calgary, Canada
Thanx for the replies and alternate viewpoints. [Wink]
_________________________
-30-

Top
Page 1 of 1 1


Moderator:  Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 366 anonymous users online.
Newest Members
Timothy, Jojo67, MaikSimon, kvn317, kixtarts2025
17874 Registered Users

Generated in 0.053 seconds in which 0.024 seconds were spent on a total of 13 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org