Need help editing a registry held on another drive

peterh337

Honorable
May 5, 2016
155
0
10,690
The background to this issue is here
http://www.tomshardware.co.uk/answers/id-3076506/asus-p5k-gigabyte-ex58-ud5-cloned-boot.html

but with a bit of luck I now have a simpler problem:

I cloned the 0.9TB HD to a 1.8TB one, so the old c: and d: are still c: and d: but the partitions are 2x bigger. This was done with Trueimage 13 and seems to have gone perfectly.

The cloned HD is still attached to the original machine and now I have c: and d: of the newly cloned HD showing as f: and g: (as one would expect)

I am now trying to do the registry edit described here
https://www.gcsdstaff.org/roodhouse/?p=867

but am having difficulty finding that registry. I have both regedit.exe and Resplendent Registry Editor (paid version from 2002, XP compatible). The latter has a load more features but I can't even find the file where this registry is!

I looked (on f: ) under Documents and Settings and there, under Peter (the login I use) I see NTUSER.DAT

2016-06-02-180241.jpg


and when I open that (which hangs up the PC for over a minute - that file is 11MB) I see this

2016-06-02-181104.jpg


i.e. I can't find the key

HKEY_CURRENT_CONFIG > SYSTEM > CURRENTCONTROLSET > ENUM

referred to in the above URL.

I have also found some stuff under f:\windows\system32\config (and googling suggests it should be there) but I see these

2016-06-02-181255.jpg


and none of them seem to editable with this registry editor...

I have done loads of googling and following the Load Hive option in regedt32 and going to
f:\windows\system32\config\system
(based on this
https://msdn.microsoft.com/en-us/library/ms724877(VS.85).aspx?)
I get this, for *any* file

2016-06-02-185002.jpg


The above is the basic problem. For some reason WinXP locks that "system" file even though it is not a registry of a running OS. I have used various utilities to see which process is locking it

Finally I managed to open "system" with Resplendent editor and it doesn't show CurrentControlSet (which is odd!) and if I try to delete the Enum key under Controlset001 or 002 it shows Access Denied!

2016-06-02-204723.jpg


Very many thanks for any help.

I need to get this HD to boot, because I really do not want to reinstall everything...
 
Solution

peterh337

Honorable
May 5, 2016
155
0
10,690
I did that. Taking ownership, etc.

However, it turns out that editing the registry of the running OS is much easier. So I had a brainwave... I put the cloned HD into the *old* PC. It booted, as it should, incidentally proving there is no issue with the HD or it's partition sizes etc.

Then I edited the registry, deleting the Enum key, shut the PC down and moved the HD into the new PC as per this
https://www.gcsdstaff.org/roodhouse/?p=867
and much similar advice on the www.

Unfortunately the new PC still BSODs. The instructions suggest you can expect several BSODs as the new machine rebuilds its registry but it's done about 20 so far.
 

peterh337

Honorable
May 5, 2016
155
0
10,690
Just an update in case anyone finds this thread:

I abandoned this problem and installed a fresh win7-64 on c: and a fresh winXP-32 on d:

I did that because (a) I wanted win7 on c: (and recovering the cloned drive would have placed XP on c: ) and (b) I judged the mup.sys bsod issue to be probably intractable.

I ended up with two apps which simply would not run in win7 and especially not 64-bit win7 (Orcad SDT/386 and Protel PCB 2.8 - both very high value apps from the 1990s) and tried two different winXP VMs for them: Microsoft Virtual PC and VMware. Protel worked great in both. Orcad worked fully only in VMware (cursor / mouse driver issues).
 


The user.dat is only the user registry key HKEY_CURRENT_USER therefore you won't find the HKEY_CURRENT_CONFIG key there.

 
Solution