Ghost Solution Suite

 View Only
  • 1.  Ghost Explorer and Registry editing

    Posted Nov 06, 2007 09:04 AM
    Hi,

    I have an image i captured. After imaging a machine with it to test it, I noticed a few registry configuration errors.

    I was trying to avoid having to make the changes and then recapture the image.

    So I loaded the Image in Ghost explorer. I went to C:\windows\system32\config

    I extracted the software file in their.

    Then I went to regedit>Load hive and loaded this hive.

    I made my changes.
    then I unloaded the hive, and closed regedit.

    I then Inserted this file back into the image via ghost explorer. This worked fine.

    The problem i'm having....

    After testing again, I noticed one more registry change I needed to make.

    So i went thru the above process again.

    But when I tried to load the extracted "software" file agian in regedit. It gives me an error.
    "Cannot load C:\Documents and Settings\Administator\Desktop\system: Error while loading hive"

    It seems to be that Once I extract a hive and edit it then put it back. The next time I want to load it. I get this error

    If the hive is one I havn't touched yet, I am able to load it in regedit. But once i edit it, I can no longer load it again.

    Is this intended design? Like am I only supposed to be able to edit hives once or what  can I do?



  • 2.  RE: Ghost Explorer and Registry editing

    Posted Nov 06, 2007 05:43 PM
    Have you been recompiling the image in ghostexp after injecting the newly modified hive file?
    If yes, and you still are having the error opening the image, you could try running ghostexp with one or both of these:
    -IGNOREINDEX and/or -CORRUPT
    http://service1.symantec.com/SUPPORT/ghost.nsf/docid/2000051614544325


  • 3.  RE: Ghost Explorer and Registry editing

    Posted Nov 07, 2007 12:46 AM
    I'm not sure your following what I'm saying.

    My ghost Image is NOT corrupt. It works fine.

    The link you referred me to is one I have saw before and won't help me with this.

    In a Nutshell.

    when I extract the registry hive files from c:\windows\system32\config  (system, software, etc)

    then edit them and put them back in the image

    If I then later try to re-extract one of the previously edited ones.

    The windows registry editor (regedit) will not let me load them. It gives the error that I posted in the original post.

    This only happens to files I have previously edited.

    I hope this makes my question more clear.

    Also in response to your question:

    You asked me if I had re-compiled the image in ghost explorer afterward. The answer is no i didn't.
    I didn't realize I had to recompile the image after adding files. Just dropping the files in and closing the program always seemed to work in the past.


  • 4.  RE: Ghost Explorer and Registry editing

    Posted Nov 07, 2007 01:11 AM
    Hi,

    This is a known issue we are working on. Under certain conditions, when extracting a file that had been added to the image using explorer, file is not extracted correctly.

    However, actual file is not corrupt if you restore the image. If you have a copy of the original file, you can change it and add again.

    Would you be able to restore the image (you can do it using Ghost32 to a non-os partition under Windows) and extract the file and check?

    Krish


  • 5.  RE: Ghost Explorer and Registry editing

    Posted Nov 07, 2007 11:50 AM
    Thanks for the reply.

    Yes the file doesn't seem corrupt when I load the image and all. Its just that If I want to change one of them more than once, I can't.

    Your idea sounds best as a workaround in the meantime.

    when I need to make a registry edit. I'll extract the file, make a copy of it, make the changes to the copy and put that one back in the image. If I need to make more changes. Ill start with the original again and make a copy and rinse and repeat.