How to query all the registry hives in the RMS Data Collection registry queries.

Article:TECH114106  |  Created: 2008-01-14  |  Updated: 2013-01-16  |  Article URL http://www.symantec.com/docs/TECH114106
Article Type
Technical Solution


Issue





Symptoms
The only hives available on the scope tab in a bv-Control for Windows registry query are HKEY_LOCAL_MACHINE and HKEY_USER.


 


Solution



When the registry is opened there are five visible hives. However, there are only two main hives HKEY_USERS and HKEY_LOCAL_ MACHINE.

All the other keys are subkeys of HKEY_LOCAL_MACHINE and HKEY_USERS:
 

  • HKEY_CURRENT_USER contains information on the user that is currently logged in. It is a subkey of HKEY_USERS. The other user accounts (including HKEY_CURRENT_USER) are all stored under HKEY_USERS; however, they are stored in a GUID format making it difficult to determine what user the key belongs to. When a user logs in, their respective key is loaded to the HKEY_CURRENT_USER hive.
  • HKEY_CURRENT_CONFIG is a shortcut to HKEY_LOCAL_MACHINE\CurrentControlSet\Hardware Profiles\Current.
  • HKEY_CLASSES_ROOT is a shortcut to HKEY_LOCAL_MACHINE\Software\Classes.


To query the three "other" hives, use the path that was specified under each of the two main hives.



 



Legacy ID



2008021411170153


Article URL http://www.symantec.com/docs/TECH114106


Terms of use for this information are found in Legal Notices