To query the registry on a remote machine, the remote registry service should be running.
If the remote registry service is not running, once a query is issued against the remote machine an error will be displayed as:
"The network path was not found".
To enable the remote registry service, type:
sc \\computer_name start remoteregistry
To start the service automatically type:
sc \\computer_name config remoteregistry start= auto
Once the remote registry service is up and running, the registry can be queried via command line.
All these commands will only work if you have the right administrative privileges such as domain admin.
To query the registry remotely type command below:
C:\>reg query \\remote_comp_name\hklm\software\microsoft\windows\currentversion\explorer /s
C:\>reg query \\192.168.100.100\hklm\software\microsoft\windows\currentversion\explorer /s
Command-query above will look for the registry in HotKey Local Machine.
To query the HKCU or the current user, need to specify the SID or the security identifier on the query command.
Comand example below to quert HKCU remotely:
C:\>reg query \\192.168.100.101\hku\S-1-5-21-31129-256707-11134-8180\software\microsoft\windows\currentversion\sidebar /s
Command above will query the values on the specified registry key for the SID value being queried.
More examples from Technet about reg query, see link below:
Remote querying saves time and hassles and no need to disturb user they can continue working, while sys admins are also doing their job in the background.
To user PowerShell to query registry settings remotely, check out link below:
http://quickbytesstuff.blogspot.sg/2016/01/powershell-get-registry-values-or.html
Cheers..Hope it helps.
Comments
Post a Comment