All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 4 posts ] 
Author Message
 Post subject: Where to find computer NAME in windows NT registry / system
PostPosted: June 7th, 2010, 4:29 
Offline

Joined: July 15th, 2008, 1:50
Posts: 95
Dear friends
I have recovered data from an old disk ,customer wants name of that machine .Is there any way to get computer name?
OS is win nt.


Top
 Profile  
 
 Post subject: Re: Where to find computer NAME in windows NT registry / system
PostPosted: June 7th, 2010, 4:58 
Offline

Joined: July 15th, 2008, 1:50
Posts: 95
typically we can get it from follwoing files -
\winnt\system32\drivers\etc - hosts
in this case host file does not have computer name.
Is it possible to get it from registry in offline?
Forendic Gurus's pls. help


Top
 Profile  
 
 Post subject: Re: Where to find computer NAME in windows NT registry / system
PostPosted: June 7th, 2010, 7:21 
Offline

Joined: January 8th, 2008, 5:21
Posts: 937
Location: uk
Hi,

On XP it's here:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ComputerName, "ComputerName"
You would have to mount the registry of the target windows installation using an off line registry tool.


Top
 Profile  
 
 Post subject: Re: Where to find computer NAME in windows NT registry / system
PostPosted: June 7th, 2010, 8:16 
Offline

Joined: July 15th, 2008, 1:50
Posts: 95
Thanks ,will give it a try


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 4 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 10 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group