Page 1 of 1
Where to find computer NAME in windows NT registry / system
Posted: June 7th, 2010, 4:29
by learner
Dear friends
I have recovered data from an old disk ,customer wants name of that machine .Is there any way to get computer name?
OS is win nt.
Re: Where to find computer NAME in windows NT registry / system
Posted: June 7th, 2010, 4:58
by learner
typically we can get it from follwoing files -
\winnt\system32\drivers\etc - hosts
in this case host file does not have computer name.
Is it possible to get it from registry in offline?
Forendic Gurus's pls. help
Re: Where to find computer NAME in windows NT registry / system
Posted: June 7th, 2010, 7:21
by dick
Hi,
On XP it's here:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName\ComputerName, "ComputerName"
You would have to mount the registry of the target windows installation using an off line registry tool.
Re: Where to find computer NAME in windows NT registry / system
Posted: June 7th, 2010, 8:16
by learner
Thanks ,will give it a try