Recovering from an incorrect registry restore

[eric.goforth]

Hello,

I accidentally restored the registry from another machine, a server,
onto my work pc, it's a long story. After this the machine would not
boot up, even in safe mode.

What really stinks is I had a complete registry backup on my computer,
but I was unable to restore it.

I got a new hdd with a fresh image, etc, but it's still not the same.
It will take me weeks to get my machine back the way it was.

I was left the old HDD to get any data I need off of. I tried copying
the registry stuff over from the c:\windows\repair directory over to
the c:\windows\system32\config directory, but my machine still wouldn't
boot up from my old HDD.

As an experiment, I tried copying all of the c:\windows\system32\config
files from my new HDD onto my old HDD. I was then able to boot up and
get to the login screen, but I'm unable to log in, even in safe mode.
I even had someone type in a password for a local admin account, but it
still wouldn't let us log in.

I'm wondering if I can somehow blow away the security stuff from the
registry, if I'd be able to get far enough into the system to be able
to do a registry restore. What would happen if I copied the "security"
file over from the c:\windows\repair directory over the the
c:\windows\system32\config directory?

Also, if I'm signed in with another account, say local admin, account
and do a registry restore from my old registry backup that was saved
with my domain admin account, what would happen with the HKEY CURRENT
USER stuff, since there would be a mismatch between the user accounts?

FWIW I do have access to a Windows XP installation CD.

Thanks,
Eric

 

[Pegasus \(MVP\)]

Hello,

I accidentally restored the registry from another machine, a server,
onto my work pc, it's a long story. After this the machine would not
boot up, even in safe mode.

What really stinks is I had a complete registry backup on my computer,
but I was unable to restore it.

I got a new hdd with a fresh image, etc, but it's still not the same.
It will take me weeks to get my machine back the way it was.

I was left the old HDD to get any data I need off of. I tried copying
the registry stuff over from the c:\windows\repair directory over to
the c:\windows\system32\config directory, but my machine still wouldn't
boot up from my old HDD.

As an experiment, I tried copying all of the c:\windows\system32\config
files from my new HDD onto my old HDD. I was then able to boot up and
get to the login screen, but I'm unable to log in, even in safe mode.
I even had someone type in a password for a local admin account, but it
still wouldn't let us log in.

I'm wondering if I can somehow blow away the security stuff from the
registry, if I'd be able to get far enough into the system to be able
to do a registry restore. What would happen if I copied the "security"
file over from the c:\windows\repair directory over the the
c:\windows\system32\config directory?

Also, if I'm signed in with another account, say local admin, account
and do a registry restore from my old registry backup that was saved
with my domain admin account, what would happen with the HKEY CURRENT
USER stuff, since there would be a mismatch between the user accounts?

FWIW I do have access to a Windows XP installation CD.

Thanks,
Eric

You write "I was then able to boot up and get to the login screen,
but I'm unable to log in, even in safe mode." Why not? Incorrect
password? If so then you can reset it with this boot disk:
http://home.eunet.no/~pnordahl/ntpasswd/bootdisk.html

Also: Do you have a complete set of backed up registry files?

 

[eric.goforth]

You write "I was then able to boot up and get to the login screen,
but I'm unable to log in, even in safe mode." Why not? Incorrect
password? If so then you can reset it with this boot disk:
http://home.eunet.no/~pnordahl/ntpasswd/bootdisk.html

Also: Do you have a complete set of backed up registry files?

I just have a registry export (*.reg) file not the registry files, per
se.

I had a support guy help me with it a little bit. My LAN account
should an admin on the box. The support guy thought it might be
because the computer name (the computer name was changed on my new HDD)
didn't match the MAC address on the the PC, etc. that Active Directory
wouldn't let us in. I tried unplugging the network cable to see if I
could get in using cached credentials, didn't work. The support guy
tried typing in the local administrator password, but it didn't work
either.

When I try to log in it acts like it's going to log in and then says
"logging out" (as thought you'd chosen to logout of the computer) and
goes back to the login screen.

-Eric

 

[Pegasus \(MVP\)]

I just have a registry export (*.reg) file not the registry files, per
se.

I had a support guy help me with it a little bit. My LAN account
should an admin on the box. The support guy thought it might be
because the computer name (the computer name was changed on my new HDD)
didn't match the MAC address on the the PC, etc. that Active Directory
wouldn't let us in. I tried unplugging the network cable to see if I
could get in using cached credentials, didn't work. The support guy
tried typing in the local administrator password, but it didn't work
either.

When I try to log in it acts like it's going to log in and then says
"logging out" (as thought you'd chosen to logout of the computer) and
goes back to the login screen.

-Eric

Having an exported .reg file won't do you much good. Use regback.exe
if you really wish to back up your registry.

If your logon process is looping back to the account/password panel
after you have entered your password then your password is correct
but your system drive letter is wrong. This is often cured by booting
into the Recovery Console, then running this command:
fixmbr

If this does not fix it then there are other tools to repair the damage.
The method depends on your setup:
- Is the machine networked?
- Do you have access to another WinXP/2000 PC?
- Do you have a Bart PE boot CD?

 

[eric.goforth]

Having an exported .reg file won't do you much good. Use regback.exe
if you really wish to back up your registry.

If your logon process is looping back to the account/password panel
after you have entered your password then your password is correct
but your system drive letter is wrong. This is often cured by booting
into the Recovery Console, then running this command:
fixmbr

If this does not fix it then there are other tools to repair the damage.
The method depends on your setup:
- Is the machine networked?
- Do you have access to another WinXP/2000 PC?
- Do you have a Bart PE boot CD?

Hello,

The machine is networked, I only have one network cable in my cube,
however. I have another machine in my cube that I can plug my old HDD
into. I also have a USB HDD case that I can put the HDD into and plug
it into another PC with. I've currently switched my HDD back to the
new HDD that they reimaged for me, but would prefer to get my old HDD
back.

I'm not sure what Bart PE boot CD is, so I doubt I have one. I have a
Win XP SP2 disk (same OS that's on the box) . I don't know the local
admin account pw, this is a company PC so they keep that information
pretty tightly held. My domain account is an admin on the box. I
doubt I can run the Windows Recovery for that reason, it asks for the
local admin pw.

I can get the IT guy to come up and type in the local admin pw for me,
but I'd rather not bother him again unless absolutely necessary. As
far as they're concerned they fixed the issue when they reimaged the
machine.

I also have a Win98SE boot disk. Would an FDISK /MBR be the same as
the fixmbr command?

From what you're saying, it sounds like if I can get logged back in on

my old HDD and do a registry restore using regedit, it likely won't fix
my issue? Since I don't have a registry backup using regback.exe.

-Eric

 

[Pegasus \(MVP\)]

Hello,

The machine is networked, I only have one network cable in my cube,
however. I have another machine in my cube that I can plug my old HDD
into. I also have a USB HDD case that I can put the HDD into and plug
it into another PC with. I've currently switched my HDD back to the
new HDD that they reimaged for me, but would prefer to get my old HDD
back.

I'm not sure what Bart PE boot CD is, so I doubt I have one. I have a
Win XP SP2 disk (same OS that's on the box) . I don't know the local
admin account pw, this is a company PC so they keep that information
pretty tightly held. My domain account is an admin on the box. I
doubt I can run the Windows Recovery for that reason, it asks for the
local admin pw.

I can get the IT guy to come up and type in the local admin pw for me,
but I'd rather not bother him again unless absolutely necessary. As
far as they're concerned they fixed the issue when they reimaged the
machine.

I also have a Win98SE boot disk. Would an FDISK /MBR be the same as
the fixmbr command?

my old HDD and do a registry restore using regedit, it likely won't fix
my issue? Since I don't have a registry backup using regback.exe.

-Eric

Yes, running fdisk /mbr may fix it. The other tools require you to
know the administrator's password.