WinXP registry & system restore

[Doug Rorem]

(I realize this is a WinXP question, but the only other
Windows newsgroup for WinXP registry issues that I could
find is a German one:
microsoft.public.de.german.windowsxp.registry)

23-feb-2004

Hi,

I'm trying to help a friend with a problem with WinXP home.
They can't boot because the machine's registry is corrupt
(i.e. they get the error:

Windows XP could not start because the following file is missing or corrupt:
\WINDOWS\SYSTEM32\CONFIG\SYSTEM

I've looked at the MS KB article 307545 'How to recover from a
corrupted registry that prevents windows XP from starting'.

My question - KB307545 gives you a method to recover (using the
recovery console) the registry back to the initial setup of
WinXP. The system restore takes snapshots much more recent than
that, however it requires the system to be bootable to get
at them. Is it possible to put this hard drive in a working
WinXP system and somehow use it to recover more recent versions
of the registry (i.e. system, software, sam, security & default
files) from one of the system restore snapshots stored on the
hard drive?

As an alternate.. does the Win2K ChkReg.exe utility work for
WinXP as well? I guess I could make the boot diskettes for
WinXP home and try running it. (AFAIK, it isn't part of the
WinXP Recovery Console)

Thanks in advance...

Doug Rorem
(e-mail address removed)

 

[Dave Patrick]

If the system hive is corrupt, and assuming you already tried LKG, It may be
possible to rename the system hive found in
%windir%\system32\config\system
to system.old
then rename
%windir%\system32\config\system.alt
to
%windir%\system32\config\system

If that fails you haven't much choice but to copy/ use the
original-as-installed system hive from
%windir%\repair\system
to
%windir%\system32\config\system

You'll need to reinstall the device drivers for any hardware added since the
original OS install.

To start the Recovery Console, start the computer from the Windows XP Setup
CD-Rom. When the "Welcome to Setup" screen appears, press R to start the
Recovery Console. When you are prompted to do so, type the Administrator
password. If the administrator password is blank, just press ENTER. Once the
password has been validated, you have full access to the Recovery Console,
but limited access to the hard disk. You can only access the following
folders on your computer: %systemroot% and %windir%


--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]
Microsoft Certified Professional [Windows 2000]
http://www.microsoft.com/protect


:
| (I realize this is a WinXP question, but the only other
| Windows newsgroup for WinXP registry issues that I could
| find is a German one:
| microsoft.public.de.german.windowsxp.registry)
|
| 23-feb-2004
|
| Hi,
|
| I'm trying to help a friend with a problem with WinXP home.
| They can't boot because the machine's registry is corrupt
| (i.e. they get the error:
|
| Windows XP could not start because the following file is missing or
corrupt:
| \WINDOWS\SYSTEM32\CONFIG\SYSTEM
|
| I've looked at the MS KB article 307545 'How to recover from a
| corrupted registry that prevents windows XP from starting'.
|
| My question - KB307545 gives you a method to recover (using the
| recovery console) the registry back to the initial setup of
| WinXP. The system restore takes snapshots much more recent than
| that, however it requires the system to be bootable to get
| at them. Is it possible to put this hard drive in a working
| WinXP system and somehow use it to recover more recent versions
| of the registry (i.e. system, software, sam, security & default
| files) from one of the system restore snapshots stored on the
| hard drive?
|
| As an alternate.. does the Win2K ChkReg.exe utility work for
| WinXP as well? I guess I could make the boot diskettes for
| WinXP home and try running it. (AFAIK, it isn't part of the
| WinXP Recovery Console)
|
| Thanks in advance...
|
| Doug Rorem
| (e-mail address removed)
|

 

[Dave Patrick]

If the system hive is corrupt, and assuming you already tried LKG, It may be
possible to rename the system hive found in
%windir%\system32\config\system
to system.old
then rename
%windir%\system32\config\system.alt
to
%windir%\system32\config\system

If that fails you haven't much choice but to copy/ use the
original-as-installed system hive from
%windir%\repair\system
to
%windir%\system32\config\system

You'll need to reinstall the device drivers for any hardware added since the
original OS install.

To start the Recovery Console, start the computer from the Windows XP Setup
CD-Rom. When the "Welcome to Setup" screen appears, press R to start the
Recovery Console. When you are prompted to do so, type the Administrator
password. If the administrator password is blank, just press ENTER. Once the
password has been validated, you have full access to the Recovery Console,
but limited access to the hard disk. You can only access the following
folders on your computer: %systemroot% and %windir%


--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]
Microsoft Certified Professional [Windows 2000]
http://www.microsoft.com/protect


:
| (I realize this is a WinXP question, but the only other
| Windows newsgroup for WinXP registry issues that I could
| find is a German one:
| microsoft.public.de.german.windowsxp.registry)
|
| 23-feb-2004
|
| Hi,
|
| I'm trying to help a friend with a problem with WinXP home.
| They can't boot because the machine's registry is corrupt
| (i.e. they get the error:
|
| Windows XP could not start because the following file is missing or
corrupt:
| \WINDOWS\SYSTEM32\CONFIG\SYSTEM
|
| I've looked at the MS KB article 307545 'How to recover from a
| corrupted registry that prevents windows XP from starting'.
|
| My question - KB307545 gives you a method to recover (using the
| recovery console) the registry back to the initial setup of
| WinXP. The system restore takes snapshots much more recent than
| that, however it requires the system to be bootable to get
| at them. Is it possible to put this hard drive in a working
| WinXP system and somehow use it to recover more recent versions
| of the registry (i.e. system, software, sam, security & default
| files) from one of the system restore snapshots stored on the
| hard drive?
|
| As an alternate.. does the Win2K ChkReg.exe utility work for
| WinXP as well? I guess I could make the boot diskettes for
| WinXP home and try running it. (AFAIK, it isn't part of the
| WinXP Recovery Console)
|
| Thanks in advance...
|
| Doug Rorem
| (e-mail address removed)
|

 

[Doug Rorem]

Dave,

I guess things look pretty bleak for my friend..

Unfortunately, they can't boot their system at all [to safe
mode, or to last known good (LKG)] without hitting the
corrupt config\system error.. Also, it appears as though
MS no longer creates a SYSTEM.ALT file on WinXP (at least
I can't find it anywhere on a different [working] WinXP
system). I *did* find a system.sav file in the
%windir%\system32\config
folder, but it was very small (only about 11% the size
of the actual SYSTEM hive) on the different (working)
WinXP system I looked at.

Thanks anyways for the suggestions..

Doug

 

[Doug Rorem]

Dave,

I guess things look pretty bleak for my friend..

Unfortunately, they can't boot their system at all [to safe
mode, or to last known good (LKG)] without hitting the
corrupt config\system error.. Also, it appears as though
MS no longer creates a SYSTEM.ALT file on WinXP (at least
I can't find it anywhere on a different [working] WinXP
system). I *did* find a system.sav file in the
%windir%\system32\config
folder, but it was very small (only about 11% the size
of the actual SYSTEM hive) on the different (working)
WinXP system I looked at.

Thanks anyways for the suggestions..

Doug

 

[Dave Patrick]

I haven't tried this but you may be able to use the newest file named;
_REGISTRY_MACHINE_SYSTEM
renamed as
%windir%\system32\config\system
found in
\System Volume Information\_restore{SID}\RPXXX\snapshot

If you try this let us know how you make out.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]
Microsoft Certified Professional [Windows 2000]
http://www.microsoft.com/protect


:
| Dave,
|
| I guess things look pretty bleak for my friend..
|
| Unfortunately, they can't boot their system at all [to safe
| mode, or to last known good (LKG)] without hitting the
| corrupt config\system error.. Also, it appears as though
| MS no longer creates a SYSTEM.ALT file on WinXP (at least
| I can't find it anywhere on a different [working] WinXP
| system). I *did* find a system.sav file in the
| %windir%\system32\config
| folder, but it was very small (only about 11% the size
| of the actual SYSTEM hive) on the different (working)
| WinXP system I looked at.
|
| Thanks anyways for the suggestions..
|
| Doug

 

[Dave Patrick]

I haven't tried this but you may be able to use the newest file named;
_REGISTRY_MACHINE_SYSTEM
renamed as
%windir%\system32\config\system
found in
\System Volume Information\_restore{SID}\RPXXX\snapshot

If you try this let us know how you make out.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]
Microsoft Certified Professional [Windows 2000]
http://www.microsoft.com/protect


:
| Dave,
|
| I guess things look pretty bleak for my friend..
|
| Unfortunately, they can't boot their system at all [to safe
| mode, or to last known good (LKG)] without hitting the
| corrupt config\system error.. Also, it appears as though
| MS no longer creates a SYSTEM.ALT file on WinXP (at least
| I can't find it anywhere on a different [working] WinXP
| system). I *did* find a system.sav file in the
| %windir%\system32\config
| folder, but it was very small (only about 11% the size
| of the actual SYSTEM hive) on the different (working)
| WinXP system I looked at.
|
| Thanks anyways for the suggestions..
|
| Doug

 

[Dave Patrick]

Here's a document that confirms that the snapshot folder files can be used.

How to Recover from a Corrupted Registry That Prevents Windows XP from
Starting
http://support.microsoft.com/?id=307545


--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]
Microsoft Certified Professional [Windows 2000]
http://www.microsoft.com/protect

 

[Dave Patrick]

Here's a document that confirms that the snapshot folder files can be used.

How to Recover from a Corrupted Registry That Prevents Windows XP from
Starting
http://support.microsoft.com/?id=307545


--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]
Microsoft Certified Professional [Windows 2000]
http://www.microsoft.com/protect

 

[Doug Rorem]

Here's a document that confirms that the snapshot folder files can be used.

How to Recover from a Corrupted Registry That Prevents Windows XP from
Starting
http://support.microsoft.com/?id=307545

Thanks Dave.. I actually had seen that KB article back when
I started, but didn't fully read through and understand it.. doh!
After your last post - describing the 'System Volume Information'
folder I found some sites describing how to recover the registry:

http://www.aade.com/XPhint/XPrecovery.htm
http://www.digitalwebcast.com/2002/03_mar/tutorials/cw_boot_toot.htm

these both describe essentially the same procedure as the MS KB307545
article (which is probably where they got the information initially).

It basically has you use the recovery console to get back the
system registry hives (just after initial XP install) as a
*first step*. THEN, you go in and extract (copy) the desired
snapshot (registry hive files) *manually* from the 'System Volume
Information' folder. After doing that, you have a set of registry
hives that is as close to up to date as possible.. I hadn't
fully understood the second step.

Thanks for your advice *and* patience!

Doug

 

[Doug Rorem]

Here's a document that confirms that the snapshot folder files can be used.

How to Recover from a Corrupted Registry That Prevents Windows XP from
Starting
http://support.microsoft.com/?id=307545

Thanks Dave.. I actually had seen that KB article back when
I started, but didn't fully read through and understand it.. doh!
After your last post - describing the 'System Volume Information'
folder I found some sites describing how to recover the registry:

http://www.aade.com/XPhint/XPrecovery.htm
http://www.digitalwebcast.com/2002/03_mar/tutorials/cw_boot_toot.htm

these both describe essentially the same procedure as the MS KB307545
article (which is probably where they got the information initially).

It basically has you use the recovery console to get back the
system registry hives (just after initial XP install) as a
*first step*. THEN, you go in and extract (copy) the desired
snapshot (registry hive files) *manually* from the 'System Volume
Information' folder. After doing that, you have a set of registry
hives that is as close to up to date as possible.. I hadn't
fully understood the second step.

Thanks for your advice *and* patience!

Doug

 

[Dave Patrick]

You're welcome.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]
Microsoft Certified Professional [Windows 2000]
http://www.microsoft.com/protect


:
|
| Thanks Dave.. I actually had seen that KB article back when
| I started, but didn't fully read through and understand it.. doh!
| After your last post - describing the 'System Volume Information'
| folder I found some sites describing how to recover the registry:
|
| http://www.aade.com/XPhint/XPrecovery.htm
| http://www.digitalwebcast.com/2002/03_mar/tutorials/cw_boot_toot.htm
|
| these both describe essentially the same procedure as the MS KB307545
| article (which is probably where they got the information initially).
|
| It basically has you use the recovery console to get back the
| system registry hives (just after initial XP install) as a
| *first step*. THEN, you go in and extract (copy) the desired
| snapshot (registry hive files) *manually* from the 'System Volume
| Information' folder. After doing that, you have a set of registry
| hives that is as close to up to date as possible.. I hadn't
| fully understood the second step.
|
| Thanks for your advice *and* patience!
|
| Doug
|
|
|

 

[Dave Patrick]

You're welcome.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]
Microsoft Certified Professional [Windows 2000]
http://www.microsoft.com/protect


:
|
| Thanks Dave.. I actually had seen that KB article back when
| I started, but didn't fully read through and understand it.. doh!
| After your last post - describing the 'System Volume Information'
| folder I found some sites describing how to recover the registry:
|
| http://www.aade.com/XPhint/XPrecovery.htm
| http://www.digitalwebcast.com/2002/03_mar/tutorials/cw_boot_toot.htm
|
| these both describe essentially the same procedure as the MS KB307545
| article (which is probably where they got the information initially).
|
| It basically has you use the recovery console to get back the
| system registry hives (just after initial XP install) as a
| *first step*. THEN, you go in and extract (copy) the desired
| snapshot (registry hive files) *manually* from the 'System Volume
| Information' folder. After doing that, you have a set of registry
| hives that is as close to up to date as possible.. I hadn't
| fully understood the second step.
|
| Thanks for your advice *and* patience!
|
| Doug
|
|
|