HKCC=The HKEY_CURRENT_CONFIG subtree (HKCC) stores configuration data for the current hardware profile.
HKCR=The HKEY_CLASSES_ROOT subtree contains two types of data:
HKCU=The HKEY_CURRENT_USER subtree contains the user profile for the user who is currently logged on to the computer. The user profile includes environment variables, personal program groups, desktop settings, network connections, printers, and application preferences. The data in the user profile is similar to the data stored in the Win.ini file in Windows 3.x.
HKCU\Console=The Console key stores data for the console subsystem, which hosts all character-mode applications, such as Command Processor. In addition, the Console key can contain subkeys for custom command windows.
HKCU\Control Panel=The Control Panel key and its subkeys contain entries which determine the accessibility, regional, and desktop appearance settings.
HKCU\Control Panel\Accessibility=Contains subkeys and entries which determine the accessibility settings.
HKCU\Control Panel\Appearance=Stores information about the appearance of the Windows elements.
HKCU\Control Panel\Appearance\Schemes=Stores information about the schemes used on the computer.
HKCU\Control Panel\Colors=Contains entries that determine the color of each element of the Windows 2000 desktop. The values are shown as a series of three numbers, which refer to the RGB (red-green-blue) value of the color.
HKCU\Control Panel\Current=The Current subkey appears in the registry, but is not used by Windows 2000.
HKCU\Control Panel\Custom Colors=The Custom Colors subkey defines the custom colors in the color palette. The entries in the Custom Colors subkey are named ColorA through ColorP, and all have a default value of 0xFFFFFF.
HKCU\Control Panel\Desktop=Contains entries that control the appearance of the screen background and the position of windows and icons on the screen.
HKCU\Control Panel\Desktop\WindowMetrics=Contains the current dimensions of window display elements. The units of some of the entries are in pixels, others are in X-Y coordinates, and some are in twips.
HKCU\Control Panel\International=Stores options that are selected in Regional Options in Control Panel. These entries determine how the system and programs display dates, times, and currency. The data for each user is stored separately.
HKCU\Control Panel\Keyboard=Stores the options selected in Keyboard in Control Panel. The entries in this subkey are stored separately for each user. Keyboard configuration data for all users is stored in the KeyboardLayout and KeyboardLayouts subkeys in HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control.
HKCU\Control Panel\Mouse=Stores the options selected by configuring Mouse in Control Panel.
HKCU\Control Panel\Patterns=Contains entries that specify the colors of desktop patterns.
HKCU\Control Panel\PowerCfg=Stores information about the power management policies currently in use on the computer.
HKCU\Environment=The Environment key stores the values of environment variables that can be set by users. Each entry in this key associates an environment variable with the path that is substituted for the variable. The default values for these entries are defined in the user's profile.
HKCU\Keyboard Layout=The Keyboard Layout key stores information about the installed keyboard layouts.
HKCU\Keyboard Layout\Preload=Stores the codes for each keyboard layout chosen by the user. Windows 2000 uses this information to restore the keyboard layout when the user logs back on.
HKCU\Keyboard Layout\Substitutes=Stores the codes of alternative keyboard layouts preferred by the user. The system checks the user's Substitutes subkey when loading the keyboard layout, and if a substitute is specified, the corresponding layout is substituted for the default layout. The Substitutes key has no entries unless the user has selected a substitute keyboard layout.
HKCU\Keyboard Layout\Toggle=The Toggle subkey determines which key sequences can be used to toggle between input locales.
HKCU\Network=The Network key stores information about mapped network drives. Each subkey in Network represents a drive that is connected to the computer and will be reconnected when the user logs on again. The subkeys are named for the drive letter to which the drive is mapped. The system adds a Drive letter subkey to the registry when you map a drive and select the Reconnect at Logon option. The entries in the Drive letter subkeys store data that is used to reconnect the drive.
HKCU\Printers=The Printers subkey in HKEY_CURRENT_USER stores user preferences for printers.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run=Stores the names of executable files and document files that Windows 2000 runs automatically when this user logs on to the system.
HKCU\SOFTWARE\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders=Stores a list of shared files and folders that are always made available offline.
HKCU\Software=Contains subkeys representing the vendors that produced the software running on the system, including Microsoft.
HKCU\Software\CheyenneDMG=Configuration data for programs produced by Cheyenne Directory Management Group. For Windows 2000, this includes the Directory Service Migration Tool, a snap-in that facilitates migration from NetWare to Active Directory.
HKCU\Software\Microsoft=Configuration data for Microsoft programs running on the computer. The subkeys in the Microsoft subkey represent each of the programs. The entries in the program subkeys are specific to the current user.
HKCU\Software\MicrosoftPerfmon=Stores user-specific configuration data for Performance Monitor 4 (Perfmon4.exe), a performance monitoring tool designed for Windows NT 4.0 and earlier. In Windows 2000, Performance Monitor 4 has been replaced by System Monitor, but Performance Monitor 4 is included on the Windows 2000 Resource Kit CD-ROM for compatibility with earlier systems.
HKCU\Software\Microsoft\Command Processor=Stores user preferences for the command processor (Cmd.exe). Entries in the Command Processor subkey can also appear in HKEY_LOCAL_MACHINE. If both appear, the values in HKEY_CURRENT_USER take precedence over the values in HKEY_LOCAL_MACHINE. Command-line settings entered in Cmd.exe take prescedence over registry settings.
HKCU\Software\Microsoft\Driver Signing=The Driver Signing subkey in HKCU stores entries for the code signing feature for Windows 2000. The entries in this subkey apply only to the current user of the computer.
HKCU\Software\Microsoft\File Manager=The File Manager subkey is not used by and has no effect on Windows 2000.
HKCU\Software\Microsoft\Ntbackup=Contains entries that store configuration data for Windows Backup (Ntbackup.exe). Windows Backup enables you to back up files to tape and restore files from tape. You can use Windows Backup to back up the files in which the registry is stored.
HKCU\Software\Microsoft\Ntbackup\Backup Engine=Stores user preference information for the Backup utility.
HKCU\Software\Microsoft\Ntbackup\Translators=Stores translator information used by Backup.
HKCU\Software\Microsoft\Ntbackup\User Interface=Stores user preference information for Backup.
HKCU\Software\Microsoft\Windows Help=The values in this subkey are not used by and have no effect on Windows 2000.
HKCU\Software\Microsoft\Windows NT=Contains subkeys representing components that run on that version of the system.
HKCU\Software\Microsoft\Windows NT\CurrentVersion=Configuration data for programs designed to run on the most current version Windows 2000 installed on the computer. The subkeys of CurrentVersion represent programs that run on the current version of Windows 2000 and store user-specific configuration data for those programs.
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Devices=The Devices subkey in HKEY_CURRENT_USER lists the printers to which the client computer has a connection.
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Event Viewer=Configuration data for the Event Viewer snap-in.
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Event ViewerConfirmUrl=Suppresses the Internet confirmation dialog box in Event Viewer. This dialog box reminds you that Event Viewer is sending event information over the Internet and requests your permission to proceed.
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Extensions=Stores entries which associate file name extensions with command line executions. These entries are used only when a file name extension is not already associated with a program.
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Network=The Network subkey in the Software key stores configuration data for programs used to view, manage and maintain the network. Each program stores its data in a separate subkey in the Network subkey.
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Network\Event Viewer=The Event Viewer subkey and its entries are not used by and have no effect on Windows 2000.
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Network\Event ViewerSaveSettings=This entry is not used by and has no effect on Windows 2000.
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Network\Persistent Connections=Stores data about connections to network drives.
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Network\Server Manager=Configuration data for Server Manager in Windows NT 4.0. This subkey is not used by and has no effect on Windows 2000.
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Network\User Manager for Domains=Configuration data for User Manager in Windows NT 4.0. This subkey is not used by and has no effect on Windows 2000.
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Network\User Manager=Configuration data for User Manager in Windows NT 4.0. This subkey is not used by and has no effect on Windows 2000; it remains in the registry to support User Manager in Windows NT 4.0.
HKCU\Software\Microsoft\Windows NT\CurrentVersion\PrinterPorts=The PrinterPorts subkey lists the printers to which the client computer has a connection.
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Program Manager=Program Manager is the primary desktop interface for Windows NT 3.51 and earlier. In Windows 2000, the default interface is Windows Explorer, but you can still use Program Manager (Progman.exe).
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Program Manager\Restrictions=Stores restrictions on the user's ability to change Program Manager. This information applies mainly to Windows NT 3.51 and earlier, but it also applies to later versions of Windows if you are running Program Manager as the desktop interface.
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Program Manager\Settings=Stores the values of options set in Program Manager. This information applies mainly to Windows NT 3.51 and earlier, but it also applies to later versions of Windows if you are running Program Manager as the desktop interface.
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Program Manager\UNICODE Groups=The Unicode Groups subkey specifies group numbers for the program groups defined in Program Manager. This information applies mainly to Windows NT 3.51 and earlier, but it applies also to later versions of Windows if you are running Program Manager as the desktop interface.
HKCU\Software\Microsoft\Windows NT\CurrentVersion\TaskManager=Stores preferences for Task Manager.
HKCU\Software\Microsoft\Windows NT\CurrentVersion\TrueType=Stores data that determines the use and display of TrueType fonts in Windows-based applications.
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows=Contains entries that store user preferences.
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon=Configuration data for the Winlogon component of Windows 2000. Winlogon authenticates and interactive user and enables them to log on. Winlogon supports desktops, the Ctrl+Alt+Del secure attention sequence, screen saver control, network provider support, authentication and password updates.
HKCU\Software\Microsoft\Windows=Contains subkeys representing programs that run on that version of the subsystem.
HKCU\Software\Microsoft\Windows\CurrentVersion=Configuration data for programs running on the Win32 subsystem. The subkeys of CurrentVersion represent programs that run on the current version of Win32 subsystem and store user-specific configuration data for those programs.
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer=Configuration data for Windows Explorer and the Windows interface, including the Start menu, the desktop, common folders, and Control Panel.
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced=Stores the settings of options on the Taskbar and Start Menu Properties dialog box.
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders=The entries in the Shell Folders subkey are not used by and have no effect on Windows 2000. Paths to the Windows Explorer folders are stored in the User Shell Folders subkey. For more information on shell folders, search the Platform Software Development Kit (SDK) documentation in the MSDN Library at http://msdn.microsoft.com.
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Tips=Stores information about the display of the Welcome to Windows splash screen in Windows 2000 Professional.
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders=The User Shell Folders subkey of HKEY_LOCAL_MACHINE stores the paths to Windows Explorer folders for the current user of the computer.
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies=Contains entries that store Group Policy settings.
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop=Stores the entries created when you configure a Group Policy for Active in Windows 2000. These entries are created and maintained by Group Policy, and are read and interpreted by Active Desktop.
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\AdminComponent=Stores entries added by Group Policy settings for Active Desktop. These entries specify items that an administrator has added to or deleted from Active Desktop by setting a policy.
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32=Contains entries that store Group Policy settings for the common Open dialog box. The entries in this subkey are written and maintained by Group Policy and read and interpreted by the Open dialog box program.
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer=Contains entries that store Group Policy settings for Windows Explorer and the Windows interface. These include policies for the Start menu, taskbar, desktop, and Control Panel. The entries in this subkey are written and maintained by Group Policy and read and interpreted by the Windows Explorer program.
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowCpl=Contains a list of Control Panel programs and folders that are hidden by a policy. This list is used only when the value of the DisallowCpl entry is 1.
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun=Contains a list of Windows programs that users cannot run. This list is used only when the value of the DisallowRun entry is 1.
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictCpl=Stores a list of selected Control Panel items that are displayed while a policy hides all other Control Panel items. This list is used only when the value of the RestrictCpl entry is 1.
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictRun=Contains a list of programs that restricted users can still run. This list is used only when the value of the RestrictRun entry is 1.
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network=Contains entries that store Group Policy settings for network services, such as Offline Files and Network and Dial-up Connections. The entries in this subkey are written and maintained by Group Policy and read and interpreted by the network services programs.
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum=Contains entries that tell the system not to enumerate (display) components of the Windows interface. These entries are written and maintained by Group Policy and read and interpreted by the interface programs.
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System=Stores the entries created when you configure a Group Policy that affects a basic component of Windows 2000. The entries in this subkey are written and maintained by Group Policy and read and interpreted by the component program.
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall=Contains entries that store Group Policy settings for Add/Remove Programs in Control Panel. The entries in this subkey are written and maintained by Group Policy and read and interpreted by Add/Remove Programs.
HKCU\Software\Policies=Contains entries that store Group Policy settings.
HKCU\Software\Policies\Microsoft=Contains entries that store Group Policy settings for Microsoft products. The entries in this subkey are created and maintained by Group Policy.
HKCU\Software\Policies\Microsoft\Control Panel=Contains entries that store Group Policy settings for Control Panel programs. The entries in this subkey are written and maintained by Group Policy, and are read and interpreted by the Control Panel program.
HKCU\Software\Policies\Microsoft\Control Panel\Desktop=Contains entries that store Group Policy settings for Display and Regional Options in Control Panel. The entries in this subkey are written and maintained by Group Policy, and are read and interpreted by the Control Panel programs.
HKCU\Software\Policies\Microsoft\Control Panel\International=Contains entries that store Group Policy settings for calendar options in Regional Options in Control Panel. The entries in this subkey are created and maintained by Group Policy and read and interpreted by Regional Options.
HKCU\Software\Policies\Microsoft\Control Panel\International\Calendars=Contains entries that store Group Policy settings for calendar options in Regional Options in Control Panel. The entries in this subkey are created and maintained by Group Policy and read and interpreted by Regional Options.
HKCU\Software\Policies\Microsoft\Control Panel\International\Calendars\TwoDigitYearMax=Contains entries that store Group Policy settings for calendar options in Regional Options in Control Panel. The entries in this subkey are created and maintained by Group Policy and read and interpreted by Regional Options.
HKCU\Software\Policies\Microsoft\MMC=Contains entries that store Group Policy settings for the Microsoft Management Console (MMC). The entries in this subkey are written and maintained by Group Policy and read and interpreted by the MMC program.
HKCU\Software\Policies\Microsoft\Windows NT=Stores the entries created when you configure a Group Policy related to Windows 2000. These entries are created and maintained by Group Policy.
HKCU\Software\Policies\Microsoft\Windows NT\Driver Signing=Contains entries that store Group Policy settings for the Code Signing feature of Windows 2000. The entries in this subkey are written and maintained by Group Policy, and are read and interpreted by the Code Signing program.
HKCU\Software\Policies\Microsoft\Windows NT\Printers=Stores the entries created when you configure a Group Policy for printers. These entries are created and maintained by Group Policy, and are read and interpreted by the printing functions in Windows 2000.
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard=Stores the entries created when you configure a Group Policy that affects the Add Printer wizard. These entries are created and maintained by Group Policy, and are read and interpreted by the printing functions in Windows 2000.
HKCU\Software\Policies\Microsoft\Windows=Contains entries that store Group Policy settings for components of Windows 2000. The subkeys and entries in the Windows subkey are written and maintained by Group Policy, and are read and interpreted by the component that implements them.
HKCU\Software\Policies\Microsoft\Windows\App Management=Contains entries that store the Group Policy settings which determine how programs run. The subkeys and entries in the Windows subkey are written and maintained by Group Policy, and are read and interpreted by the component that implements them.
HKCU\Software\Policies\Microsoft\Windows\Control Panel=Contains entries that store Group Policy settings for Control Panel programs. The entries in this subkey are written and maintained by Group Policy, and are read and interpreted by the Control Panel program.
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop=Contains entries that store Group Policy settings for Display and Regional Options in Control Panel. The entries in this subkey are written and maintained by Group Policy, and are read and interpreted by the Control Panel programs.
HKCU\Software\Policies\Microsoft\Windows\Directory UI=Stores the entries created when you configure a Group Policy for the Active Directory in Windows 2000. These entries are created and maintained by Group Policy, and are read and interpreted by Active Directory.
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor=Contains entries that store the Group Policy settings which determine how Group Policy is applied to this system. The entries in this subkey are written and maintained by Group Policy.
HKCU\Software\Policies\Microsoft\Windows\Installer=Stores the entries created when you configure a Group Policy setting for Windows Installer. These entries are created and maintained by Group Policy, and are read and interpreted by Windows Installer.
HKCU\Software\Policies\Microsoft\Windows\NetCache=Contains entries that store Group Policy settings for the Offline Files feature. In Group Policy, these policies appear in the Computer Configuration\Administrative Templates\Network\Offline Files folder.
HKCU\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions=Contains entries that determine whether users can work offline if they are suddenly disconnected from particular offline file servers. This feature lets you specify exceptions to the general offline action rules for servers that require a specialized response, such as those that host databases.
HKCU\Software\Policies\Microsoft\Windows\Network Connections=Contains entries that store Group Policy settings for Network and Dial-up Connections. The entries in this subkey are written and maintained by Group Policy, and are read and interpreted by the Network and Dial-up Connections program.
HKCU\Software\Policies\Microsoft\Windows\System=Stores entries related to policies of the operating system, such as the logon environment, task scheduler, and permissions to set and update group policies. These entries are created and maintained by Group Policy, and are read and interpreted by system component programs.
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0=Stores the entries created when you configure a Group Policy for the Scheduled Tasks feature of Windows 2000. These entries are created and maintained by Group Policy, and are read and interpreted by Scheduled Tasks.
HKCU\UNICODE Program Groups=The UNICODE Program Groups key contains subkeys that define the contents of all personal program groups in Program Manager. This information applies mainly to Windows 3.51 and earlier, but it applies also to Windows 2000 if you are running Program Manager as the desktop interface.
HKLM=The HKEY_LOCAL_MACHINE subtree contains information about the local computer system, including hardware and operating system data such as bus type, system memory, device drivers, and startup control parameters.
HKLM\HARDWARE=The Hardware key stores data that describes the computer hardware detected by the system. This key is recreated each time the system starts. It includes information about devices and about the software drivers and other resources associated with devices.
HKLM\HARDWARE\DESCRIPTION=The Description subkey is a repository for data collected by the Windows 2000 hardware recognizer. It includes information about the BIOS, processors, and bus architecture. The Description subkey is recreated each time the system starts.
HKLM\HARDWARE\DESCRIPTION\System=Stores data collected by the Windows 2000 hardware recognizer. It includes information about the BIOS, processors, and bus architecture. The System subkey is recreated each time the system starts.
HKLM\HARDWARE\DEVICEMAP=Contains a set of subkeys representing the base classes of all devices on the computer. Drivers that control a device store the base class name in an entry in their HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services subkey.
HKLM\HARDWARE\DEVICEMAP\SERIALCOMM=Stores data about serial ports on the computer. This subkey is part of the Hardware key and is recreated each time the system starts.
HKLM\SOFTWARE=Contains subkeys representing the vendors that produced the software running on the system, including Microsoft.
HKLM\SOFTWARE\Microsoft=Configuration data for Microsoft programs running on the computer. The subkeys in the Microsoft subkey represent each of the programs and store settings that only affect the program.
HKLM\SOFTWARE\Microsoft\Command Processor=Stores user preferences for the command processor (Cmd.exe). Command Processor entries can also appear in HKEY_CURRENT_USER. If both appear, the values in HKEY_CURRENT_USER take precedence over the values in HKEY_LOCAL_MACHINE. Command-line settings entered in Cmd.exe take prescedence over registry settings.
HKLM\SOFTWARE\Microsoft\DFSHost=Configuration data for a Distributed file system (Dfs) root.
HKLM\SOFTWARE\Microsoft\DrWatson=The entries in the DrWatson subkey store configuration settings for Dr. Watson for Windows 2000 (drwtsn32.exe), the application error debugger for Windows 2000. These entries specify how the Dr. Watson for Windows 2000 notifies the user of an application error, and how its log file and crash dump file are configured.
HKLM\SOFTWARE\Microsoft\Driver Signing=The Driver Signing subkey in HKLM stores entries for the code signing feature of Windows 2000. The entries in this subkey apply to all users of the computer.
HKLM\SOFTWARE\Microsoft\MSMQ=Configuration data for Message Queuing. This subkey and its contents appear only if you have installed the Message Queuing service.
HKLM\SOFTWARE\Microsoft\MSMQ\Parameters=Configuration options for Message Queuing.
HKLM\SOFTWARE\Microsoft\MSMQ\ParametersClusteredQMs=Stores entire registry sections of Message Queuing services running as cluster resources.
HKLM\SOFTWARE\Microsoft\MSMQ\ParametersWaitTime=Determines how often a Queue Manager attempts to access the Message Queuing directory service and/or perform name resolution in order to deliver an outgoing message. This entry specifies the elapsed time between successive attempts. The queue manager continues its attempts until it is successful.
HKLM\SOFTWARE\Microsoft\MSMQ\Parameters\CertificationAuthorities=Contains X509-V3 certificates from external certification authorities (CAs). These subkeys are created by the Microsoft Crypto API 2.0. Message Queuing uses the certificates to generate digital signatures that uniquely identify the message sender. The certificate and the digital signature are sent with each authenticated message.
HKLM\SOFTWARE\Microsoft\MSMQ\Parameters\MachineCache=Configuration data that associates the local MQIS client computer with other computers in the enterprise managed by Message Queuing.
HKLM\SOFTWARE\Microsoft\MSMQ\Parameters\Migration=Stores entries that determine how Message Queuing data is propagated to clients running previous versions of the operating system. Entries in the Migration subkey are used only when there are MSMQ 1.0 MQIS servers running Windows NT 4.0 and earlier. They are not used when all servers are running Windows 2000.
HKLM\SOFTWARE\Microsoft\MSMQ\Parameters\OCMsetup=Stores information about the installation and configuration of Message Queuing when it is set up by using the Optional Components Manager setup.
HKLM\SOFTWARE\Microsoft\MSMQ\Parameters\OCMsetupShortcutCount=Records the number of shortcuts installed by OCM Setup.
HKLM\SOFTWARE\Microsoft\MSMQ\Parameters\OCMsetupShortcutDirectory=Records the location of the directory where Message Queuing shortcuts are installed
HKLM\SOFTWARE\Microsoft\MSMQ\Parameters\Security=Contains subkeys that contain information about the computer account and about whether server authentication is used (secured communication between client and server).
HKLM\SOFTWARE\Microsoft\MSMQ\Parameters\ServersCache=Stores information pertaining to Message Queuing about each site in the enterprise. ServersCache contains a separate entry for each site in the enterprise. The entry is the name of the site, and its value consists of a list of all the MQIS servers in the site. These values are updated at an interval specified by the value of the DSListRefresh entry.
HKLM\SOFTWARE\Microsoft\MSMQ\Parameters\Setup=Stores entries that contain information about the operating system installed, the name of the computer, name of the local domain, and the name of the local organizational unit (OU).
HKLM\SOFTWARE\Microsoft\OS/2 Subsystem for NT=Contains several subkeys but, by default, only the config.sys subkey contains an entry. When an OS/2 program has been run on the system, the config.sys subkey contains configuration information for OS/2. Until then, this subkey contains a single entry that serves as a placeholder.
HKLM\SOFTWARE\Microsoft\OS/2 Subsystem for NT\1.0=Contains several subkeys but, by default, only the config.sys subkey contains an entry.
HKLM\SOFTWARE\Microsoft\PswdSync=Configuration data for the Password Synchronization Service. The Password Synchronization Service lets users use a single password for computers running Windows 2000 computers and UNIX. It assures that any password changes made on Windows 2000 are communicated to the UNIX pod, either in clear or encrypted text. It also assures that all passwords conform to the security standards implemented on the system by notification packages, such as Passfilt.dll.
HKLM\SOFTWARE\Microsoft\PswdSync\Domains=Configuration data for the UNIX pods associated with the Windows 2000 Password Synchronization Service. The Password Synchronization Service lets users use a single password for computers running Windows 2000 and UNIX.
HKLM\SOFTWARE\Microsoft\PswdSync\NotifyChange=This subkey is used internally by the Password Synchronization Service to detect and implement configuration changes while the service is running. Do not delete or change the contents of this subkey.
HKLM\SOFTWARE\Microsoft\Windows NT=Contains subkeys representing components that run on that version of the system.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion=Configuration data for programs designed to run on the most current version Windows 2000 installed on the computer. The subkeys of CurrentVersion represent programs that run on the current version of Windows 2000 and store configuration data for those programs that apply to all users of the computer.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AeDebug=Stores user preferences for Dr. Watson and other debugging tools that run on Windows 2000.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Font Drivers=Configuration data for external font drivers.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontDPI=Stores information about the size of the system fonts.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes=Stores the names of alternative fonts that can be used when a requested font or a font that appears in a document is not available or is unsupported.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts=Stores the names of the files that support each font installed on Windows 2000. This information is used by applications running on Windows 2000.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize=The GRE_Initialize subkey holds screen raster fonts which are used by command windows.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network=The subkeys stored in the Network subkey are not used by and have no effect on Windows 2000. They remain in the registry to support applications which administer earlier versions of Windows.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\SMAddOns=This subkey is not used by and has no effect on Windows 2000. It remains in the registry to support applications which administer earlier versions of Windows.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\Shared Parameters=This subkey is not used by and has no effect on Windows 2000. It remains in the registry to support applications which administer earlier versions of Windows.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\UMAddOns=This subkey is not used by and has no effect on Windows 2000. It remains in the registry to support applications which administer earlier versions of Windows.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\World Full Access Shared Parameters=This subkey is not used by and has no effect on Windows 2000. It remains in the registry to support applications which administer earlier versions of Windows.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PDH=Configuration data for the Performance Data Helper dynamic link library (Pdh.dll). PDH is a library of performance data collection and processing functions used by performance monitoring programs, such as System Monitor.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib=Configuration data for the Windows Performance Library, which collects and organizes data for performance tools, such as System Monitor.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print=Stores hardware information for printers that applies to all users of the computer.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers=Contains information about the local priters.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers=Contains information about the network printers. The printers listed in this subkey are not hosted locally, but are printers to which the local computer is connected.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\LanMan Print Services=Configuration data for the LanMan Print Services, the default print provider for Windows 2000.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\LanMan Print Services\Servers=Contains subkeys and entries that store configuration data for LanMan Print Services, the default print provider for Windows 2000.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Type 1 Installer=Contains subkeys which store information about the Type 1 fonts installed on the system.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Type 1 Installer\Type 1 Fonts=Contains the names of the Type 1 fonts which are installed on the system. The fonts are stored in the Systemroot\WINNT\Fonts folder, and the corresponding entries have the following format:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WOW=Contains subkeys and entries that control startup parameters that affect MS-DOS-based applications and applications created for 16-bit Windows 3.x.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WOW\boot=Contains information about drivers and fonts which are loaded each time the computer is started.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows=Configuration data used by 16-bit Windows 3.x applications running on Windows 2000 and earlier.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon=Configuration data for the Winlogon service. Winlogon provides support for interactive logon to Windows 2000.
HKLM\SOFTWARE\Microsoft\Windows=Contains subkeys representing programs that run on that version of the subsystem.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion=Configuration data for programs running on the Win32 subsystem. The subkeys of CurrentVersion represent programs that run on the current version of Win32 subsystem and store configuration data for those programs that apply to all users of the computer.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer=Configuration data for Windows Explorer and for the Windows interface.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders=The entries in the Shell Folders subkey are not used by and have no effect on Windows 2000. Paths to the Windows Explorer folders are stored in the User Shell Folders subkey. For more information on shell folders, search the Platform Software Development Kit (SDK) documentation in the MSDN Library at http://msdn.microsoft.com.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders=The User Shell Folders subkey of HKEY_LOCAL_MACHINE stores the paths to Windows Explorer folders for the current user of the computer.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies=Stores registry entries that are managed by Group Policy.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer=Contains entries that store Group Policy settings for Windows Explorer and the Windows interface. These include policies for the Start menu, taskbar, desktop, and Control Panel. The entries in this subkey are written and maintained by Group Policy, and are read and interpreted by the Windows Explorer program.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run=Stores the names of executable files and document files that Windows 2000 runs automatically when any user logs on to the system.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\NonEnum=Contains entries that tell the system not to enumerate (display) components of the Windows interface. These entries are written and maintained by Group Policy, and are read and interpreted by the interface programs.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System=Stores the entries created when you configure a Group Policy that affects a basic component of Windows 2000. The entries in this subkey are written and maintained by Group Policy, and are read and interpreted by the component program.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run=The Run subkey of HKEY_LOCAL_MACHINE\Software stores the names of programs that Windows 2000 runs at startup, for all users of the computer, each time the system starts.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce=The RunOnce subkey of HKEY_LOCAL_MACHINE\SOFTWARE stores the names of programs that Windows 2000 runs at startup, for all users of the computer, the next time the system starts. When these programs are run, their names are deleted from the RunOnce subkey so that they are not run again automatically.
HKLM\SOFTWARE\Policies=Contains entries that store Group Policy settings.
HKLM\SOFTWARE\Policies\Microsoft=Stores the entries created when you configure a Group Policy related to a Microsoft product. These entries are created and maintained by Group Policy, and are read and interpreted by the product program.
HKLM\SOFTWARE\Policies\Microsoft\System=Stores the entries created when you configure a Group Policy that affects a basic component of Windows 2000. The entries in this subkey are created and maintained by Group Policy, and are read and interpreted by the component programs.
HKLM\SOFTWARE\Policies\Microsoft\System\DNSclient=Stores entries created when you configure a Group Policy for the Domain Name System (DNS) client. The entries in this subkey are created and maintained by Group Policy and read and interpreted by the DNS service.
HKLM\SOFTWARE\Policies\Microsoft\Windows NT=Contains entries that store Group Policy settings for Windows 2000. These entries are created and maintained by Group Policy, and are read and interpreted by the system components.
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DiskQuota=Contains entries that store Group Policy settings for disk quotas on NTFS volumes. These entries are created and maintained by Group Policy, and are read and interpreted by the Disk Quota program. The Disk Quota policies included in Windows 2000 limit the amount of disk space users can consume, and they determine how the system responds when users exceed a warning level or quota limit.
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Printers=Contains entries that store Group Policy settings for printers. These entries are created and maintained by Group Policy, and are read and interpreted by the printing functions in Windows 2000.
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Printers\Wizard=Stores the entries created when you configure a Group Policy that affects the Add Printer wizard. These entries are created and maintained by Group Policy, and are read and interpreted by the printing functions in Windows 2000.
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Windows File Protection=Contains entries that store Group Policy settings for the Windows File Protection feature of Windows 2000. The entries in this subkey are written and maintained by Group Policy, and are read and interpreted by the Windows File Protection program.
HKLM\SOFTWARE\Policies\Microsoft\Windows=Contains entries that store Group Policy settings for components of Windows 2000. The subkeys and entries in the Windows subkey are written and maintained by Group Policy, and are read and interpreted by the component that implements them.
HKLM\SOFTWARE\Policies\Microsoft\Windows\App Management=Contains entries that store the Group Policy settings which determine how programs are run. The subkeys and entries in the Windows subkey are written and maintained by Group Policy, and are read and interpreted by the component that implements them.
HKLM\SOFTWARE\Policies\Microsoft\Windows\Group Policy=Stores the data for Group Policy settings that configure the Group Policy components of Windows 2000.
HKLM\SOFTWARE\Policies\Microsoft\Windows\Installer=Stores the entries created when you configure a Group Policy for Windows Installer in Windows 2000. These entries are created and maintained by Group Policy, and are read and interpreted by Windows Installer.
HKLM\SOFTWARE\Policies\Microsoft\Windows\NetCache=Contains entries that store Group Policy settings for the Offline Files feature. These entries are created and maintained by Group Policy, and are read and interpreted by the Offline Files program. In Group Policy, these policies appear in the Computer Configuration\Administrative Templates\Network\Offline Files folder.
HKLM\SOFTWARE\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders=Stores a list of shared files and folders that are always made available offline.
HKLM\SOFTWARE\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions=Contains entries that determine whether users can work offline if they are suddenly disconnected from particular offline file servers. This feature lets you specify exceptions to the general offline action rules for servers that require a specialized response, such as those that host databases.
HKLM\SOFTWARE\Policies\Microsoft\Windows\Network Connections=Contains entries that store Group Policy settings for Network and Dial-up Connections. The entries in this subkey are written and maintained by Group Policy, and are read and interpreted by the Network and Dial-up Connections program.
HKLM\SOFTWARE\Policies\Microsoft\Windows\Psched=Stores entries created when you configure a Group Policy for the Quality of Service (QoS) Packet Scheduler.
HKLM\SOFTWARE\Policies\Microsoft\Windows\PschedDiffServByteMappingConforming=Stores entries that specify an alternate Differentiated Services Code Point (DSCP) value for service types specified in the per-flow flowspec. The Packet Scheduler inserts the corresponding DSCP value in the IP header of the packets. These entries apply only to packets that conform to the flow specification.
HKLM\SOFTWARE\Policies\Microsoft\Windows\PschedDiffServByteMappingNonConforming=Stores entries that specify an alternate Differentiated Services Code Point (DSCP) value for service types specified in the per-flow flowspec. The Packet Scheduler inserts the corresponding DSCP value in the IP header of the packets. These entries apply only to packets that do not conform to the flow specification.
HKLM\SOFTWARE\Policies\Microsoft\Windows\PschedUserPriorityMapping=Stores entries that specify an alternate link layer (Layer-2) priority value for service types specified in the per-flow flowspec. The Packet Scheduler inserts the link layer priority value in the Layer-2 priority header of packets. These entries apply only to packets that conform to the flow specification.
HKLM\SOFTWARE\Policies\Microsoft\Windows\System=Contains entries that store Group Policy settings for the operating system, such as the logon environment, task scheduler, and permissions to set and update group policies. These entries are created and maintained by Group Policy, and are read and interpreted by system component programs.
HKLM\SOFTWARE\Policies\Microsoft\Windows\Task Scheduler5.0=Stores the entries created when you configure a Group Policy for the Scheduled Tasks feature of Windows 2000. These entries are created and maintained by Group Policy, and are read and interpreted by Scheduled Tasks.
HKLM\SOFTWARE\Program Groups=In Windows NT 4.0 and earlier, the Program Groups subkey stored the contents of program groups the user defined in Program Manager. In Windows 2000, these Program Groups appear as shortcuts in subfolders of the Start menu.
HKLM\SYSTEM=The subkeys in HKEY_LOCAL_MACHINE\SYSTEM store values for the current control set and for other control sets that can be used, or have been used, to run Windows 2000. Windows 2000 maintains at least two control sets to ensure that the system always starts.
HKLM\SYSTEM\CurrentControlSet=The CurrentControlSet subkey does not actually contain a control set. The subkeys and entries that appear in the CurrentControlSet subkey are the contents of one of the numbered control sets, such as ControlSet001. The control set that appears in CurrentControlSet is selected by the system at startup and identified by the value of Current in the Select subkey.
HKLM\SYSTEM\CurrentControlSet\Control=The CurrentControlSet\Control subkey and its subkeys contain entries that control system startup, such as the subsystems to load and the size and location of paging files.
HKLM\SYSTEM\CurrentControlSet\Control\BackupRestore=Contains subkeys that determine which files and registry keys the system will not back up or restore.
HKLM\SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup=The FilesNotToBackup subkey includes entries that specify the files that Backup does not back up.
HKLM\SYSTEM\CurrentControlSet\Control\BackupRestore\KeysNotToRestore=The KeysNotToRestore subkey specifies the names of those registry keys that will not be restored by Backup.
HKLM\SYSTEM\CurrentControlSet\Control\BootVerificationProgram=Stores data about custom startup verification programs. Startup verification programs specify the criteria for a successful startup and notify the system that the startup is successful, two functions otherwise performed by Winlogon. You can write a custom startup verification program and use this subkey to direct the Windows 2000 service controller to run it.
HKLM\SYSTEM\CurrentControlSet\Control\Class=Configuration data for classes of hardware devices.
HKLM\SYSTEM\CurrentControlSet\Control\Class\(Network adapters) 1234D36E972-E325-11CE-BFC1-08002BE10318125=The 1234D36E972-E325-11CE-BFC1-08002BE10318125 subkey represents the class of network adapter devices supported by the system.
HKLM\SYSTEM\CurrentControlSet\Control\CrashControl=Stores entries that determine what happens when the system locks, fails, or terminates abnormally.
HKLM\SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase=Stores the critical device database. This database stores configuration data for new devices which must be installed and started before the Windows 2000 components that normally install devices are started.
HKLM\SYSTEM\CurrentControlSet\Control\FileSystem=Stores entries for file systems supported by Windows 2000.
HKLM\SYSTEM\CurrentControlSet\Control\GraphicsDrivers=Stores entries for DirectX and other graphics drivers in Windows 2000. In addition to the DCI subkey, which appears by default, PermanentSettingChanges and TemporarySettingChanges subkeys can be added to the registry to override the default configuration of graphics drivers. Note the correct path for each entry.
HKLM\SYSTEM\CurrentControlSet\Control\GraphicsDrivers\DCI=Stores configuration data for graphics drivers, including those implementing DirectDraw for Windows 2000.
HKLM\SYSTEM\CurrentControlSet\Control\GraphicsDrivers\PermanentSettingChanges=Configuration data for graphics drivers, including those implementing DirectDraw for Windows 2000.
HKLM\SYSTEM\CurrentControlSet\Control\GraphicsDrivers\TemporarySettingChanges=Configuration data for graphics drivers, including those implementing DirectDraw for Windows 2000.
HKLM\SYSTEM\CurrentControlSet\Control\GroupOrderList=Stores the order in which services in a service group are loaded when the system starts.
HKLM\SYSTEM\CurrentControlSet\Control\IDConfigDB=Configuration data that identifies the current hardware configuration for the system.
HKLM\SYSTEM\CurrentControlSet\Control\IDConfigDB\Hardware Profiles=The Hardware Profiles subkey of IDConfigDB stores information about the hardware profiles configured on the system.
HKLM\SYSTEM\CurrentControlSet\Control\Keyboard Layout=Stores data that associates Windows 2000 keyboard layout names with MS-DOS-style two-character keyboard layout names. This data is used by the kb16 command (equivalent to keyb in MS-DOS). The system uses this information when loading a keyboard layout for virtual DOS machine (VDM) windows.
HKLM\SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes=Stores data used to associate Windows 2000 keyboard layouts with MS-DOS-style two-character keyboard layout names used by the kb16 command (equivalent to keyb in MS-DOS).
HKLM\SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybIDs=Contains entries that associate Windows 2000 keyboard layouts with special three-digit codes. These codes help to distinguish among layouts when there is more than one layout for a locale. The system uses this information when loading a keyboard layout for virtual DOS machine (VDM) windows.
HKLM\SYSTEM\CurrentControlSet\Control\Keyboard Layouts=Stores data used to associate the keyboard layout for each locale with the dynamic link library (DLL) for the keyboard layout or Input Method Editor (IME) that supports the language of the locale.
HKLM\SYSTEM\CurrentControlSet\Control\Lsa=Configuration data for the Local Security Authority (LSA).
HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos=Configuration data for the Kerberos v5 authentication protocol in Windows 2000. Kerberos v5 is the primary security protocol for authentication within a domain. It verifies the identity of the user and the system, and transmits only encrypted passwords.
HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Domains=Stores information about Kerberos realms for systems that elect to use non-Windows-based Kerberos authentication.
HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters=Configuration options for the Kerberos v5 authentication protocol in Windows 2000.
HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\UserList=Stores entries that associate a Kerberos security principal to a local Windows 2000 user account.
HKLM\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0=Stores information about the security settings for the computer.
HKLM\SYSTEM\CurrentControlSet\Control\Network=Configuration data for networking components and connections.
HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider=Contains information about the available network providers.
HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order=Contains a list of the network providers that use the Microsoft network-independent APIs.
HKLM\SYSTEM\CurrentControlSet\Control\Network\Connections=Configuration data for Network and Dial-up Connections, the Windows 2000 program for adding, removing, configuring, and monitoring RAS and LAN connections.
HKLM\SYSTEM\CurrentControlSet\Control\Network\Connections\StatMon=Configuration data for the Connection Status Monitor and other tools that monitor the status and performance of network connections.
HKLM\SYSTEM\CurrentControlSet\Control\Nls=Contains information about supported locales and code pages.
HKLM\SYSTEM\CurrentControlSet\Control\Nls\CodePage=Contains data that associates code page IDs supported by Windows 2000 with code page translation files installed on the system.
HKLM\SYSTEM\CurrentControlSet\Control\Nls\Language Groups=Contains information about the supported and installed language groups.
HKLM\SYSTEM\CurrentControlSet\Control\Nls\Language=Contains data that associates Windows 2000 locale IDs with internal supporting files installed on the system.
HKLM\SYSTEM\CurrentControlSet\Control\Nls\Locale=The entries in this subkey list the locales that are installed on the system.
HKLM\SYSTEM\CurrentControlSet\Control\Nls\Locale\Alternate Sorts=Contains data about the alternate sorts available for the installed locale. These sorting codes determine which sorting order will be used for those locales which have more than one sorting order.
HKLM\SYSTEM\CurrentControlSet\Control\Print=Stores information and settings for printers that applies to all users of the computer.
HKLM\SYSTEM\CurrentControlSet\Control\PrintDebugFlags=This entry is for internal use only. Do not change the value of this entry.
HKLM\SYSTEM\CurrentControlSet\Control\PrintPriorityClass=This entry is not used by and has no effect on Windows 2000.
HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments=Contains subkeys that store configuration data for printing on the different platforms on which Windows 2000 runs. Each subkey representing a platform has two subkeys, Drivers and Print Processors, which store configuration data for the print drivers and processors installed on Windows 2000.
HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors=Contains a subkey for each port monitor that stores configuration data for the port monitor installed on the system.
HKLM\SYSTEM\CurrentControlSet\Control\Print\PendingUpgrades=This subkey is used by Windows 2000 during setup. Do not change the values in this subkey.
HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers=Contains information about the local printers.
HKLM\SYSTEM\CurrentControlSet\Control\Print\Providers=Contains information about the network printers. The printers listed in this subkey are not hosted locally, but are printers to which the local computer is connected.
HKLM\SYSTEM\CurrentControlSet\Control\Print\Providers\Internet Print Provider=Stores information about the Internet Print Provider.
HKLM\SYSTEM\CurrentControlSet\Control\Print\Providers\LanMan Print Services=Configuration data for the LanMan Print Services, the default print provider for Windows 2000.
HKLM\SYSTEM\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Monitors=Stores information about the monitors used by the LanMan print service.
HKLM\SYSTEM\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Monitors\LanMan Print Services Port=Configuration data for the LanMan Print Services port monitor.
HKLM\SYSTEM\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers=Contains subkeys and entries that store configuration data for LanMan Print Services, the default provider for Windows 2000.
HKLM\SYSTEM\CurrentControlSet\Control\Print\Providers\NetWare or Compatible Network=Stores options for printing when using print resources on NetWare servers.
HKLM\SYSTEM\CurrentControlSet\Control\PriorityControl=The entries in the PriorityControl subkey determine the relative priority of foreground (active) applications to background (inactive) applications.
HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions=Stores information about the variations of Windows 2000 running on the computer.
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot=The entries in the SafeBoot subkey contain information about the safe mode settings of the computer. In safe mode, Windows 2000 uses default settings (VGA monitor, no network, Microsoft mouse driver, and the minimum device drivers required to start Windows).
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal=Stores the names of basic files and drivers (mouse, keyboard, Mass Storage, base video and default system services) used when Safe Mode is selected.
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network=Stores the names of basic files, drivers, and network connections (mouse, keyboard, Mass Storage, base video and default system services) used when Safe Mode with Networking is selected.
HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers=Contains the winreg subkey which controls remote access to the registry. If these subkeys do not appear in the registry, remote access to the registry is determined by the permissions set in each registry subkey.
HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg=The permissions set for the winreg subkey determine who can remotely connect to a registry. If this subkey does not exist, all users can remotely connect to the registry.
HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg\AllowedPaths=The AllowedPaths subkey of winreg contains a list of the registry paths that all users can access remotely regardless of whether or not they have been given permissions to the winreg subkey. AllowedPaths permits users to perform some system functions that require remote access to very specific registry keys , such as checking the status of a printer, without having to grant those users access to the winreg subkey.
HKLM\SYSTEM\CurrentControlSet\Control\ServiceGroupOrder=Contains a list of all service groups in the order in which the groups are loaded.
HKLM\SYSTEM\CurrentControlSet\Control\ServiceProvider=Stores information about the installed service providers.
HKLM\SYSTEM\CurrentControlSet\Control\ServiceProvider\Order=Contains values used by the Windows Sockets Service Resolution and Registration (RNR) APIs.
HKLM\SYSTEM\CurrentControlSet\Control\Session Manager=Contains data used by many different components of the Session Manager.
HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\DOS Devices=The DOS Devices subkey maps the device names used by applications to device names used by Windows 2000.
HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment=Stores the values of environment variables that the system creates. These variables are used by Winlogon and Windows Explorer in Windows 2000 and Windows NT 4.0, and by Program Manager in Windows NT 3.51 and earlier.
HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\FileRenameOperations=Stores the names of files to be deleted when the system is restarted.
HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs=The KnownDLLs subkey defines the set of dynamic-link libraries (DLLs) that are searched during system startup.
HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management=Configuration data for paging files.
HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems=Contains entries for subsystems that run on Windows 2000.
HKLM\SYSTEM\CurrentControlSet\Control\Update=Configuration data for System Policy Editor in Windows NT 4.0. This entry is not used by Group Policy in Windows 2000.
HKLM\SYSTEM\CurrentControlSet\Control\VirtualDeviceDrivers=Configuration data for virtual device drivers.
HKLM\SYSTEM\CurrentControlSet\Control\WOW=Contains entries that control startup parameters that affect MS-DOS-based applications and applications created for 16-bit Windows 3.x.
HKLM\SYSTEM\CurrentControlSet\Control\Windows=Contains configuration data for the Win32 subsystem in Windows 2000.
HKLM\SYSTEM\CurrentControlSet\Control\hivelist=Contains the locations of files that store the permanent keys of the registry. Permanent keys are not recreated each time the system starts. By default, the files for all permanent keys except those in HKEY_CURRENT_USER are in Systemroot\System32\Config. The HKEY_CURRENT_USER files are stored in the subdirectories of System-drive\Documents and Settings.
HKLM\SYSTEM\CurrentControlSet\Enum=Contains a database representing all devices installed on the computer and recognized by the system. The database in Enum stores configuration data for hardware devices independent of the drivers they use. This subkey is critical to the configuration of Plug and Play devices in Windows 2000.
HKLM\SYSTEM\CurrentControlSet\Hardware Profiles=Stores the hardware profiles on your system.
HKLM\SYSTEM\CurrentControlSet\Hardware Profiles\Current=The Current subkey in the Hardware Profiles subkey displays configuration data for the hardware profile currently in use on the system.
HKLM\SYSTEM\CurrentControlSet\Services=The Services subkeys contain entries for standard and optional Windows 2000 services, such as device drivers, file system drivers, and Win32 service drivers. Although the values of the entries differ for each service, most Services subkeys have the same subkeys and entries.
HKLM\SYSTEM\CurrentControlSet\Services\Alerter=Configuration data for the Alerter service. This service sends messages to users warning them of impending resource, security or access problems on the server. Alerts appear in a message box on the user's display. Typically, the Alerter service alerts users when a printer is running out of paper or the disk on a file server is nearly full.
HKLM\SYSTEM\CurrentControlSet\Services\Alerter\Parameters=Configuration data for the Alerter service. This service sends messages to users warning them of impending resource, security or access problems on the server. Alerts appear in a message box on the user's display. Typically, the Alerter service warns users when a printer is running out of paper or the disk on a file server is nearly full.
HKLM\SYSTEM\CurrentControlSet\Services\AtmUni=Configuration data for the Asynchronous Transfer Mode (ATM) user-to-network interface (UNI) Call Manager. The ATM UNI Call Manager is a Windows 2000 component that creates switched and permanent virtual circuits for ATM signaling and communication.
HKLM\SYSTEM\CurrentControlSet\Services\AtmUni\Parameters=Configuration data for the Asynchronous Transfer Mode (ATM) user-to-network interface (UNI) Call Manager. The ATM UNI Call Manager is a Windows 2000 service that creates switched and permanent virtual circuits for ATM signaling and communication.
HKLM\SYSTEM\CurrentControlSet\Services\AtmUni\Parameters\Adapters=The Adapters subkey of AtmUni\Parameters stores ATM configuration data that applies only to a particular adapter. (Entries that apply to all adapters appear in the AtmUni\Parameters subkey.) This subkey enables you to configure individual adapters independently.
HKLM\SYSTEM\CurrentControlSet\Services\AuthSrv=Configuration data shared by the Internet Authentication Service (IAS) and Routing and Remote Access.
HKLM\SYSTEM\CurrentControlSet\Services\AuthSrv\Parameters=Configuration data shared by the Internet Authentication Service (IAS) and Routing and Remote Access.
HKLM\SYSTEM\CurrentControlSet\Services\BootVerification=Stores entries for Bootvrfy.exe, a program included in Windows 2000 that notifies the system that startup was successful. Bootvrfy.exe can be run on a local or remote computer.
HKLM\SYSTEM\CurrentControlSet\Services\Cdrom=Configuration data for CD-ROM drivers and devices.
HKLM\SYSTEM\CurrentControlSet\Services\DHCPServer=Configuration data for the DHCP service. A Dynamic Host Configuration Protocol (DHCP) server is a Windows 2000 Server computer running Microsoft TCP/IP and the DHCP-compatible server software.
HKLM\SYSTEM\CurrentControlSet\Services\DHCPServer\Parameters=Configuration options for the DHCP Service database on this server. DHCP servers maintain a database of TCP/IP configuration information and provide that information to clients upon request.
HKLM\SYSTEM\CurrentControlSet\Services\DNS=Configuration information for the Domain Name System (DNS) server.
HKLM\SYSTEM\CurrentControlSet\Services\DNS\Parameters=Stores DNS configuration data that applies to all zones in the network. Settings that apply to a specific zone are stored in a subkey representing that zone in the DNS\Zones subkey.
HKLM\SYSTEM\CurrentControlSet\Services\DNS\Zones=Contains subkeys that represent each of the authoritative zones on the server. (In this file, these subkeys are depicted as .) The Zone-name subkeys store configuration data set separately for each authoritative zone.
HKLM\SYSTEM\CurrentControlSet\Services\Dfs=Configuration data for Distributed file system (Dfs). Dfs helps you manage shared files that are distributed across multiple servers on a network.
HKLM\SYSTEM\CurrentControlSet\Services\DfsDriver=Configuration data for the Distributed file system (Dfs) driver. Dfs helps you manage shared files that are distributed across multiple servers on a network.
HKLM\SYSTEM\CurrentControlSet\Services\DfsDriver\LocalVolumes=Configuration data that is specific to a local volume managed by Distributed file system (Dfs).
HKLM\SYSTEM\CurrentControlSet\Services\Dfs\Parameters=Configuration data for Distributed file system (Dfs). Dfs helps you manage shared files that are distributed across multiple servers on a network.
HKLM\SYSTEM\CurrentControlSet\Services\Dhcp=Configuration data for the Dynamic Host Configuration Protocol (DHCP) service.
HKLM\SYSTEM\CurrentControlSet\Services\Dhcp\Parameters=Configuration data for the Dynamic Host Configuration Protocol (DHCP) service. The entries in the Parameters subkey apply to all DHCP servers.
HKLM\SYSTEM\CurrentControlSet\Services\Dhcp\Parameters\Options=The Options subkey in DHCP\Parameters stores configuration data for options that the client can request from the DHCP server by using DHCP Manager.
HKLM\SYSTEM\CurrentControlSet\Services\DnsCache=Configuration data for the DNS caching resolver service of the DNS client. This service saves the responses to DNS queries so that the DNS server is not repeatedly queried for the same information.
HKLM\SYSTEM\CurrentControlSet\Services\DnsCache\Parameters=Configuration data for the DNS caching resolver service of the DNS client. This service saves the responses to DNS queries so that the DNS server is not repeatedly queried for the same information.
HKLM\SYSTEM\CurrentControlSet\Services\EventLog=Configuration data used by Event Viewer to manage the event logs.
HKLM\SYSTEM\CurrentControlSet\Services\IAS=Configuration data for the Internet Authentication Service (IAS) in Windows 2000 Server.
HKLM\SYSTEM\CurrentControlSet\Services\IAS\Parameters=Configuration data for the Internet Authentication Service (IAS) in Windows 2000 Server.
HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer=Configuration data for the LAN Manager 2.x server service.
HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters=Configuration data that is specific to the LAN Manager Server service.
HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation=Configuration data for the Workstation service. The Workstation service provides network connections and communications on both computers running Windows 2000 Professional and Windows 2000 Server.
HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters=Configuration data for the Workstation service. The Workstation service provides network connections and communications on both computers running Windows 2000 Professional and Windows 2000 Server.
HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb=Configuration data for the Browser Server service. The Browser Service provides the list of participating browser servers on the network.
HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb\Parameters=Configuration data for the Browser Server service. The Browser Service provides the list of participating browser servers on the network.
HKLM\SYSTEM\CurrentControlSet\Services\Mouclass=Configuration data for the Mouseclass device driver. The Mouseclass device driver handles hardware-independent operations on a specific class of devices; in this case, the mouse and other pointing devices. The port drivers manage the hardware-specific operations.
HKLM\SYSTEM\CurrentControlSet\Services\Mouclass\Parameters=Configuration data for the Mouseclass device driver. The Mouseclass device driver handles hardware-independent operations on a specific class of devices; in this case, the mouse and other pointing devices. The port drivers manage the hardware-specific operations.
HKLM\SYSTEM\CurrentControlSet\Services\NDIS=Configuration data for the NDIS interface in Windows 2000, Ndis,sys.
HKLM\SYSTEM\CurrentControlSet\Services\NDIS\Parameters=Configuration data for the NDIS 5.0 interface in Windows 2000, Ndis.sys.
HKLM\SYSTEM\CurrentControlSet\Services\NTDS=Configuration data for Active Directory.
HKLM\SYSTEM\CurrentControlSet\Services\NWCWorkstation=Configuration data for Client Service for NetWare. This service enables your Windows 2000 Professional workstation to gain access to file and print services on Novell NetWare servers even if you are not running NetWare client software.
HKLM\SYSTEM\CurrentControlSet\Services\NWCWorkstation\Parameters=Configuration data for specific to Client Service for NetWare. This service enables your Windows 2000 Professional workstation to gain access to file and print services on Novell NetWare servers even if you are not running NetWare client software.
HKLM\SYSTEM\CurrentControlSet\Services\NWCWorkstation\Parameters\Logon=Stores data about the current user for use by the Client Service for NetWare. This data is used internally by the Client Service for NetWare.
HKLM\SYSTEM\CurrentControlSet\Services\NWCWorkstation\Parameters\Option=Stores the value of optional settings for the current user for use by the Client Service for NetWare. This data is used internally by the Client Service for NetWare.
HKLM\SYSTEM\CurrentControlSet\Services\NdisWan=Configuration data for NDISWAN drivers supporting Remote Access Service (RAS). The NdisWan subkey appears in the registry only when RAS is installed on the computer.
HKLM\SYSTEM\CurrentControlSet\Services\NdisWan\Parameters=Configuration data for NDISWAN drivers supporting Remote Access Service (RAS). The NdisWan subkey appears in the registry only when RAS is installed on the computer.
HKLM\SYSTEM\CurrentControlSet\Services\Netlogon=Stores information for the Net Logon service.
HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters=Configuration data specific to the Net Logon service.
HKLM\SYSTEM\CurrentControlSet\Services\NtFrs=Configuration data for the File Replication service (FRS). FRS automatically updates and synchronizes the contents of replicated files.
HKLM\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters=Configuration data for the File Replication service (FRS). FRS automatically updates and synchronizes the contents of folders managed by Distributed file system (Dfs).
HKLM\SYSTEM\CurrentControlSet\Services\PerfDisk=Configuration data for Perfdisk.dll, the Windows 2000 disk performance driver. Perfdisk collects performance-related data about logical and physical disk drives for display by System Monitor and other display tools.
HKLM\SYSTEM\CurrentControlSet\Services\PerfDisk\Performance=Configuration data for Perfdisk.dll, the Windows 2000 disk performance driver. Perfdisk collects performance-related data about logical and physical disk drives for display by System Monitor and other display tools.
HKLM\SYSTEM\CurrentControlSet\Services\Psched=Configuration data for the Quality of Service (QoS) Packet Scheduler. The Packet Scheduler determines the delivery schedule of each queue of packets and resolves competition between queued packets .
HKLM\SYSTEM\CurrentControlSet\Services\Psched\Parameters=Configuration data for the Quality of Service (QoS) Packet Scheduler. The Packet Scheduler controls network traffic. It determines the delivery schedule of each queue of packets and resolves competition between queued packets .
HKLM\SYSTEM\CurrentControlSet\Services\Psched\Parameters\Adapters=Stores data that is configured separately for each network adapters that supports the Quality of Service (QoS).
HKLM\SYSTEM\CurrentControlSet\Services\Qossp=Configuration data for the Quality of Service (QoS) service provider.
HKLM\SYSTEM\CurrentControlSet\Services\RSVP=Configuration information for the Windows 2000 implementation of the Resource Reservation Protocol, commonly known as RSVP.
HKLM\SYSTEM\CurrentControlSet\Services\RSVP\Parameters=Configuration information for the Windows 2000 implementation of the Resource Reservation Protocol, commonly known as RSVP.
HKLM\SYSTEM\CurrentControlSet\Services\RasMan=Configuration data for Routing and Remote Access. The subkeys in the RasMan subkey depend upon the services installed.
HKLM\SYSTEM\CurrentControlSet\Services\RasMan\PPP=Contains entries for the Point-to-Point Protocol (PPP) service for Routing and Remote Access.
HKLM\SYSTEM\CurrentControlSet\Services\RasMan\PPP\ControlProtocols=Configuration data for PPP control protocols and authentication protocols, such as IPCP, IPXCP, PAP, and EAP.
HKLM\SYSTEM\CurrentControlSet\Services\RasMan\PPP\ControlProtocols\BuiltIn=Configuration data for PPP control protocols and authentication protocols that are included in Windows 2000.
HKLM\SYSTEM\CurrentControlSet\Services\RasMan\PPP\EAP=Configuration data for the Extensible Authentication Protocol (EAP) service of PPP. EAP provides high-level security for virtual private network connections.
HKLM\SYSTEM\CurrentControlSet\Services\RasMan\PPP\EAP\13=Configuration data for the Extensible Authentication Protocol - Transport Level Security (EAP-TLS). EAP-TLS provides highly secure authentication for smart cards.
HKLM\SYSTEM\CurrentControlSet\Services\RasMan\Parameters=Configuration data for Routing and Remote Access.
HKLM\SYSTEM\CurrentControlSet\Services\Rasl2tp=Configuration data for the Layer 2 Tunneling Protocol (L2TP) support in Routing and Remote Access.
HKLM\SYSTEM\CurrentControlSet\Services\Rdr=Contains configuration data for the Windows 2000 redirector (Rdr) service.
HKLM\SYSTEM\CurrentControlSet\Services\Rdr\Parameters=Contains configuration data for the Windows 2000 redirector (Rdr) service.
HKLM\SYSTEM\CurrentControlSet\Services\RemoteAccess=Configuration data for Routing and Remote Access.
HKLM\SYSTEM\CurrentControlSet\Services\RemoteAccess\Accounting=Configuration data for Routing and Remote Access accounting providers, such as Windows and RADIUS. Accounting providers record connection information in log files.
HKLM\SYSTEM\CurrentControlSet\Services\RemoteAccess\Accounting\Providers=Configuration data for Routing and Remote Access authentication providers, such as Windows and RADIUS.
HKLM\SYSTEM\CurrentControlSet\Services\RemoteAccess\Accounting\Providers\{1AA7F840-C7F5-11D0-A376-00C04FC9DA04}=Configuration data for the RADIUS accounting provider.
HKLM\SYSTEM\CurrentControlSet\Services\RemoteAccess\Accounting\Providers\{1AA7F840-C7F5-11D0-A376-00C04FC9DA04}\Servers=Stores server-specific configuration data for a RADIUS accounting provider .
HKLM\SYSTEM\CurrentControlSet\Services\RemoteAccess\Accounting\Providers\{1AA7F846-C7F5-11D0-A376-00C04FC9DA04}=Configuration data for the Windows accounting provider.
HKLM\SYSTEM\CurrentControlSet\Services\RemoteAccess\Authentication=Configuration data for Routing and Remote Access authentication providers, such as Windows and RADIUS.
HKLM\SYSTEM\CurrentControlSet\Services\RemoteAccess\Authentication\Providers=Configuration data for Routing and Remote Access authentication providers, such as Windows and RADIUS.
HKLM\SYSTEM\CurrentControlSet\Services\RemoteAccess\Authentication\Providers\{1AA7F83F-C7F5-11D0-A376-00C04FC9DA04}=Configuration data for the RADIUS authentication provider.
HKLM\SYSTEM\CurrentControlSet\Services\RemoteAccess\Authentication\Providers\{1AA7F83F-C7F5-11D0-A376-00C04FC9DA04}\Servers=Stores server-specific configuration data for a RADIUS authentication provider .
HKLM\SYSTEM\CurrentControlSet\Services\RemoteAccess\Authentication\Providers\{1AA7F841-C7F5-11D0-A376-00C04FC9DA04}=Configuration data for the Windows authentication provider.
HKLM\SYSTEM\CurrentControlSet\Services\RemoteAccess\Parameters=Configuration data for Routing Remote Access. The data in this subkey specifies the value of variables that apply to the entire service.
HKLM\SYSTEM\CurrentControlSet\Services\RemoteAccess\Parameters\AccountLockout=Stores the database for the account lockout feature of Routing and Remote Access.
HKLM\SYSTEM\CurrentControlSet\Services\RemoteAccess\Parameters\Ip=Stores entries for the Remote Access Service (RAS) by using the Internet Protocol (IP).
HKLM\SYSTEM\CurrentControlSet\Services\RemoteAccess\Parameters\Ip\StaticAddressPool=Stores a range of static IP address for use on a Routing and Remote Access server.
HKLM\SYSTEM\CurrentControlSet\Services\RemoteAccess\Parameters\Ipx=Stores entries for the Remote Access Service (RAS) when it is implemented by using Internetwork Packet Exchange (IPX).
HKLM\SYSTEM\CurrentControlSet\Services\RemoteAccess\Policy=The Policy subkey of Remote Access stores policy settings shared by the Internet Authentication Service (IAS) Routing and Remote Access service (RRAS). Remote Access policies determine permissions and connection settings.
HKLM\SYSTEM\CurrentControlSet\Services\SNMP=Configuration data for the SNMP service.
HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parameters=Configuration data for the SNMP service.
HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parameters\ExtensionAgents=Contains entries that indicate where in the registry the configuration data for SNMP extension agents is stored.
HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parameters\PermittedManagers=Stores the names of hosts that are permitted to send requests to an SNMP agent.
HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration=Stores the name of the hosts that receives trap messages for the community. Trap messages are alerts initiated by SNMP agents.
HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration\Public=Stores the names of hosts designated to receive trap messages on behalf of all hosts in the Public community. Trap messages are alerts initiated by SNMP agents.
HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parameters\ValidCommunities=Stores a list of the communities defined to the SNMP service.
HKLM\SYSTEM\CurrentControlSet\Services\Serial=Stores default settings for all serial ports on the computer. These settings can be overridden for a specific serial ports by settings in the Enum subkey (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum) for that device.
HKLM\SYSTEM\CurrentControlSet\Services\Serial\Enum=This subkey is added to the registry, but it is not used by Windows 2000.
HKLM\SYSTEM\CurrentControlSet\Services\Serial\Parameters=The Parameters subkey appears in the registry to provide compatibility with Windows NT 4.0 and earlier.
HKLM\SYSTEM\CurrentControlSet\Services\Serial\Parameters\Serial#=The Serial# subkeys appears in the registry to provide compatibility with Windows NT 4.0 and earlier.
HKLM\SYSTEM\CurrentControlSet\Services\Sermouse=In Windows NT 4.0 and earlier, the Sermouse subkey contained configuration data for the Microsoft serial mouse driver. In Windows 2000, this data is moved to the
HKLM\SYSTEM\CurrentControlSet\Services\Sermouse\Parameters=In Windows NT 4.0 and earlier, the Parameters subkey in the Sermouse subkey contained configuration data for the Microsoft serial mouse driver. In Windows 2000, this data is moved to the
HKLM\SYSTEM\CurrentControlSet\Services\Tcpip=Configuration data for the Microsoft implementation of TCP/IP. TCP/IP is a set of networking protocols that enable communication over diverse interconnected networks.
HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters=Configuration data that applies to the TCP/IP service as a whole. This data can be overridden by settings specific to a network component that uses TCP/IP, such as a network adapter driver, or by settings specific to a service that uses TCP/IP, such as DHCP or Winsock. These component-specific entries reside in subkeys representing the component.
HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\ParametersUseDomainNameDevolution=Determines whether the DNS client performs name devolution.
HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters=Stores TCP/IP configuration data that can be configured differently for each network adapter on the computer.
HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces=Configuration data specific to a TCP/IP communications interface.
HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes=Contains entries representing routes that are permanent entries in the IP routing table. Unlike active routes, which are deleted when you shut down or restart Windows 2000, permanent routes are stored in the registry and remain in the IP routing table until you remove them.
HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Performance=Contains entries for the performance counter dynamic-link library (DLL) for the TCP/IP service. These values are used by the performance library to collect data for the performance counters that monitor the service. These entries are maintained by the system and should not be changed.
HKLM\SYSTEM\CurrentControlSet\Services\WINS=Configuration data for the Windows Internet Name Service (WINS).
HKLM\SYSTEM\CurrentControlSet\Services\WINS\Parameters=Stores general configuration data for WINS, that is, configuration data that is not related to replicating the WINS database.
HKLM\SYSTEM\CurrentControlSet\Services\WINS\ParametersVersCounterStartVal_LowWord=Stores the lowest version identifier used in the WINS database. Each record in the WINS database has a version identifier. WINS uses this entry to determine the starting record in the WINS database.
HKLM\SYSTEM\CurrentControlSet\Services\WINS\Parameters\ConsistencyCheck=The WINS ConsistencyCheck subkey is an optional subkey that you can add to the registry to direct WINS to perform periodic database consistency checks. Typically, consistency checks are not performed because they consume a substantial amount of resources on both the WINS server and the network.
HKLM\SYSTEM\CurrentControlSet\Services\WINS\Parameters\DataFiles=Contains entries representing the files that the WINS server uses to initialize and reinitialize its local database. These files contain static records.
HKLM\SYSTEM\CurrentControlSet\Services\WINS\Partners=Contains entries that specify the properties of the WINS server and its replication partners.
HKLM\SYSTEM\CurrentControlSet\Services\WINS\Partners\Pull=Contains entries that specify how and when replicas are pulled from push partners of the WINS server. These entries are stored at the root level of the Pull subkey and apply to all pull operations.
HKLM\SYSTEM\CurrentControlSet\Services\WINS\Partners\PullInitTimeReplication=Determines when the WINS server pulls replicas of new WINS database entries from its partners.
HKLM\SYSTEM\CurrentControlSet\Services\WINS\Partners\Push=Contains entries that specify how and when the WINS server sends update notification messages to its push partners. These entries are stored at the root level of the Push subkey and apply to all push operations.
HKLM\SYSTEM\CurrentControlSet\Services\i8042prt=Stores data for the i8042prt driver. The i8042prt driver controls the keyboard and PS/2-compatible mouse for the Intel 8042 controller.
HKLM\SYSTEM\CurrentControlSet\Services\i8042prt\Parameters=Stores data for the i8042prt driver. The i8042prt driver controls the keyboard and PS/245compatible mouse for the Intel 8042 controller.
HKLM\SYSTEM\Disk=The Disk subkey still appears in the registry of some computers that were upgraded from Windows NT 4.0 and earlier, but the contents are ignored by Windows 2000.
HKLM\SYSTEM\MountedDevices=The NTFS file system stores its database of mounted devices in the MountedDevices subkey. This database associates persistent volume names with unique internal indentifiers for volumes. The internal identifier often includes the disk signature of the volume. This pairing enables NTFS to maintain the identity and persistent name of a volume, even when its variable device name changes.
HKLM\SYSTEM\Select=Contains entries that specify which control set is used to start the system. The entries record which control set was used to start the system this time, which control set will be used to start it next time, and which control sets have failed to start the system in the past.
HKLM\System\CurrentControlSet\Services\NTDS\Parameters=Configuration data for Active Directory.
HKU=The HKEY_USERS subtree contains all actively loaded user profiles. HKEY_USERS has at least three keys.
