Microsoft releases sample utilities from the Windows 2000 Resource kits. Dureg.exe: Registry Size Estimator is available for free
download. DuReg is a command-line tool that enables you to discover how much
data is stored in the registry, or in any registry subtree, key, or subkey.
DuReg counts data, not space. Because the space any data occupies varies with
the storage method and amount of free space available, the size of data and the
size of space consumed are not equal. Also, because it measures data, DuReg does
not account for fragmented free space in the registry. The most valuable
capability of DuReg: the tool can search for all occurrences of a text string in
the registry. This search can be limited to a specific subtree. This commandline
search capability can be invaluable for scripting purposes.
The helpfile from DuReg:
C:\Program Files\Resource Kit>dureg ureg [/cr | /cu | /u | /lm | /a] [/s | /d] ["registry path"] ["string to search]
/cr Find the size of HKEY_CLASSES_ROOT
/cu Find the size of HKEY_CURRENT_USER
/u Find the size of HKEY_USERS
/lm Find the size of HKEY_LOCAL_MACHINE
/a All. Find the size of entire registry.
</SUBTREE switch> “registry path” Find the size of any registry key
e.g. dureg /lm “software\microsoft” finds the size of the HKLM\Software\Micosoft key
/s “string” Search for string in the registry
e.g. dureg /s “video” finds all occurrences of “video” in the registry
/s [/subtree switch] “string” Search for string in the registry subtree
e.g. dureg /lm /s “video” finds all occurrences of “video” in the HKLM
(to stop a search, press Ctrl+Break)
The contents when I ran the command on my Windows NT workstation follows:
C:\Program Files\Resource Kit> dureg /a Size of HKEY_CLASSES_ROOT : 4339244 Size of HKEY_USERS : 560139 Size of HKEY_LOCAL_MACHINE : 8119434
Total Registry data size: 13018817
The contents when I ran the search command on my Windows NT
workstation follows:
C:\Program Files\Resource Kit>dureg /s aliases HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Npfs\Aliases\netlogon : lsass HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Npfs\Aliases\srvsvc : ntsvcs HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Npfs\Aliases\netlogon : lsass HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Npfs\Aliases\srvsvc : ntsvcs HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Npfs\Aliases\netlogon : lsass HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Npfs\Aliases\srvsvc : ntsvcs
The utility is Windows NT and Windows 2000 compatible. There are a
fair number of Resource kit samples available for download. Check Microsoft’s Sample Tools for the list of current tools
available for download.