How to break into registry to explore HKLM\\SAM and HKLM\\SECURITY keys?

The Registry Editor will not allow you to navigate through HKEY_LOCAL_MACHINE\SAM and HKEY_LOCAL_MACHINE\SECURITY hives. These hives are protected by the System Account and currently logged on user or member of Administrators Group do not have permissions to view them.

To view the the registry entries under SAM or SECURITY hive, you need to run the Registory Editor under the security context of System Account. To run Registry Editor under the security context of System Account, use the following command with Psexec.exe:

Psexec.exe –s –i regedit.exe

Psexec.exe can be downloaded at the following URL: http://technet.microsoft.com/en-us/sysinternals/bb896649.aspx.

About The Author

Leave a Comment

Your email address will not be published. Required fields are marked *

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Scroll to Top