Determine Windows Version, Edition and Service Pack OF AN OFFLINE DISK IMAGE

浪尽此生 提交于 2019-12-06 00:08:02

问题


Using the registry alone, how does one detect: The Windows Version (XP, Vista, 7). The Edition (Home Premium, Professional, Ultimate). And The Service Pack level (Beta, RTM, SP1, SP2).

This is because I am repairing on offline system. The Registry of offline systems can be mounted and accessed.


回答1:


Use the values under HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion. I presume you know where to find that hive?! The respective hive can be found under %SystemRoot%\System32\config with the name SOFTWARE.

Side-note: you can attempt to verify your results by looking at some well-known files (e.g. kernel32.dll, ntdll.dll) and into their version information resource (what you're looking for is the file version: with, e.g. GetFileVersionInfo()).

Edition values, if that's needed, can be found at HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions. See here.




回答2:


Everything you want is in HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion.

However, I believe these values can be faked, so be cautious.



来源:https://stackoverflow.com/questions/5709967/determine-windows-version-edition-and-service-pack-of-an-offline-disk-image

易学教程内所有资源均来自网络或用户发布的内容,如有违反法律规定的内容欢迎反馈
该文章没有解决你所遇到的问题?点击提问,说说你的问题,让更多的人一起探讨吧!