Windows Registry Keys
The Windows Registry stores configuration settings for the operating system and for applications. Keys are analogous to folders, and each key can contain sub‑keys and values.
Common Root Keys
Root Keys Overview
| Root Key | Description |
|---|---|
| HKEY_CLASSES_ROOT (HKCR) | Information about registered applications and file associations. |
| HKEY_CURRENT_USER (HKCU) | User-specific settings for the currently logged‑in user. |
| HKEY_LOCAL_MACHINE (HKLM) | Machine-wide settings for all users. |
| HKEY_USERS (HKU) | All loaded user profiles on the system. |
| HKEY_CURRENT_CONFIG (HKCC) | Current hardware configuration information. |
Typical Sub‑Keys
HKEY_LOCAL_MACHINE → SOFTWARE
| Sub‑Key | Purpose |
|---|---|
| Microsoft\Windows\CurrentVersion | Core OS settings and version information. |
| Microsoft\Windows\CurrentVersion\Run | Programs that start automatically at logon. |
| Policies | Group policy settings applied to the machine. |
HKEY_CURRENT_USER → SOFTWARE
| Sub‑Key | Purpose |
|---|---|
| Microsoft\Windows\CurrentVersion\Explorer | User‑specific Explorer settings. |
| Microsoft\Internet Explorer | IE configuration per user. |
| Classes | File associations for the current user. |