Status: ✅ COMPLETE
Scope: The registry, Windows' central database of settings: its five root keys, hives and hive files, keys and values, data types, permissions, virtualization, policy, how programs use it, how to back it up, and what happens inside Windows when a value changes
Time to complete: 90–120 minutes of reading + lab
Prerequisites: Chapter 6 (Complete Boot Process), Chapter 8 (Windows Architecture), Chapter 15 (Windows Control Panel)
What you'll know after: How the registry is organised and stored, how to read it safely, how to back it up, and how one changed value travels from regedit to the kernel, the disk and the programs that use it
INTRODUCTION
Every program and every part of Windows needs to remember settings. Where is the theme saved? Which drivers start at boot? What opens a .pdf? Most of these answers sit in one place: the registry.
You can think of the registry as a giant filing cabinet with folders inside folders. It looks simple on screen, but it controls how Windows starts and behaves. That is why it is both powerful and dangerous. This chapter teaches you to read it with confidence, to back it up, and to change it only when you must.
There are no photos in this chapter. Instead, it uses trees, tables and diagrams, because the registry is an idea more than an object. Every technical term is explained the first time it appears.
This chapter explains:
- What the registry is and why it replaced old INI files
- The five root keys, and why only two are real
- How keys, values and the
(Default)value work - The data types: text, numbers, lists and raw bytes
- Where the hive files live on disk and how Windows loads them
- Who may change what (permissions), and why standard users cannot write to
HKLM - Registry virtualization (WOW64 and VirtualStore)
- How Group Policy writes policy values that beat user settings
- How applications read and write settings, startup entries and file associations
- How the registry gets damaged and how to back it up
- The full chain from your click in
regeditto the disk and back to the apps
CHAPTER OUTLINE
- Section 1: What the Registry Is and Why It Exists
- Section 2: Registry Hives
- Section 3: Keys and Values
- Section 4: Registry Data Types
- Section 5: Registry Files on Disk
- Section 6: Registry Permissions
- Section 7: Registry Virtualization
- Section 8: Group Policy Interaction
- Section 9: How Applications Use the Registry
- Section 10: Registry Corruption and Backup
- Section 11: What Happens When You Change a Registry Value (Complete Chain)
- Practical Lab: Safe Registry Exploration
- Knowledge Check
Chapter Status: Complete
Estimated reading time: 100 minutes
Practical time: 35 minutes
Knowledge check time: 30 minutes