JSI Tip 10105. How can I tell when a registry key, or one of its' Value Names, was last written?

When you write a new key, or Value Name, or change / delete a Value Name, Windows records the data time in the registry key.

To view the Last Write Time for a key and sub-keys, use REGEDIT.EXE to select the key, right-click it, and press Export. Toggle the Save as type box to Test Files (.txt). Navigate to a folder and type the file name into File name. Press the Save button.

When you open the file in NOTEPAD.EXE, each key in the file has a Last Write Time attribute.

Sample:

Key Name:          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver
Class Name:        
Last Write Time:   01/28/2006 - 04:06



Hide comments

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish