确定脱机磁盘映像的 Windows 版本、版本和 Service Pack

声明:本页面是StackOverFlow热门问题的中英对照翻译,遵循CC BY-SA 4.0协议,如果您需要使用它,必须同样遵循CC BY-SA许可,注明原文地址和作者信息,同时你必须将它归于原作者(不是我):StackOverFlow 原文地址: http://stackoverflow.com/questions/5709967/
Warning: these are provided under cc-by-sa 4.0 license. You are free to use/share it, But you must attribute it to the original authors (not me): StackOverFlow

提示:将鼠标放在中文语句上可以显示对应的英文。显示中英文
时间:2020-09-09 08:18:16  来源:igfitidea点击:

Determine Windows Version, Edition and Service Pack OF AN OFFLINE DISK IMAGE

windowsversionregistry

提问by unixman83

Using the registry alone, how does one detect: The Windows Version (XP, Vista, 7). The Edition (Home Premium, Professional, Ultimate). And The Service Pack level (Beta, RTM, SP1, SP2).

单独使用注册表,如何检测:Windows 版本(XP、Vista、7)。版本(家庭高级版、专业版、终极版)。和 Service Pack 级别(Beta、RTM、SP1、SP2)。

This is because I am repairing on offline system. The Registry of offline systems can be mounted and accessed.

这是因为我正在离线系统上进行修复。可以挂载和访问离线系统的注册表。

采纳答案by 0xC0000022L

Use the valuesunder HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion. I presume you know where to find that hive?! The respective hive can be found under %SystemRoot%\System32\configwith the name SOFTWARE.

使用之下HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion。我想你知道在哪里可以找到那个蜂巢吗?!可以%SystemRoot%\System32\config在名称下找到相应的配置单元SOFTWARE

Side-note: you can attempt to verify your results by looking at some well-known files (e.g. kernel32.dll, ntdll.dll) and into their version information resource (what you're looking for is the file version: with, e.g. GetFileVersionInfo()).

旁注:您可以通过查看一些众所周知的文件(例如kernel32.dll, ntdll.dll)并进入它们的版本信息资源(您要查找的是文件版本:with,例如GetFileVersionInfo())来尝试验证您的结果。

Edition values, if that's needed, can be found at HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions. See here.

如果需要,可以在 中找到版本值HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions。见这里

回答by user541686

Everything you want is in HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion.

你想要的一切都在HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion

However, I believe these values can be faked, so be cautious.

但是,我相信这些值是可以伪造的,所以要小心。