1 – KEY
Displays the attributes for the specified key.
NOTE
Symbolic links are not followed.
This command requires the SYSPRV privilege or the REG$LOOKUP
rights identifier.
Format:
LIST KEY key-name
key-name
Specifies the name of the key to list.
1.1 – Qualifiers
1.1.1 /CACHE_ACTION
Displays the cache attribute for the key.
1.1.2 /CLASS_NAME
Displays the class name of the subkey.
1.1.3 /FULL
Displays all available information-that is, information displayed
by the /LAST_WRITE, /CACHE_ACTION, /INFORMATION, /LINK_PATH, and
/CLASS_NAME qualifiers.
1.1.4 /INFORMATION
Displays the information (subkey number, value number, subkey
name max, and so on) about the specified key.
1.1.5 /LAST_WRITE
Displays the time when the subkey was last updated.
1.1.6 /LINK_PATH
Displays the key path to which the subkey is linked.
1.1.7 /OUTPUT
/OUTPUT=file-spec
Controls where the output of the command is sent. If you do
not specify a file name, the system uses the default name
REGISTRY.LIS.
1.1.8 /WAIT
/WAIT=seconds (default = 90)
/NOWAIT
Specifies the maximum amount of time, in seconds, that you are
willing to wait for command completion. If the Registry server
does not complete the request in the specified interval, REG$CP
returns REG-F-NORESPONSE. The default interval is 90 seconds.
/NOWAIT is equivalent to specifying /WAIT=0, but there may still
be a short wait period.
1.2 – Example
The LIST KEY/FULL command in this example displays the GUEST
key attributes as well as the name and attributes of the
subkeys of GUEST.
REG> LIST KEY/FULL HKEY_USERS\GUEST
Key name: HKEY_USERS\GUEST
Security policy: REG$K_POLICY_NT_40
Volatile: REG$K_NONE
Cache: REG$K_WRITEBEHIND
Class: System Authorization
Link Type: REG$K_NONE
Last written: 7-AUG-1998 12:42:08.55
Key information:
Number of subkeys: 2 Number of values: 0
Max size of subkey name: 40 Max size of class name: 40
Max size of value name: 0 Max size of value data: 0
Subkey(s):
Key name: QUOTAS
Security policy: REG$K_POLICY_NT_40
Volatile: REG$K_NONE
Cache: REG$K_WRITEBEHIND
Class: Disk quota
Link Type: REG$K_NONE
Last written: 7-AUG-1998 12:41:19.21
Key information:
Number of subkeys: 0 Number of values: 0
Max size of subkey name: 0 Max size of class name: 0
Max size of value name: 0 Max size of value data: 0
Key name: IDENTIFIER
Security policy: REG$K_POLICY_NT_40
Volatile: REG$K_NONE
Cache: REG$K_WRITETHRU
Class: Disk quota
Link Type: REG$K_SYMBOLICLINK
Link Path: HKEY_LOCAL_MACHINE\SOFTWARE\IDENTIFIER\GUEST
Last written: 7-AUG-1998 12:42:08.55
Key information:
Number of subkeys: 0 Number of values: 0
Max size of subkey name: 0 Max size of class name: 0
Max size of value name: 0 Max size of value data: 0
NOTE
The Max sizes information shows the number of bytes, not
characters. (Each character is 4 bytes long.)
2 – SECURITYDESCRIPTOR
Displays the security descriptor associated with the specified key.
A security descriptor consists of a SECURITY_DESCRIPTOR structure
and its associated security information. Security information can
include security identifiers (SIDs), a system access-control
list (SACL), and a discretionary access-control list (DACL).
Format:
LIST SECURITYDESCRIPTOR key-name
key-name
Specifies the name of the key whose security descriptor will be
displayed.
2.1 – Qualifier
2.1.1 /WAIT
/WAIT=seconds (default = 90)
/NOWAIT
Specifies the maximum amount of time, in seconds, that you are
willing to wait for command completion. If the Registry server
does not complete the request in the specified interval, REG$CP
returns REG-F-NORESPONSE. The default interval is 90 seconds.
/NOWAIT is equivalent to specifying /WAIT=0, but there may still
be a short wait period.
2.2 – Examples
The following LIST SECURITYDESCRIPTOR command displays the
security descriptor for the root key, HKEY_USERS.
REG> LIST SECURITYDESCRIPTOR HKEY_USERS
Security Descriptor:
Revision: 0x01
Control: 0x8004 (SE_DACL_PRESENT,
SE_SELF_RELATIVE)
Owner Sid: S-1-5-20-220
Group Sid: S-1-5-20-220
Dacl:
Revision: 0x02
Size: 0x0048
Ace Count: 0x0003
Ace #1:
Type: 0x00 (ACCESS_ALLOWED_ACE_TYPE)
Flags: 0x03 (OBJECT_INHERIT_ACE,
CONTAINER_INHERIT_ACE)
Size: 0x0018
Access Mask: 0x000f003f (Full Control)
Sid: S-1-5-20-220
Ace #2:
Type: 0x00 (ACCESS_ALLOWED_ACE_TYPE)
Flags: 0x03 (OBJECT_INHERIT_ACE,
CONTAINER_INHERIT_ACE)
Size: 0x0014
Access Mask: 0x00020019 (Query Value, Enumerate
Subkeys, Notify, Read Control)
Sid: S-1-1-0 (World)
Ace #3:
Type: 0x00 (ACCESS_ALLOWED_ACE_TYPE)
Flags: 0x03 (OBJECT_INHERIT_ACE,
CONTAINER_INHERIT_ACE)
Size: 0x0014
Access Mask: 0x000f003f (Full Control)
Sid: S-1-5-12 (System)
The command in the following example displays the security
descriptor for the HKEY_LOCAL_MACHINE\SOFTWARE key.
REG> LIST SECURITYDESCRIPTOR HKEY_LOCAL_MACHINE\SOFTWARE
Security Descriptor:
Revision: 0x01
Control: 0x8004 (SE_DACL_PRESENT,
SE_SELF_RELATIVE)
Owner Sid: S-1-5-20-220
Group Sid: S-1-5-20-220
Dacl:
Revision: 0x02
Size: 0x005c
Ace Count: 0x0004
Ace #1:
Type: 0x00 (ACCESS_ALLOWED_ACE_TYPE)
Flags: 0x03 (OBJECT_INHERIT_ACE,
CONTAINER_INHERIT_ACE)
Size: 0x0018
Access Mask: 0x000f003f (Full Control)
Sid: S-1-5-20-220
Ace #2:
Type: 0x00 (ACCESS_ALLOWED_ACE_TYPE)
Flags: 0x03 (OBJECT_INHERIT_ACE,
CONTAINER_INHERIT_ACE)
Size: 0x0014
Access Mask: 0x000f003f (Full Control)
Sid: S-1-3-0
Ace #3:
Type: 0x00 (ACCESS_ALLOWED_ACE_TYPE)
Flags: 0x03 (OBJECT_INHERIT_ACE,
CONTAINER_INHERIT_ACE)
Size: 0x0014
Access Mask: 0x0003001f (Query Value, Set Value,
Create Subkey, Enumerate
Subkeys, Notify, Delete,
Read Control)
Sid: S-1-1-0 (World)
Ace #4:
Type: 0x00 (ACCESS_ALLOWED_ACE_TYPE)
Flags: 0x03 (OBJECT_INHERIT_ACE,
CONTAINER_INHERIT_ACE)
Size: 0x0014
Access Mask: 0x000f003f (Full Control)
Sid: S-1-5-12 (System)
3 – VALUE
Displays all values and value attributes of the specified key.
NOTE
Symbolic links are not followed.
This command requires the SYSPRV privilege or the REG$LOOKUP
rights identifier.
Format:
LIST VALUE key-name
key-name
Specifies the name of the key to enumerate.
3.1 – Qualifiers
3.1.1 /DATA
Displays an ASCII representation of the value in hexadecimal
format.
3.1.2 /FLAGS
Displays an ASCII representation of the data flag of the value in
hexadecimal format.
3.1.3 /FULL
Displays all available information-that is, information displayed
by the /TYPE_CODE, /LINK_PATH, /DATA_FLAGS, and /VALUE_DATA
qualifiers.
3.1.4 /LINK_PATH
Displays the key path to which the subkey is linked.
3.1.5 /OUTPUT
/OUTPUT=file-spec
Controls where the output of the command is sent. If you do
not specify a file name, the system uses the default name
REGISTRY.LIS.
3.1.6 /TYPE_CODE
Display the type code of the value.
3.1.7 /WAIT
/WAIT=seconds (default = 90)
/NOWAIT
Specifies the maximum amount of time, in seconds, that you are
willing to wait for command completion. If the Registry server
does not complete the request in the specified interval, REG$CP
returns REG-F-NORESPONSE. The default interval is 90 seconds.
/NOWAIT is equivalent to specifying /WAIT=0, but there may still
be a short wait period.
3.2 – Example
The LIST VALUE/TYPE_CODE/DATA command in this example displays
the FORTRAN key and its value names, types, and data.
REG> LIST VALUE/TYPE_CODE/DATA HKEY_LOCAL_MACHINE\SOFTWARE\FORTRAN
Key name: HKEY_LOCAL_MACHINE\SOFTWARE\FORTRAN
Security policy: REG$K_POLICY_NT_40
Volatile: REG$K_NONE
Last written: 11-AUG-1998 16:27:55.81
Value(s):
Value name: Version
Volatile: REG$K_NONE
Type: REG$K_SZ
Data: 5.3-50
Value name: Date Installed
Volatile: REG$K_NONE
Type: REG$K_SZ
Data: 04-Jan-1998