Tuesday, September 6, 2016

What are "HKLM" in various Windows help group solutions

There are many Windows behaviors which are governed by modifying specific system internals, e.g. programs that launch once per system startup, or every log in, or for particular users, etc. These typically require changes to the Windows registry (regedit is your frenemy).

When particular keys are mentioned in several online fora, particular registry entry keys are often contracted to arcane acronyms such as "HKLM", "HKCU" etc.


Microsoft has a very good explanation for some important keys. However, they still don't directly explain what the prefix "HK" stands for.

The table below links the informal contractions.
Informal ContractionRegistry hiveSupporting files
HKCCHKEY_CURRENT_CONFIGSystem, System.alt, System.log, System.sav
HKCUHKEY_CURRENT_USERNtuser.dat, Ntuser.dat.log
HKLM\SAMHKEY_LOCAL_MACHINE\SAMSam, Sam.log, Sam.sav
HKLM\SecurityHKEY_LOCAL_MACHINE\SecuritySecurity, Security.log, Security.sav
HKLM\SoftwareHKEY_LOCAL_MACHINE\SoftwareSoftware, Software.log, Software.sav
HKLM\SystemHKEY_LOCAL_MACHINE\SystemSystem, System.alt, System.log, System.sav
HKUHKEY_USERS\.DEFAULTDefault, Default.log, Default.sav
As regards the "HK" prefix, my understanding is that it stands for "Hive Key" since these are registry keys that are backed by a "hive of files".

No comments: