Where Are Windows Registry Files Stored?
Windows registry hive files under System32 config plus per user NTUSER.DAT, and why they lock while running.
Last updated
The registry is not one file. Machine hives (SYSTEM, SOFTWARE, SAM, SECURITY, DEFAULT) sit as extensionless files under System32, then config. Each user adds an NTUSER.DAT in their profile.
These files lock while Windows runs, so copy them from recovery media or a backup, not from a live system. Regedit edits the loaded hives, never the files directly.
Where Windows stores this, by platform
C:\Windows\System32\config
Machine hives live here (SYSTEM, SOFTWARE, SAM, SECURITY, DEFAULT, no extensions). User hives: %USERPROFILE%\NTUSER.DAT. Needs admin plus offline access to copy.
Frequently asked questions
Can I copy registry hives while Windows runs?
No, they stay locked. Export keys from regedit for live backup, or copy hive files from WinRE or a disk image.
Where is one user registry settings versus machine settings?
User choices live in that user NTUSER.DAT (HKCU). Shared machine config lives in the config hives (HKLM).
Notice an outdated path? Let us know.