I am trying to narrow down some information from the Windows registry on how
Windows deals with connected hardware.

Under HKLM/System/ControlSetxxx/Enum Windows lists a number of keys (e.g.
IDE, USB, USBSTOR) under each of these there are devices listed (e.g. IDE you
have IDE drives listed) what I am trying to find out is how Windows deals
with these keys.

I see some drives listed under IDE (e.g. CD Drives) that I have not
connected to this machine at any time.

Anyone who can shed some light on this part of the registry and how it is
deal with I would look forward to reading it.

Thanks

Be very careful in messing with those keys. You also may want to use Device
Manager and then select show hidden devices under view to more details. From
what I can tell those are entries that PNP finds. It is not unusual to see
entries from hardware no longer installed. I don't know why you are seeing a
mysterious entry but you might try temporarily disabling your cdrom in cmos
and rebooting to see if those entries go away. --- Steve



"ForensicFrank" <mortonm74@hotmail.com> wrote in message
news:506347A9-EE53-4D8D-8AB7-113485592C15@microsoft.com...
>I am trying to narrow down some information from the Windows registry on
>how
> Windows deals with connected hardware.
>
> Under HKLM/System/ControlSetxxx/Enum Windows lists a number of keys (e.g.
> IDE, USB, USBSTOR) under each of these there are devices listed (e.g. IDE
> you
> have IDE drives listed) what I am trying to find out is how Windows deals
> with these keys.
>
> I see some drives listed under IDE (e.g. CD Drives) that I have not
> connected to this machine at any time.
>
> Anyone who can shed some light on this part of the registry and how it is
> deal with I would look forward to reading it.
>
> Thanks
>