Which system file stores the information displayed by the "net user Administrator" command in Windows 7? Need to find the details of the users in a dead Windows 7 machine.

Details of the command is here.


I have been informed by @Moab that specific user info is stored in each user account folder in the NTUSER.DAT file. However, in my case, the administrator account has never been logged on and it does not have a user account folder.

  • I assume it is stored in the same place as user passwords, the Windows registry.
    – Moab
    Mar 31, 2019 at 22:48
  • @Moab what is that location?
    – Gradient
    Mar 31, 2019 at 22:53
  • See this....thewindowsclub.com/…
    – Moab
    Mar 31, 2019 at 22:57
  • There is also specific user info stored in each users account folder in the NTUSER.DAT file. C:\Users\<User name>\ntuser.dat
    – Moab
    Mar 31, 2019 at 22:59

1 Answer 1


If You were within Active Directory environment, I would say to start with analyzing ntds.dit. But since You are in probably desktop machine, I suggest to look around SAM/SYSTEM/SOFTWARE registry files, which might store informations like the one You need (like user creation date)

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.