search for: regeditpe

...%systemroot% to the guest image. This appears to have no effect. This is what makes me suspect that the process is primarily registry driven. I started looking around for ways of using a different registry. I discovered the Registry Editor PE plugin to BartPE (https://sourceforge.net/projects/regeditpe/) which allows editing the registry of a guest. Looking at how it does this, it uses reg.exe to load the guests's hives. I confirmed that you can do this. Unfortunately you don't seem to be able to replace the default hives. The new hives are loaded in a different part of the tree, and...