Get Offline ComputerName, Domain and IP address

@echo offREM Get ComputerName, Domain name and IP from offline registry fileREM reg load HKLM\Temp E:\Windows\System32\config\SYSTEM > nulreg load HKLM\Temp C:\Temp\SYSTEM > nul
set Computer-Name=set Domain=set Bind=set TCPIP=set TCPIP1=set TCPIP2=set TCPIP3=set TCPIP4=set CC=
REM get last good control set (only valid for 001 to 099)Set "Pre=HKLM\Temp\Select"For /F "Tokens=2*" %%A In ('Reg Query "%Pre%" /V "LastKnownGood" 2^>Nul')Do Set "CC=%%B"set /a CC=%CC%+0if %CC% LEQ 9 set CC=0%CC%set CC=ControlSet0%CC%if defined CC Set CC

Set "Pre=HKLM\Temp\%CC%"For /F "Tokens=2*" %%A In ('Reg Query "%Pre%\Control\Computername\ComputerName" /V "ComputerName" 2^>Nul')Do Set "Computer-Name=%%B"if defined Computer-Name Set Computer-NameFor /F "Tokens=2*" %%A In ('Reg Query "%Pre%\Services\Tcpip\Parameters" /V "Domain" 2^>Nul')Do Set "Domain=%%B"if defined Domain Set DomainFor /F "delims={} Tokens=3,4" %%A In ('Reg Query "%Pre%\Services\Tcpip\Linkage" /V "Bind" 2^>Nul')Do Set "Bind=%%B"if defined Bind Set BindFor /F "Tokens=2*" %%A In ('Reg Query "%Pre%\Services\Tcpip\Parameters\Interfaces\{%Bind%}" /V "IPAddress" 2^>Nul')Do Set "TCPIP=%%B" For /F "Tokens=3,4,5,6 delims=\t. " %%A In ('Reg Query "%Pre%\Services\Tcpip\Parameters\Interfaces\{%Bind%}" /V "IPAddress" 2^>Nul')Do (Set "TCPIP1=%%A" & set "TCPIP2=%%B" & set "TCPIP3=%%C" & set "TCPIP4=%%D")if defined TCPIP Set TCPIP
reg unload HKLM\Temp > nul

Example output for Domain joined PC

CC=CurrentControlSet001

Computer-Name=I11205D1

Domain=BAD.AD.S1

Bind=BEF41462-62BD-4280-A85E-AE5FB56D4FF4

TCPIP=10.143.12.19

TCPIP1=10

TCPIP2=143

TCPIP3=12

TCPIP4=19

Google Sites

Report abuse