Documentation for these registry keys is available at http://www.identityfinder.com/Software/idf_administrator's_guide.pdf ;

Some registry keys have been sanitized to remove ILR specific info


Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USER\Software\Identity Finder]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Identity Finder]

[HKEY_LOCAL_MACHINE\SOFTWARE\identity finder]

[HKEY_LOCAL_MACHINE\SOFTWARE\identity finder\identity finder enterprise edition]

[HKEY_LOCAL_MACHINE\SOFTWARE\identity finder\identity finder enterprise edition\FirstRun]

[HKEY_LOCAL_MACHINE\SOFTWARE\identity finder\identity finder enterprise edition\FirstRun\Initialization]
"swizDefaultOption"=dword:00000002
"showWizard"=dword:00000000
"VertPos"=dword:0000008d
"HorizPos"=dword:00000052
"Height"=dword:000002bc
"Width"=dword:000003e8
"idfFileAssociation"=dword:00000001
"idfExplorerIntegration"=dword:00000001
"loadDataFile"=dword:00000001
"saveSearchSettings"=dword:00000001
"saveDataFile"=dword:00000001
"useAutorecover"=dword:00000001
"doVersionCheck"=dword:00000001
"doVersionCheckPrerelease"=dword:00000000
"showSysTray"=dword:00000001
"showBalloonTips"=dword:00000001
"doLocalDrivesOnlyOnMyComputer"=dword:00000000
"requireStrongPasswords"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\identity finder\identity finder enterprise edition\FirstRun\Settings]
"doDocuments"=dword:00000001
"doHWD"=dword:00000001
"doCompressed"=dword:00000001
"doMessages"=dword:00000001
"doAttachments"=dword:00000001
"doRegistry"=dword:00000000
"doDatabases"=dword:00000000
"doWebsites"=dword:00000000
"folderOpt"=dword:00000001
"runLowPriority"=dword:00000000
"doRestrictResults"=dword:00000001
"doRestrictResults_stopSearchAtX"=dword:00000000
"doRestrictResults_setting_x"=dword:00000063
"doRestrictResults_setting_y"=dword:00000063
"maskMatches"=dword:00000020
"MaxFileSize"=dword:02000000
"extensionSearchMode"=dword:00000001
"useFileMTime"=dword:00000001
"useFileUTime"=dword:00000000
"allowPromptForCreds"=dword:00000001
"netSearchAlsoDoCustomFolders"=dword:00000000
"netSearchSkipADMIN$Shares"=dword:00000000
"allowInvalidFileSystems"=dword:00000000
"promptOnInvalidFileSystems"=dword:00000001
"doExchangeMailServerFolders"=dword:00000000
"SelectedOutlookState"=dword:00000001
"includeOutlookInEmailSearch"=dword:00000001
"doPSTSearch"=dword:00000001
"doPSTSearch_Selection"=dword:00000000
"includeWinmailInEmailSearch"=dword:00000001
"includeThunderbirdInEmailSearch"=dword:00000001
"ThunderbirdMboxSearchOption"=dword:00000000
"includeMboxEmailInSearch"=dword:00000001
"doMBOXSearchFiles"=dword:00000000
"doMBOXSearchExtensions"=dword:00000000
"doMBOXSearchExtensionsSelection"=dword:00000000
"useEmailMTime"=dword:00000001
"useEmailUTime"=dword:00000000
"includeIEInHWDSearch"=dword:00000001
"includeFFOXInHWDSearch"=dword:00000001
"includeFFOXInHWDSearch_Passwords"=dword:00000001
"includeFFOXInHWDSearch_FormData"=dword:00000001
"searchComputerforHWDPasswords"=dword:00000000
"doQuickRegistry"=dword:00000001
"ssn2threshold"=dword:00000003
"doquarantineleavefilebehind"=dword:00000000
"ShredPasses"=dword:00000003

[HKEY_LOCAL_MACHINE\SOFTWARE\identity finder\identity finder enterprise edition\FirstRun\Settings\AnyFind]
"doCCN"=dword:00000001
"doPassword"=dword:00000001
"doSSN"=dword:00000001
"doBankAccount"=dword:00000000
"doDoB"=dword:00000000
"doPhoneNum"=dword:00000000
"enable_AU_TFN"=dword:00000000
"enable_Canada_SIN"=dword:00000000
"enable_UK_NINO"=dword:00000000
"enable_UK_NHS"=dword:00000000
"doAU_TFN"=dword:00000000
"doCanada_SIN"=dword:00000000
"doUK_NINO"=dword:00000000
"doUK_NHS"=dword:00000000
"unformattedSSNSearchOption"=dword:00000002
"unformattedSSNRequireKeyword"=dword:00000001
"unformattedSSNUseCustomKeyword"=dword:00000000
"comprehensivePasswordSearchOption"=dword:00000001
"allowPasswordswithNonPrintables"=dword:00000000
"findAllDatesinLocationwithDoBKeyword"=dword:00000000
"useAnyFindDobRange"=dword:00000000
"AnyFindDobDateRangeLowDay"=dword:00000016
"AnyFindDobDateRangeLowMonth"=dword:00000005
"AnyFindDobDateRangeLowYear"=dword:000007d9
"AnyFindDobDateRangeHighDay"=dword:00000016
"AnyFindDobDateRangeHighMonth"=dword:00000005
"AnyFindDobDateRangeHighYear"=dword:000007d9

[HKEY_LOCAL_MACHINE\SOFTWARE\identity finder\identity finder enterprise edition\initialization]
"doversioncheck"=dword:00000001
"doversioncheckprerelease"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\identity finder\identity finder enterprise edition\settings]
"disablefeature_saveincleartext"=dword:00000001
"disabletool_secureffox"=dword:00000001
"disabletool_securemicrosoftie"=dword:00000001
"disabletool_shredffox"=dword:00000001
"disabletool_shredmicrosoftie"=dword:00000001
"thunderbirdmboxsearchoption"=dword:00000001
"doMBOXSearchExtensionsSelection"=dword:00000001
"doMBOXSearchExtensions"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\identity finder\identity finder enterprise edition\settings\anyfind]
"disableaction_quarantine"=dword:00000001
"disablefeature_resultswizard"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\identity finder\identity finder enterprise edition\settings\console]
"actiontypes"=dword:000003fd
"enable"=dword:00000001
"enckey"="your encryption key here"
"locationtypes"=dword:0000003f
"logtypes"=dword:000003df
"matchtypes"=dword:ffffffff
"resultscolumns"=dword:0000001b
"serverurl"="https://MgtConsole.name.here/Services/UploadService.asmx"

[HKEY_LOCAL_MACHINE\SOFTWARE\Identity Finder\identity finder enterprise edition\settings\FileExtensions]
"MBOXFiles"=hex(7):6d,00,62,00,78,00,00,00,30,00,30,00,31,00,00,00,30,00,30,00,\
  32,00,00,00,30,00,30,00,33,00,00,00,30,00,30,00,34,00,00,00,30,00,30,00,35,\
  00,00,00,30,00,30,00,36,00,00,00,30,00,30,00,37,00,00,00,30,00,30,00,38,00,\
  00,00,30,00,30,00,39,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\identity finder\identity finder enterprise edition\settings\logging]
"doerrors"=dword:00000001
"domatchingitems"=dword:00000001
"domessages"=dword:00000001
"dosecureitemsskipped"=dword:00000001
"douseractions"=dword:00000001
"enable"=dword:00000001
"encryption"=dword:00000000
"format"=dword:00000000
"retention"=dword:00000000
"useuniquemachinelogging"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Identity Finder\identity finder enterprise edition\settings\PIF]
"CustomFolderExcludeList"=hex(7):69,00,3a,00,5c,00,62,00,61,00,63,00,6b,00,75,\
  00,70,00,00,00,00,00
"IgnoreList"=hex(7):30,00,30,00,5f,00,46,00,69,00,6c,00,65,00,3d,00,61,00,75,\
  00,64,00,69,00,74,00,2e,00,6c,00,6f,00,67,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\identity finder\identity finder enterprise edition\settings\resources]
"customsupportdescription"="Your Unit name Technology Services, Cornell University"

[HKEY_LOCAL_MACHINE\SOFTWARE\identity finder\identity finder enterprise settings]
"resources"="techservices emailaddress here@cornell.edu"

  • No labels