Hello,
I am trying to determine what web browsers certain users were using (default browser and if they chose another). The users are using roaming profiles, so I am not sure if they are forced to use the browsers installed on the system, or if each user can use whatever they want. I would assume that the SOFTWARE registry key would list all the browsers installed, but what setting would indicate what browser was default or what browser was recently used. Since the use of roaming profiles are in use would that be in the NTUSER.DAT or another roaming profile setting?
Thanks,
There are a few different registry settings on a Windows computer (assuming XP) defining what browser to use for *.htm, *.html, http links, https links, ftp links, etc. But for starters, look at the registry setting for
Hkey_classes_root\http\shell\open\command
With respect to which browser was used last, Take a look at the prefetch files on the computer to determine which browser has the latest prefetch file or examine the last run dates in the UserAssist keys.