Solved Indentify cloned/ghosted hosts pcs

January 23, 2013 at 09:16:27
Specs: windows xp
How can i identify if my system was cloned/ghosted?

See More: Indentify cloned/ghosted hosts pcs

Report •


#1
January 23, 2013 at 10:21:37
✔ Best Answer
It's not possible as far as I know. A cloned or ghosted system, by definition, looks and behaves just like the system it was cloned from and contains no data that proves it's a clone.

Report •

#2
January 23, 2013 at 10:55:55
Explain why you are asking this question. Maybe we can help with your concerns.

Report •

#3
January 23, 2013 at 11:06:52
I need to discover if some of my systems are real installed or were cloned.

Tks


Report •

Related Solutions

#4
January 23, 2013 at 12:04:40
What do you mean "some of my systems"? You are not providing enough information. If you have single user copies of WinXP then the next entence should apply.

Do you have Windows genuine Advantage installed? If so, you would know if the license is in use more than once.


Report •

#5
January 24, 2013 at 02:53:19
OtheHill,

Tks for your attention.

I have a HUGE workstation park, some of then are windows 7 some windows XP.

Some have windows genuiene Advantage some dosent.

I´m developing and unique id for each machine (the reasons i cannot explain) and this ID may varieate even if the machine is cloned.

At this moment without the possibilite to discover is a system was cloned or installed i can´t genereate this ID. I would need a flag on registry, a parameter on hard drive, a dll anything that tells me if the system was cloned or not.

At this moment i can´t find nothing.

Tks a lot, if you need more information just ask.

Best Regards!


Report •

#6
January 24, 2013 at 08:01:59
There might be a way. When you install an operating system, it creates an SID (Secure ID) number. It's a randomly created number so each computer will have it's own unique SID if the computer was not Syspreped before the clone image was created.

You will have some work to do but go to Run and type in regedit. Go to Edit, Find and type in sysstring .After about the third find, it will show you the SID for that operating system. Write it down, then do that on all the other computers. If any SID's match, the computers have been cloned.

Note, if the computer was Syspreped before the clone image was made, it stripped the SID out so this won't work.


Report •

#7
January 24, 2013 at 08:14:06
THX 1138,

That is a good way but this option will only acheive the sysprepred systems.

How about the ghosts for example?

Tks


Report •

#8
January 24, 2013 at 08:18:37
THX 1138,

For sysprep cloned system you also have the resource HKEY_LOCAL_MACHINE/SYSTEM/Setup/CloneTag

;)

Tks again


Report •

#9
January 24, 2013 at 08:21:43
What type of licensing are you using? If you scan all pcs for licenses and find duplicates you have found your clones.

Answers are only as good as the information you provide.
How to properly post a question:
Sorry no tech support via PM's


Report •

#10
January 24, 2013 at 08:22:06
I'm not sure I understand your post. The option I suggested will only work if the system was not syspreped.

I don't know what you mean by "How about the ghosts for example"

Ghost, Acronis, and the handful of other cloning software will do exactly what they say, they will clone a mirror image of the original computer. There won't be any changes in the registry or any extra dll's. I think you're going to be hard pressed to find anything different other than the SID in cloned systems.


Report •

#11
January 24, 2013 at 08:25:57
Wanderer,

I have more than 10 milion hosts, and i cannot define the licenses of each one!

Tks


Report •

#12
January 24, 2013 at 08:28:13
THX 1138,

My problem is that i have more than 10 milion hosts to achieve, so for sure i will find some sysprepered, some ghost and acronis clones as well. I need a solution that works for any licesence, clone software and Windows version. Maybe it is not possible...

Tks again


Report •


Ask Question