Yes,that's right it's called "Load Hive", sorry for my bad translation, since I work with German Operating Systems sometimes I can't remember how the menus are called in English, but since you found the registry editor and the ntuser.dat file it looks like you are on the right path. In case you have another question I will answer tomorrow, because it's 01:30 AM here in Europe and I have to go sleep now. :-)