The system state includes boot files (Boot. ini, NDTLDR, NTDetect.com), the SYSVOL (Group Policies and Logon Scripts), the Windows Registry including COM settings, the Active Directory and NTDS. DIT on Domain Controllers, and the Certificate Store.