ristrictions using winregistry

7/31/2019 Ristrictions Using Winregistry

1/5

Following is a list of some interesting restrictions, which can be made in Windows 2000, XP, 2003,Vista, 2008 and 7. Like you can restrict Display properties, taskbar properties, folder options, etc. Alltricks are based on Registry editing. So I'll tell the key name and the value, that you have to createfor the restriction. If the key is not present, then simply create it.

NOTE: If you want to remove the restriction, then simply delete the DWORD value or set its value to0

So here we start:

1.) Restrict Display Properties:Code:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\System

create DWORD valueNoDispCPLand set its value to 12.) Restrict Taskbar Properties:Code:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current

Version\Policies\Explorer

create DWORD value NoSetTaskbar and set its value to 1

3.) Restrict Folder Options:Code:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

create DWORD value NoFolderOptions and set its value to 14.) Restrict Locking/Unlocking the taskbar:Code:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current

Version\Policies\Explorer

create DWORD value LockTaskbar and set its value to 15.) Restrict Active Desktop:Code:


create DWORD value NoActiveDesktop and set its value to 16.) Restrict adding/deleting items from Toolbars:Code:


create DWORD value NoToolbarCustomize and set its value to 17.) Restrict adding/deleting toolbars:Code:

http://www.amaderforum.com/http://www.amaderforum.com/http://www.amaderforum.com/http://www.amaderforum.com/


2/5

create DWORD valueNoBandCustomizeand set its value to 18.) Restrict right-click in Start Menu:Code:


create DWORD value NoChangeStartMenu and set its value to 19.) Restrict Desktop Cleanup Wizard:Code:


create DWORD value NoDesktopCleanupWizard and set its value to 110.) Restrict notification at low disk space:Code:


create DWORD value NoLowDiskSpaceChecks and set its value to 111.) Restrict Taskbar Context Menu:Code:


create DWORD value NoTrayContextMenu and set its value to 112.) Restrict Programs to run:Code:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun

create String value with any name, like 1 and set its value to the program's EXE file.e.g., If you want to restrict msconfig, then create a String value 1 and set its value to msconfig.exe.If you want to restrict more programs, then simply create more String values with names 2, 3 and soon and set their values to the program's exe.13.) Restrict Registry Editor:Code:


create DWORD valueDisableRegistryToolsand set its value to 114.) Restrict Task Manager:Code:


create DWORD value DisableTaskMgr and set its value to 115.) Restrict Writing to USB Drives:Code:

HKEY_LOCAL_MACHINE\SYSTEM\Current Control Set\Control\StorageDevicePolicies

Create DWORD value WriteProtect and set its value to 1
http://www.amaderforum.com/http://www.amaderforum.com/http://www.amaderforum.com/http://www.amaderforum.com/http://www.amaderforum.com/http://www.amaderforum.com/http://www.amaderforum.com/http://www.amaderforum.com/


3/5

16.) Restrict New option in context menu:Code:

HKEY_CLASSES_ROOT\Directory\Background\shellex\ContextMenu Handlers\New

And delete the value ofDefault, e.g., empty it.17.) Restrict Send To in context menu:

Code:

HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\ContextMenu Handlers\Send To

And delete the value ofDefault, e.g., empty it.18.) Restrict Balloon Tips:Code:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced

Create DWORD valueEnableBalloonTipsand set its value to 019.) Restrict Users to enable New XP StartMenu:Code:


Create DWORD value NoSimpleStartMenu and set its value to 120.) Restrict Command Prompt:Code:

HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System

Create DWORD value DisableCMD and set its value to 2
http://www.amaderforum.com/http://www.amaderforum.com/http://www.amaderforum.com/http://www.amaderforum.com/


4/5

21.) Restrict Drives in My Computer:Code:


In right-side pane, create a new DWORD value NoViewOnDrive and change its value as following:

3 : To Restrict A and B drives only.4 : To Restrict C drive only.7 : To Restrict A, B, and C drives only.8 : To Restrict D drive only.F : To Restrict A, B, C, and D drives only.03FFFFFF : To Restrict all drives.And if you want more specific restrictions, like you want to restrict a combination of other drives, thenyou can use decimal no. instead of hexadecimal no. Following is a list for all drives decimal no.:Code:

A: 1B: 2C: 4D: 8

E: 16F: 32G: 64H: 128I: 256J: 512K: 1024L: 2048M: 4096N: 8192O: 16384P: 32768Q: 65536R: 131072

S: 262144T: 524288U: 1048576V: 2097152W: 4194304X: 8388608Y: 16777216Z: 33554432ALL: 67108863

So if you want to disable a combination of drives, just sum their numbers and give the same value toNoViewOnDrive. e.g., for restricting C, D, E and F drives, give the value: 4+8+16+32 = 60

NOTE: You can also hide the drives using NoDrives DWORD value. The location and its value remainsame as the above trick.

22.) Restrict RUN in New XP StartMenu:


5/5

Code:


Create DWORD value NoRun and set its value to 123.) Restrict Control Panel:

Code:


Create DWORD value NoControlPanel and set its value to 1Above all are some common restrictions, if you want to know any specific restriction, then please postit. I'll try my best to give the registry code.

ristrictions using winregistry

Documents