He He He Latest One
Your Ad in Araf Latest Site
Your Ad Here

Your Ad Here
Site hosted by Angelfire.com: Build your free website today!

Registry Tips & Tricks

 

Important Notes:

Disclaimer: Modifying the registry can cause serious problems that may require you to reinstall your operating system. I cannot guarantee that problems resulting from modifications to the registry can be solved. Use the information provided at your own risk.

Trick Effect: Some tricks take immediate effect while for some we have to log off and log on and for others we have to restart the system.

Last but not least make a backup of your registry before modifying the registry

 

1) Active Desktop Restrictions (All Windows) Popular

Features of the Windows Active Desktop can be selectively controlled by modifying options in the Windows registry. Following the instructions in this tweak.

Create a new DWORD value based on the options below, and set the new value to equal "1" to enable the restriction or "0" to disable the restriction.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
ActiveDesktop]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
ActiveDesktop]
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disable restriction, 1 = enable restriction)

 

 

2) Add a Menu Option to Move or Copy to a Folder (All Windows)

This tweak allows you to easily move and copy files and folders by adding two new right-click menu options to "Move To Folder..." and "Copy To Folder..." Simply highlight the file, right-click the option and select the destination folder.

To enable the Copy To Folder menu option create a new subkey called "Copy To" and set the (Default) value to "{C2FBB630-2971-11d1-A18C-00C04FD75D13}".

To enable the Move To Folder menu option create a new subkey called "Move To" and set the (Default) value to "{C2FBB631-2971-11d1-A18C-00C04FD75D13}".

System Key: [HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\ContextMenuHandlers]
Value Name: (Default)
Data Type: REG_SZ (String Value)

NOTE: Changes should take effect immediately; right click on folder to view the new options.

 

 

3) Add Command Prompt Option to Every Folder (All Windows) Popular

If you still use the DOS prompt regularly then this setting creates a new right-click menu option to open a command prompt at the selected directory.

Create a new sub key called 'Command' under the main key (i.e. [HKEY_CLASSES_ROOT\Directory\shell\Command]). Change the value of '(Default)' within the key to equal the text you would like on the right-click menu, for example 'Command Prompt'.

Create another new sub-key under the key created above, named 'command' (i.e. [HKEY_CLASSES_ROOT\...\Command\command]). Change the value of '(Default)' within this key depending on your operating system to equal either:

Windows 95, 98 or Me
command.com /k cd "%1"

or

Windows NT, 2000 or XP
cmd.exe /k cd %1

Now right-click on a folder and the new option of 'Command Prompt' should be available.

System Key: [HKEY_CLASSES_ROOT\Directory\shell]
Value Name: (Default)
Data Type: REG_SZ (String Value)

 

 

4) Add or Remove Programs Restrictions (Windows 2000/XP)
These restrictions apply to the Add/Remove Programs feature of Control Panel. They allow you to entirely or individually disable components.

 

Create a new DWORD value for each restriction required according to the table below. Set the value to equal "1" to enable the restriction or "0" to disable it.

You may need to restart Windows for the changes to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Uninstall]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Uninstall]
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = default, 1 = enable restriction)

 

 

 

5) Automatically Ending Hung Applications (All Windows) Popular
When this tweak is enabled it will force Windows to shutdown immediately ending all tasks without attempting to safely close any applications that have hung.

 

Modify the value of 'AutoEndTasks' to equal '1' to automatically end tasks or '0' to prompt for action.

The default time-out before ending the task is defined by the value of 'WaitToKillAppTimeout' located in the same key, this value is in milliseconds (default = 20000 i.e. 20 seconds). You can therefore additionally change this value to speed the process up.

Restart Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Control Panel\Desktop]
System Key: [HKEY_USERS\.DEFAULT\Control Panel\Desktop]
Value Name: AutoEndTasks
Data Type: REG_SZ (String Value)
Value Data: (0 = disabled, 1 = enabled)

 

 

6) Automatically Hide Inactive Tray Icons (Windows XP)
This setting controls whether running tray programs should be hidden automatically when they are not active.

Create a new DWORD value, or modify the existing value, called "EnableAutoTray" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer]
Value Name: EnableAutoTray
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = display inactive icons, 1 = hide inactive icons)

 

 

7) Binding Multiple IP Address to a Single Network Card (Windows 95/98/Me)
The Windows 9x GUI does not accept having multiple IP addresses specified for a single network adapter. This tweak allows you to add additional IP addresses using the registry.

Within this key will be two values called "IPAddress" and "IPMask". To add additional IP addresses add the comma-separated IP and subnet mask values to both these keys respectively without using spaces.

Exit your registry and reboot for the changes to take effect.

System Key: [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Class\NetTrans\0000]
Value Name: IPAddress, IPMask
Data Type: REG_SZ (String Value)
Value Data: Comma-separated IP and Subnet Masks

 

 

8) Change the Group Policy Refresh Interval (Windows 2000/XP)
This tweak can be used to set the Group Policy refresh time interval for the current user or local machine

Create a new DWORD value, or modify the existing value, called "GroupPolicyRefreshTime" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System]
System Key: [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System]
Value Name: GroupPolicyRefreshTime
Data Type: REG_DWORD (DWORD Value)
Value Data: Range (in minutes): 0 to 64800

 

 

9) Change the Logon Screen Wallpaper (All Windows) Popular
When you setup a background wallpaper for your desktop, the initial logon screen wallpaper is not changed and stays as the default Windows appearance. This tweak allows you to change the default wallpaper.

Modify the value of 'Wallpaper' to equal the path and filename of the bitmap (BMP) file you want to use as the background (e.g. 'c:\windows\mylogo.bmp').

In the same key, you can also modify these additional values "Pattern" and "TileWallpaper" to set the background pattern and Tile mode respectively.

Restart Windows for the changes to take effect.

System Key: [HKEY_USERS\.DEFAULT\Control Panel\Desktop]
Value Name: Wallpaper, TitleWallpaper
Data Type: REG_SZ (String Value)

 

 

10) Change the Menu Show Delay (All Windows) Popular
Windows normally delays menus before they are displayed. For regular users this delay can become annoying, with this setting you to change the delay time or remove it altogether.

Create a new string value, or modify the existing value, named 'MenuShowDelay' and set it to equal the delay you would like before the menus are shown as a time in milliseconds.

Log off or restart Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Control Panel\Desktop]
Value Name: MenuShowDelay
Data Type: REG_SZ (String Value)
Value Data: 0-999 (milliseconds)

 

 

11) Change the Size of Desktop Icons (All Windows) Popular
Are your icons too small? Or too big? This setting will let you resize them to suit your desktop preference.

Create a new value named 'Shell Icon Size' and set the value, or modify the existing value, to equal the size of your icons in pixels. Smaller values = smaller icons!

User Key: [HKEY_CURRENT_USER\Control Panel\Desktop\WindowMetrics]
Value Name: Shell Icon Size
Data Type: REG_SZ (String Value)
Value Data: Size in Pixels (Default = 32)

 

 

12) Clear Recent Documents When Windows Exits (All Windows) Popular
This restriction will clear the list of recent documents on the Start Menu when Windows exits.

Create a new DWORD value, or modify the existing value, called "ClearRecentDocsOnExit" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: ClearRecentDocsOnExit
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disable, 1 = enable)

 

 

 

13) Change the Default Action for Script Files (All Windows)
Normally scripting files are run when double clicked, once applied this tweak will cause them to be shown in Notepad instead. This is useful to avoid accidental execution especially with the prevalence of script based viruses.

 

Open your registry and for each key below change the value of "(Default)" to equal "Edit". This will change the default action so that the script will be loaded in Notepad.exe (or another specified text editor).

JS Files
[HKEY_CLASSES_ROOT\JSFile\Shell]

JSE Files
[HKEY_CLASSES_ROOT\JSEFile\Shell]

VBE Files
[HKEY_CLASSES_ROOT\VBEFile\Shell]

VBS Files
[HKEY_CLASSES_ROOT\VBSFile\Shell]

WSH Files
[HKEY_CLASSES_ROOT\WSHFile\Shell]

WSF Files
[HKEY_CLASSES_ROOT\WSFFile\Shell]

In addition you can change the default editor for each script type be changing the "(Default)" value under the [...\Shell\Edit\Command] sub-key.

Restart Windows for the change to take effect.

Note: Scripts can still be executed normally by right-clicking the file and selecting "Open" from the context menu.

Value Name: (Default)
Data Type: REG_SZ (String Value)
Value Data: ("Edit" = set Edit as default)

 

 

14) Change the Number of Active Directory Search Results (Windows 2000/XP)
This setting specifies the number of search results to be returned from a Active Directory query. This allows you to increase or decrease the default 10,000 objects.

Create a new DWORD value, or modify the existing value, called "QueryLimit" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Directory UI]
Value Name: QueryLimit
Data Type: REG_DWORD (DWORD Value)
Value Data: Number of Results (0 = unlimited)

 

 

15) Change the Number of Undo Levels in Access (All Windows)
This setting allows you to modify the maximum number of commands and operations that can be reversed using the Undo function in Microsoft Access 2002.

Create a new DWORD value, or modify the existing value, called "Number of Undos" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Office\10.0\Access\Settings]
Value Name: Number of Undos
Data Type: REG_DWORD (DWORD Value)
Value Data: 1 to 20 undo levels

 

 

16) Change the Printer Spooler Priority (Windows NT/2000/XP)
Normally the printer spooler runs at the same priority as other services on a system. If your system is being mainly used for printing or handles a large number of print jobs you can use this tweak to change the priority class the print spooler.

Create a new DWORD value, or modify the existing value, called "SpoolerPriority" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

System Key: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print]
Value Name: SpoolerPriority
Data Type: REG_DWORD (DWORD Value)
Value Data: 0 = Normal priority, 1 = High priority, 0xFFFFFFFF = Idle priority

 

 

17) Change the Size of the Virtual Disk Cache (Windows 95/98/Me) Popular
This tweak allows you control the minimum and maximum amount of memory being allocated as disk cache. It can be used to speed up your system and possibly avoid some memory problems.

Using notepad or another text editor, open your SYSTEM.INI file from your Windows directory.

Find the section starting with [vcache], and add the following two lines, or modify them if they already exist.

MinFileCache=0

MaxFileCache=4096

These values set the amount of memory in kilobytes to be used for disk caching, if you have more the 16Mb of RAM you may want to increase the MaxFileCache size, to about 25% of your total RAM (i.e. if you have 128Mb use "MaxFileCache=32768")

Restart Windows for the change to take effect.

Note: If you are receiving an error like "Error: An I/O subsystem driver failed to load" try increasing the maximum size to 6144.

 

 

18) Change the TIME_WAIT Timeout to Increase Connections (Windows NT/2000/XP)
This setting determines the length of time that a connection will stay in the TIME_WAIT state before being closed. The default is 240 seconds which on a busy server will limit the maximum connections to around 200/sec. Reducing this setting will increase the maximum connection limit

Create a new DWORD value, or modify the existing value, called "TcpTimedWaitDelay" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

System Key: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]
Value Name: TcpTimedWaitDelay
Data Type: REG_DWORD (DWORD Value)
Value Data: 30-300 seconds (decimal)

 

 

19) Clear Download Accelerator History (All Windows)
Download Accelerator Plus (DAP) is a tool used to retrieve files from Internet servers. It stores a history of the files downloaded and URLs visited. To increase privacy and security this tweak allows you to clear the history.

Open your registry and find the key [HKEY_LOCAL_MACHINE\SOFTWARE\SpeedBit\Download Accelerator\FileList].

Delete the sub-keys under the key to clear the download history.

Open your registry and find the key [HKEY_CURRENT_USER\Software\SpeedBit\Download Accelerator\HistoryCombo].

Delete the data in the value called "URLHistory" to clear the URL combobox history.

User Key: [HKEY_CURRENT_USER\Software\SpeedBit\Download Accelerator\HistoryCombo]
System Key: [HKEY_LOCAL_MACHINE\SOFTWARE\SpeedBit\Download Accelerator\FileList]
Value Name: URLHistory
Data Type: REG_SZ (String Value)

 

 

20) Configure DHCP Server for Unicast (Windows NT/2000/XP)
By default, the Windows DHCP server sends all DHCP responses as IP broadcasts to the limited broadcast address (255.255.255.255). However, the DHCP server can be configured send to unicast responses by applying this tweak.

Create a new DWORD value, or modify the existing value, called "IgnoreBroadcastFlag" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

Note: Versions of the DHCP server prior to Windows NT 4.0 ignored the broadcast flag in client DHCP packets, and broadcast all replies.

System Key: [HKEY_LOCAL_MACHINE\CurrentControlSet\Services\DHCPServer\Parameters]
Value Name: IgnoreBroadcastFlag
Data Type: REG_DWORD (DWORD Value)
Value Data: (1 = always broadcast (default), 0 = only broadcast if client requests)

 

 

21) Configure Remote Access Client Account Lockout (Windows 2000/XP)
You can use the remote access account lockout feature to specify how many times a remote access authentication has to fail against a valid user account before the user is denied access. Use this tweak to set the number of failed logins before the account is locked-out and the time before the lockout is reset.

Create a new DWORD value or modify the existing value called "MaxDenials" and set it to the number of failed logins to lockout the account (or 0 to disable lockout).

Create another DWORD value or modify the existing value called "ResetTime (mins)" and set it to the time in minutes that an account should remained locked-out. The default is 2,880 minutes (two days).

Restart Windows or the Remote Access services for the change to take effect.

System Key: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess\
Parameters\AccountLockout]
Value Name: MaxDenials, ResetTime (mins)
Data Type: REG_DWORD (DWORD Value)

 

 

22) Configuring the Registry Size Limit (Windows NT/2000/XP)
The Registry Size Limit, or RSL, controls the total amount of space the may be consumed in paged pool memory and disk space by registry data. The RSL is a kind of "global quota" for registry space.

Create new DWORD value, or modify the existing value, named 'RegistrySizeLimit' and set the value to equal the desired RSL in bytes.

RegistrySizeLimit must have a type of REG_DWORD, and a data length of 4 bytes, or it is ignored. If you set the value RegistrySizeLimit to less than 4 megabytes (MB), it is forced up to 4 MB. If you set it to greater than about 80 percent of the size of paged pool, it is set down to 80 percent of the size of paged pool (it is assumed that paged pool is always more than 5 MB). If you set it to 0xffffffff the maximum size allowable (or 80 percent of paged pool, up to 102 MB) is set.

Shutdown and restart Windows for the change to take effect.

System Key: [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control]
Value Name: RegistrySizeLimit
Data Type: REG_DWORD (DWORD Value)
Value Data: (0xffffffff = maximum)

 

 

23) Control the Number of TCP/IP Connection Attempts (Windows 95/98/Me)
This setting controls the number of TCP/IP connection attempts (SYN packets) to be transmitted before timing out.

Create a new string value named "MaxConnectRetries" and set it to the number or retires, the default is 3.

Restart Windows for the change to take effect.

System Key: [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VxD\MSTCP]
Value Name: MaxConnectRetries
Data Type: REG_SZ (String Value)

 

 

24) Control the WINS Refresh Period (Windows 95/98/Me)
This setting control the initial WINS refresh timeout value.

Create a new string value (or DWORD value for Windows 95) called "InitialRefreshT.O." and set it to equal the timeout in milliseconds. The minimum and default timeout is 960,000 milliseconds (approx 16 minutes) and the maximum is 4,294,967,295 milliseconds (approx 50 days).

Restart Windows for the change to take effect.

System Key: [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VxD\MSTCP]
Value Name: InitialRefreshT.O.
Data Type: REG_DWORD (DWORD Value)
Value Data: Time in milliseconds (Default =960,000)

 

 

25) Change Your MAC Address (Windows 2k/xp)

This setting will change the MAC address of the NIC card.

Go to “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002BE10318}.  Double click on it to expand the tree. You should see it starts with 0000, then 0001, 0002, 0003 and so on.

Now go through each subkey that starts with 0000.  Click on 0000, check DriverDesc keyword on the right to see if that's the NIC you want to change the MAC address.  The DriveDesc should match the Description of the NIC that to be chaged Example : DriveDesc REG_SZ D-Link DFE-520TX PCI Fast Ethernet Adapter. Now create REG_SZ with value name “NetworkAddress” .In the value data give the new MAC address .

System Key: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002BE10318}]
Value Name: NetworkAddress
Data Type: REG_SZ (String Value)
Value Data: Give any 12 digit data, Example: 000FEA9AF16C

 

 

26) Customize the Windows Logon and Security Dialog Title (Windows NT/2000/XP) Popular
This setting allows you to add additional text to the title of the standard Windows Logon and Windows Security dialog boxes.

Create a new String value, or modify the existing value, called "Welcome" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

System Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
Value Name: Welcome
Data Type: REG_SZ (String Value)
Value Data: Text to display

 

 

27) Delay Occurs When Unlocking Workstation (Windows NT/2000)
Sometimes a noticeable delay occurs when the logged on user or an administrator attempts to unlock a workstation. This because when you unlock the workstation Windows will update the domain list if the cached list's age exceeds two minutes (by default). This age limit can be modified.

Create a new DWORD value, or modify the existing value, named "DcacheMinInterval" and set it to equal the new cache time-out in seconds (decimal).

Restart Windows for the change to take effect.

System Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
Value Name: DcacheMinInterval
Data Type: REG_DWORD (DWORD Value)
Value Data: 120-86400 (decimal) (expressed in seconds)

 

 

28) Deny Access to the Display Settings (All Windows) Popular
This option disables the display settings control panel icon, and stops users from accessing any display settings.

Create a new DWORD value, or modify the existing value, called "NoDispCPL" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
Value Name: NoDispCPL
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disabled, 1 = enabled)

 

 

29) DirectDraw and Direct3D Settings (Windows 98/Me/2000/XP) Popular
These DirectX settings allow you to change some of the DirectDraw and Direct3D video acceleration parameters.

Create a new DWORD value for each optional item from the list below and set it to "1" to enable the setting or "0" to disable it.

Open the [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Direct3D] key and change the value of DisableDP2 to "1" to disable Direct3D, or "0" to enable it.

Open the [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Direct3D\Drivers] key and change the value of SoftwareOnly to "1" to use software emulation or "0" to disable it.

Restart Windows for the change to take effect.

System Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw]
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 or 1)

 

 

30) Disable Ability to Skip Startup Programs (Windows NT/2000/XP)
Normally if you hold the Shift key while Windows is loading you can prevent the Startup applications from being launched. This setting disables the ability to by-pass these programs.

 

Create a new DWORD value, or modify the existing value, called "IgnoreShiftOveride" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
Value Name: IgnoreShiftOveride
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = default, 1 = ignore shift)

 

 

31) Disable Account Changes in Outlook Express (All Windows)
This setting disables the ability for users to create or modify any mail, news or directory accounts in Outlook Express.

Create new DWORD value called "No Modify Accts" and set it to "1" to enable the restriction or "0" to allow users to modify accounts.

Restart Outlook Express for the change to take effect.

System Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Outlook Express]
Value Name: No Modify Accts
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = default, 1 = enable restriction)

 

 

32) Disable Active Desktop (All Windows) Popular
This tweak will disable the use of the Active Desktop feature.

Create a new DWORD value named "NoActiveDesktop", and set the new value to equal "1" to enable the restriction or "0" to disable the restriction.

This restriction can be used either on a user by user basis by adding it to HKEY_CURRENT_USER or on a computer wide basis by adding it to HKEY_LOCAL_MACHINE.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: NoActiveDesktop
Data Type: REG_DWORD (DWORD Value)

 

 

33) Disable CD Burning (Windows XP) Popular
This restriction is used to disable the use of the inbuilt CD recording functions of Windows.

Create a new DWORD value, or modify the existing value, called "NoCDBurning" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: NoCDBurning
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = Allow CDR, 1 = Disable CDR)

 

 

34) Disable Changes to Task Properties (Windows 2000/Me/XP)
This setting restricts users from changing the properties of an existing item in Task Scheduler

Create a new DWORD value, or modify the existing value, called "Property Pages" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

Note: This setting only applies to existing tasks, users may still specify advanced properties on new tasks.

User Key: [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Task Scheduler5.0]
System Key: [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Task Scheduler5.0]
Value Name: Property Pages
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = default, 1 = enable restriction)

 

 

35) Disable Command Prompt and Batch Files (Windows 2000/XP)
This restriction allows you to selectively disable the Command Prompt (CMD) and the ability to execute DOS batch files.

Create or modify the DWORD value "DisableCMD" and set it to a number from the list below.

The change should take effect immediately

User Key: [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System]
Value Name: DisableCMD
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = default, 1 = disabled, 2 = disabled but allow batch)

 

 

36) Disable Control Panel (Windows 2000/Me/XP) Popular
This setting allows you to restrict user access to the Control Panel options and settings.

Create a new DWORD value, or modify the existing value called 'NoControlPanel' set the value to equal '1' to enable the restriction.

Exit your registry, you may need to restart for the changes to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: NoControlPanel
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disable restriction, 1 = enable restriction)

 

 

37) Disable Dial-In Access (Windows 95/98/Me)
It's possible for users to setup a modem on a Windows machine, and by using Dial-up Networking allow callers to connect to the internal network. Especially in a corporate environment this can cause a major security risk.

Create a new DWORD value, or modify the existing value, called "NoDialIn" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Network]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Network]
Value Name: NoDialIn
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = dial-in enabled, 1 = dial-in disabled)

 

 

38)Disable Document Editing Time Tracking (All Windows)
Whenever you open a Office document the time open is tracked and added to the total "Edit Time". This tweak disables that tracking.

Create a new DWORD value, or modify the existing value, called "NoTrack" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Common\General]
Value Name: NoTrack
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = default, 1 = disable tracking)

 

 

39) Disable File and Printer Sharing (Windows 95/98/Me)
When file and printer sharing is installed it allows users to make services available to other users on a network, this functionality can be disabled by changing this setting.

Create two new DWORD values named "NoFileSharing" and "NoPrintSharing" and set the values to either '1' for sharing disabled or '0' for sharing enabled. Both settings do not have to be the same, it is possible to have one disabled and the other enabled.

Restart Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Network]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Network]
Value Name: NoFileSharing, NoPrintSharing
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = file sharing, 1 = disabled)

 

 

40) Disable File Download in Internet Explorer (All Windows)
This setting allows you to restrict the ability to download files using Internet Explorer.

Create a new DWORD value, or modify the existing value, called "1803" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Internet Settings\Zones\3]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\
Internet Settings\Zones\3]
Value Name: 1803
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = downloads enabled, 3 = downloads disabled)

 

 

41) Disable Folder Options Menu (All Windows) Popular
This tweak allows you to hide the Folder Options function from the folder Tools menu. Allowing you to restrict access to numerous advanced folder features.

Create a new DWORD value, or modify the existing value named "NoFolderOptions" and set it to equal "1" to hide the options or "0" to show the options.

Log-off or restart Windows for the changes to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: NoFolderOptions
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = show options, 1 = hide options)

 

 

42) Disable Function Keys During the Boot Sequence (Windows 95/98/Me)
By default Windows 9x enables the function keys on boot, these allow you to control the boot process. For example pressing F5 while the "Starting Windows 95..." message is displayed will boot Windows in Safe Mode.

Change the attributes for MSDOS.SYS so it is not 'Read Only', MSDOS.SYS is found in the root directory of your C:\ drive. Open the file using Notepad or another text editor (not Microsoft Word or any word processor).

Change the value of 'BootKeys=' to 'BootKeys=1' for enabled or 'BootKeys=0' for disabled.

Changes will take place on the next reboot.

Value Data: BootKeys=1 (default) or BootKeys=0 (disabled)

 

 

43) Disable Group Policy Objects (Windows 2000/XP)
This setting is used to disable the use of group policy objects on the local computer.

Create a new DWORD value, or modify the existing value, called "DisableGPO" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

System Key: [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System]
Value Name: DisableGPO
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = default, 1 = disable group policy)

 

 

44) Disable Internet Access (All Windows)
By using this tweak you are able to restrict access to the Internet when using Internet Explorer and other Microsoft compatible products such as Office.

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]

Change the value of "ProxyEnable" and set it to "1". Change the value of "ProxyServer" and set it to an IP address and port that is invalid on your network such as "10.0.0.1:5555" (i.e. "IP:Port").

By changing these settings Internet access will be disabled for any applications that rely of the Microsoft proxy server information such as Internet Explorer, Microsoft Office, Opera browser.

To stop users from modifying the proxy settings add these restrictions to disable changes to the Internet configuration.

Find or create the key below:

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel]

Create two DWORD values named "Connection Settings" and "Connwiz Admin Lock" and set them both to "1".

To remove the restriction, set the proxy settings back to their original values and delete the policy values.

Note: The change will take effect immediately for any new browser windows, existing Internet Explorer sessions will not be affected until the browser is closed and reopened.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Internet Settings]
Value Name: ProxyEnable, ProxyServer

 

 

45) Disable Menu Bars and the Start Button (Windows 95/98/Me/2000/XP) Popular
This tweak can be used to disable the menu bar in standard Windows applications and the Start Button.

Rename the key by placing a dash "-" in front of the GUID (i.e. {-5b4dae26-b807-11d0-9815-00c04fd91972}).

Restart Windows for the change to take effect.

Note: This tweak may cause a problem with the taskbar appearance when Internet Explorer 5.0 or greater is installed. If you experience a problem please reverse the tweak to restore the original setting.

System Key: [HKEY_CLASSES_ROOT\CLSID\{5b4dae26-b807-11d0-9815-00c04fd91972}]

 

 

46) Disable Multi-User Editing in Microsoft Word (All Windows)
Multi-user editing is a new feature in Word 2002 and Office XP which allows you to open a document that is locked for editing by another user, edit a local copy of the document, and then merge those changes into the original document.

Create a new DWORD value, or modify the existing value, called "NoPromptToForkDocuments" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Office\10.0\Word\Options]
Value Name: NoPromptToForkDocuments
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = default, 1 = disable multi-user editing)

 

 

47) Disable Network Control Panel (Windows 95/98/Me)
Enabling this option disables access to the Network Control Panel icon.

Create a new DWORD value, or modify the existing value, called "NoNetSetup" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Network]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Network]
Value Name: NoNetSetup

 

48) Disable Password Caching (All Windows) Popular
Normally Windows caches a copy of the users password on the local system to allow for additional automation, this leads to a possible security threat on some systems. Disabling caching means the users passwords are not cached locally. This setting also removes the second Windows password screen and also remove the possibility of networks passwords to get out of sync.

Create a new DWORD value, or modify the existing value, called "DisablePwdCaching" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Network]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Network]
Value Name: DisablePwdCaching
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disabled, 1=enabled)

 

 

49) Disable Recent Documents History (All Windows) Popular
Normally when you open or access a document or file it is added to the list of recent documents on the Start Menu. This tweak will stop files from being added to the list.

Create a new DWORD value, or modify the existing value called 'NoRecentDocsHistory' set the value to equal '1' to enable the restriction.

Exit your registry, you may need to restart for the changes to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: NoRecentDocsHistory
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disable restriction, 1 = enable restriction)

 

 

50) Disable Registry Editing Tools (All Windows) Popular
This restriction disables the ability to interactively run the standard Microsoft registry editing tools such as REGEDIT and REGEDT32.

Warning: Be careful with this setting because once you enter this key into the registry you will not be able to use Regedit to undo the change. Consider wisely before using this modification so that you do not lock yourself out of the registry.

Open your registry and find the key below.

Create a new DWORD value named 'DisableRegistryTools' and set the value to '1' to disable registry editing functions. This can also be enabled on a user-by-user basis by putting the same value in the [HKEY_CURRENT_USER] hive.

Restart Windows for the change to take effect.

If you have inadvertently locked yourself out of your registry you can use usually use WinGuides Tweak Manager to unlock it. Please don't abuse this by trying to circumvent system administrator policies.

Note: This setting will disable all standard Microsoft registry editing tools, but not WinGuides Tweak Manager.

User Key: [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\
System]
Value Name: DisableRegistryTools
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = allow regedit, 1 = disable regedit)

 

 

51) Disable Save Password Option in Dial-Up Networking (Windows NT/2000)
When you dial a phonebook entry in Dial-Up Networking (DUN), you can use the 'Save Password' option so that your DUN password is cached and you will not need to enter it on successive dial attempts. This key disables that option.

Create a new DWORD value, or modify the existing value, called "DisableSavePassword" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

System Key: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\Parameters]
Value Name: DisableSavePassword
Data Type: REG_DWORD (DWORD Value)
Value Data: (0=disable, 1=enable)

 

 

52) Disable ScanDisk After Improper Shutdown (Windows Me)
Normally if a system is shutdown improperly scandisk will run on the next reboot to ensure the contents of the hard disk are valid. This setting stops scandisk from running automatically when restarting.

Create a new Binary value, or modify the existing value, called "DisableScandiskOnBoot" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

System Key: [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem]
Value Name: DisableScandiskOnBoot
Data Type: REG_BINARY (Binary Value)
Value Data: 01 = disable, 00 = enable

 

 

53) Restrict Access to System Restore Settings
Create a new DWORD value called "DisableConfig" and set it to "1" to disable System Restore Settings link in the System Restore interface and the Control Panel > System > System Restore page.

Changes take effect immediately.

Note: These settings will not stop Windows from making automatic System Checkpoints, but will disable access to restore them.

System Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]
Value Name: DisableConfig, DisableSR
Data Type: REG_DWORD (DWORD Value)
Value Data: (1 = enable restriction)

 

 

54) Disable Task Manager (Windows NT/2000/XP) Popular
This setting controls the ability for users to start Task Manager and view processes, running applications and make changes to the priority or state of the individual processes.

Create a new DWORD valued named "DisableTaskMgr" and set it to "1" to disable Task Manager.

You may need to log off for the changes to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
Value Name: DisableTaskMgr
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = default, 1 = disable Task Manager)

 

 

55) Disable the Ability to Right Click on the Desktop (All Windows) Popular
This tweak removes the context menu that would normally appear when the user right clicks on the desktop or in the Explorer right results pane.

Create a new DWORD value, or modify the existing value, called "NoViewContextMenu" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: NoViewContextMenu
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disabled, 1 = enabled)

 

 

56) Disable the Change Password Button (Windows NT/2000)
This setting disables the 'Change Password' button on the Windows Security dialog box. Enabling this setting stops casual users from being able to change the password.

Create a new DWORD value, or modify the existing value, called "DisableChangePassword" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

Note: This functionality requires Windows NT Service Pack 4 or higher or Windows 2000.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
Value Name: DisableChangePassword
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disabled, 1 = enabled)

 

 

57) Disable the MS-DOS Command Prompt (Windows 95/98/Me) Popular
This setting allows you to disable the use of the MS-DOS command prompt in Windows.

Create a new DWORD value, or modify the existing value, named "Disabled" and set it to "1" to disable the command prompt or to re-enable it again later change the value to "0".

Restart Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
WinOldApp]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
WinOldApp]
Value Name: Disabled
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disable, 1 = enable)

 

 

58) Disable the Shut Down Command (All Windows) Popular
This option allows you to stop users from being able to shutdown the computer by disabling the shut down command.

Create a new DWORD value, or modify the existing value, called "NoClose" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: NoClose
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = shutdown enabled, 1 = shutdown disabled)

 

 

59) Disable the Windows Key (Windows NT/2000/XP) Popular
This tweak disables the Windows key that is found between the Ctrl and Alt keys on a Windows enhanced keyboard.

Create a new Binary value, or modify the existing value, called "Scancode Map" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

System Key: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Keyboard Layout]
Value Name: Scancode Map
Data Type: REG_BINARY (Binary Value)
Value Data: 00 00 00 00 00 00 00 00 03 00 00 00 00 00 5B E0 00 00 5C E0 00 00 00 00

 

 

60) Disable Windows Installer (All Windows)
This restriction allows you to prevent users from adding and removing software applications with Windows Installer.

Create a new DWORD value, or modify the existing value, called "DisableMSI" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

System Key: [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer]
Value Name: DisableMSI
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = default, 1 = admin only, 2 = disabled)

 

 

61) Empty Temporary Internet Files on Exit (All Windows) Popular
This setting controls whether Internet Explorer should delete all of the temporary Internet files stored during the session when the browser is closed.

Create a new DWORD value, or modify the existing value, called "Persistent" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Internet Settings\Cache]
System Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Internet Settings\Cache]
Value Name: Persistent
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = empty, 1 = do not empty)

 

 

62) Enable DVD Features in Media Player (All Windows) Popular
This setting allows you to use Microsoft Media Player to Play and Open DVDs.

Create a new string value called "EnableDVDUI" and set it to "yes" to enable DVD functionality.

Restart Media Player for the change to take effect.

Note: You must have a Windows compatible DVD drive installed in your computer for these features to work.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Player\Settings]
Value Name: EnableDVDUI
Data Type: REG_SZ (String Value)
Value Data: Yes or No

 

 

63) Enable Quick Reboot (Windows NT/2000)
This setting allows you to use the quick reboot function to restart Windows immediately without shutting down. When enabled, press Shift + Ctrl + Alt + Delete for a quick reboot.

Create a new String value, or modify the existing value, called "EnableQuickReboot" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

Note: This method of rebooting should only be used when the system has stopped responding as some shutdown and clean-up functions will not be run.

System Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
Value Name: EnableQuickReboot
Data Type: REG_SZ (String Value)
Value Data: (0 = disabled, 1 = enabled)

 

 

64) Enable Remote Assistance (Windows XP)
The Remote Assistance feature is a convenient way for an administrator to remotely connect to a computer and with permission view the screen, move the mouse, use the keyboard and chat online.

Open you registry and find the key below.

To Enable Remote Assitance
Create or modify the following DWORD values:

· AllowTSConnections set it to "1"

· fDenyTSConnections set it to "0"

· fAllowToGetHelp set it to "1"

To Disable Remote Assitance
Create or modify the following DWORD values:

· AllowTSConnections set it to "0"

· fDenyTSConnections set it to "1"

· fAllowToGetHelp set it to "0"

Restart Windows for the changes to take effect.

System Key: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server]
Value Name: AllowTSConnections, fDenyTSConnections, fAllowToGetHelp
Data Type: REG_DWORD (DWORD Value)

 

 

65) Hide All Items on the Desktop (All Windows) Popular
Enabling this options hides all the items and programs on the Windows desktop.

Create a new DWORD value, or modify the existing value, called "NoDesktop" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: NoDesktop
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disable restriction, 1 = enabled restriction)

 

 

66) Hide Computer Management Option (Windows 2000/XP)
This setting allows you to remove the "Manage" option from the My Computer context menu. The Computer Management program is used to configure the system.

Create a new DWORD value, or modify the existing value, called "NoManageMyComputerVerb" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

Note: The computer management application can still be used by running "compmgmt.msc".

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: NoManageMyComputerVerb
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = default, 1 = remove "Manage")

 

 

67) Hide Control Panel Applets (Windows NT/2000/XP) Popular
This tweak allows you to show or hide specific applets found in the Windows Control Panel.

For each applet you want to hide create a new string value and call it the filename of the applet to be hidden (for example 'fax.cpl'). Set the value to equal 'No' to hide the applet or delete tha value to display it.

Common Control Panel Applets:

Exit the registry and either logout or restart Windows.

User Key: [HKEY_CURRENT_USER\Control Panel\don't load]
Data Type: REG_SZ (String Value)
Value Data: Yes or No

 

 

68) Hide Drives in My Computer (All Windows) Popular
This setting allows you to control which drives are visible in My Computer and Explorer. It is possible to hide all drives or just selected ones.

 

The "NoDrives" value uses a 32-bit word to define local and network drive visibility for each logical drive in the computer. The lower 26 bits of the 32-bit word correspond to drive letters A through Z. Drives are visible when set to 0 and hidden when set to 1.

If your not happy working in Hex, add these decimal numbers to hide the drive(s):

A: 1, B: 2, C: 4, D: 8, E: 16, F: 32, G: 64, H: 128, I: 256, J: 512, K: 1024, L: 2048, M: 4096, N: 8192, O: 16384, P: 32768, Q: 65536, R: 131072, S: 262144, T: 524288, U: 1048576, V: 2097152, W: 4194304, X: 8388608, Y: 16777216, Z: 33554432, ALL: 67108863

For example to hide drive A and drive D, you would add 1 (A) + 8 (D) which means the value should be set to "9".

To disable all the drives set the value to "67108863".

Restart Windows for the change to take effect.

Note: These drives will still appear in File Manager, to remove File Manager, delete or rename winfile.exe.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: NoDrives
Data Type: REG_DWORD (DWORD Value)

 

 

69) Hide Entire Network in Network Neighborhood (All Windows)
Entire Network is an option under Network Neighborhood that allows users to see all the Workgroups and Domains on the network. Entire Network can be disabled, so users are confined to their own Workgroup or Domain.

Create a new DWORD value, or modify the existing value, called "NoEntireNetwork" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Network]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Network]
Value Name: NoEntireNetwork
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disabled, 1 = enabled)

 

 

70) Hide the Change Passwords Page (Windows 95/98/Me)
When this setting is enabled, users are no longer able to access the Change Passwords page.

Create a new DWORD value, or modify the existing value, called "NoPwdPage" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
Value Name: NoPwdPage
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disabled, 1 = enabled)

 

 

71) Hide the Device Manager Page (Windows 95/98/Me)
This setting controls whether the Device Manager is visible, under System in the Control Panel.

Create a new DWORD value, or modify the existing value, called "NoDevMgrPage" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
Value Name: NoDevMgrPage
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disabled, 1 = enabled)

 

 

72) Hide the Remote Administration Page (Windows 95/98/Me)
Enabling this function stops users from being able to change the remote administration settings for the computer.

Create a new DWORD value, or modify the existing value, called "NoAdminPage" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
Value Name: NoAdminPage
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disabled, 1 = enabled)

 

 

73) Hide the Run as... option from the context menu (Windows XP) New
This setting allows you to restrict the ability for users to have access to the Run as... service when right clicking on executables files and shortcuts. This tweak also disables the Shift key override feature.

Create a new DWORD value, or modify the existing value, called "HideRunAsVerb" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: HideRunAsVerb
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = enabled, 1 = disabled)

 

 

74) Hide the Search Button on the Explorer Toolbar (Windows 2000/XP)
This restriction allows you to remove the search button from the "Standard Buttons" toolbar in Windows Explorer.

Create a new DWORD value, or modify the existing value, called "NoShellSearchButton" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: NoShellSearchButton
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = display, 1 = remove)

 

 

75) Internet Explorer Control Panel Restrictions (Part 1) (All Windows) Popular
These tweaks allows you to control access to the Internet Explorer setup and control panel functions (found under Tools -> Internet Options).

Create a new DWORD value based on the options below, and set the new value to equal "1" to enable the restriction or "0" to disable the restriction.

Restart Internet Explorer for the changes to take effect.

User Key: [HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\
Control Panel]
System Key: [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\
Control Panel]
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disable restriction, 1 = enable restriction)

 

 

76) Internet Explorer Control Panel Restrictions (Part 2) (All Windows) Popular
The features available within the Internet Explorer control panel (Tools -> Internet Options) can be individually managed and disabled using this tweak.

Create a new DWORD value for each restriction from the list below, set the value to equal '1' to enable the restriction or '0' to disable it.

Restart Internet Explorer for the changes to take effect.

User Key: [HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\
Control Panel]
System Key: [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\
Control Panel]
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disable restriction, 1 = enable restriction)

 

 

77) Internet Explorer Restrictions (All Windows) Popular
These settings and restrictions allow you to selectively control a range of features available in Microsoft Internet Explorer 5 and 6.

Create a new DWORD value based on the options below, and set the new value to "1" to enable the restriction or "0" to disable the restriction.

Restart Internet Explorer for the restrictions to take effect.

User Key: [HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\
Restrictions]
System Key: [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\
Restrictions]
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disable restriction, 1 = enable restriction)

 

 

78) Legal Notice Dialog Box Before Logon (All Windows) Popular
Use these fields to create a dialog box that will be presented to any user before logging onto the system. This is useful where you are required by law to warn people that it is illegal to attempt to logon without being an authorized user.

Windows 95, 98 and Me:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Winlogon

Windows NT, 2000 and XP:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Modify the value named 'LegalNoticeCaption' to represent the caption on the dialog box (e.g. 'WARNING!'). If this value doesn't already exist create it.

Modify the value named 'LegalNoticeText' to represent the body of the dialog box (e.g. 'Do Not Attempt to Logon to this system unless you are an authorized user!')

Exit your registry and restart Windows, and the next time you boot up you should be presented with the dialog box before logging on.

Note: This value is limited to 256 characters, you need to install the latest Windows NT service pack to allow up to 1024 characters.

Value Name: LegalNoticeCaption, LegalNoticeText
Data Type: REG_SZ (String Value)

 

 

79) Lock the Taskbar (Windows XP)
This restriction is used to force the locking of the taskbar and restrict users from making any changes to its position.

Create a new DWORD value, or modify the existing value, called "LockTaskbar" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: LockTaskbar
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = Unlocked, 1 = Locked)

 

 

80) Modify the Internet Auto-Dial Settings (All Windows)
Windows has the option to automatically dial your Internet Service Provider (ISP) to establish an Internet connection. This option can be controlled using this tweak.

Create a new DWORD value (or Binary on Windows 95) named "EnableAutodial", and set the new value to equal "1" to enable autodial or "0" to disable it.

Restart Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Internet Settings]
;Value Name: EnableAutodial
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disabled, 1 = enabled)

 

 

81) Modifying the Autocheck Time-out Value (Windows NT/2000/XP)
When Windows is not shutdown correctly it will perform an AutoCheck using CHKDSK on the next restart. This setting controls the time delay before running Autochk or whether it is run at all.

Create a new DWORD value, or modify the existing value, called "AutoChkTimeOut" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

System Key: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager]
Value Name: AutoChkTimeOut
Data Type: REG_DWORD (DWORD Value)
Value Data: Time in Seconds or 0 to disable (default = 10)

 

 

82) MSN Instant Messenger Restrictions (All Windows) Popular
These restrictions are used to disable various features of the Microsoft MSN Instant Messenger client.

For each restriction from the list below create a new DWORD value and set the value to "1" to enable the restriction.

Restart MSN Messenger for the changes to take effect.

User Key: [HKEY_CURRENT_USER\Software\Policies\Microsoft\Messenger\Client]
System Key: [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Messenger\Client]
Data Type: REG_DWORD (DWORD Value)
Value Data: (1 = enable restriction, 0 = default)

 

 

 

83) Network Connection Restrictions (Windows 2000/XP)
These restrictions control access to the features and properties of LAN, RAS and other network connections.

Create a new DWORD value for each required restriction from the list below. Set the value to "0" to enable the restriction or delete the value to disable it.

Restart Windows for the changes to take effect.

 

User Key: [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\
Network Connections]
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = enable restriction)

 

 

 

 

 

 

84) Optimize Broadband Cable Modem and DSL Connections (Windows 2000/XP) Popular
These settings allow you to boost the speed of your broadband Internet connection when using a Cable Modem or DSL Router with Windows 2000 and Windows XP.

Create the following DWORD values, as most of these values will not already exist you will need to create them by clicking on 'Edit -> New -> DWORD Value' and then set the value as shown below.

DefaultTTL = "80" hex (or 128 decimal)
Specifies the default time to live (TTL) for TCP/IP packets. The default is 32.

EnablePMTUBHDetect = "0"
Specifies whether the stack will attempt to detect Maximum Transmission Unit (MTU) routers that do not send back ICMP fragmentation-needed messages. The default is 0.

EnablePMTUDiscovery = "1"
Specifies whether the TCP/IP stack will attempt to perform path MTU discovery as specified in RFC 1191. The default is 1.

GlobalMaxTcpWindowSize = "7FFF" hex (or 32767 decimal)
Specifies the system maximum receive window size advertised by the TCP/IP stack.

TcpMaxDupAcks = "2"
Determines the number of duplicate ACKs that must be received for the same sequence number of sent data before "fast retransmit" is triggered.

SackOpts = "1"
Enables support for selective acknowledgements as documented by Request for Comment (RFC) 2018. Default is 0.

Tcp1323Opts = "1"
Controls RFC 1323 time stamps and window scaling options. Possible values are: "0" = disable RFC 1323 options, "1" = window scale enabled only, "2" = time stamps enabled only and "3" = both options enabled.

TcpWindowSize = "7FFF" hex (or 32767 decimal)
Specifies the receive window size advertised by the TCP/IP stack. If you have a latent network you can try increasing the value to 93440, 186880, or 372300.

Exit your registry and restart Windows for the changes to take effect.

Note: These optimized settings may not work with all ISP configurations, in which case the parameters should be returned to the default values.

System Key: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]
Data Type: REG_DWORD (DWORD Value)

 

 

 

 

 

 

 

85) Prevent Access to the Contents of Selected Drives (Windows 2000/Me/XP) Popular
This restriction prevents users from using My Computer or Explorer to access the content of selected drives. Also, they cannot use Run, Map Network Drive, or the Dir command to view the directories on these drives.

 

Open your registry and find or create the key below.

The "NoViewOnDrive" value uses a 32-bit bitmask to define local and network drive access for each logical drive in the computer. The lower 26 bits of the 32-bit word correspond to drive letters A through Z. Drives are visible when set to 0 and hidden when set to 1.

If your not happy working in Hex, add these decimal numbers to hide the drive(s):

A: 1, B: 2, C: 4, D: 8, E: 16, F: 32, G: 64, H: 128, I: 256, J: 512, K: 1024, L: 2048, M: 4096, N: 8192, O: 16384, P: 32768, Q: 65536, R: 131072, S: 262144, T: 524288, U: 1048576, V: 2097152, W: 4194304, X: 8388608, Y: 16777216, Z: 33554432, ALL: 67108863

For example to hide drive A and drive D, you would add 1 (A) + 8 (D) which means the value should be set to "9".

To disable all the drives set the value to "67108863".

Restart Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: NoViewOnDrive
Data Type: REG_DWORD (DWORD Value)
Value Data: 32-bit bitmask

 

 

 

 

 

 

86) Remote Administration of Windows Installer (Windows 2000/XP)
This setting allows administrators using Windows Terminal Services to remotely install and configure software using Windows Installer.

Create a new DWORD value, or modify the existing value, called "EnableAdminTSRemote" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

Note: This setting affects system administrators only. Other users cannot install programs remotely.

System Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer]
Value Name: EnableAdminTSRemote
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disable, 1 = enabled)

 

 

 

 

 

 

87) Remove "All Programs" Button from the Start Menu (Windows XP)
This restriction is used to remove the "All Programs" button which displays a list of all the installed applications.

Create a new DWORD value, or modify the existing value, called "NoStartMenuMorePrograms" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

Note: This setting only applies to the Windows XP Start Menu, not the Classic Start Menu.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: NoStartMenuMorePrograms
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = default, 1 = disable button)

 

 

 

 

 

 

88) Remove Frequent Programs List from the Start Menu (Windows XP)
This restriction removes the list of frequently used programs from the Start menu.

Create a new DWORD value, or modify the existing value, called "NoStartMenuMFUprogramsList" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

Note: This setting only applies to the Windows XP Start Menu, not the Classic Start Menu.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: NoStartMenuMFUprogramsList
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = default, 1 = enable restriction)

 

 

 

 

 

 

89) Remove Log Off from the Start Menu (All Windows)
This tweak allows you to remove the Log Off [Username] option from the Start menu.

Create a new DWORD value, or modify the existing value, called "NoLogOff" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

Note: In older version of Windows this value may be REG_BINARY.

Note: This setting relies in Internet Explorer 4.0 or greater being installed.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: NoLogOff
Data Type: REG_DWORD (DWORD Value)
Value Data: (1 = no log off, 0 = show log off)

 

 

 

 

 

90) Remove My Computer from the Desktop and Start Menu (Windows 2000/Me/XP) Popular
This restriction removes My Computer from the desktop and Start menu.

 

Create a new DWORD value, or modify the existing value, called "{20D04FE0-3AEA-1069-A2D8-08002B30309D}" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
NonEnum]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
NonEnum]
Value Name: {20D04FE0-3AEA-1069-A2D8-08002B30309D}
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = show, 1 = remove)

 

 

 

 

 

91) Remove Properties from My Computer (Windows XP)
This restriction remove the properties option from My Computer and hides the "System Properties" screen.

Create a new DWORD value, or modify the existing value, called "NoPropertiesMyComputer" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: NoPropertiesMyComputer
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = Properties, 1 = No Properties)

 

 

 

 

 

92) Remove Recent Documents from the Start Menu (All Windows) Popular
This setting can be used to remove the recent Documents folder from the Start Menu.

Create a new DWORD value, or modify the existing value, called 'NoRecentDocsMenu' set the value to equal '1' to enable the restriction.

Exit your registry, you may need to restart for the changes to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: NoRecentDocsMenu
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = display, 1 = remove)

 

 

 

 

 

93) Rename or Delete Special Folders (All Windows) Popular
This setting allows you to rename and delete special folders (such as the Recycle Bin) as if it was a normal folder by right-clicking the icon.

 

Open your registry and find the key below, where GUID is the identifier for the special folder.

Description

Globally Unique Identifier (GUID)

Administrative Tools

{D20EA4E1-3957-11d2-A40B-0C5020524153}

Briefcase

{85BBD92O-42A0-1O69-A2E4-08002B30309D}

Control Panel

{21EC2O2O-3AEA-1O69-A2DD-08002b30309d}

Fonts

{D20EA4E1-3957-11d2-A40B-0C5020524152}

History

{FF393560-C2A7-11CF-BFF4-444553540000}

Inbox

{00020D75-0000-0000-C000-000000000046}

Microsoft Network

{00028B00-0000-0000-C000-000000000046}

My Computer

{20D04FE0-3AEA-1069-A2D8-08002B30309D}

My Documents

{450D8FBA-AD25-11D0-98A8-0800361B1103}

My Network Places

{208D2C60-3AEA-1069-A2D7-08002B30309D}

Network Computers

{1f4de370-d627-11d1-ba4f-00a0c91eedba}

Network Connections

{7007ACC7-3202-11D1-AAD2-00805FC1270E}

Printers and Faxes

{2227A280-3AEA-1069-A2DE-08002B30309D}

Programs Folder

{7be9d83c-a729-4d97-b5a7-1b7313c39e0a}

Recycle Bin

{645FF040-5081-101B-9F08-00AA002F954E}

Scanners and Cameras

{E211B736-43FD-11D1-9EFB-0000F8757FCD}

Scheduled Tasks

{D6277990-4C6A-11CF-8D87-00AA0060F5BF}

Start Menu Folder

{48e7caab-b918-4e58-a94d-505519c795dc}

Temporary Internet Files

{7BD29E00-76C1-11CF-9DD0-00A0C9034933}

Web Folders

{BDEADF00-C265-11d0-BCED-00A0C90AB50F}

To change the features shown on the context menu, edit the value of "Attributes" and set it to one of the values below, the default value is "40 01 00 20".

File Features

· 50 01 00 20 - Rename

· 60 01 00 20 - Delete

· 70 01 00 20 - Rename and Delete

Edit Features

· 41 01 00 20 - Copy

· 42 01 00 20 - Cut

· 43 01 00 20 - Copy and Cut

· 44 01 00 20 - Paste

· 45 01 00 20 - Copy and Pase

· 46 01 00 20 - Cut and Copy

· 47 01 00 20 - Cut, Copy and Paste

For example to add the ability to Rename and Delete the Recycle Bin open [HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\ShellFolder] and change the value of "Attributes" to "70 01 00 20".

The changes should take effect immediately.

Note: On Windows XP this tweak changes the File menu not the context menu. Access the features by right-clicking "Explore" -> "File" -> Rename or Delete. Both the Rename and Delete tweaks must be checked together before either tweak will display in Explorer.

System Key: [HKEY_CLASSES_ROOT\CLSID\{GUID}\ShellFolder]
Value Name: Attributes
Data Type: REG_BINARY (Binary Value)
Value Data: (70 01 00 20=rename/delete, 40 01 00 20=default)

 

 

 

 

94) Repair the Registry Editor (Windows 2000/Me/XP)
This tweak allows you to reset the location and parameters of the Registry Editor (REGEDIT) back to the system defaults. This is useful if Regedit is not being displayed correctly.

Make a backup of the key and then delete the values: "FindFlags", "LastKey" and "View".

Restart the Registry Editor.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets\
Regedit]

 

 

 

 

95) Repair the Taskbar (All Windows) Popular
If your taskbar has disappeared from the desktop or becomes hidden when you move your cursor near, it may be due to a corrupt registry key.

Close any open desktop and taskbar applications, then open your registry and find the key below.

Delete the entire "StuckRects" key, or "StuckRects2" for Windows 2000/XP, and reboot.

When Windows restarts the taskbar should be set back to a default working state.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\
StuckRects]

 

 

 

 

 

96) Require Users to Press Ctrl+Alt+Delete Before Logon (Windows 2000/XP)
This setting controls whether users are required to press Ctrl + Alt + Delete as a security precaution before logging into the system.

 

Create a new DWORD value, or modify the existing value, called "DisableCAD" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

Note: Windows XP systems must be configured to use the classic login method for this setting to work.

System Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
Value Name: DisableCAD
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = Require Ctrl+Alt+Delete, 1 = Disable)

 

 

 

 

 

97) Require Validation by Network for Windows Access (Windows 95/98/Me) Popular
By default Windows 9x doesn't require a valid network username and password combination for a user to bypass the logon and gain access to the local machine. This functionality can be changed to require validation by the network before allowing access.

Create a new DWORD value, or modify the existing value called "MustBeValidated" and set it to equal "1" to require successful authentication.

Restart Windows for the change to take effect.

Your machine must be part of a Windows domain for this tweak to work, as the user must be authenticated by the network.

Note: The workstation must be a member of a Windows domain for this setting to be effective.

System Key: [HKEY_LOCAL_MACHINE\Network\Logon]
Value Name: MustBeValidated
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disabled, 1 = enabled)

 

 

 

 

 

98) Reset the Screen Saver Password (Windows 95/98/Me)
If you have misplaced your Windows screen saver password you can reset it by using this tweak.

Delete the value "ScreenSave_Data" to reset the password.

The change should become effective immediately.

User Key: [HKEY_CURRENT_USER\Control Panel\Desktop]
Value Name: ScreenSave_Data
Data Type: REG_BINARY (Binary Value)
Value Data: Encoded Password

 

 

 

 

 

99) Restrict Access to the Passwords Control Panel (Windows 95/98/Me)
This option disables access to the Passwords icon on the control panel, therefore stopping users from changing security related settings.

 

Create a new DWORD value, or modify the existing value, called "NoSecCPL" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
Value Name: NoSecCPL
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disabled, 1 = enabled)

 

 

 

 

 

100) Restrict Author Mode in Management Console (MMC) (Windows 2000/XP)
This restriction stops users from opening the Microsoft Management Console and relevant .mmc console files in author mode.

Create a new DWORD value, or modify the existing value, called "RestrictAuthorMode" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Policies\Microsoft\MMC]
Value Name: RestrictAuthorMode
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = default, 1 = enable restriction)

 

 

 

 

 

101) Restrict Installations from Removable Media (Windows 2000/XP)
This tweak stops users from attempting to install a program (with an .msi extension) from removable media, such as CD-ROMs, floppy disks, and DVDs.

Create a new DWORD value, or modify the existing value, called "DisableMedia" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

Note: This setting applies even when the installation is running in the user's security context.

User Key: [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Installer]
Value Name: DisableMedia
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = default, 1 = enable restriction)

 

 

 

 

 

102) Restrict Users from Running Specific Applications (Windows 2000/Me/XP) Popular
This setting allows you to specify applications and filenames that users are restricted from running.

 

Open your registry and find the key [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion \Policies\Explorer]

Create a new DWORD value and name it "DisallowRun" set the value to "1" to enable application restrictions or "0" to allow all applications to run.

Then create a new sub-key called [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion \Policies\Explorer\DisallowRun] and define the applications the are to be restricted. Creating a new string value for each application, named as consecutive numbers, and setting the value to the filename to be restriced (e.g. "regedit.exe").

Restart Windows for the changes to take effect.

 

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: DisallowRun

 

 

 

 

 

103) Secure Access to CD-ROM Drives (Windows NT/2000/XP)
This setting determines whether data in the CD-ROM drive is accessible to other users.

 

Because the CD-ROM drive is a volume, by default, it is shared as an administrative share on the network. If the value of this entry is 1, the CD-ROM drive is allocated to the user as part of the interactive logon process and, therefore, only the current user can access it. This prevents administrators and remote users (and even the same user at a different workstation) from accessing the drive while the current user is logged on to the computer. The drive is shared again when the current user logs off the computer.

Value Meanings:

· '0' = Compact discs in the CD-ROM drive can be accessed by all administrators in the domain.

· '1' = Only the user logged on locally can access data on the compact discs in the CD-ROM drive.

Note: This value entry satisfies, in part, the C2 security requirement that you must be able to secure removable media.

System Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
Value Name: AllocateCDRoms
Data Type: REG_SZ (String Value)
Value Data: (0 = enabled, 1 = disabled)

 

 

 

 

 

104) Show Hidden Folders and Files (All Windows)
This setting controls whether hidden files and folders are displayed in explorer when browsing the file system.

Create a new DWORD value, or modify the existing value, called "Hidden" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\
Advanced]
Value Name: Hidden
Data Type: REG_DWORD (DWORD Value)
Value Data: (1 = show hidden, 2 = do not show)

 

 

 

 

 

 

105) Show or Hide "Open With" Program Checkbox (All Windows)
This setting allows you to control whether the checkbox to save the "Open With" program is available when an unknown file type is opened.

To disable the check box change the value of "(Default)" to "rundll32.exe shell32.dll,OpenAs_RunDLL %1 %2".

To enable the checkbox change the value to "rundll32.exe shell32.dll,OpenAs_RunDLL %1".

Return to the desktop and press F5 for the change to take effect

 

System Key: [HKEY_CLASSES_ROOT\Unknown\shell\openas\command]
Value Name: (Default)
Data Type: REG_SZ (String Value)

 

 

 

 

 

 

106) Specify Anonymous Remote Registry Access (Windows NT/2000/XP)
This tweak allows you to specify which keys under the HKEY_LOCAL_MACHINE hive that anonymous users are allowed to access remotely. This is useful because some services require remote access to the registry to function correctly.

Create a new Multi-String value, or modify the existing value, called "Machine" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

Note: These keys will bypass general access restrictions but will still be restricted if an explicit access restriction exists for that location.

System Key: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\
winreg\AllowedPaths]
Value Name: Machine
Data Type: REG_MULTI_SZ (Multi-String Value)

 

 

 

 

 

 

107) Specify the Default Internet Explorer Download Directory (All Windows)
This setting is used to specify which directory should be used as the default location to save downloaded files retrieved using Internet Explorer.

Create a new String value, or modify the existing value, called "Download Directory" and set it according to the value data below.

Exit your registry, you may need to restart or log out of Windows for the change to take effect.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer]
Value Name: Download Directory
Data Type: REG_SZ (String Value)
Value Data: Qualified Directory

 

 

 

 

 

108) Windows Netmeeting Policies and Restrictions (All Windows)
These restrictions and policies can be used to disable or restrict access to certain features of Windows Netmeeting.

 

Create a new DWORD value and name it according to the list of values below. Set the value to equal "1" to enable the setting.

Restart Netmeeting for the changes to take effect

 

User Key: [HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Conferencing]
System Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Conferencing]
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disable policy, 1 = enable policy)

 

 

 

 

--------THE END-------