Registry
Tips & Tricks
Important Notes:
Disclaimer: Modifying the
registry can cause serious problems that may require you to reinstall your
operating system. I cannot guarantee that problems resulting from modifications
to the registry can be solved. Use the information provided at your own risk.
Trick Effect: Some tricks take
immediate effect while for some we have to log off and log on and for others we
have to restart the system.
Last but not least
make a backup of your registry before modifying the registry
1) Active
Desktop Restrictions (All Windows) Popular
Features of the Windows Active
Desktop can be selectively controlled by modifying options in the Windows
registry. Following the instructions in this tweak.
Create a new DWORD
value based on the options below, and set the new value to equal "1"
to enable the restriction or "0" to disable the restriction.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
ActiveDesktop]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
ActiveDesktop]
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = disable restriction, 1 = enable restriction)
2) Add a Menu Option
to Move or Copy to a Folder (All Windows)
This tweak allows you to easily
move and copy files and folders by adding two new right-click menu options to
"Move To Folder..." and "Copy To Folder..." Simply
highlight the file, right-click the option and select the destination folder.
To enable the Move
To Folder menu option create a new subkey called "Move To" and
set the (Default) value to "{C2FBB631-2971-11d1-A18C-00C04FD75D13}".
System Key:
[HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\ContextMenuHandlers]
Value Name:
(Default)
Data Type:
REG_SZ (String Value)
NOTE: Changes should take effect
immediately; right click on folder to view the new options.
3) Add Command
Prompt Option to Every Folder (All Windows) Popular
If you still use the DOS prompt
regularly then this setting creates a new right-click menu option to open a command
prompt at the selected directory.
Create a new sub key
called 'Command' under the main key (i.e.
[HKEY_CLASSES_ROOT\Directory\shell\Command]). Change the value of '(Default)'
within the key to equal the text you would like on the right-click menu, for
example 'Command Prompt'.
Create another new
sub-key under the key created above, named 'command' (i.e.
[HKEY_CLASSES_ROOT\...\Command\command]). Change the value of '(Default)'
within this key depending on your operating system to equal either:
Windows 95, 98 or Me
command.com /k cd "%1"
or
Windows NT, 2000 or XP
cmd.exe /k cd %1
Now right-click on a
folder and the new option of 'Command Prompt' should be available.
System Key:
[HKEY_CLASSES_ROOT\Directory\shell]
Value Name:
(Default)
Data Type:
REG_SZ (String Value)
4) Add or
Remove Programs Restrictions (Windows 2000/XP)
These restrictions apply to the Add/Remove Programs feature of Control Panel.
They allow you to entirely or individually disable components.
Create a new DWORD
value for each restriction required according to the table below. Set the value
to equal "1" to enable the restriction or "0" to disable
it.
You may need to
restart Windows for the changes to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Uninstall]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Uninstall]
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = default, 1 = enable restriction)
5)
Automatically Ending Hung Applications (All Windows) Popular
When this tweak is enabled it will force Windows to shutdown immediately ending
all tasks without attempting to safely close any applications that have hung.
Modify the value of
'AutoEndTasks' to equal '1' to automatically end tasks or '0' to prompt for
action.
The default time-out
before ending the task is defined by the value of 'WaitToKillAppTimeout'
located in the same key, this value is in milliseconds (default = 20000 i.e. 20
seconds). You can therefore additionally change this value to speed the process
up.
Restart Windows for
the change to take effect.
User Key:
[HKEY_CURRENT_USER\Control Panel\Desktop]
System Key:
[HKEY_USERS\.DEFAULT\Control Panel\Desktop]
Value Name:
AutoEndTasks
Data Type:
REG_SZ (String Value)
Value Data:
(0 = disabled, 1 = enabled)
6)
Automatically Hide Inactive Tray Icons (Windows XP)
This setting controls whether running tray programs should be hidden
automatically when they are not active.
Create a new DWORD
value, or modify the existing value, called "EnableAutoTray" and set
it according to the value data below.
Exit your registry, you
may need to restart or log out of Windows for the change to take effect
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer]
Value Name:
EnableAutoTray
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = display inactive icons, 1 = hide inactive icons)
7) Binding
Multiple IP Address to a Single Network Card (Windows 95/98/Me)
The Windows 9x GUI does not accept having multiple IP addresses specified for a
single network adapter. This tweak allows you to add additional IP addresses
using the registry.
Within this key will
be two values called "IPAddress" and "IPMask". To add
additional IP addresses add the comma-separated IP and subnet mask values to
both these keys respectively without using spaces.
Exit your registry and
reboot for the changes to take effect.
System Key:
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Class\NetTrans\0000]
Value Name:
IPAddress, IPMask
Data Type:
REG_SZ (String Value)
Value Data:
Comma-separated IP and Subnet Masks
8) Change the
Group Policy Refresh Interval (Windows 2000/XP)
This tweak can be used to set the Group Policy refresh time interval for the
current user or local machine
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System]
System Key:
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System]
Value Name:
GroupPolicyRefreshTime
Data Type:
REG_DWORD (DWORD Value)
Value Data:
Range (in minutes): 0 to 64800
9) Change the
Logon Screen Wallpaper (All Windows) Popular
When you setup a background wallpaper for your desktop, the initial logon screen
wallpaper is not changed and stays as the default Windows appearance. This
tweak allows you to change the default wallpaper.
Modify the value of
'Wallpaper' to equal the path and filename of the bitmap (BMP) file you want to
use as the background (e.g. 'c:\windows\mylogo.bmp').
In the same key, you
can also modify these additional values "Pattern" and
"TileWallpaper" to set the background pattern and Tile mode
respectively.
Restart Windows for
the changes to take effect.
System Key:
[HKEY_USERS\.DEFAULT\Control Panel\Desktop]
Value Name:
Wallpaper, TitleWallpaper
Data Type:
REG_SZ (String Value)
10) Change the
Menu Show Delay
(All Windows) Popular
Windows normally delays menus before they are displayed. For regular users this
delay can become annoying, with this setting you to change the delay time or
remove it altogether.
Create a new string
value, or modify the existing value, named 'MenuShowDelay' and set it to equal
the delay you would like before the menus are shown as a time in milliseconds.
Log off or restart
Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Control Panel\Desktop]
Value Name:
MenuShowDelay
Data Type:
REG_SZ (String Value)
Value Data:
0-999 (milliseconds)
11) Change the
Size of Desktop Icons (All Windows) Popular
Are your icons too small? Or too big? This setting will let you resize them to
suit your desktop preference.
Create a new value
named 'Shell Icon Size' and set the value, or modify the existing value, to
equal the size of your icons in pixels. Smaller values = smaller icons!
User Key:
[HKEY_CURRENT_USER\Control Panel\Desktop\WindowMetrics]
Value Name:
Shell Icon Size
Data Type:
REG_SZ (String Value)
Value Data:
Size in Pixels (Default = 32)
12) Clear
Recent Documents When Windows Exits (All Windows) Popular
This restriction will clear the list of recent documents on the Start Menu when
Windows exits.
Create a new DWORD
value, or modify the existing value, called "ClearRecentDocsOnExit"
and set it according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name:
ClearRecentDocsOnExit
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = disable, 1 = enable)
13) Change the
Default Action for Script Files (All Windows)
Normally scripting files are run when double clicked, once applied this tweak
will cause them to be shown in Notepad instead. This is useful to avoid
accidental execution especially with the prevalence of script based viruses.
Open your registry and for each key
below change the value of "(Default)" to equal "Edit". This
will change the default action so that the script will be loaded in Notepad.exe
(or another specified text editor).
JS Files
[HKEY_CLASSES_ROOT\JSFile\Shell]
JSE Files
[HKEY_CLASSES_ROOT\JSEFile\Shell]
VBE Files
[HKEY_CLASSES_ROOT\VBEFile\Shell]
VBS Files
[HKEY_CLASSES_ROOT\VBSFile\Shell]
WSH Files
[HKEY_CLASSES_ROOT\WSHFile\Shell]
WSF Files
[HKEY_CLASSES_ROOT\WSFFile\Shell]
In addition you can
change the default editor for each script type be changing the
"(Default)" value under the [...\Shell\Edit\Command] sub-key.
Restart Windows for
the change to take effect.
Note: Scripts can still be
executed normally by right-clicking the file and selecting "Open"
from the context menu.
Value Name:
(Default)
Data Type:
REG_SZ (String Value)
Value Data:
("Edit" = set Edit as default)
14) Change the
Number of Active Directory Search Results (Windows 2000/XP)
This setting specifies the number of search results to be returned from a
Active Directory query. This allows you to increase or decrease the default
10,000 objects.
Create a new DWORD
value, or modify the existing value, called "QueryLimit" and set it
according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Directory UI]
Value Name:
QueryLimit
Data Type:
REG_DWORD (DWORD Value)
Value Data:
Number of Results (0 = unlimited)
15) Change the
Number of Undo Levels in Access (All Windows)
This setting allows you to modify the maximum number of commands and operations
that can be reversed using the Undo function in Microsoft Access 2002.
Create a new DWORD
value, or modify the existing value, called "Number of Undos" and set
it according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Office\10.0\Access\Settings]
Value Name:
Number of Undos
Data Type:
REG_DWORD (DWORD Value)
Value Data:
1 to 20 undo levels
16) Change the
Printer Spooler Priority (Windows NT/2000/XP)
Normally the printer spooler runs at the same priority as other services on a
system. If your system is being mainly used for printing or handles a large
number of print jobs you can use this tweak to change the priority class the
print spooler.
Create a new DWORD
value, or modify the existing value, called "SpoolerPriority" and set
it according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
System Key:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print]
Value Name:
SpoolerPriority
Data Type:
REG_DWORD (DWORD Value)
Value Data:
0 =
17) Change the
Size of the Virtual Disk Cache (Windows 95/98/Me) Popular
This tweak allows you control the minimum and maximum amount of memory being
allocated as disk cache. It can be used to speed up your system and possibly
avoid some memory problems.
Using notepad or
another text editor, open your SYSTEM.INI file from your Windows directory.
Find the section
starting with [vcache], and add the following two lines, or modify them if they
already exist.
MinFileCache=0
MaxFileCache=4096
These values set the
amount of memory in kilobytes to be used for disk caching, if you have more the
16Mb of RAM you may want to increase the MaxFileCache size, to about 25% of
your total RAM (i.e. if you have 128Mb use "MaxFileCache=32768")
Restart Windows for
the change to take effect.
Note: If you are receiving
an error like "Error: An I/O subsystem driver failed to load" try
increasing the maximum size to 6144.
18) Change the
TIME_WAIT Timeout to Increase Connections (Windows NT/2000/XP)
This setting determines the length of time that a connection will stay in the
TIME_WAIT state before being closed. The default is 240 seconds which on a busy
server will limit the maximum connections to around 200/sec. Reducing this
setting will increase the maximum connection limit
Create a new DWORD
value, or modify the existing value, called "TcpTimedWaitDelay" and
set it according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
System Key:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]
Value Name:
TcpTimedWaitDelay
Data Type:
REG_DWORD (DWORD Value)
Value Data:
30-300 seconds (decimal)
19) Clear
Download Accelerator History (All Windows)
Download Accelerator Plus (DAP) is a tool used to retrieve files from Internet
servers. It stores a history of the files downloaded and URLs visited. To
increase privacy and security this tweak allows you to clear the history.
Open your registry
and find the key [HKEY_LOCAL_MACHINE\SOFTWARE\SpeedBit\Download
Accelerator\FileList].
Delete the sub-keys
under the key to clear the download history.
Open your registry
and find the key [HKEY_CURRENT_USER\Software\SpeedBit\Download
Accelerator\HistoryCombo].
Delete the data in the
value called "URLHistory" to clear the URL combobox history.
User Key:
[HKEY_CURRENT_USER\Software\SpeedBit\Download Accelerator\HistoryCombo]
System Key:
[HKEY_LOCAL_MACHINE\SOFTWARE\SpeedBit\Download Accelerator\FileList]
Value Name:
URLHistory
Data Type:
REG_SZ (String Value)
20) Configure
DHCP Server for Unicast (Windows NT/2000/XP)
By default, the Windows DHCP server sends all DHCP responses as IP broadcasts to
the limited broadcast address (255.255.255.255). However, the DHCP server can
be configured send to unicast responses by applying this tweak.
Create a new DWORD
value, or modify the existing value, called "IgnoreBroadcastFlag" and
set it according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
Note: Versions of the DHCP
server prior to Windows NT 4.0 ignored the broadcast flag in client DHCP
packets, and broadcast all replies.
System Key:
[HKEY_LOCAL_MACHINE\CurrentControlSet\Services\DHCPServer\Parameters]
Value Name:
IgnoreBroadcastFlag
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(1 = always broadcast (default), 0 = only broadcast if client requests)
21) Configure
Remote Access Client Account Lockout (Windows 2000/XP)
You can use the remote access account lockout feature to specify how many times
a remote access authentication has to fail against a valid user account before the
user is denied access. Use this tweak to set the number of failed logins before
the account is locked-out and the time before the lockout is reset.
Create a new DWORD
value or modify the existing value called "MaxDenials" and set it to
the number of failed logins to lockout the account (or 0 to disable lockout).
Create another DWORD
value or modify the existing value called "ResetTime (mins)" and set
it to the time in minutes that an account should remained locked-out. The
default is 2,880 minutes (two days).
Restart Windows or the
Remote Access services for the change to take effect.
System Key:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess\
Parameters\AccountLockout]
Value Name:
MaxDenials, ResetTime (mins)
Data Type:
REG_DWORD (DWORD Value)
22)
Configuring the Registry Size Limit (Windows NT/2000/XP)
The Registry Size Limit, or RSL, controls the total amount of space the may be
consumed in paged pool memory and disk space by registry data. The RSL is a
kind of "global quota" for registry space.
Create new DWORD value,
or modify the existing value, named 'RegistrySizeLimit' and set the value to
equal the desired RSL in bytes.
RegistrySizeLimit must
have a type of REG_DWORD, and a data length of 4 bytes, or it is ignored. If
you set the value RegistrySizeLimit to less than 4 megabytes (MB), it is forced
up to 4 MB. If you set it to greater than about 80 percent of the size of paged
pool, it is set down to 80 percent of the size of paged pool (it is assumed
that paged pool is always more than 5 MB). If you set it to 0xffffffff the
maximum size allowable (or 80 percent of paged pool, up to 102 MB) is set.
Shutdown and restart
Windows for the change to take effect.
System Key:
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control]
Value Name:
RegistrySizeLimit
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0xffffffff = maximum)
23) Control
the Number of TCP/IP Connection Attempts (Windows 95/98/Me)
This setting controls the number of TCP/IP connection attempts (SYN packets) to
be transmitted before timing out.
Create a new string
value named "MaxConnectRetries" and set it to the number or retires,
the default is 3.
Restart Windows for
the change to take effect.
System Key:
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VxD\MSTCP]
Value Name:
MaxConnectRetries
Data Type:
REG_SZ (String Value)
24) Control
the WINS Refresh Period (Windows 95/98/Me)
This setting control the initial WINS refresh timeout value.
Create a new string
value (or DWORD value for Windows 95) called "InitialRefreshT.O." and
set it to equal the timeout in milliseconds. The minimum and default timeout is
960,000 milliseconds (approx 16 minutes) and the maximum is 4,294,967,295
milliseconds (approx 50 days).
Restart Windows for
the change to take effect.
System Key:
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VxD\MSTCP]
Value Name:
InitialRefreshT.O.
Data Type:
REG_DWORD (DWORD Value)
Value Data:
Time in milliseconds (Default =960,000)
25) Change Your MAC
Address
(Windows 2k/xp)
This setting will
change the MAC address of the NIC card.
Go to
“HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002BE10318}.
Double click on it to expand the tree. You should see it starts with 0000, then 0001, 0002, 0003 and
so on.
Now go through each subkey that
starts with 0000. Click on 0000, check DriverDesc keyword on the
right to see if that's the NIC you want to change the MAC address. The DriveDesc
should match the Description of the NIC that to be chaged Example :
DriveDesc REG_SZ D-Link DFE-520TX PCI Fast Ethernet Adapter. Now create REG_SZ
with value name “NetworkAddress” .In the value data give the new MAC address .
System Key:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002BE10318}]
Value Name:
NetworkAddress
Data Type:
REG_SZ (String Value)
Value Data:
Give any 12 digit data, Example: 000FEA9AF16C
26) Customize the
Windows Logon and Security Dialog Title (Windows NT/2000/XP) Popular
This setting allows you to add additional text to the title of the standard
Windows Logon and Windows Security dialog boxes.
Create a new String
value, or modify the existing value, called "Welcome" and set it
according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
System Key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
Value Name:
Welcome
Data Type:
REG_SZ (String Value)
Value Data:
Text to display
27) Delay
Occurs When Unlocking Workstation (Windows NT/2000)
Sometimes a noticeable delay occurs when the logged on user or an administrator
attempts to unlock a workstation. This because when you unlock the workstation
Windows will update the domain list if the cached list's age exceeds two
minutes (by default). This age limit can be modified.
Create a new DWORD
value, or modify the existing value, named "DcacheMinInterval" and
set it to equal the new cache time-out in seconds (decimal).
Restart Windows for
the change to take effect.
System Key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
Value Name:
DcacheMinInterval
Data Type:
REG_DWORD (DWORD Value)
Value Data:
120-86400 (decimal) (expressed in seconds)
28) Deny
Access to the Display Settings (All Windows) Popular
This option disables the display settings control panel icon, and stops users
from accessing any display settings.
Create a new DWORD
value, or modify the existing value, called "NoDispCPL" and set it
according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
Value Name:
NoDispCPL
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = disabled, 1 = enabled)
29) DirectDraw
and Direct3D Settings (Windows 98/Me/2000/XP) Popular
These DirectX settings allow you to change some of the DirectDraw and Direct3D
video acceleration parameters.
Create a new DWORD
value for each optional item from the list below and set it to "1" to
enable the setting or "0" to disable it.
Open the
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Direct3D] key and change the value of DisableDP2
to "1" to disable Direct3D, or "0" to enable it.
Open the
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Direct3D\Drivers] key and change the
value of SoftwareOnly to "1" to use software emulation or
"0" to disable it.
Restart Windows for the
change to take effect.
System Key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw]
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 or 1)
30) Disable
Ability to Skip Startup Programs (Windows NT/2000/XP)
Normally if you hold the Shift key while Windows is loading you can prevent the
Startup applications from being launched. This setting disables the ability to
by-pass these programs.
Create a new DWORD
value, or modify the existing value, called "IgnoreShiftOveride" and
set it according to the value data below.
Exit your registry, you
may need to restart or log out of Windows for the change to take effect.
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
Value Name:
IgnoreShiftOveride
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = default, 1 = ignore shift)
31) Disable
Account Changes in Outlook Express (All Windows)
This setting disables the ability for users to create or modify any mail, news
or directory accounts in Outlook Express.
Create new DWORD value
called "No Modify Accts" and set it to "1" to enable the
restriction or "0" to allow users to modify accounts.
Restart Outlook
Express for the change to take effect.
System Key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Outlook Express]
Value Name:
No Modify Accts
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = default, 1 = enable restriction)
32) Disable
Active Desktop
(All Windows) Popular
This tweak will disable the use of the Active Desktop feature.
Create a new DWORD
value named "NoActiveDesktop", and set the new value to equal
"1" to enable the restriction or "0" to disable the
restriction.
This restriction can
be used either on a user by user basis by adding it to HKEY_CURRENT_USER or on
a computer wide basis by adding it to HKEY_LOCAL_MACHINE.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name:
NoActiveDesktop
Data Type:
REG_DWORD (DWORD Value)
33) Disable CD
Burning (Windows
XP) Popular
This restriction is used to disable the use of the inbuilt CD recording functions
of Windows.
Create a new DWORD
value, or modify the existing value, called "NoCDBurning" and set it
according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name:
NoCDBurning
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = Allow CDR, 1 = Disable CDR)
34) Disable
Changes to Task Properties (Windows 2000/Me/XP)
This setting restricts users from changing the properties of an existing item
in Task Scheduler
Create a new DWORD
value, or modify the existing value, called "Property Pages" and set
it according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
Note: This setting only
applies to existing tasks, users may still specify advanced properties on new
tasks.
User Key:
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Task Scheduler5.0]
System Key:
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Task Scheduler5.0]
Value Name:
Property Pages
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = default, 1 = enable restriction)
35) Disable
Command Prompt and Batch Files (Windows 2000/XP)
This restriction allows you to selectively disable the Command Prompt (CMD) and
the ability to execute DOS batch files.
Create or modify the
DWORD value "DisableCMD" and set it to a number from the list below.
The change should take
effect immediately
User Key:
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System]
Value Name:
DisableCMD
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = default, 1 = disabled, 2 = disabled but allow batch)
36) Disable
Control Panel (Windows
2000/Me/XP) Popular
This setting allows you to restrict user access to the Control Panel options
and settings.
Create a new DWORD
value, or modify the existing value called 'NoControlPanel' set the value to
equal '1' to enable the restriction.
Exit your registry,
you may need to restart for the changes to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name:
NoControlPanel
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = disable restriction, 1 = enable restriction)
37) Disable
Dial-In Access
(Windows 95/98/Me)
It's possible for users to setup a modem on a Windows machine, and by using
Dial-up Networking allow callers to connect to the internal network. Especially
in a corporate environment this can cause a major security risk.
Create a new DWORD
value, or modify the existing value, called "NoDialIn" and set it
according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Network]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Network]
Value Name:
NoDialIn
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = dial-in enabled, 1 = dial-in disabled)
38)Disable
Document Editing Time Tracking (All Windows)
Whenever you open a Office document the time open is tracked and added to the total
"Edit Time". This tweak disables that tracking.
Create a new DWORD
value, or modify the existing value, called "NoTrack" and set it
according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Common\General]
Value Name:
NoTrack
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = default, 1 = disable tracking)
39) Disable
File and Printer Sharing (Windows 95/98/Me)
When file and printer sharing is installed it allows users to make services
available to other users on a network, this functionality can be disabled by
changing this setting.
Create two new DWORD
values named "NoFileSharing" and "NoPrintSharing" and set
the values to either '1' for sharing disabled or '0' for sharing enabled. Both
settings do not have to be the same, it is possible to have one disabled and
the other enabled.
Restart Windows for
the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Network]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Network]
Value Name:
NoFileSharing, NoPrintSharing
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = file sharing, 1 = disabled)
40) Disable
File Download in Internet Explorer (All Windows)
This setting allows you to restrict the ability to download files using
Internet Explorer.
Create a new DWORD
value, or modify the existing value, called "1803" and set it
according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Internet Settings\Zones\3]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\
Internet Settings\Zones\3]
Value Name:
1803
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = downloads enabled, 3 = downloads disabled)
41) Disable
Folder Options Menu (All Windows) Popular
This tweak allows you to hide the Folder Options function from the folder Tools
menu. Allowing you to restrict access to numerous advanced folder features.
Create a new DWORD
value, or modify the existing value named "NoFolderOptions" and set
it to equal "1" to hide the options or "0" to show the
options.
Log-off or restart
Windows for the changes to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name:
NoFolderOptions
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = show options, 1 = hide options)
42) Disable
Function Keys During the Boot Sequence (Windows 95/98/Me)
By default Windows 9x enables the function keys on boot, these allow you to
control the boot process. For example pressing F5 while the "Starting
Windows 95..." message is displayed will boot Windows in Safe Mode.
Change the attributes
for MSDOS.SYS so it is not 'Read Only', MSDOS.SYS is found in the root
directory of your C:\ drive. Open the file using Notepad or another text editor
(not Microsoft Word or any word processor).
Change the value of
'BootKeys=' to 'BootKeys=1' for enabled or 'BootKeys=0' for disabled.
Changes will take
place on the next reboot.
Value Data:
BootKeys=1 (default) or BootKeys=0 (disabled)
43) Disable
Group Policy Objects (Windows 2000/XP)
This setting is used to disable the use of group policy objects on the local
computer.
Create a new DWORD
value, or modify the existing value, called "DisableGPO" and set it
according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
System Key:
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System]
Value Name:
DisableGPO
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = default, 1 = disable group policy)
44) Disable
Internet Access
(All Windows)
By using this tweak you are able to restrict access to the Internet when using Internet
Explorer and other Microsoft compatible products such as Office.
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings]
Change the value of
"ProxyEnable" and set it to "1". Change the value of
"ProxyServer" and set it to an IP address and port that is invalid on
your network such as "10.0.0.1:5555" (i.e. "IP:Port").
By changing these
settings Internet access will be disabled for any applications that rely of the
Microsoft proxy server information such as Internet Explorer, Microsoft Office,
Opera browser.
To stop users from
modifying the proxy settings add these restrictions to disable changes to the
Internet configuration.
Find or create the key
below:
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet
Explorer\Control Panel]
Create two DWORD
values named "Connection Settings" and "Connwiz Admin Lock"
and set them both to "1".
To remove the
restriction, set the proxy settings back to their original values and delete
the policy values.
Note: The change will take effect
immediately for any new browser windows, existing Internet Explorer sessions
will not be affected until the browser is closed and reopened.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Internet Settings]
Value Name:
ProxyEnable, ProxyServer
45) Disable
Menu Bars and the Start Button (Windows 95/98/Me/2000/XP) Popular
This tweak can be used to disable the menu bar in standard Windows applications
and the Start Button.
Rename the key by
placing a dash "-" in front of the GUID (i.e.
{-5b4dae26-b807-11d0-9815-00c04fd91972}).
Restart Windows for
the change to take effect.
Note: This tweak may cause
a problem with the taskbar appearance when Internet Explorer 5.0 or greater is
installed. If you experience a problem please reverse the tweak to restore the
original setting.
System Key:
[HKEY_CLASSES_ROOT\CLSID\{5b4dae26-b807-11d0-9815-00c04fd91972}]
46) Disable
Multi-User Editing in Microsoft Word (All Windows)
Multi-user editing is a new feature in Word 2002 and Office XP which allows you
to open a document that is locked for editing by another user, edit a local
copy of the document, and then merge those changes into the original document.
Create a new DWORD
value, or modify the existing value, called "NoPromptToForkDocuments"
and set it according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Office\10.0\Word\Options]
Value Name:
NoPromptToForkDocuments
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = default, 1 = disable multi-user editing)
47) Disable
Network Control Panel (Windows 95/98/Me)
Enabling this option disables access to the Network Control Panel icon.
Create a new DWORD
value, or modify the existing value, called "NoNetSetup" and set it
according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Network]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Network]
Value Name:
NoNetSetup
48) Disable
Password Caching
(All Windows) Popular
Normally Windows caches a copy of the users password on the local system to
allow for additional automation, this leads to a possible security threat on
some systems. Disabling caching means the users passwords are not cached
locally. This setting also removes the second Windows password screen and also
remove the possibility of networks passwords to get out of sync.
Create a new DWORD
value, or modify the existing value, called "DisablePwdCaching" and
set it according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Network]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Network]
Value Name:
DisablePwdCaching
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = disabled, 1=enabled)
49) Disable
Recent Documents History (All Windows) Popular
Normally when you open or access a document or file it is added to the list of
recent documents on the Start Menu. This tweak will stop files from being added
to the list.
Create a new DWORD
value, or modify the existing value called 'NoRecentDocsHistory' set the value
to equal '1' to enable the restriction.
Exit your registry,
you may need to restart for the changes to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name:
NoRecentDocsHistory
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = disable restriction, 1 = enable restriction)
50) Disable
Registry Editing Tools (All Windows) Popular
This restriction disables the ability to interactively run the standard
Microsoft registry editing tools such as REGEDIT and REGEDT32.
Warning: Be careful with this
setting because once you enter this key into the registry you will not be able
to use Regedit to undo the change. Consider wisely before using this
modification so that you do not lock yourself out of the registry.
Open your registry and find the key
below.
Create a new DWORD
value named 'DisableRegistryTools' and set the value to '1' to disable registry
editing functions. This can also be enabled on a user-by-user basis by putting
the same value in the [HKEY_CURRENT_USER] hive.
Restart Windows for
the change to take effect.
If you have
inadvertently locked yourself out of your registry you can use usually use WinGuides Tweak
Manager
to unlock it. Please don't abuse this by trying to circumvent system
administrator policies.
Note: This setting will
disable all standard Microsoft registry editing tools, but not WinGuides Tweak
Manager.
User Key:
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\
System]
Value Name:
DisableRegistryTools
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = allow regedit, 1 = disable regedit)
51) Disable
Save Password Option in Dial-Up Networking (Windows NT/2000)
When you dial a phonebook entry in Dial-Up Networking (DUN), you can use the 'Save
Password' option so that your DUN password is cached and you will not need to
enter it on successive dial attempts. This key disables that option.
Create a new DWORD
value, or modify the existing value, called "DisableSavePassword" and
set it according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
System Key:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\Parameters]
Value Name:
DisableSavePassword
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0=disable, 1=enable)
52) Disable
ScanDisk After Improper Shutdown (Windows Me)
Normally if a system is shutdown improperly scandisk will run on the next
reboot to ensure the contents of the hard disk are valid. This setting stops
scandisk from running automatically when restarting.
Create a new Binary
value, or modify the existing value, called "DisableScandiskOnBoot"
and set it according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
System Key:
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem]
Value Name:
DisableScandiskOnBoot
Data Type:
REG_BINARY (Binary Value)
Value Data:
01 = disable, 00 = enable
53) Restrict Access to
System Restore Settings
Create a new DWORD value called "DisableConfig" and set it to
"1" to disable System Restore Settings link in the System Restore
interface and the Control Panel > System > System Restore page.
Changes take effect
immediately.
Note: These settings will
not stop Windows from making automatic System Checkpoints, but will disable
access to restore them.
System Key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]
Value Name:
DisableConfig, DisableSR
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(1 = enable restriction)
54) Disable
Task Manager (Windows
NT/2000/XP) Popular
This setting controls the ability for users to start Task Manager and view
processes, running applications and make changes to the priority or state of
the individual processes.
Create a new DWORD
valued named "DisableTaskMgr" and set it to "1" to disable
Task Manager.
You may need to log
off for the changes to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
Value Name:
DisableTaskMgr
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = default, 1 = disable Task Manager)
55) Disable
the Ability to Right Click on the Desktop (All Windows) Popular
This tweak removes the context menu that would normally appear when the user
right clicks on the desktop or in the Explorer right results pane.
Create a new DWORD
value, or modify the existing value, called "NoViewContextMenu" and
set it according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name:
NoViewContextMenu
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = disabled, 1 = enabled)
56) Disable
the Change Password Button (Windows NT/2000)
This setting disables the 'Change Password' button on the Windows Security
dialog box. Enabling this setting stops casual users from being able to change
the password.
Create a new DWORD
value, or modify the existing value, called "DisableChangePassword"
and set it according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
Note: This functionality
requires Windows NT Service Pack 4 or higher or Windows 2000.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
Value Name:
DisableChangePassword
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = disabled, 1 = enabled)
57) Disable
the MS-DOS Command Prompt (Windows 95/98/Me) Popular
This setting allows you to disable the use of the MS-DOS command prompt in
Windows.
Create a new DWORD
value, or modify the existing value, named "Disabled" and set it to
"1" to disable the command prompt or to re-enable it again later
change the value to "0".
Restart Windows for
the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
WinOldApp]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
WinOldApp]
Value Name:
Disabled
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = disable, 1 = enable)
58) Disable
the Shut Down Command (All Windows) Popular
This option allows you to stop users from being able to shutdown the computer
by disabling the shut down command.
Create a new DWORD
value, or modify the existing value, called "NoClose" and set it
according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name:
NoClose
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = shutdown enabled, 1 = shutdown disabled)
59) Disable
the Windows Key
(Windows NT/2000/XP) Popular
This tweak disables the Windows key that is found between the Ctrl and Alt keys
on a Windows enhanced keyboard.
Create a new Binary
value, or modify the existing value, called "Scancode Map" and set it
according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
System Key:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Keyboard Layout]
Value Name:
Scancode Map
Data Type:
REG_BINARY (Binary Value)
Value Data:
00 00 00 00 00 00 00 00 03 00 00 00 00 00 5B E0 00 00 5C E0 00 00 00 00
60) Disable
Windows Installer
(All Windows)
This restriction allows you to prevent users from adding and removing software
applications with Windows Installer.
Create a new DWORD
value, or modify the existing value, called "DisableMSI" and set it
according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
System Key:
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer]
Value Name:
DisableMSI
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = default, 1 = admin only, 2 = disabled)
61) Empty
Temporary Internet Files on Exit (All Windows) Popular
This setting controls whether Internet Explorer should delete all of the
temporary Internet files stored during the session when the browser is closed.
Create a new DWORD
value, or modify the existing value, called "Persistent" and set it
according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Internet Settings\Cache]
System Key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Internet Settings\Cache]
Value Name:
Persistent
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = empty, 1 = do not empty)
62) Enable DVD
Features in Media Player (All Windows) Popular
This setting allows you to use Microsoft Media Player to Play and Open DVDs.
Create a new string
value called "EnableDVDUI" and set it to "yes" to enable
DVD functionality.
Restart Media Player
for the change to take effect.
Note: You must have a
Windows compatible DVD drive installed in your computer for these features to
work.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Player\Settings]
Value Name:
EnableDVDUI
Data Type:
REG_SZ (String Value)
Value Data:
Yes or No
63) Enable
Quick Reboot (Windows
NT/2000)
This setting allows you to use the quick reboot function to restart Windows immediately
without shutting down. When enabled, press Shift + Ctrl + Alt + Delete for a
quick reboot.
Create a new String
value, or modify the existing value, called "EnableQuickReboot" and
set it according to the value data below.
Exit your registry, you
may need to restart or log out of Windows for the change to take effect.
Note: This method of
rebooting should only be used when the system has stopped responding as some
shutdown and clean-up functions will not be run.
System Key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
Value Name:
EnableQuickReboot
Data Type:
REG_SZ (String Value)
Value Data:
(0 = disabled, 1 = enabled)
64) Enable
Remote Assistance
(Windows XP)
The Remote Assistance feature is a convenient way for an administrator to
remotely connect to a computer and with permission view the screen, move the
mouse, use the keyboard and chat online.
Open you registry and
find the key below.
To Enable Remote
Assitance
Create or modify the following DWORD values:
· AllowTSConnections
set it to "1"
· fDenyTSConnections
set it to "0"
· fAllowToGetHelp
set it to "1"
To Disable Remote
Assitance
Create or modify the following DWORD values:
· AllowTSConnections
set it to "0"
· fDenyTSConnections
set it to "1"
· fAllowToGetHelp
set it to "0"
Restart Windows for
the changes to take effect.
System Key:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server]
Value Name:
AllowTSConnections, fDenyTSConnections, fAllowToGetHelp
Data Type:
REG_DWORD (DWORD Value)
65) Hide All
Items on the Desktop (All Windows) Popular
Enabling this options hides all the items and programs on the Windows desktop.
Create a new DWORD
value, or modify the existing value, called "NoDesktop" and set it
according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name:
NoDesktop
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = disable restriction, 1 = enabled restriction)
66) Hide
Computer Management Option (Windows 2000/XP)
This setting allows you to remove the "Manage" option from the My
Computer context menu. The Computer Management program is used to configure the
system.
Create a new DWORD
value, or modify the existing value, called "NoManageMyComputerVerb"
and set it according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
Note: The computer
management application can still be used by running "compmgmt.msc".
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name:
NoManageMyComputerVerb
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = default, 1 = remove "Manage")
67) Hide
Control Panel Applets (Windows NT/2000/XP) Popular
This tweak allows you to show or hide specific applets found in the Windows
Control Panel.
For each applet you
want to hide create a new string value and call it the filename of the applet
to be hidden (for example 'fax.cpl'). Set the value to equal 'No' to hide the
applet or delete tha value to display it.
Common Control Panel
Applets:
Exit the registry and
either logout or restart Windows.
User Key:
[HKEY_CURRENT_USER\Control Panel\don't load]
Data Type:
REG_SZ (String Value)
Value Data:
Yes or No
68) Hide Drives
in My Computer
(All Windows) Popular
This setting allows you to control which drives are visible in My Computer and
Explorer. It is possible to hide all drives or just selected ones.
The
"NoDrives" value uses a 32-bit word to define local and network drive
visibility for each logical drive in the computer. The lower 26 bits of the
32-bit word correspond to drive letters A through Z. Drives are visible when
set to 0 and hidden when set to 1.
If your not happy
working in Hex, add these decimal numbers to hide the drive(s):
A: 1, B: 2, C: 4, D:
8, E: 16, F: 32, G: 64, H: 128, I: 256, J: 512, K: 1024, L: 2048, M: 4096, N:
8192, O: 16384, P: 32768, Q: 65536, R: 131072, S: 262144, T: 524288, U:
1048576, V: 2097152, W: 4194304, X: 8388608, Y: 16777216, Z: 33554432, ALL:
67108863
For example to hide
drive A and drive D, you would add 1 (A) + 8 (D) which means the value should
be set to "9".
To disable all the
drives set the value to "67108863".
Restart Windows for
the change to take effect.
Note: These drives will
still appear in File Manager, to remove File Manager, delete or rename
winfile.exe.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name:
NoDrives
Data Type:
REG_DWORD (DWORD Value)
69) Hide
Entire Network in Network Neighborhood (All Windows)
Entire Network is an option under Network Neighborhood that allows users to see
all the Workgroups and Domains on the network. Entire Network can be disabled,
so users are confined to their own Workgroup or Domain.
Create a new DWORD
value, or modify the existing value, called "NoEntireNetwork" and set
it according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Network]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Network]
Value Name:
NoEntireNetwork
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = disabled, 1 = enabled)
70) Hide the
Change Passwords Page (Windows 95/98/Me)
When this setting is enabled, users are no longer able to access the Change
Passwords page.
Create a new DWORD
value, or modify the existing value, called "NoPwdPage" and set it
according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
Value Name:
NoPwdPage
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = disabled, 1 = enabled)
71) Hide the
Device Manager Page (Windows 95/98/Me)
This setting controls whether the Device Manager is visible, under System in
the Control Panel.
Create a new DWORD
value, or modify the existing value, called "NoDevMgrPage" and set it
according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
Value Name:
NoDevMgrPage
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = disabled, 1 = enabled)
72) Hide the
Remote Administration Page (Windows 95/98/Me)
Enabling this function stops users from being able to change the remote
administration settings for the computer.
Create a new DWORD
value, or modify the existing value, called "NoAdminPage" and set it
according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
Value Name:
NoAdminPage
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = disabled, 1 = enabled)
73) Hide the
Run as... option from the context menu (Windows XP) New
This setting allows you to restrict the ability for users to have access to the
Run as... service when right clicking on executables files and shortcuts. This
tweak also disables the Shift key override feature.
Create a new DWORD
value, or modify the existing value, called "HideRunAsVerb" and set
it according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name:
HideRunAsVerb
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = enabled, 1 = disabled)
74) Hide the
Search Button on the Explorer Toolbar (Windows 2000/XP)
This restriction allows you to remove the search button from the "Standard
Buttons" toolbar in Windows Explorer.
Create a new DWORD
value, or modify the existing value, called "NoShellSearchButton" and
set it according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name:
NoShellSearchButton
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = display, 1 = remove)
75) Internet
Explorer Control Panel Restrictions (Part 1) (All Windows) Popular
These tweaks allows you to control access to the Internet Explorer setup and
control panel functions (found under Tools -> Internet Options).
Create a new DWORD
value based on the options below, and set the new value to equal "1"
to enable the restriction or "0" to disable the restriction.
Restart Internet
Explorer for the changes to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\
Control Panel]
System Key:
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\
Control Panel]
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = disable restriction, 1 = enable restriction)
76) Internet
Explorer Control Panel Restrictions (Part 2) (All Windows) Popular
The features available within the Internet Explorer control panel (Tools ->
Internet Options) can be individually managed and disabled using this tweak.
Create a new DWORD
value for each restriction from the list below, set the value to equal '1' to
enable the restriction or '0' to disable it.
Restart Internet
Explorer for the changes to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\
Control Panel]
System Key:
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\
Control Panel]
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = disable restriction, 1 = enable restriction)
77) Internet
Explorer Restrictions (All Windows) Popular
These settings and restrictions allow you to selectively control a range of
features available in Microsoft Internet Explorer 5 and 6.
Create a new DWORD
value based on the options below, and set the new value to "1" to
enable the restriction or "0" to disable the restriction.
Restart Internet
Explorer for the restrictions to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\
Restrictions]
System Key:
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\
Restrictions]
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = disable restriction, 1 = enable restriction)
78) Legal
Notice Dialog Box Before Logon (All Windows) Popular
Use these fields to create a dialog box that will be presented to any user
before logging onto the system. This is useful where you are required by law to
warn people that it is illegal to attempt to logon without being an authorized
user.
Windows 95, 98 and Me:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Winlogon
Windows NT, 2000 and
XP:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Modify the value named
'LegalNoticeCaption' to represent the caption on the dialog box (e.g.
'WARNING!'). If this value doesn't already exist create it.
Modify the value named
'LegalNoticeText' to represent the body of the dialog box (e.g. 'Do Not Attempt
to Logon to this system unless you are an authorized user!')
Exit your registry and
restart Windows, and the next time you boot up you should be presented with the
dialog box before logging on.
Note: This value is limited
to 256 characters, you need to install the latest Windows NT service pack to
allow up to 1024 characters.
Value Name:
LegalNoticeCaption, LegalNoticeText
Data Type:
REG_SZ (String Value)
79) Lock the
Taskbar (Windows
XP)
This restriction is used to force the locking of the taskbar and restrict users
from making any changes to its position.
Create a new DWORD
value, or modify the existing value, called "LockTaskbar" and set it
according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name:
LockTaskbar
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = Unlocked, 1 = Locked)
80) Modify the
Internet Auto-Dial Settings (All Windows)
Windows has the option to automatically dial your Internet Service Provider
(ISP) to establish an Internet connection. This option can be controlled using
this tweak.
Create a new DWORD
value (or Binary on Windows 95) named "EnableAutodial", and set the
new value to equal "1" to enable autodial or "0" to disable
it.
Restart Windows for
the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Internet Settings]
;Value Name:
EnableAutodial
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = disabled, 1 = enabled)
81) Modifying
the Autocheck Time-out Value (Windows NT/2000/XP)
When Windows is not shutdown correctly it will perform an AutoCheck using CHKDSK
on the next restart. This setting controls the time delay before running
Autochk or whether it is run at all.
Create a new DWORD
value, or modify the existing value, called "AutoChkTimeOut" and set
it according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
System Key:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager]
Value Name:
AutoChkTimeOut
Data Type:
REG_DWORD (DWORD Value)
Value Data:
Time in Seconds or 0 to disable (default = 10)
82) MSN
Instant Messenger Restrictions (All Windows) Popular
These restrictions are used to disable various features of the Microsoft MSN
Instant Messenger client.
For each restriction
from the list below create a new DWORD value and set the value to "1"
to enable the restriction.
Restart MSN Messenger
for the changes to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Messenger\Client]
System Key:
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Messenger\Client]
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(1 = enable restriction, 0 = default)
83) Network
Connection Restrictions (Windows 2000/XP)
These restrictions control access to the features and properties of LAN, RAS
and other network connections.
Create a new DWORD
value for each required restriction from the list below. Set the value to
"0" to enable the restriction or delete the value to disable it.
Restart Windows for
the changes to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\
Network Connections]
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = enable restriction)
84) Optimize
Broadband Cable Modem and DSL Connections (Windows 2000/XP) Popular
These settings allow you to boost the speed of your broadband Internet
connection when using a Cable Modem or DSL Router with Windows 2000 and Windows
XP.
Create the following
DWORD values, as most of these values will not already exist you will need to
create them by clicking on 'Edit -> New -> DWORD Value' and then set the
value as shown below.
DefaultTTL
= "80" hex (or 128 decimal)
Specifies the default time to live (TTL) for TCP/IP packets. The default is 32.
EnablePMTUBHDetect
= "0"
Specifies whether the stack will attempt to detect Maximum Transmission Unit
(MTU) routers that do not send back ICMP fragmentation-needed messages. The
default is 0.
EnablePMTUDiscovery
= "1"
Specifies whether the TCP/IP stack will attempt to perform path MTU discovery
as specified in RFC 1191. The default is 1.
GlobalMaxTcpWindowSize
= "7FFF" hex (or 32767 decimal)
Specifies the system maximum receive window size advertised by the TCP/IP
stack.
TcpMaxDupAcks
= "2"
Determines the number of duplicate ACKs that must be received for the same
sequence number of sent data before "fast retransmit" is triggered.
SackOpts
= "1"
Enables support for selective acknowledgements as documented by Request for
Comment (RFC) 2018. Default is 0.
Tcp1323Opts
= "1"
Controls RFC 1323 time stamps and window scaling options. Possible values are:
"0" = disable RFC 1323 options, "1" = window scale enabled
only, "2" = time stamps enabled only and "3" = both options
enabled.
TcpWindowSize
= "7FFF" hex (or 32767 decimal)
Specifies the receive window size advertised by the TCP/IP stack. If you have a
latent network you can try increasing the value to 93440, 186880, or 372300.
Exit your registry and
restart Windows for the changes to take effect.
Note: These optimized
settings may not work with all ISP configurations, in which case the parameters
should be returned to the default values.
System Key:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]
Data Type:
REG_DWORD (DWORD Value)
85) Prevent
Access to the Contents of Selected Drives (Windows 2000/Me/XP) Popular
This restriction prevents users from using My Computer or Explorer to access
the content of selected drives. Also, they cannot use Run, Map Network Drive,
or the Dir command to view the directories on these drives.
Open your registry
and find or create the key below.
The
"NoViewOnDrive" value uses a 32-bit bitmask to define local and
network drive access for each logical drive in the computer. The lower 26 bits
of the 32-bit word correspond to drive letters A through Z. Drives are visible
when set to 0 and hidden when set to 1.
If your not happy
working in Hex, add these decimal numbers to hide the drive(s):
A: 1, B: 2, C: 4, D:
8, E: 16, F: 32, G: 64, H: 128, I: 256, J: 512, K: 1024, L: 2048, M: 4096, N:
8192, O: 16384, P: 32768, Q: 65536, R: 131072, S: 262144, T: 524288, U:
1048576, V: 2097152, W: 4194304, X: 8388608, Y: 16777216, Z: 33554432, ALL:
67108863
For example to hide
drive A and drive D, you would add 1 (A) + 8 (D) which means the value should
be set to "9".
To disable all the
drives set the value to "67108863".
Restart Windows for
the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name:
NoViewOnDrive
Data Type:
REG_DWORD (DWORD Value)
Value Data:
32-bit bitmask
86) Remote
Administration of Windows Installer (Windows 2000/XP)
This setting allows administrators using Windows Terminal Services to remotely
install and configure software using Windows Installer.
Create a new DWORD
value, or modify the existing value, called "EnableAdminTSRemote" and
set it according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
Note: This setting affects
system administrators only. Other users cannot install programs remotely.
System Key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer]
Value Name:
EnableAdminTSRemote
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = disable, 1 = enabled)
87) Remove
"All Programs" Button from the Start Menu (Windows XP)
This restriction is used to remove the "All Programs" button which
displays a list of all the installed applications.
Create a new DWORD
value, or modify the existing value, called "NoStartMenuMorePrograms"
and set it according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
Note: This setting only
applies to the Windows XP Start Menu, not the Classic Start Menu.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name:
NoStartMenuMorePrograms
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = default, 1 = disable button)
88) Remove
Frequent Programs List from the Start Menu (Windows XP)
This restriction removes the list of frequently used programs from the Start
menu.
Create a new DWORD
value, or modify the existing value, called
"NoStartMenuMFUprogramsList" and set it according to the value data
below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
Note: This setting only
applies to the Windows XP Start Menu, not the Classic Start Menu.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name:
NoStartMenuMFUprogramsList
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = default, 1 = enable restriction)
89) Remove Log
Off from the Start Menu (All Windows)
This tweak allows you to remove the Log Off [Username] option from the Start
menu.
Create a new DWORD
value, or modify the existing value, called "NoLogOff" and set it
according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
Note: In older version of
Windows this value may be REG_BINARY.
Note: This setting relies
in Internet Explorer 4.0 or greater being installed.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name:
NoLogOff
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(1 = no log off, 0 = show log off)
90) Remove My
Computer from the Desktop and Start Menu (Windows 2000/Me/XP) Popular
This restriction removes My Computer from the desktop and Start menu.
Create a new DWORD
value, or modify the existing value, called
"{20D04FE0-3AEA-1069-A2D8-08002B30309D}" and set it according to the
value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
NonEnum]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
NonEnum]
Value Name:
{20D04FE0-3AEA-1069-A2D8-08002B30309D}
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = show, 1 = remove)
91) Remove
Properties from My Computer (Windows XP)
This restriction remove the properties option from My Computer and hides the
"System Properties" screen.
Create a new DWORD
value, or modify the existing value, called "NoPropertiesMyComputer"
and set it according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name:
NoPropertiesMyComputer
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = Properties, 1 = No Properties)
92) Remove
Recent Documents from the Start Menu (All Windows) Popular
This setting can be used to remove the recent Documents folder from the Start
Menu.
Create a new DWORD
value, or modify the existing value, called 'NoRecentDocsMenu' set the value to
equal '1' to enable the restriction.
Exit your registry,
you may need to restart for the changes to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name:
NoRecentDocsMenu
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = display, 1 = remove)
93) Rename or
Delete Special Folders (All Windows) Popular
This setting allows you to rename and delete special folders (such as the
Recycle Bin) as if it was a normal folder by right-clicking the icon.
Open your registry
and find the key below, where GUID is the identifier for the special
folder.
|
Description |
Globally Unique
Identifier (GUID) |
|
Administrative Tools |
{D20EA4E1-3957-11d2-A40B-0C5020524153} |
|
Briefcase |
{85BBD92O-42A0-1O69-A2E4-08002B30309D} |
|
Control Panel |
{21EC2O2O-3AEA-1O69-A2DD-08002b30309d} |
|
Fonts |
{D20EA4E1-3957-11d2-A40B-0C5020524152} |
|
History |
{FF393560-C2A7-11CF-BFF4-444553540000} |
|
Inbox |
{00020D75-0000-0000-C000-000000000046} |
|
Microsoft Network |
{00028B00-0000-0000-C000-000000000046} |
|
My Computer |
{20D04FE0-3AEA-1069-A2D8-08002B30309D} |
|
My Documents |
{450D8FBA-AD25-11D0-98A8-0800361B1103} |
|
My Network Places |
{208D2C60-3AEA-1069-A2D7-08002B30309D} |
|
Network Computers |
{1f4de370-d627-11d1-ba4f-00a0c91eedba} |
|
Network Connections |
{7007ACC7-3202-11D1-AAD2-00805FC1270E} |
|
Printers and Faxes |
{2227A280-3AEA-1069-A2DE-08002B30309D} |
|
Programs Folder |
{7be9d83c-a729-4d97-b5a7-1b7313c39e0a} |
|
Recycle Bin |
{645FF040-5081-101B-9F08-00AA002F954E} |
|
Scanners and Cameras |
{E211B736-43FD-11D1-9EFB-0000F8757FCD} |
|
Scheduled Tasks |
{D6277990-4C6A-11CF-8D87-00AA0060F5BF} |
|
Start Menu Folder |
{48e7caab-b918-4e58-a94d-505519c795dc} |
|
Temporary Internet
Files |
{7BD29E00-76C1-11CF-9DD0-00A0C9034933} |
|
Web Folders |
{BDEADF00-C265-11d0-BCED-00A0C90AB50F} |
To change the features
shown on the context menu, edit the value of "Attributes" and set it
to one of the values below, the default value is "40 01 00 20".
File Features
· 50 01 00 20 -
Rename
· 60 01 00 20 -
Delete
· 70 01 00 20 -
Rename and Delete
Edit Features
· 41 01 00 20 -
Copy
· 42 01 00 20 -
Cut
· 43 01 00 20 -
Copy and Cut
· 44 01 00 20 -
Paste
· 45 01 00 20 -
Copy and Pase
· 46 01 00 20 -
Cut and Copy
· 47 01 00 20 -
Cut, Copy and Paste
For example to add the
ability to Rename and Delete the Recycle Bin open
[HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\ShellFolder]
and change the value of "Attributes" to "70 01 00 20".
The changes should
take effect immediately.
Note: On Windows XP this
tweak changes the File menu not the context menu. Access the features by
right-clicking "Explore" -> "File" -> Rename or
Delete. Both the Rename and Delete tweaks must be checked together before
either tweak will display in Explorer.
System Key:
[HKEY_CLASSES_ROOT\CLSID\{GUID}\ShellFolder]
Value Name:
Attributes
Data Type:
REG_BINARY (Binary Value)
Value Data:
(70 01 00 20=rename/delete, 40 01 00 20=default)
94) Repair the
Registry Editor
(Windows 2000/Me/XP)
This tweak allows you to reset the location and parameters of the Registry
Editor (REGEDIT) back to the system defaults. This is useful if Regedit is not
being displayed correctly.
Make a backup of the key
and then delete the values: "FindFlags", "LastKey" and
"View".
Restart the Registry
Editor.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets\
Regedit]
95) Repair the
Taskbar (All
Windows) Popular
If your taskbar has disappeared from the desktop or becomes hidden when you
move your cursor near, it may be due to a corrupt registry key.
Close any open desktop
and taskbar applications, then open your registry and find the key below.
Delete the entire
"StuckRects" key, or "StuckRects2" for Windows 2000/XP, and
reboot.
When Windows restarts
the taskbar should be set back to a default working state.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\
StuckRects]
96) Require
Users to Press Ctrl+Alt+Delete Before Logon (Windows 2000/XP)
This setting controls whether users are required to press Ctrl + Alt + Delete
as a security precaution before logging into the system.
Create a new DWORD
value, or modify the existing value, called "DisableCAD" and set it
according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
Note: Windows XP systems
must be configured to use the classic login method for this setting to work.
System Key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
Value Name:
DisableCAD
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = Require Ctrl+Alt+Delete, 1 = Disable)
97) Require
Validation by Network for Windows Access (Windows 95/98/Me) Popular
By default Windows 9x doesn't require a valid network username and password
combination for a user to bypass the logon and gain access to the local
machine. This functionality can be changed to require validation by the network
before allowing access.
Create a new DWORD
value, or modify the existing value called "MustBeValidated" and set
it to equal "1" to require successful authentication.
Restart Windows for
the change to take effect.
Your machine must be
part of a Windows domain for this tweak to work, as the user must be
authenticated by the network.
Note: The workstation must
be a member of a Windows domain for this setting to be effective.
System Key:
[HKEY_LOCAL_MACHINE\Network\Logon]
Value Name:
MustBeValidated
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = disabled, 1 = enabled)
98) Reset the
Screen Saver Password (Windows 95/98/Me)
If you have misplaced your Windows screen saver password you can reset it by
using this tweak.
Delete the value
"ScreenSave_Data" to reset the password.
The change should
become effective immediately.
User Key:
[HKEY_CURRENT_USER\Control Panel\Desktop]
Value Name:
ScreenSave_Data
Data Type:
REG_BINARY (Binary Value)
Value Data:
Encoded Password
99) Restrict
Access to the Passwords Control Panel (Windows 95/98/Me)
This option disables access to the Passwords icon on the control panel,
therefore stopping users from changing security related settings.
Create a new DWORD
value, or modify the existing value, called "NoSecCPL" and set it
according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
System]
Value Name:
NoSecCPL
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = disabled, 1 = enabled)
100) Restrict
Author Mode in Management Console (MMC) (Windows 2000/XP)
This restriction stops users from opening the Microsoft Management Console and
relevant .mmc console files in author mode.
Create a new DWORD
value, or modify the existing value, called "RestrictAuthorMode" and
set it according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Policies\Microsoft\MMC]
Value Name:
RestrictAuthorMode
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = default, 1 = enable restriction)
101) Restrict
Installations from Removable Media (Windows 2000/XP)
This tweak stops users from attempting to install a program (with an .msi
extension) from removable media, such as CD-ROMs, floppy disks, and DVDs.
Create a new DWORD
value, or modify the existing value, called "DisableMedia" and set it
according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
Note: This setting applies
even when the installation is running in the user's security context.
User Key:
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Installer]
Value Name:
DisableMedia
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = default, 1 = enable restriction)
102) Restrict
Users from Running Specific Applications (Windows 2000/Me/XP) Popular
This setting allows you to specify applications and filenames that users are
restricted from running.
Open your registry and find the key
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\Policies\Explorer]
Create a new DWORD
value and name it "DisallowRun" set the value to "1" to
enable application restrictions or "0" to allow all applications to
run.
Then create a new
sub-key called [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\Policies\Explorer\DisallowRun] and define the applications the are to be
restricted. Creating a new string value for each application, named as
consecutive numbers, and setting the value to the filename to be restriced
(e.g. "regedit.exe").
Restart Windows for
the changes to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name:
DisallowRun
103) Secure
Access to CD-ROM Drives (Windows NT/2000/XP)
This setting determines whether data in the CD-ROM drive is accessible to other
users.
Because the CD-ROM
drive is a volume, by default, it is shared as an administrative share on the
network. If the value of this entry is 1, the CD-ROM drive is allocated to the
user as part of the interactive logon process and, therefore, only the current
user can access it. This prevents administrators and remote users (and even the
same user at a different workstation) from accessing the drive while the
current user is logged on to the computer. The drive is shared again when the
current user logs off the computer.
Value Meanings:
· '0' = Compact discs
in the CD-ROM drive can be accessed by all administrators in the domain.
· '1' = Only the user
logged on locally can access data on the compact discs in the CD-ROM drive.
Note: This value entry
satisfies, in part, the C2 security requirement that you must be able to secure
removable media.
System Key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
Value Name:
AllocateCDRoms
Data Type:
REG_SZ (String Value)
Value Data:
(0 = enabled, 1 = disabled)
104) Show Hidden
Folders and Files
(All Windows)
This setting controls whether hidden files and folders are displayed in
explorer when browsing the file system.
Create a new DWORD
value, or modify the existing value, called "Hidden" and set it
according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\
Advanced]
Value Name:
Hidden
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(1 = show hidden, 2 = do not show)
105) Show or
Hide "Open With" Program Checkbox (All Windows)
This setting allows you to control whether the checkbox to save the "Open
With" program is available when an unknown file type is opened.
To disable the check
box change the value of "(Default)" to "rundll32.exe
shell32.dll,OpenAs_RunDLL %1 %2".
To enable the checkbox change the value to "rundll32.exe
shell32.dll,OpenAs_RunDLL %1".
Return to the desktop
and press F5 for the change to take effect
System Key:
[HKEY_CLASSES_ROOT\Unknown\shell\openas\command]
Value Name:
(Default)
Data Type:
REG_SZ (String Value)
106) Specify
Anonymous Remote Registry Access (Windows NT/2000/XP)
This tweak allows you to specify which keys under the HKEY_LOCAL_MACHINE hive
that anonymous users are allowed to access remotely. This is useful because
some services require remote access to the registry to function correctly.
Create a new Multi-String value, or modify the existing
value, called "Machine" and set it according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
Note: These keys will
bypass general access restrictions but will still be restricted if an explicit
access restriction exists for that location.
System Key:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\
winreg\AllowedPaths]
Value Name:
Machine
Data Type:
REG_MULTI_SZ (Multi-String Value)
107) Specify
the Default Internet Explorer Download Directory (All Windows)
This setting is used to specify which directory should be used as the default
location to save downloaded files retrieved using Internet Explorer.
Create a new String
value, or modify the existing value, called "Download Directory" and
set it according to the value data below.
Exit your registry,
you may need to restart or log out of Windows for the change to take effect.
User Key:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer]
Value Name:
Download Directory
Data Type:
REG_SZ (String Value)
Value Data:
Qualified Directory
108) Windows
Netmeeting Policies and Restrictions (All Windows)
These restrictions and policies can be used to disable or restrict access to
certain features of Windows Netmeeting.
Create a new DWORD
value and name it according to the list of values below. Set the value to equal
"1" to enable the setting.
Restart Netmeeting for the changes to take effect
User Key:
[HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Conferencing]
System Key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Conferencing]
Data Type:
REG_DWORD (DWORD Value)
Value Data:
(0 = disable policy, 1 = enable policy)
♥--------THE END-------♥
