You are on page 1of 5

So I'll tell the keyname and the value, that u hv to create for the restriction!

If the key is not present, then simply create it.


So here we go:
1.) Restrict Display Properties:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System
create DWORD value NoDispCPL and set its value to 1

2.) Restrict Taskbar Properties:


HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer
create DWORD value NoSetTaskbar and set its value to 1

3.) Restrict Folder Options:


HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer
create DWORD value NoFolderOptions and set its value to 1

4.) Restrict Locking/Unlocking the taskbar:


HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer
create DWORD value LockTaskbar and set its value to 1

5.) Restrict Active Desktop:


HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer
create DWORD value NoActiveDesktop and set its value to 1

6.) Restrict adding/deleting items from Toolbars:


HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer
create DWORD value NoToolbarCustomize and set its value to 1

7.) Restrict adding/deleting toolbars:


HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer
create DWORD value NoBandCustomize and set its value to 1

8.) Restrict right-click in Start Menu:


HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer
create DWORD value NoChangeStartMenu and set its value to 1

9.) Restrict Desktop Cleanup Wizard:


HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer
create DWORD value NoDesktopCleanupWizard and set its value to 1

10.) Restrict notification at low disk space:


HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer
create DWORD value NoLowDiskSpaceChecks and set its value to 1

11.) Restrict Taskbar Context Menu:


HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer
create DWORD value NoTrayContextMenu and set its value to 1

12.) Restrict Programs to run:


HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer\D
isallowRun
create String value with any name, like 1 and set its value to the program's EXE
file.
e.g., If u want to restrict msconfig, then create a String value 1 and set its v
alue to msconfig.exe. If u want to restrict more programs, then simply create mo
re String values with names 2, 3 and so on and set their values to the program's
exe.

13.) Restrict Registry Editor:


HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System
create DWORD value DisableRegistryTools and set its value to 1

14.) Restrict Task Manager:


HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System
create DWORD value DisableTaskMgr and set its value to 1

15.) Restrict Drives in My Computer:


HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer
In right-side pane, create a new DWORD value NoViewOnDrive and change its value
as following:
3 : To Restrict A and B drives only.
4 : To Restrict C drive only.
7 : To Restrict A, B, and C drives only.
8 : To Restrict D drive only.
F : To Restrict A, B, C, and D drives only.
03FFFFFF : To Restrict all drives.

And if you want more specific restrictions, like you want to restrict a combinat
ion of other drives, then you can use decimal no. instead of hexadecimal no. Fol
lowing is a list for all drives decimal no.:

A: 1
B: 2
C: 4
D:
E:
F:
G:
H:

8
16
32
64
128

I: 256
J: 512
K: 1024
L: 2048
M: 4096
N: 8192
O: 16384
P: 32768
Q: 65536
R: 131072
S: 262144
T: 524288
U: 1048576
V: 2097152
W: 4194304
X: 8388608
Y: 16777216
Z: 33554432
ALL: 67108863
So if you want to disable a combination of drives, just sum their numbers and gi
ve the same value to NoViewOnDrive. e.g., for restricting CDEF drives, give the
value: 4+8+16+32 = 60
NOTE: You can also hide the drives using NoDrives DWORD value. The location and
its value remain same as the above trick.

16.) Restrict New option in context menu:


HKEY_CLASSES_ROOT\Directory\Background\shellex\Con textMenuHandlers\New
And delete the value of Default, e.g., empty it.

17.) Restrict Send To in context menu:


HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\Con textMenuHandlers\Send
To
And delete the value of Default, e.g., empty it.

18.) Restrict Balloon Tips:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Explorer\Advanced
Create DWORD value EnableBalloonTips and set its value to 0

19.) Restrict Users to enable New XP StartMenu:


HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer
Create DWORD value NoSimpleStartMenu and set its value to 1

20.) Restrict Command Prompt:


HKEY_CURRENT_USER\Software\Policies\Microsoft\Wind ows\System
Create DWORD value DisableCMD and set its value to 2

21.) Restrict Writing to USB Drives:


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\StorageDevicePolicies
Create DWORD value WriteProtect and set its value to 1

22.) Restrict RUN in New XP StartMenu:


HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer
Create DWORD value NoRun and set its value to 1

You might also like