ADD OR CHANGE RESTRICTIONS

If you want to make restrictions to what users can do or use on their computer, you can edit the Registry. You can add and delete Windows features in this Key shown below.



Zero is Off and the value 1 is On. Example: to Save Windows settings add or modify the value name NoSaveSettings to 0, if set to1 Windows will not save settings. And NoDeletePrinter set to 1 will prevent the user from deleting a printer.



The same key shows up at:

HKEY_USERS\(yourprofilename)\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer so change it there also if you are using different profiles.



1.Open RegEdit

2.Go to HKEY_CURRENT_USER\Software\Microsoft\windows\CurrentVersion\Policies

3.Go to the Explorer Key (Additional keys that can be created under Policies are System, Explorer, Network and WinOldApp )

4.You can then add DWORD or binary values set to 1 in the appropriate keys for ON and 0 for off.

NoDeletePrinter - Disables Deletion of Printers

NoAddPrinter - Disables Addition of Printers

NoRun - Disables Run Command

NoSetFolders - Removes Folders from Settings on Start Menu

NoSetTaskbar - Removes Taskbar from Settings on Start Menu

NoFind - Removes the Find Command

NoDrives - Hides Drives in My Computers

NoNetHood - Hides the Network Neighborhood

NoDesktop - Hides all icons on the Desktop

NoClose - Disables Shutdown

NoSaveSettings - Don't save settings on exit

DisableRegistryTools - Disable Registry Editing Tools

NoRecentDocsMenu - Hides the Documents shortcut at the Start button

NoRecentDocsHistory- Clears history of Documents

NoFileMenu _ Hides the Files Menu in Explorer

NoActiveDesktop - No Active Desktop

NoActiveDesktopChanges- No changes allowed

NoInternetIcon - No Internet Explorer Icon on the Desktop

NoFavoritesMenu - Hides the Favorites menu

NoChangeStartMenu _ Disables changes to the Start Menu

NoFolderOptions _ Hides the Folder Options in the Explorer

ClearRecentDocsOnExit - Empty the recent Docs folder on reboot

NoLogoff - Hides the Log Off .... in the Start Menu.







And here are a few more you can play with

ShowInfoTip

NoTrayContextMenu

NoStartMenuSubFolders

NoWindowsUpdate

NoViewContextMenu

EnforceShellExtensionSecurity

LinkResolveIgnoreLinkInfo

NoDriveTypeAutoRun

NoStartBanner

NoSetActiveDesktop

EditLevel

NoNetConnectDisconnect

RestrictRun - Disables all exe programs except those listed in the RestrictRun subkey

This key has many other available keys, there is one to even hide the taskbar, one to hide the control panel and more. I'm not telling you how, as someone may want to play a trick on you. The policies key has a great deal of control over how and what program can run and how one can access what feature.



In the System key you can enter:

NoDispCPL - Disable Display Control Panel

NoDispBackgroundPage - Hide Background Page

NoDispScrSavPage - Hide Screen Saver Page

NoDispAppearancePage - Hide Appearance Page

NoDispSettingsPage - Hide Settings Page

NoSecCPL - Disable Password Control Panel

NoPwdPage - Hide Password Change Page

NoAdminPage - Hide Remote Administration Page

NoProfilePage - Hide User Profiles Page

NoDevMgrPage - Hide Device Manager Page

NoConfigPage - Hide Hardware Profiles Page

NoFileSysPage - Hide File System Button

NoVirtMemPage - Hide Virtual Memory Button



In the Network key you can enter:

NoNetSetup - Disable the Network Control Panel

NoNetSetupIDPage - Hide Identification Page

NoNetSetupSecurityPage - Hide Access Control Page

NoFileSharingControl - Disable File Sharing Controls

NoPrintSharing - Disable Print Sharing Controls



In the WinOldApp key you can enter:

Disabled - Disable MS-DOS Prompt

NoRealMode - Disables Single-Mode MS-DOS



To add or remove programs in the Registry

1.Open RegEdit

2.Go to the desired Key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

3. Add a new String Value and name it anything you like

4. For the value data, enter the path and executable for the program you want to run.



By adding the value to the HKEY_CURRENT_USER hive instead allows the program to start only when that user is logged on.



If you add the value to the RunOnce key the program will run once and be removed from the key by Windows.