All Kinds of Restrictions for Windows 2000, XP, 2003 and Vista

Following is a list of some interesting restrictions, which can be made in Windows 2000, XP, 2003 and Vista. Like you can restrict Display properties, taskbar properties, folder options, etc. All tricks are based on Registry editing. So I’ll tell the key name and the value, that you have to create for the restriction. If the key is not present, then simply create it. So here we start:

1.) Restrict Display Properties:

create DWORD value NoDispCPL and set its value to 1

2.) Restrict Taskbar Properties:

create DWORD value NoSetTaskbar and set its value to 1

3.) Restrict Folder Options:

create DWORD value NoFolderOptions and set its value to 1

4.) Restrict Locking/Unlocking the taskbar:

create DWORD value LockTaskbar and set its value to 1

5.) Restrict Active Desktop:

create DWORD value NoActiveDesktop and set its value to 1

6.) Restrict adding/deleting items from Toolbars:

create DWORD value NoToolbarCustomize and set its value to 1

7.) Restrict adding/deleting toolbars:

create DWORD value NoBandCustomize and set its value to 1

8.) Restrict right-click in Start Menu:

create DWORD value NoChangeStartMenu and set its value to 1

9.) Restrict Desktop Cleanup Wizard:

create DWORD value NoDesktopCleanupWizard and set its value to 1

10.) Restrict notification at low disk space:

create DWORD value NoLowDiskSpaceChecks and set its value to 1

11.) Restrict Taskbar Context Menu:

create DWORD value NoTrayContextMenu and set its value to 1

12.) Restrict Programs to run:

create String value with any name, like 1 and set its value to the program’s EXE file.

e.g., If you want to restrict msconfig, then create a String value 1 and set its value to msconfig.exe. If you want to restrict more programs, then simply create more String values with names 2, 3 and so on and set their values to the program’s exe.

13.) Restrict Registry Editor:

create DWORD value DisableRegistryTools and set its value to 1

14.) Restrict Task Manager:

create DWORD value DisableTaskMgr and set its value to 1

15.) Restrict Writing to USB Drives:

Create DWORD value WriteProtect and set its value to 1

16.) Restrict New option in context menu:

And delete the value of Default, e.g., empty it.

17.) Restrict Send To in context menu:

And delete the value of Default, e.g., empty it.

18.) Restrict Balloon Tips:

Create DWORD value EnableBalloonTips and set its value to 0

19.) Restrict Users to enable New XP StartMenu:

Create DWORD value NoSimpleStartMenu and set its value to 1

20.) Restrict Command Prompt:

Create DWORD value DisableCMD and set its value to 2

21.) Restrict Drives in My Computer:

In right-side pane, create a new DWORD value NoViewOnDrive and change its value as following:

And if you want more specific restrictions, like you want to restrict a combination of other drives, then you can use decimal no. instead of hexadecimal no. Following is a list for all drives decimal no.:

So if you want to disable a combination of drives, just sum their numbers and give the same value to NoViewOnDrive. e.g., for restricting C, D, E and F drives, give the value: 4+8+16+32 = 60

NOTE: You can also hide the drives using NoDrives DWORD value. The location and its value remain same as the above trick.

22.) Restrict RUN in New XP StartMenu:

Create DWORD value NoRun and set its value to 1

23.) Restrict Control Panel:

Create DWORD value NoControlPanel and set its value to 1

Above all are some common restrictions, if you want to know any specific restriction, then please post it. I’ll try my best to give the registry code.

What Next?

If you liked this article, you can share it with others using the following link:

You can also subscribe to our RSS feed to get regular updates:

Subscribe to RSS Feed

Or you can subscribe to our daily newsletter. Do not worry, You will receive only one e-mail per day and you can unsubscribe any time using the "Unsubscribe" link given in the mail:

Subscribe to Newsletter

70 Replies:

Yogesh Sharma said:

What is different between core 2 duo or core 2 quad? Which one is better? and why?
Sarv said:

i was following step #21 and it worked perfectly. but the problem is that it won’t allow even me (admin) to access it. i only wanted to block it for other users. is there a way to bypass this?
Sarv said:

nvm. i figured it out that i’ve to login to that particular user account 1st

thx
Samir said:

i think i messed up!! i blocked the registry editor by mistake. how do i reverse it?
VG said:

^^ No problem. Follow this:

How to Enable Tools -> Folder Options and Registry Editor in Windows
rakesh said:

my computer date not changing and my computer is restricted.
VG said:

^^ Seems a virus problem. Pls go through “Is your system infected” topic in “Troubleshooting” section.
benoy said:

i have tried ur solution for not showing my documents during starting windows
but when i was starting two my documetns windows will come earlier but after applying ur solution one is coming again each time
Xmen said:

if i use any of above restriction then how can i restore it?
VG said:

^^ Simply by editing their value to “0″.
Xmen said:

Thanks, i’m going to check
Xmen said:

one more thing, how can i restrict the guest account ?
Xmen said:

i have problem, that is, its not working
steps i did for folder option
1. write the below codes in notepad.

———-
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer]
“NoFolderOptions”=dword:1
————-

2. save it to “.reg” extension…
3. run it…message appeared for successfully installed

but when i click on folder option in control panel, then it opened,
please tell where i did mistake?
VG said:

Remove space between “Current” and “Version”. It should be “CurrentVersion”.
Also you’ll have to log off to see the effect.
Xmen said:

hey yeah, it works….!!! thanks VG…
what about guest account, how can i restrict “User Accounts” like “Folder Option” ?
Stiff said:

registry editing has been disable by Administrator
Stiff said:

The below below mention is display message while Running ” Regedit ”
registry editing has been disable by Administrator
Stiff said:

The below below mention is display message while Running ” Regedit ”
registry editing has been disable by Administrator.

kindly suggest me some tips..
VG said:

Please read following tutorial:

Link
pushkaraj said:

Hi vishal, nice tutorial. btw i want to ask you , you have talked about most of the keys in HKCU. Can all of those keys be given the same path in HKLM so that the changes are made system-wide? Also, once that the changes have become system-wide, there is no need to add the same keys in hkcu. The keys that i am particularly asking about are those for restricting run command, cmd prompt, registry editor, task manager and folder options.
VG said:

^^ Yep. All keys can be created in HKLM to set the settings system wide.
Vipul said:

thanks to this site…..it helps me a lot…….
best of luck
VG said:

^^ Pleasure.
GOVU said:

Nice
Arnab said:

hey, vishal da. I’ve tried ur tips. But I cant disable msconfig !!!! Can u tell me why it’s happening?
valsan said:

Grrrrrrrrrrrrr8
Shams said:

Hi Vg

I have problem while startup in XP. It shows me “Windows cannot find ’ssvichosst.exe.’ Make sure you typed the name correctly, and then try again,To search for a file. click Start buttion, and then click search.

any help to this problem is highly appreciated.
Shams said:

Hi Vg

I have problem while startup in XP. It shows me “Windows cannot find ’ssvichosst.exe.’ Make sure you typed the name correctly, and then try again,To search for a file. click Start buttion, and then click search”.

any help to this problem is highly appreciated.
Shams said:

Hi Vg

I have problem while startup in XP. It shows me “Windows cannot find ’ssvichosst.exe.’ Make sure you typed the name correctly, and then try again,To search for a file. click Start buttion, and then click search”.

any help to this problem is highly appreciated.
VG said:

^^ Type “msconfig” in Run and press Enter. Goto “Startup” tab and uncheck the entry related to this file and Apply. Now restart the system and you should not get this error message now.
Shams said:

Thanks…..done, but the issue still remain the same….next please
VG said:

That was quite fast. Did you restart the system? Anyway follow instructions given in following topic:

http://www.askvg.com/is-your-system-infected-with-a-virus-spyware-adware-trojan/
Shams said:

Yes I have restarted the system thrice. also checked the entry is unchecked in msconfig. vl do the steps from the link.
Shams said:

hi Vg!

Under My Computer “drive E” logo has been change to Wireless Network setup wizard logo. I dont know how it has changed. Can you help me on how to rollback with the default drive logo ?
Shams said:

hi Vg!

Under My Computer using XP “drive E” logo has been change to Wireless Network setup wizard logo. I dont know how it has changed. Can you help me on how to rollback with the default drive logo ?
VG said:

^^ Please follow solution given in following topic:

http://www.askvg.com/how-to-fix-corrupt-drive-icons-in-my-computer/
Prince said:

Hey Vishal, this is one of the most wonderful articles on your AWESOME site!! I have learnt soo much from here! ThanQ very much! And I feel proud that a fellow Indian owns this site! Keep up the awesome work!
VG said:

^^ My pleasure.
Pradeep said:

Hey Vishal, I have enebled hibernation on my windows xp pro. But it has suddenly stopped hibernating. I have checked and rechecked the control panel/power option/enable hibernation. Everything is ok. I have unchecked and checked, I have tried rebooting after each step. But nothing working. Please help.
VG said:

^^ Disable Hibernation and restart your system. Now open My computer and goto C: drive. Enable “Show hidden files and folders” option and disable “Hide protected system files” option in “Tools -> Folder Options”.

Now you’ll see a hidden file “hiberfil.sys” in C: drive. Delete it and restart system. Now enable Hibernation again and it should work now.
Saurabh said:

Hi VG,
It’s simply AWESOME n u r a Genius.
Also I hv a query here, d above restrictions r applicable to dat particular user but being d Admin if i want to block d access to some files or drives may b, how can i do so.
Also Plz give me d link 4 changing Start Menu from ‘Start’ to sum other text.
Plz Suggest,
Thnx.
Saurabh said:

Hi VG,
It’s simply AWESOME n u r a Genius.
Also I hv a query here, d above restrictions r applicable to dat particular user but being d Admin if i want to block d access to some files or drives may b, how can i do so.
Also Plz give me d link 4 changing Start Menu from ‘Start’ to sum other text.
Plz Suggest,
Thnx.
VG said:

^^ You can use NTFS file system and then restrict a particular drive or folder to a no. of users.

Reg to changing start button text, there is a detailed tutorial in “Resource Hacker” section. So pls check it.
Saurabh said:

I was trying Step# 13 & 14 n was following
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\System
but suddenly i realise der is no tab under “Policies” as System der is only one n i.e. explorer.
Tell me how to disable Task Mgr n Registry editor.
VG said:

^^ Right-click on “Policies” and select “New -> Key” and give it name “System”.
bhaskar said:

how to restrict some websites through registry editor
bhaskar said:

how to change start button name into my name
bhaskar said:

what are all the loops to lock the complete systems
bhaskar said:

i want to know about group policy
bhaskar said:

how to retricts certain devise options for ex right click, keyboard opertions, controlpanel
Gayathri said:

Sir,

I had recently tried to reload XP OS in my computer and had registered/ activated the software. This was after an aborted attempted to make a raid disk by making the original hard disk as dynamic drive. Thereafter, I formatted both the hard disks as basic drives, the first drive has the Windows OS in C drive and the second disk has an MBR active too. I did not change it. I had recently added RAM too. But the system has started giving problems since the reload of OS.

1. OS does not seem to be stable, shows errors at times, refuses to shut down/ log off, screen indicating dumping memory etc are noticed. Even Office 2007 and Norton 2007 was not loading, some .CAB file not found in the former and fatal error in the latter was the reason given by Windows. After attmepting updates on XP from MS site, Office 2007 loaded successfully.

2. The problem of Norton not loading and non-response to shut down command/ dumping memeory etc. persists.

Can you please help.

Gayathri.
VG said:

^^ Hello Gayathri

After reading your problem, It seems a faulty RAM module problem. Do one thing! Remove the newly added RAM and run your system for some time and check whether the problem still persists or not. I’m sure you’ll not face the problem again. The fatal error and umping problem occur because of either RAM module is faulty or not matching with the existing one.
Saurabh said:

Hi, VG
I was using “NoFolderOptions” restriction for a long time but now m facing 1 problem.
wenever i put d value 1 it works but after couple of minutes i can again see Folder options in d tools Menu. Wen i open regedit to see wats wrong i cant locate d same Dword value n thus i recreat a new Dword value but d same thing happens.
Plz let me know wats wrong.
Saurabh said:

One more Problem…
I was editing dis entry to rename Recycle Bin but it’s not wrking, m i doing it d right way n if yes den why its not showing d changed text.
HKEY_CLASSES_ROOT/CLSID/{645FF040-5081-1
01B-9F08-00AA002F954E}
VG said:

^^ The key is automatically getting removed, that means some script/virus is running in background which is deleting the key. I’ll advise you to post your Hijack this log file content in following topic:

http://www.askvg.com/is-your-system-infected-with-a-virus-spyware-adware-trojan/
Saurabh said:

Hi! VG
I asked u dis previously but hvn’t got any reply from ur end, Buddy plz help me abt it.
How can i rename d Recycle Bin, though i was trying editing dis key but in vain, m i doing anything wrong.
HKEY_CLASSES_ROOT/CLSID/{645FF040-5081-1
01B-9F08-00AA002F954E}_then changing default value from recycle bin to sumthing else.
Thnx dear.
VG said:

^^ Goto following key:

HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\ShellFolder

In right-side pane, double click on “Attributes” and change the first 2 digits from 40 to 50

Now you can rename the Recycle Bin icon on desktop by right-clicking on it and select rename. Or select it and press F2.
Saurabh said:

Hi! BRO,
Long time ago i asked u about the “Access Denied” Restriction to particular folder n u told me i can do it in case of NTFS file system.
All i want to ask here is der Any registry key or any other way 4 d same in case of FAT32.
THNX.
VG said:

^^ Nope but you can use various 3rd party software to restrict folders.
Saurabh Gupta said:

Hi! VG,
How can i re-enable d GPedit.msc while it has been disabled(RUN open it but it shows dat it has been blocked), however d registry is not disabled.
n in case if d registry n GPedit.msc both r blocked den wat to do????????
VG said:

^^ If a program is blocked but registry editor is enabled, then you can follow solution of point 12 given in above tutorial.

If regedit is also disabled, then first you’ll have to enable regedit. Use the method given in following topic:

http://www.askvg.com/how-to-enable-tools-folder-options-and-registry-editor-in-windows/
saurabh gupta said:

Hey, Bro,
Plz tell me how can i restrict a person from installing any software on a particular system.
THNX.
saurabh gupta said:

Hey Bro,
It seems u replied 2 d above ques but its not visible, plz reply.
Thnx.
VG said:

^^ Sorry but its almost impossible.
saurabh gupta said:

Well i hv seen dat sort of restrictions a few times.
n thus was asking u.
Thnx anyway
VG said:

^^ You can use the trick mentioned in Point 12 to restrict running of specific programs like setup.exe, etc.
Prasad said:

hi

i tried the drive restrictions in regedit, and in the command prompt the drives are accessing, but i want to access the command prompt for certain softwares for example java. turboc etc. Is It possible????????
VG said:

^^ No. Command Prompt will be able to access the drives.
rajendra s.shegrue said:

how i can diesebal the controlpanel in win 2000 give the only path
VG said:

^^ Please check Point 23. I have added it on your request.