Following is a list of some interesting restrictions, which can be made in Windows 2000, XP, 2003 and Vista. Like you can restrict Display properties, taskbar properties, folder options, etc. All tricks are based on Registry editing. So I’ll tell the key name and the value, that you have to create for the restriction. If the key is not present, then simply create it. So here we start:
1.) Restrict Display Properties:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\System
create DWORD value NoDispCPL and set its value to 1
2.) Restrict Taskbar Properties:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
create DWORD value NoSetTaskbar and set its value to 1
3.) Restrict Folder Options:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
create DWORD value NoFolderOptions and set its value to 1
4.) Restrict Locking/Unlocking the taskbar:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
create DWORD value LockTaskbar and set its value to 1
5.) Restrict Active Desktop:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
create DWORD value NoActiveDesktop and set its value to 1
6.) Restrict adding/deleting items from Toolbars:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
create DWORD value NoToolbarCustomize and set its value to 1
7.) Restrict adding/deleting toolbars:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
create DWORD value NoBandCustomize and set its value to 1
8.) Restrict right-click in Start Menu:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
create DWORD value NoChangeStartMenu and set its value to 1
9.) Restrict Desktop Cleanup Wizard:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
create DWORD value NoDesktopCleanupWizard and set its value to 1
10.) Restrict notification at low disk space:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
create DWORD value NoLowDiskSpaceChecks and set its value to 1
11.) Restrict Taskbar Context Menu:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
create DWORD value NoTrayContextMenu and set its value to 1
12.) Restrict Programs to run:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer\DisallowRun
create String value with any name, like 1 and set its value to the program’s EXE file.
e.g., If you want to restrict msconfig, then create a String value 1 and set its value to msconfig.exe. If you want to restrict more programs, then simply create more String values with names 2, 3 and so on and set their values to the program’s exe.
13.) Restrict Registry Editor:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\System
create DWORD value DisableRegistryTools and set its value to 1
14.) Restrict Task Manager:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\System
create DWORD value DisableTaskMgr and set its value to 1
15.) Restrict Writing to USB Drives:
HKEY_LOCAL_MACHINE\SYSTEM\Current Control Set\Control\StorageDevicePolicies
Create DWORD value WriteProtect and set its value to 1
16.) Restrict New option in context menu:
HKEY_CLASSES_ROOT\Directory\Background\shellex\ContextMenu Handlers\New
And delete the value of Default, e.g., empty it.
17.) Restrict Send To in context menu:
HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\ContextMenu Handlers\Send To
And delete the value of Default, e.g., empty it.
18.) Restrict Balloon Tips:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Explorer\Advanced
Create DWORD value EnableBalloonTips and set its value to 0
19.) Restrict Users to enable New XP StartMenu:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create DWORD value NoSimpleStartMenu and set its value to 1
20.) Restrict Command Prompt:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System
Create DWORD value DisableCMD and set its value to 2
21.) Restrict Drives in My Computer:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
In right-side pane, create a new DWORD value NoViewOnDrive and change its value as following:
3 : To Restrict A and B drives only.
4 : To Restrict C drive only.
7 : To Restrict A, B, and C drives only.
8 : To Restrict D drive only.
F : To Restrict A, B, C, and D drives only.
03FFFFFF : To Restrict all drives.
And if you want more specific restrictions, like you want to restrict a combination of other drives, then you can use decimal no. instead of hexadecimal no. Following is a list for all drives decimal no.:
A: 1
B: 2
C: 4
D: 8
E: 16
F: 32
G: 64
H: 128
I: 256
J: 512
K: 1024
L: 2048
M: 4096
N: 8192
O: 16384
P: 32768
Q: 65536
R: 131072
S: 262144
T: 524288
U: 1048576
V: 2097152
W: 4194304
X: 8388608
Y: 16777216
Z: 33554432
ALL: 67108863
So if you want to disable a combination of drives, just sum their numbers and give the same value to NoViewOnDrive. e.g., for restricting C, D, E and F drives, give the value: 4+8+16+32 = 60
NOTE: You can also hide the drives using NoDrives DWORD value. The location and its value remain same as the above trick.
22.) Restrict RUN in New XP StartMenu:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create DWORD value NoRun and set its value to 1
23.) Restrict Control Panel:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create DWORD value NoControlPanel and set its value to 1
Above all are some common restrictions, if you want to know any specific restriction, then please post it. I’ll try my best to give the registry code.


















Yogesh Sharma said:
What is different between core 2 duo or core 2 quad? Which one is better? and why?
Sarv said:
i was following step #21 and it worked perfectly. but the problem is that it won’t allow even me (admin) to access it. i only wanted to block it for other users. is there a way to bypass this?
Sarv said:
nvm. i figured it out that i’ve to login to that particular user account 1st
thx
Samir said:
i think i messed up!! i blocked the registry editor by mistake. how do i reverse it?
VG said:
^^ No problem. Follow this:
How to Enable Tools -> Folder Options and Registry Editor in Windows
rakesh said:
my computer date not changing and my computer is restricted.
VG said:
^^ Seems a virus problem. Pls go through “Is your system infected” topic in “Troubleshooting” section.
benoy said:
i have tried ur solution for not showing my documents during starting windows
but when i was starting two my documetns windows will come earlier but after applying ur solution one is coming again each time
Xmen said:
if i use any of above restriction then how can i restore it?
VG said:
^^ Simply by editing their value to “0″.
Xmen said:
Thanks, i’m going to check
Xmen said:
one more thing, how can i restrict the guest account ?
Xmen said:
i have problem, that is, its not working
steps i did for folder option
1. write the below codes in notepad.
———-
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer]
“NoFolderOptions”=dword:1
————-
2. save it to “.reg” extension…
3. run it…message appeared for successfully installed
but when i click on folder option in control panel, then it opened,
please tell where i did mistake?
VG said:
Remove space between “Current” and “Version”. It should be “CurrentVersion”.
Also you’ll have to log off to see the effect.
Xmen said:
hey yeah, it works….!!! thanks VG…
what about guest account, how can i restrict “User Accounts” like “Folder Option” ?
Stiff said:
registry editing has been disable by Administrator
Stiff said:
The below below mention is display message while Running ” Regedit ”
registry editing has been disable by Administrator
Stiff said:
The below below mention is display message while Running ” Regedit ”
registry editing has been disable by Administrator.
kindly suggest me some tips..
VG said:
Please read following tutorial:
Link
pushkaraj said:
Hi vishal, nice tutorial. btw i want to ask you , you have talked about most of the keys in HKCU. Can all of those keys be given the same path in HKLM so that the changes are made system-wide? Also, once that the changes have become system-wide, there is no need to add the same keys in hkcu. The keys that i am particularly asking about are those for restricting run command, cmd prompt, registry editor, task manager and folder options.
VG said:
^^ Yep. All keys can be created in HKLM to set the settings system wide.
Vipul said:
thanks to this site…..it helps me a lot…….
best of luck
VG said:
^^ Pleasure.
GOVU said:
Nice
Arnab said:
hey, vishal da. I’ve tried ur tips. But I cant disable msconfig !!!! Can u tell me why it’s happening?
valsan said:
Grrrrrrrrrrrrr8
Shams said:
Hi Vg
I have problem while startup in XP. It shows me “Windows cannot find ’ssvichosst.exe.’ Make sure you typed the name correctly, and then try again,To search for a file. click Start buttion, and then click search.
any help to this problem is highly appreciated.
Shams said:
Hi Vg
I have problem while startup in XP. It shows me “Windows cannot find ’ssvichosst.exe.’ Make sure you typed the name correctly, and then try again,To search for a file. click Start buttion, and then click search”.
any help to this problem is highly appreciated.
Shams said:
Hi Vg
I have problem while startup in XP. It shows me “Windows cannot find ’ssvichosst.exe.’ Make sure you typed the name correctly, and then try again,To search for a file. click Start buttion, and then click search”.
any help to this problem is highly appreciated.
VG said:
^^ Type “msconfig” in Run and press Enter. Goto “Startup” tab and uncheck the entry related to this file and Apply. Now restart the system and you should not get this error message now.
Shams said:
Thanks…..done, but the issue still remain the same….next please
VG said:
That was quite fast. Did you restart the system? Anyway follow instructions given in following topic:
http://www.askvg.com/is-your-system-infected-with-a-virus-spyware-adware-trojan/
Shams said:
Yes I have restarted the system thrice. also checked the entry is unchecked in msconfig. vl do the steps from the link.
Shams said:
hi Vg!
Under My Computer “drive E” logo has been change to Wireless Network setup wizard logo. I dont know how it has changed. Can you help me on how to rollback with the default drive logo ?
Shams said:
hi Vg!
Under My Computer using XP “drive E” logo has been change to Wireless Network setup wizard logo. I dont know how it has changed. Can you help me on how to rollback with the default drive logo ?
VG said:
^^ Please follow solution given in following topic:
http://www.askvg.com/how-to-fix-corrupt-drive-icons-in-my-computer/
Prince said:
Hey Vishal, this is one of the most wonderful articles on your AWESOME site!! I have learnt soo much from here! ThanQ very much! And I feel proud that a fellow Indian owns this site!
Keep up the awesome work! 
VG said:
^^ My pleasure.
Pradeep said:
Hey Vishal, I have enebled hibernation on my windows xp pro. But it has suddenly stopped hibernating. I have checked and rechecked the control panel/power option/enable hibernation. Everything is ok. I have unchecked and checked, I have tried rebooting after each step. But nothing working. Please help.
VG said:
^^ Disable Hibernation and restart your system. Now open My computer and goto C: drive. Enable “Show hidden files and folders” option and disable “Hide protected system files” option in “Tools -> Folder Options”.
Now you’ll see a hidden file “hiberfil.sys” in C: drive. Delete it and restart system. Now enable Hibernation again and it should work now.
Saurabh said:
Hi VG,
It’s simply AWESOME n u r a Genius.
Also I hv a query here, d above restrictions r applicable to dat particular user but being d Admin if i want to block d access to some files or drives may b, how can i do so.
Also Plz give me d link 4 changing Start Menu from ‘Start’ to sum other text.
Plz Suggest,
Thnx.
Saurabh said:
Hi VG,
It’s simply AWESOME n u r a Genius.
Also I hv a query here, d above restrictions r applicable to dat particular user but being d Admin if i want to block d access to some files or drives may b, how can i do so.
Also Plz give me d link 4 changing Start Menu from ‘Start’ to sum other text.
Plz Suggest,
Thnx.
VG said:
^^ You can use NTFS file system and then restrict a particular drive or folder to a no. of users.
Reg to changing start button text, there is a detailed tutorial in “Resource Hacker” section. So pls check it.
Saurabh said:
I was trying Step# 13 & 14 n was following
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\System
but suddenly i realise der is no tab under “Policies” as System der is only one n i.e. explorer.
Tell me how to disable Task Mgr n Registry editor.
VG said:
^^ Right-click on “Policies” and select “New -> Key” and give it name “System”.
bhaskar said:
how to restrict some websites through registry editor
bhaskar said:
how to change start button name into my name
bhaskar said:
what are all the loops to lock the complete systems
bhaskar said:
i want to know about group policy
bhaskar said:
how to retricts certain devise options for ex right click, keyboard opertions, controlpanel
Gayathri said:
Sir,
I had recently tried to reload XP OS in my computer and had registered/ activated the software. This was after an aborted attempted to make a raid disk by making the original hard disk as dynamic drive. Thereafter, I formatted both the hard disks as basic drives, the first drive has the Windows OS in C drive and the second disk has an MBR active too. I did not change it. I had recently added RAM too. But the system has started giving problems since the reload of OS.
1. OS does not seem to be stable, shows errors at times, refuses to shut down/ log off, screen indicating dumping memory etc are noticed. Even Office 2007 and Norton 2007 was not loading, some .CAB file not found in the former and fatal error in the latter was the reason given by Windows. After attmepting updates on XP from MS site, Office 2007 loaded successfully.
2. The problem of Norton not loading and non-response to shut down command/ dumping memeory etc. persists.
Can you please help.
Gayathri.
VG said:
^^ Hello Gayathri
After reading your problem, It seems a faulty RAM module problem. Do one thing! Remove the newly added RAM and run your system for some time and check whether the problem still persists or not. I’m sure you’ll not face the problem again. The fatal error and umping problem occur because of either RAM module is faulty or not matching with the existing one.
Saurabh said:
Hi, VG
I was using “NoFolderOptions” restriction for a long time but now m facing 1 problem.
wenever i put d value 1 it works but after couple of minutes i can again see Folder options in d tools Menu. Wen i open regedit to see wats wrong i cant locate d same Dword value n thus i recreat a new Dword value but d same thing happens.
Plz let me know wats wrong.
Saurabh said:
One more Problem…
I was editing dis entry to rename Recycle Bin but it’s not wrking, m i doing it d right way n if yes den why its not showing d changed text.
HKEY_CLASSES_ROOT/CLSID/{645FF040-5081-1
01B-9F08-00AA002F954E}
VG said:
^^ The key is automatically getting removed, that means some script/virus is running in background which is deleting the key. I’ll advise you to post your Hijack this log file content in following topic:
http://www.askvg.com/is-your-system-infected-with-a-virus-spyware-adware-trojan/
Saurabh said:
Hi! VG
I asked u dis previously but hvn’t got any reply from ur end, Buddy plz help me abt it.
How can i rename d Recycle Bin, though i was trying editing dis key but in vain, m i doing anything wrong.
HKEY_CLASSES_ROOT/CLSID/{645FF040-5081-1
01B-9F08-00AA002F954E}_then changing default value from recycle bin to sumthing else.
Thnx dear.
VG said:
^^ Goto following key:
HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\ShellFolder
In right-side pane, double click on “Attributes” and change the first 2 digits from 40 to 50
Now you can rename the Recycle Bin icon on desktop by right-clicking on it and select rename. Or select it and press F2.
Saurabh said:
Hi! BRO,
Long time ago i asked u about the “Access Denied” Restriction to particular folder n u told me i can do it in case of NTFS file system.
All i want to ask here is der Any registry key or any other way 4 d same in case of FAT32.
THNX.
VG said:
^^ Nope but you can use various 3rd party software to restrict folders.
Saurabh Gupta said:
Hi! VG,
How can i re-enable d GPedit.msc while it has been disabled(RUN open it but it shows dat it has been blocked), however d registry is not disabled.
n in case if d registry n GPedit.msc both r blocked den wat to do????????
VG said:
^^ If a program is blocked but registry editor is enabled, then you can follow solution of point 12 given in above tutorial.
If regedit is also disabled, then first you’ll have to enable regedit. Use the method given in following topic:
http://www.askvg.com/how-to-enable-tools-folder-options-and-registry-editor-in-windows/
saurabh gupta said:
Hey, Bro,
Plz tell me how can i restrict a person from installing any software on a particular system.
THNX.
saurabh gupta said:
Hey Bro,
It seems u replied 2 d above ques but its not visible, plz reply.
Thnx.
VG said:
^^ Sorry but its almost impossible.
saurabh gupta said:
Well i hv seen dat sort of restrictions a few times.

n thus was asking u.
Thnx anyway
VG said:
^^ You can use the trick mentioned in Point 12 to restrict running of specific programs like setup.exe, etc.
Prasad said:
hi
i tried the drive restrictions in regedit, and in the command prompt the drives are accessing, but i want to access the command prompt for certain softwares for example java. turboc etc. Is It possible????????
VG said:
^^ No. Command Prompt will be able to access the drives.
rajendra s.shegrue said:
how i can diesebal the controlpanel in win 2000 give the only path
VG said:
^^ Please check Point 23. I have added it on your request.