All Kinds of Restrictions for Windows 2000, XP, 2003, Vista, 2008 and 7

Following is a list of some important restrictions, which can be made in Windows 2000, XP, Server 2003, Vista, Server 2008 and 7. For example, you can restrict Display properties, Taskbar properties, folder options, etc.

All tricks are based on Registry editing, you just need to open Registry Editor by providing regedit command in RUN and then create the mentioned key and set its value as given below:

NOTE: If you want to remove the restriction, simply delete the DWORD value or set its value to 0

1.) Restrict Display Properties:

create DWORD value NoDispCPL and set its value to 1

2.) Restrict Taskbar Properties:

create DWORD value NoSetTaskbar and set its value to 1

3.) Restrict Folder Options:

create DWORD value NoFolderOptions and set its value to 1

4.) Restrict Locking/Unlocking the taskbar:

create DWORD value LockTaskbar and set its value to 1

5.) Restrict Active Desktop:

create DWORD value NoActiveDesktop and set its value to 1

6.) Restrict adding/deleting items from Toolbars:

create DWORD value NoToolbarCustomize and set its value to 1

7.) Restrict adding/deleting toolbars:

create DWORD value NoBandCustomize and set its value to 1

8.) Restrict right-click in Start Menu:

create DWORD value NoChangeStartMenu and set its value to 1

9.) Restrict Desktop Cleanup Wizard:

create DWORD value NoDesktopCleanupWizard and set its value to 1

10.) Restrict notification at low disk space:

create DWORD value NoLowDiskSpaceChecks and set its value to 1

11.) Restrict Taskbar Context Menu:

create DWORD value NoTrayContextMenu and set its value to 1

12.) Restrict Programs to run:

create String value with any name, like 1 and set its value to the program's EXE file.

e.g., If you want to restrict msconfig, then create a String value 1 and set its value to msconfig.exe. If you want to restrict more programs, then simply create more String values with names 2, 3 and so on and set their values to the program's exe.

13.) Restrict Registry Editor:

create DWORD value DisableRegistryTools and set its value to 1

14.) Restrict Task Manager:

create DWORD value DisableTaskMgr and set its value to 1

15.) Restrict Writing to USB Drives:

Create DWORD value WriteProtect and set its value to 1

16.) Restrict New option in context menu:

And delete the value of Default, e.g., empty it.

17.) Restrict Send To in context menu:

And delete the value of Default, e.g., empty it.

18.) Restrict Balloon Tips:

Create DWORD value EnableBalloonTips and set its value to 0

19.) Restrict Users to enable New XP StartMenu:

Create DWORD value NoSimpleStartMenu and set its value to 1

20.) Restrict Command Prompt:

Create DWORD value DisableCMD and set its value to 2

21.) Restrict Drives in My Computer:

In right-side pane, create a new DWORD value NoViewOnDrive and change its value as following:

And if you want more specific restrictions, like you want to restrict a combination of other drives, then you can use decimal no. instead of hexadecimal no. Following is a list for all drives decimal no.:

So if you want to disable a combination of drives, just sum their numbers and give the same value to NoViewOnDrive. e.g., for restricting C, D, E and F drives, give the value: 4+8+16+32 = 60

NOTE: You can also hide the drives using NoDrives DWORD value. The location and its value remain same as the above trick.

22.) Restrict RUN in New XP StartMenu:

Create DWORD value NoRun and set its value to 1

23.) Restrict Control Panel:

Create DWORD value NoControlPanel and set its value to 1

Above are some common restrictions, if you want to know about any specific restriction, please let us know.

Complete list of AskVG articles

This article was posted in Security Zone, Troubleshooting, Windows 7, Windows Vista, Windows XP.

Share |

163 Comments

rohit

once when i open my windows it said NTLDR MISSING...what is this error about and how can i fix it? plz .reply yaar
piaqt

Will this work to restrict libraries on Win 7?
KM

Hello Mr. Vishal,

Your website is really awesome for someone who is not a networking/programmer person, in short a non-computer geek guy. I have learned a lot from your website and have started taking interest in the tips&tricks of my PC.
I have a question. Control panel in PC (windows XP) is restricted. I tried to follow your way but found out that I can't bring any changes inside regdit, that also is restricted by my friend. Apparently he has taken into himself to teach me such things the hard way.

Following is what happens:
1. I go to- HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
2. I select NoControlPanel and try to change the value data to "0".
3. Following error shows:
Title- Error Editing Value
Content- Cannot edit NoControlPanel: Error writing the value's new contents.

4. I thought maybe register editor is restricted to changes. So I go to- HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\System

5. But I get to see that there is now folder by the name System in the following path under Policies.

6. I try to add the folder, and another error pops up: Cannot create, error while opening it.

I am really out of options...Can you help me out a bit. I will be very much thankful to you.

Regards,
KM
VG

^^ You'll need to login as administrator to be able to create/modify registry keys or if you can access "gpedit.msc", then re-enable control panel from there.
Nick

can you apply these for certain users or profiles, i can only edit the keys in my admin profile, but cannot edit them in one of the other profiles.
VG

^^ if you want to set the restriction for all accounts, then create the DWORD value in "HKEY_LOCAL_MACHINE" key instead of "HKEY_CURRENT_USER".
Rhode

Hi VG, you have a little EXE for restricting copy on a specific file/folder? Nice site, BTW.
Rhode

Or, maybe you know something to disable it around registry or something, I'm searching for this for like a week already, no luck. Hope you could help me on this one. Thanks.
Sahil

hello VG
Thanks for wonderful help but in post 15 of USB there is a problem

Restrict Writing to USB Drives:

HKEY_LOCAL_MACHINE\SYSTEM\Current Control Set\Control\StorageDevicePolicies

Create DWORD value WriteProtect and set its value to 1

there is no location like this:
HKEY_LOCAL_MACHINE\SYSTEM\Current Control Set\Control\StorageDevicePolicies
henri

can you please share some tips on how to restrict from downloading?
and if its possible to work even on admin user? coz i didnt set up other users

and aslo, i tried to do one of your tips (restrict drive c:) but didnt work even if i restarted the pc, please help

thanks