All Kinds of Restrictions for Windows 2000, XP, 2003, Vista, 2008 and 7

Following is a list of some interesting restrictions, which can be made in Windows 2000, XP, 2003, Vista, 2008 and 7. Like you can restrict Display properties, taskbar properties, folder options, etc. All tricks are based on Registry editing. So I'll tell the key name and the value, that you have to create for the restriction. If the key is not present, then simply create it.

NOTE: If you want to remove the restriction, then simply delete the DWORD value or set its value to 0

So here we start:

1.) Restrict Display Properties:

create DWORD value NoDispCPL and set its value to 1

2.) Restrict Taskbar Properties:

create DWORD value NoSetTaskbar and set its value to 1

3.) Restrict Folder Options:

create DWORD value NoFolderOptions and set its value to 1

4.) Restrict Locking/Unlocking the taskbar:

create DWORD value LockTaskbar and set its value to 1

5.) Restrict Active Desktop:

create DWORD value NoActiveDesktop and set its value to 1

6.) Restrict adding/deleting items from Toolbars:

create DWORD value NoToolbarCustomize and set its value to 1

7.) Restrict adding/deleting toolbars:

create DWORD value NoBandCustomize and set its value to 1

8.) Restrict right-click in Start Menu:

create DWORD value NoChangeStartMenu and set its value to 1

9.) Restrict Desktop Cleanup Wizard:

create DWORD value NoDesktopCleanupWizard and set its value to 1

10.) Restrict notification at low disk space:

create DWORD value NoLowDiskSpaceChecks and set its value to 1

11.) Restrict Taskbar Context Menu:

create DWORD value NoTrayContextMenu and set its value to 1

12.) Restrict Programs to run:

create String value with any name, like 1 and set its value to the program's EXE file.

e.g., If you want to restrict msconfig, then create a String value 1 and set its value to msconfig.exe. If you want to restrict more programs, then simply create more String values with names 2, 3 and so on and set their values to the program's exe.

13.) Restrict Registry Editor:

create DWORD value DisableRegistryTools and set its value to 1

14.) Restrict Task Manager:

create DWORD value DisableTaskMgr and set its value to 1

15.) Restrict Writing to USB Drives:

Create DWORD value WriteProtect and set its value to 1

16.) Restrict New option in context menu:

And delete the value of Default, e.g., empty it.

17.) Restrict Send To in context menu:

And delete the value of Default, e.g., empty it.

18.) Restrict Balloon Tips:

Create DWORD value EnableBalloonTips and set its value to 0

19.) Restrict Users to enable New XP StartMenu:

Create DWORD value NoSimpleStartMenu and set its value to 1

20.) Restrict Command Prompt:

Create DWORD value DisableCMD and set its value to 2

21.) Restrict Drives in My Computer:

In right-side pane, create a new DWORD value NoViewOnDrive and change its value as following:

And if you want more specific restrictions, like you want to restrict a combination of other drives, then you can use decimal no. instead of hexadecimal no. Following is a list for all drives decimal no.:

So if you want to disable a combination of drives, just sum their numbers and give the same value to NoViewOnDrive. e.g., for restricting C, D, E and F drives, give the value: 4+8+16+32 = 60

NOTE: You can also hide the drives using NoDrives DWORD value. The location and its value remain same as the above trick.

22.) Restrict RUN in New XP StartMenu:

Create DWORD value NoRun and set its value to 1

23.) Restrict Control Panel:

Create DWORD value NoControlPanel and set its value to 1

Above all are some common restrictions, if you want to know any specific restriction, then please post it. I'll try my best to give the registry code.

This article was posted in Security Zone, Troubleshooting, Windows 7, Windows Vista, Windows XP.

150 Comments

VG

^^ You can create a REG file to enable/disable things. So whenever you want to disable or enable something, just run the REG file. You can create the REG files by just exporting the desired key from regedit.
SL

Sounds like what I might need. As I am not too familiar with this, how would I go about this? Do you have a writeup on it?
SL

Also, I need to get the "start search" bar out from the Vista Start menu. No sence in locking it down if you can run everything from there.
VG

^^ Afaik, you can't remove the searchbar from startmenu. regarding creating REG file, open regedit, go to the key which you want to export, right-click on it and select Export. Save it at any location.
SL

Two part question.

If I rescrict the drives, will the search from the searchbar still be able to access the drives and will programs be able to run on those drives.

Second, on the REG file. Could you put a number of changes into one REG file? Like a change in just one folder of HKLM and a change in HKCU? If so how? I would like to be able to run from computer to computer to lock it down with only one reg file.

BTW, Thanks for the info...
VG

^^ If you restrict a drive, it'll not be accessible from searchbar. But the programs will keep continue running.

You can merge 2 separate keys. Just export the keys and copy paste one file content into other file except the first line which contains the registry editor version.
Rizwan

am running netcafe i want to rectrict the user not install or modify the clint to change the system seting or inslating the seatings i try to install deep freeze but virus blow up so any idea or software to rectrict them
thanks
rizwan
rizi98@yahoo.com

plz rply on my email also
yash

hello vg, i have sony rom in which c.d and d.v.d both are readed but only c.d is readed and can be writed. my problem is i am not able to read any d.v.d through my rom which i used to some months earlier.
Hi VG,
U hv shared a very nice Idea "Hw to hide files n folders without any 3rd party s/w". My ques is even after doin all such things If i go to search in XP and mark the option to search the hidden files so my files are not safe anymore...ANY RESTRICTION if u can suggest to restrict d search of hidden files???
Thnx
HBK

AMAZING VG!