All Kinds of Restrictions for Windows 2000, XP, 2003, Vista, 2008 and 7



Following is a list of some important restrictions, which can be made in Windows 2000, XP, Server 2003, Vista, Server 2008 and 7. For example, you can restrict Display properties, Taskbar properties, folder options, etc.

All tricks are based on Registry editing, you just need to open Registry Editor by providing regedit command in RUN and then create the mentioned key and set its value as given below:

NOTE: If you want to remove the restriction, simply delete the DWORD value or set its value to 0

1.) Restrict Display Properties:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\System

create DWORD value NoDispCPL and set its value to 1

2.) Restrict Taskbar Properties:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

create DWORD value NoSetTaskbar and set its value to 1

3.) Restrict Folder Options:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

create DWORD value NoFolderOptions and set its value to 1

4.) Restrict Locking/Unlocking the taskbar:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

create DWORD value LockTaskbar and set its value to 1

5.) Restrict Active Desktop:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

create DWORD value NoActiveDesktop and set its value to 1

6.) Restrict adding/deleting items from Toolbars:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

create DWORD value NoToolbarCustomize and set its value to 1

7.) Restrict adding/deleting toolbars:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

create DWORD value NoBandCustomize and set its value to 1

8.) Restrict right-click in Start Menu:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

create DWORD value NoChangeStartMenu and set its value to 1

9.) Restrict Desktop Cleanup Wizard:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

create DWORD value NoDesktopCleanupWizard and set its value to 1

10.) Restrict notification at low disk space:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

create DWORD value NoLowDiskSpaceChecks and set its value to 1

11.) Restrict Taskbar Context Menu:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

create DWORD value NoTrayContextMenu and set its value to 1

12.) Restrict Programs to run:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer\DisallowRun

create String value with any name, like 1 and set its value to the program's EXE file.

e.g., If you want to restrict msconfig, then create a String value 1 and set its value to msconfig.exe. If you want to restrict more programs, then simply create more String values with names 2, 3 and so on and set their values to the program's exe.

13.) Restrict Registry Editor:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\System

create DWORD value DisableRegistryTools and set its value to 1

14.) Restrict Task Manager:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\System

create DWORD value DisableTaskMgr and set its value to 1

15.) Restrict Writing to USB Drives:

HKEY_LOCAL_MACHINE\SYSTEM\Current Control Set\Control\StorageDevicePolicies

Create DWORD value WriteProtect and set its value to 1

16.) Restrict New option in context menu:

HKEY_CLASSES_ROOT\Directory\Background\shellex\ContextMenu Handlers\New

And delete the value of Default, e.g., empty it.

17.) Restrict Send To in context menu:

HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\ContextMenu Handlers\Send To

And delete the value of Default, e.g., empty it.

18.) Restrict Balloon Tips:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Explorer\Advanced

Create DWORD value EnableBalloonTips and set its value to 0

19.) Restrict Users to enable New XP StartMenu:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

Create DWORD value NoSimpleStartMenu and set its value to 1

20.) Restrict Command Prompt:

HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System

Create DWORD value DisableCMD and set its value to 2

21.) Restrict Drives in My Computer:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

In right-side pane, create a new DWORD value NoViewOnDrive and change its value as following:

3 : To Restrict A and B drives only.
4 : To Restrict C drive only.
7 : To Restrict A, B, and C drives only.
8 : To Restrict D drive only.
F : To Restrict A, B, C, and D drives only.
03FFFFFF : To Restrict all drives.

And if you want more specific restrictions, like you want to restrict a combination of other drives, then you can use decimal no. instead of hexadecimal no. Following is a list for all drives decimal no.:

A: 1
B: 2
C: 4
D: 8
E: 16
F: 32
G: 64
H: 128
I: 256
J: 512
K: 1024
L: 2048
M: 4096
N: 8192
O: 16384
P: 32768
Q: 65536
R: 131072
S: 262144
T: 524288
U: 1048576
V: 2097152
W: 4194304
X: 8388608
Y: 16777216
Z: 33554432
ALL: 67108863

So if you want to disable a combination of drives, just sum their numbers and give the same value to NoViewOnDrive. e.g., for restricting C, D, E and F drives, give the value: 4+8+16+32 = 60

NOTE: You can also hide the drives using NoDrives DWORD value. The location and its value remain same as the above trick.

22.) Restrict RUN in New XP StartMenu:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

Create DWORD value NoRun and set its value to 1

23.) Restrict Control Panel:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

Create DWORD value NoControlPanel and set its value to 1

Above are some common restrictions, if you want to know about any specific restriction, please let us know.

Complete list of AskVG articles



This article was posted in Security Zone, Troubleshooting, Windows 7, Windows Vista, Windows XP.


Share |


Related Articles

Popular Articles



163 Comments

  • when we plugin usb in system some time it opens automatically instead we open it .Sir i want to disable its automatically opening.

  • VG

    ^^ Goto following key:

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\

    In right-side pane, create new DWORD value "NoDriveTypeAutoRun" and set its value to 0x4

  • How to restrict access to some file types? Is it possible?

  • gud day sir...i just wanna ask if you know how to disable the left click using regedit?..from the City of Taguig,Philippines

  • hey, I have a small query,anyone plz help for the solution.
    Is there any software that will allow copying of files from any usb port to only a specified filder, and restrict of copying to other folders.

  • Hi vishal, please tel me how I can disable "hide extension of known file types" in folder option,but I don't want to disable Folder Option,the particular option only.Thanks in advance.

  • VG

    I have a dual boot OS of XP media center and Windows 7. I tried the "Restrict Drives in My Computer" on one of the drives it only worked on Windows 7 but could not work on XP. Why?

    I need your help.

    Thanks.

    CornieDanAzih

  • Sir,

    How we have add a specific "drive" or "Folder" in Send To Option

    Thanks

    Mian Ghulam Mustafa

  • VG

    ^^ Create a shortcut of that specific drive or folder. Then type sendto in RUN and press Enter. It'll open "Send To" folder. Now copy the shortcut in "Send To" folder. It'll add that specific drive/folder in Send To context menu.

  • Dear VG,

    1- How, we changed our "Local area Connection" IP Address?
    2- How, we change System Name

    Thanks

    Mian Ghulam Mustafa

Add a Comment

NOTE: If you can't see your comment, please be patient. It'll appear as soon as we approve it.


Create an avatar that will appear with your comment.