All Kinds of Restrictions for Windows 2000, XP, 2003, Vista, 2008 and 7

Following is a list of some important restrictions, which can be made in Windows 2000, XP, Server 2003, Vista, Server 2008 and 7. For example, you can restrict Display properties, Taskbar properties, folder options, etc.

All tricks are based on Registry editing, you just need to open Registry Editor by providing regedit command in RUN and then create the mentioned key and set its value as given below:

NOTE: If you want to remove the restriction, simply delete the DWORD value or set its value to 0

1.) Restrict Display Properties:

create DWORD value NoDispCPL and set its value to 1

2.) Restrict Taskbar Properties:

create DWORD value NoSetTaskbar and set its value to 1

3.) Restrict Folder Options:

create DWORD value NoFolderOptions and set its value to 1

4.) Restrict Locking/Unlocking the taskbar:

create DWORD value LockTaskbar and set its value to 1

5.) Restrict Active Desktop:

create DWORD value NoActiveDesktop and set its value to 1

6.) Restrict adding/deleting items from Toolbars:

create DWORD value NoToolbarCustomize and set its value to 1

7.) Restrict adding/deleting toolbars:

create DWORD value NoBandCustomize and set its value to 1

8.) Restrict right-click in Start Menu:

create DWORD value NoChangeStartMenu and set its value to 1

9.) Restrict Desktop Cleanup Wizard:

create DWORD value NoDesktopCleanupWizard and set its value to 1

10.) Restrict notification at low disk space:

create DWORD value NoLowDiskSpaceChecks and set its value to 1

11.) Restrict Taskbar Context Menu:

create DWORD value NoTrayContextMenu and set its value to 1

12.) Restrict Programs to run:

create String value with any name, like 1 and set its value to the program's EXE file.

e.g., If you want to restrict msconfig, then create a String value 1 and set its value to msconfig.exe. If you want to restrict more programs, then simply create more String values with names 2, 3 and so on and set their values to the program's exe.

13.) Restrict Registry Editor:

create DWORD value DisableRegistryTools and set its value to 1

14.) Restrict Task Manager:

create DWORD value DisableTaskMgr and set its value to 1

15.) Restrict Writing to USB Drives:

Create DWORD value WriteProtect and set its value to 1

16.) Restrict New option in context menu:

And delete the value of Default, e.g., empty it.

17.) Restrict Send To in context menu:

And delete the value of Default, e.g., empty it.

18.) Restrict Balloon Tips:

Create DWORD value EnableBalloonTips and set its value to 0

19.) Restrict Users to enable New XP StartMenu:

Create DWORD value NoSimpleStartMenu and set its value to 1

20.) Restrict Command Prompt:

Create DWORD value DisableCMD and set its value to 2

21.) Restrict Drives in My Computer:

In right-side pane, create a new DWORD value NoViewOnDrive and change its value as following:

And if you want more specific restrictions, like you want to restrict a combination of other drives, then you can use decimal no. instead of hexadecimal no. Following is a list for all drives decimal no.:

So if you want to disable a combination of drives, just sum their numbers and give the same value to NoViewOnDrive. e.g., for restricting C, D, E and F drives, give the value: 4+8+16+32 = 60

NOTE: You can also hide the drives using NoDrives DWORD value. The location and its value remain same as the above trick.

22.) Restrict RUN in New XP StartMenu:

Create DWORD value NoRun and set its value to 1

23.) Restrict Control Panel:

Create DWORD value NoControlPanel and set its value to 1

Above are some common restrictions, if you want to know about any specific restriction, please let us know.

Complete list of AskVG articles

This article was posted in Security Zone, Troubleshooting, Windows 7, Windows Vista, Windows XP.

Share |

163 Comments

kumar

How do you Hide & Block in drive, internet security, etc., in windows 2003 server. Any one person can tell me the answer tell me. Thank you.,
Sonic

How do i go about implementing step 15.) Restrict Writing to USB Drives:
does this work & will it work on a Dell Optiplex GX series computer? feedback will be appreciated regards...
susanto

how bout no display local area connection or changing ip
Ajaya

Hi Vishal,

I have been reading your articles for the last few days and have found them to be very helpful. I also have a problem in my PC and hope you can suggest me a solution.

I cannot change my Date/Time Properties. When I try to do so, it will give me an error message stating "You do not have the proper privilege level to change the System Time."

I am the administrator of my PC and have full control (...at least I suppose so . I'm not sure if it's a virus problem. I have gone through running processes and looks fine to me though.

Your help is really appreciated.

Cheers,
Ajaya
VG

^^ Open gpedit.msc and goto:

Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assignment

Now look for "Change the system time" and "Change the time zone" options in right-side pane and make sure your user account is present in the allowed users list.
mircea

Restrict Drives in My Computer:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

In right-side pane, create a new DWORD value NoViewOnDrive and change its value as following:

can I Restrict WRITE drive C???

not only VIEW?
yos

you could also use START/RUN/GPEDIT.MSC select e.g. user configuration and admin templates.
TARIQ

DEAR BROTHER.
i've browsed your site and i found it very helpfull and i also done some sollutions on my system it really worked. thanks very very very much.

I am having a 62mb graphic card and its drivers also. But when i've installed GTA san andreas on my computer, but when i am starting the game it is showing only a black or a white screen and clossing it. can you solve my problem.
Mohammed Sakeer

Will you please let me know how can i restrict changing date and time using Registery

Thank you verymuch for your help and support.
Mithun

Hello Vishal Sir,

Sorry for my English.

I am having a standalone pc with Windows XP Professional SP3 v3244 Operating System.

Is it possible for me to give other user restriction staying logged in with adminstration or i need to log in to there indiviual login and give restrictions individually... or is there any s/w for the same...

thx you.