All Kinds of Restrictions for Windows 2000, XP, 2003, Vista, 2008 and 7

Following is a list of some important restrictions, which can be made in Windows 2000, XP, Server 2003, Vista, Server 2008 and 7. For example, you can restrict Display properties, Taskbar properties, folder options, etc.

All tricks are based on Registry editing, you just need to open Registry Editor by providing regedit command in RUN and then create the mentioned key and set its value as given below:

NOTE: If you want to remove the restriction, simply delete the DWORD value or set its value to 0

1.) Restrict Display Properties:

create DWORD value NoDispCPL and set its value to 1

2.) Restrict Taskbar Properties:

create DWORD value NoSetTaskbar and set its value to 1

3.) Restrict Folder Options:

create DWORD value NoFolderOptions and set its value to 1

4.) Restrict Locking/Unlocking the taskbar:

create DWORD value LockTaskbar and set its value to 1

5.) Restrict Active Desktop:

create DWORD value NoActiveDesktop and set its value to 1

6.) Restrict adding/deleting items from Toolbars:

create DWORD value NoToolbarCustomize and set its value to 1

7.) Restrict adding/deleting toolbars:

create DWORD value NoBandCustomize and set its value to 1

8.) Restrict right-click in Start Menu:

create DWORD value NoChangeStartMenu and set its value to 1

9.) Restrict Desktop Cleanup Wizard:

create DWORD value NoDesktopCleanupWizard and set its value to 1

10.) Restrict notification at low disk space:

create DWORD value NoLowDiskSpaceChecks and set its value to 1

11.) Restrict Taskbar Context Menu:

create DWORD value NoTrayContextMenu and set its value to 1

12.) Restrict Programs to run:

create String value with any name, like 1 and set its value to the program's EXE file.

e.g., If you want to restrict msconfig, then create a String value 1 and set its value to msconfig.exe. If you want to restrict more programs, then simply create more String values with names 2, 3 and so on and set their values to the program's exe.

13.) Restrict Registry Editor:

create DWORD value DisableRegistryTools and set its value to 1

14.) Restrict Task Manager:

create DWORD value DisableTaskMgr and set its value to 1

15.) Restrict Writing to USB Drives:

Create DWORD value WriteProtect and set its value to 1

16.) Restrict New option in context menu:

And delete the value of Default, e.g., empty it.

17.) Restrict Send To in context menu:

And delete the value of Default, e.g., empty it.

18.) Restrict Balloon Tips:

Create DWORD value EnableBalloonTips and set its value to 0

19.) Restrict Users to enable New XP StartMenu:

Create DWORD value NoSimpleStartMenu and set its value to 1

20.) Restrict Command Prompt:

Create DWORD value DisableCMD and set its value to 2

21.) Restrict Drives in My Computer:

In right-side pane, create a new DWORD value NoViewOnDrive and change its value as following:

And if you want more specific restrictions, like you want to restrict a combination of other drives, then you can use decimal no. instead of hexadecimal no. Following is a list for all drives decimal no.:

So if you want to disable a combination of drives, just sum their numbers and give the same value to NoViewOnDrive. e.g., for restricting C, D, E and F drives, give the value: 4+8+16+32 = 60

NOTE: You can also hide the drives using NoDrives DWORD value. The location and its value remain same as the above trick.

22.) Restrict RUN in New XP StartMenu:

Create DWORD value NoRun and set its value to 1

23.) Restrict Control Panel:

Create DWORD value NoControlPanel and set its value to 1

Above are some common restrictions, if you want to know about any specific restriction, please let us know.

Complete list of AskVG articles

This article was posted in Security Zone, Troubleshooting, Windows 7, Windows Vista, Windows XP.

Share |

163 Comments

Gayathri

Sir,

I had recently tried to reload XP OS in my computer and had registered/ activated the software. This was after an aborted attempted to make a raid disk by making the original hard disk as dynamic drive. Thereafter, I formatted both the hard disks as basic drives, the first drive has the Windows OS in C drive and the second disk has an MBR active too. I did not change it. I had recently added RAM too. But the system has started giving problems since the reload of OS.

1. OS does not seem to be stable, shows errors at times, refuses to shut down/ log off, screen indicating dumping memory etc are noticed. Even Office 2007 and Norton 2007 was not loading, some .CAB file not found in the former and fatal error in the latter was the reason given by Windows. After attmepting updates on XP from MS site, Office 2007 loaded successfully.

2. The problem of Norton not loading and non-response to shut down command/ dumping memeory etc. persists.

Can you please help.

Gayathri.
VG

^^ Hello Gayathri

After reading your problem, It seems a faulty RAM module problem. Do one thing! Remove the newly added RAM and run your system for some time and check whether the problem still persists or not. I'm sure you'll not face the problem again. The fatal error and umping problem occur because of either RAM module is faulty or not matching with the existing one.
Saurabh

Hi, VG
I was using "NoFolderOptions" restriction for a long time but now m facing 1 problem.
wenever i put d value 1 it works but after couple of minutes i can again see Folder options in d tools Menu. Wen i open regedit to see wats wrong i cant locate d same Dword value n thus i recreat a new Dword value but d same thing happens.
Plz let me know wats wrong.
Saurabh

One more Problem...
I was editing dis entry to rename Recycle Bin but it's not wrking, m i doing it d right way n if yes den why its not showing d changed text.
HKEY_CLASSES_ROOT/CLSID/{645FF040-5081-1
01B-9F08-00AA002F954E}
VG

^^ The key is automatically getting removed, that means some script/virus is running in background which is deleting the key. I'll advise you to post your Hijack this log file content in following topic:

http://www.askvg.com/is-your-system-infected-with-a-virus-spyware-adware-trojan/
Saurabh

Hi! VG
I asked u dis previously but hvn't got any reply from ur end, Buddy plz help me abt it.
How can i rename d Recycle Bin, though i was trying editing dis key but in vain, m i doing anything wrong.
HKEY_CLASSES_ROOT/CLSID/{645FF040-5081-1
01B-9F08-00AA002F954E}_then changing default value from recycle bin to sumthing else.
Thnx dear.
VG

^^ Goto following key:

HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\ShellFolder

In right-side pane, double click on "Attributes" and change the first 2 digits from 40 to 50

Now you can rename the Recycle Bin icon on desktop by right-clicking on it and select rename. Or select it and press F2.
Saurabh

Hi! BRO,
Long time ago i asked u about the “Access Denied" Restriction to particular folder n u told me i can do it in case of NTFS file system.
All i want to ask here is der Any registry key or any other way 4 d same in case of FAT32.
THNX.
VG

^^ Nope but you can use various 3rd party software to restrict folders.
Saurabh Gupta

Hi! VG,
How can i re-enable d GPedit.msc while it has been disabled(RUN open it but it shows dat it has been blocked), however d registry is not disabled.
n in case if d registry n GPedit.msc both r blocked den wat to do????????