Ultimate List of All Kinds of User Restrictions for Windows
NOTE: This tutorial will work in all Windows versions including Windows XP, Vista, Windows 7, Windows 8, Windows 8.1 and Windows 10.
Many times people access our system and change our customized settings here and there. Wouldn’t it be great if we can restrict them to change the settings and other things like restrict from changing Folder Options, Taskbar settings, Desktop settings, etc.
Today in this tutorial, we’ll share a list of some important and useful restrictions, which can be put in Windows operating system.
Advertisement
STEP 1: Open Registry Editor
All restrictions are based on Registry editing. So you’ll need to open Registry Editor by providing regedit command in RUN or Start Search box and press Enter. After that go to the registry key mentioned in step 2.
STEP 2: Create Registry Key
Once you are in Registry Editor, go to the following mentioned keys and create or modify DWORD values:
1. Restricting Desktop Properties (Personalization)
Go to following key:
Advertisement
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\System
Create new DWORD NoDispCPL and set its value to 1
If you want to restrict any particular tab in Desktop Properties like Themes, Screen Saver, etc, you can take help of following tutorial:
How to Enable / Disable Changing Themes, Wallpapers, Screen Savers and Other Settings
Also check: How to Restrict Users from Changing Desktop Wallpaper in Windows?
2. Restricting Taskbar Properties
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoSetTaskbar and set its value to 1
3. Restricting System Properties
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoPropertiesMyComputer and set its value to 1
4. Restricting Folder Options
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoFolderOptions and set its value to 1
5. Restricting Registry Editor
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\System
Create new DWORD DisableRegistryTools and set its value to 1
6. Restricting Task Manager
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\System
Create new DWORD DisableTaskMgr and set its value to 1
7. Restricting Control Panel
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoControlPanel and set its value to 1
Also check following tutorial:
How to Hide / Show Specific Control Panel Applets / Icons in Windows?
8. Restricting Command Prompt
Go to following key:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System
Create new DWORD DisableCMD and set its value to 2
9. Restricting Locking/Unlocking of Taskbar
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD LockTaskbar and set its value to 1
10. Restricting right-click (context menu) on Taskbar
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoTrayContextMenu and set its value to 1
11. Restricting Toolbars in Taskbar
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoToolbarsOnTaskbar and set its value to 1
12. Restricting drag-and-drop and right-click (context menu) in Start Menu
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoChangeStartMenu and set its value to 1
13. Restricting RUN option in Start Menu
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoRun and set its value to 1
14. Restricting Shut Down, Restart, Sleep and Hibernate commands
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoClose and set its value to 1
Also check following tutorial:
How to Restrict Windows Users from Accessing Shutdown Options at Login Screen?
15. Restricting Log off option in Start Menu
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD StartMenuLogOff and set its value to 1
16. Restricting Active Desktop Feature
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoActiveDesktop and set its value to 1
17. Restricting adding or removing items from Toolbars
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoToolbarCustomize and set its value to 1
18. Restricting adding or removing Toolbars
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoBandCustomize and set its value to 1
19. Restricting Autorun Feature
Visit following tutorial:
How to Disable Autorun Functionality in Windows Using Registry Editor?
20. Disabling notification of low disk space in Taskbar notification area (system tray)
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoLowDiskSpaceChecks and set its value to 1
21. Enabling Write Protection on USB Drives
Go to following key:
HKEY_LOCAL_MACHINE\SYSTEM\Current Control Set\Control\StorageDevicePolicies
Create new DWORD WriteProtect and set its value to 1
Also check following tutorial:
How to Disable / Restrict Use of USB Storage Devices in Windows?
22. Restricting “New” option in right-click menu (context menu)
Go to following key:
HKEY_CLASSES_ROOT\Directory\Background\shellex\ContextMenu Handlers\New
And delete the value of Default, e.g., empty it.
Also check:
How to Enable / Disable “New -> Shortcut” in Windows XP, Vista and 7 Context Menu?
23. Restricting “Send To” option in right-click menu (context menu)
Go to following key:
HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\ContextMenu Handlers\Send To
And delete the value of Default, e.g., empty it.
24. Restricting access to any desired application program
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer\DisallowRun
Create new String value with any name, like 1 and set its value to the desired program’s EXE file.
e.g., If you want to restrict msconfig, then create a String value 1 and set its value to msconfig.exe. If you want to restrict more programs, simply create more String values with names 2, 3 and so on and set their values to the program’s exe file.
Also check following tutorial:
[Tip] Restrict Any Desired Program from Running in Windows
25. Restricting Drives in My Computer
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
In right-side pane, create new DWORD NoViewOnDrive and change its value as following:
3 : To Restrict A and B drives only.
4 : To Restrict C drive only.
7 : To Restrict A, B, and C drives only.
8 : To Restrict D drive only.
F : To Restrict A, B, C, and D drives only.
03FFFFFF : To Restrict all drives.
If you want more specific restrictions, like you want to restrict a combination of drives, you can use decimal no. instead of hexadecimal no. Following is a list for all drives decimal no.:
A: 1
B: 2
C: 4
D: 8
E: 16
F: 32
G: 64
H: 128
I: 256
J: 512
K: 1024
L: 2048
M: 4096
N: 8192
O: 16384
P: 32768
Q: 65536
R: 131072
S: 262144
T: 524288
U: 1048576
V: 2097152
W: 4194304
X: 8388608
Y: 16777216
Z: 33554432
ALL: 67108863
So if you want to disable a combination of drives, just sum their numbers and give the same value to NoViewOnDrive. e.g., for restricting C, D, E and F drives, give the value: 4+8+16+32 = 60
PS: You can also hide the drives using NoDrives DWORD value. The location and its value remain same as the above trick.
Difference between NoViewOnDrive and NoDrives is that NoViewOnDrive protects the drive so that no user can access that drive. On the other hand, NoDrives only hides the drive from My Computer window but users can still access that drive using RUN dialog box, address bar, etc.
Also check: How to Restrict / Hide / Remove Drives in Windows Explorer?
26. Restricting Settings and Options in Internet Explorer Web Browser
Check out following topics to restrict users from changing homepage and various settings in Internet Explorer:
How to Restrict Users from Changing Internet Explorer Homepage Settings?
How to Disable Options, Disable Tabs in Internet Explorer’s Internet Options Dialog Box?
How to Restrict Users from Deleting Browsing History Data in Internet Explorer?
[Tip] Enable Full Restricted Mode in Internet Explorer Web Browser
27. Restricting Desired Key in Keyboard or Changing Key Action
Check out following tutorial to customize any key behavior or disable a key permanently:
Customize or Disable Any Key in Your Keyboard Using SharpKeys
28. Restricting “Always use selected program to open this kind of file” Option in Open With Dialog Box?
Check out following tutorial to disable the “Always use selected program to open this kind of file” checkbox which appears in “Open With” dialog box:
How to Disable “Always use selected program to open this file” Option in Open With Dialog Box?
29. Restricting “Switch User” option in Windows Vista and Windows 7
Visit following article to learn how to disable “Switch User” option in Windows:
How to Disable “Switch User” Option in Windows Vista and 7?
30. Restricting Settings, Downloads, Bookmarks, etc in Mozilla Firefox
Check out following topic to restrict users from changing options, adding bookmarks, downloading files, etc in Mozilla Firefox:
How to Set Restrictions in Mozilla Firefox?
NOTE: If you want to remove a restriction, simply delete the new DWORD which you created to set the restriction or change its value to 0.
OK guys! That’s all for now. Above were some common restrictions which you might want to implement in your computer system. If you want to know about any specific restriction, please let me know in your comment.
PS: Mozilla Firefox users can use following extension to directly open the registry keys in Registry Editor:
Open in Regedit: Open Registry Keys Directly from Mozilla Firefox
Thanks to our reader “j_veen” for suggesting it…
Ummmm….if we disable the registry how we meant to re enable it after disabling it??! O_O
^^ Please check following:
https://www.askvg.com/how-to-enable-tools-folder-options-and-registry-editor-in-windows/
Can someone help me and make this a little easier? I messed around I thought all I did was able programs at start up. Now I cant open much of anything..I keep getting messages that I do not have permission to view this, etc. I can’t a system restore because it doesn’t have a date that goes back far enough. Can anyone tell me a simple way to undo what I did? I am very low tech, an older person, so please make it simple! Thank you, Carole Please send to my email so I will see it on my other computer, I can barely use this one at all.
^^ You can again open Registry Editor and remove the DWORD values created. It seems you applied several restrictions just for testing purposes. 😉
Hi –
I have windows XP professional, service pack 2. I tried several of these without effect. I even tried restarting my computer. Can you suggest what I might be doing wrong?
Thanks,
Dave
^^ These all restrictions will work in all Windows versions. Please tell me step by step how are you doing it?
These all restrictions worked in Windows 7. I want know more step by step.
i wanna know how to put restrictions to windows powershell without doing the disallowrun thing which is not working in windows 10
Hi! I want to restrict standard user, not administrator. How can I do that, because I’m not able to change anything in regedit while I’m on standard user. Thanks for help!
hi, if i disable regedit how to enable it again
^^ Check following:
https://www.askvg.com/how-to-enable-tools-folder-options-and-registry-editor-in-windows/
I installed windows 10 last week and was just in the registry and realized that the HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies is as far as it goes on my system running windows 10 home. There is no > at the folder for policies — just the folder and when I click on it the only thing in there is default reg_sz value not set?
Is this normal? or did the install of windows 10 (I did a clean install) not go as it should have?
^^ No need to worry about that. It depends upon user settings.
I have installed windows 8.1
there is only one option seen ‘explorer’ except for ‘system’ in HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies
so, how apply restriction which is applied on ‘system’ option to restrict like cmd.
^^ You’ll need to create the key manually.
Quite informative. Thanks.
Can any one help me with the trick to disable right click and delete option to restrict users copying or deleting data from application being accessed through with or win 7 pcs?
Thanks in advance
Prasant
^^ You’ll need to edit shell32.dll.mui file in Resource Hacker and will modify Menu resources to remove desired options. Check out following topic to learn more:
https://www.askvg.com/ultimate-collection-of-best-resource-hacker-tutorials-to-customize-windows-look-n-feel/
Great information and it all worked out. Looking for something a bit more technical if you are up to it. Windows 10 for some reason loves to connect to rogue servers. Downloading, accessing and/or allowing GPs (Group Policies) to be placed. I have tried quite a few things short of messing with the GPs of the system itself. Would you have any recommendations?
Thanks
Juan
thanks a lot , it really works and i learned a lot , hope you posted more like this useful methods and again thanks a lot .
How to apply these policies to Standard User. For Administrator we can see expansion link for policies but not for Standard User.
I want to Restrict user to rename any folder through registry. user can not rename any folders which present in any drives.
^^ You can’t restrict renaming using Registry. But you can remove “Rename” option from context menu by modifying DLL files using Resource Hacker:
https://www.askvg.com/tutorial-all-about-resource-hacker-in-a-brief-tutorial/
Unless you have home versions of windows you should try going to start>run and typing in gpedit.msc
Er ive tried a few of these (I have Windows 10 home) and NONE of them work. If I set policies in HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies……NONE of the changes have any effect, even after a restart. I also seem to have the absurd situation where all my changes in the registery, are automatically copied over to every user (even if I only change it for one user), though the policies have no effect on any user. If I log on to a different user account, the changes automatically appear in their HKCU section which I thought wasn’t supposed to happen?
I CAN edit the policies in HKLM but this then applies to every user. How to I edit the policies for just a single user?
^^ Which policy did you try?
Dear Team,
Plz help me to sort out this issue , I need to disable the cut copy pest from organize tab which is open in windows 7 or 10 when we open data from system
Hi i need to restrict ‘This PC’ from start menu in windows 10 when i click on This PC.
What is the registry to restrict ‘This PC’?
^^ You can remove it:
https://www.askvg.com/tip-add-this-pc-shortcut-to-windows-10-start-menu/
Hello! Thank you for all of your tips. I appreciate them. Can you tell me how to re-set “TrustedInstaller” back into my User Accounts. I have read everything and I am still struggling.
^^ Check following:
https://www.askvg.com/guide-how-to-restore-trustedinstaller-as-default-owner-of-a-file-or-folder-in-windows/
https://www.askvg.com/add-restore-ownership-to-trustedinstaller-option-in-files-and-folders-context-menu-in-windows-vista-7-and-8/