Ultimate List of All Kinds of User Restrictions for Windows

NOTE: This tutorial will work in all Windows versions including Windows XP, Vista, Windows 7, Windows 8, Windows 8.1 and Windows 10.

Many times people access our system and change our customized settings here and there. Wouldn’t it be great if we can restrict them to change the settings and other things like restrict from changing Folder Options, Taskbar settings, Desktop settings, etc.

Today in this tutorial, we’ll share a list of some important and useful restrictions, which can be put in Windows operating system.

Advertisement

STEP 1: Open Registry Editor

All restrictions are based on Registry editing. So you’ll need to open Registry Editor by providing regedit command in RUN or Start Search box and press Enter. After that go to the registry key mentioned in step 2.

STEP 2: Create Registry Key

Once you are in Registry Editor, go to the following mentioned keys and create or modify DWORD values:

Windows_Restrictions_List.png

1. Restricting Desktop Properties (Personalization)

Go to following key:

Advertisement

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\System

Create new DWORD NoDispCPL and set its value to 1

If you want to restrict any particular tab in Desktop Properties like Themes, Screen Saver, etc, you can take help of following tutorial:

How to Enable / Disable Changing Themes, Wallpapers, Screen Savers and Other Settings

Also check: How to Restrict Users from Changing Desktop Wallpaper in Windows?

2. Restricting Taskbar Properties

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

Create new DWORD NoSetTaskbar and set its value to 1

3. Restricting System Properties

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

Create new DWORD NoPropertiesMyComputer and set its value to 1

4. Restricting Folder Options

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

Create new DWORD NoFolderOptions and set its value to 1

5. Restricting Registry Editor

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\System

Create new DWORD DisableRegistryTools and set its value to 1

6. Restricting Task Manager

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\System

Create new DWORD DisableTaskMgr and set its value to 1

7. Restricting Control Panel

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

Create new DWORD NoControlPanel and set its value to 1

Also check following tutorial:

How to Hide / Show Specific Control Panel Applets / Icons in Windows?

8. Restricting Command Prompt

Go to following key:

HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System

Create new DWORD DisableCMD and set its value to 2

9. Restricting Locking/Unlocking of Taskbar

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

Create new DWORD LockTaskbar and set its value to 1

10. Restricting right-click (context menu) on Taskbar

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

Create new DWORD NoTrayContextMenu and set its value to 1

11. Restricting Toolbars in Taskbar

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

Create new DWORD NoToolbarsOnTaskbar and set its value to 1

12. Restricting drag-and-drop and right-click (context menu) in Start Menu

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

Create new DWORD NoChangeStartMenu and set its value to 1

13. Restricting RUN option in Start Menu

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

Create new DWORD NoRun and set its value to 1

14. Restricting Shut Down, Restart, Sleep and Hibernate commands

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

Create new DWORD NoClose and set its value to 1

Also check following tutorial:

How to Restrict Windows Users from Accessing Shutdown Options at Login Screen?

15. Restricting Log off option in Start Menu

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

Create new DWORD StartMenuLogOff and set its value to 1

16. Restricting Active Desktop Feature

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

Create new DWORD NoActiveDesktop and set its value to 1

17. Restricting adding or removing items from Toolbars

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

Create new DWORD NoToolbarCustomize and set its value to 1

18. Restricting adding or removing Toolbars

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

Create new DWORD NoBandCustomize and set its value to 1

19. Restricting Autorun Feature

Visit following tutorial:

How to Disable Autorun Functionality in Windows Using Registry Editor?

20. Disabling notification of low disk space in Taskbar notification area (system tray)

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

Create new DWORD NoLowDiskSpaceChecks and set its value to 1

21. Enabling Write Protection on USB Drives

Go to following key:

HKEY_LOCAL_MACHINE\SYSTEM\Current Control Set\Control\StorageDevicePolicies

Create new DWORD WriteProtect and set its value to 1

Also check following tutorial:

How to Disable / Restrict Use of USB Storage Devices in Windows?

22. Restricting “New” option in right-click menu (context menu)

Go to following key:

HKEY_CLASSES_ROOT\Directory\Background\shellex\ContextMenu Handlers\New

And delete the value of Default, e.g., empty it.

Also check:

How to Enable / Disable “New -> Shortcut” in Windows XP, Vista and 7 Context Menu?

23. Restricting “Send To” option in right-click menu (context menu)

Go to following key:

HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\ContextMenu Handlers\Send To

And delete the value of Default, e.g., empty it.

24. Restricting access to any desired application program

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer\DisallowRun

Create new String value with any name, like 1 and set its value to the desired program’s EXE file.

e.g., If you want to restrict msconfig, then create a String value 1 and set its value to msconfig.exe. If you want to restrict more programs, simply create more String values with names 2, 3 and so on and set their values to the program’s exe file.

Also check following tutorial:

[Tip] Restrict Any Desired Program from Running in Windows

25. Restricting Drives in My Computer

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

In right-side pane, create new DWORD NoViewOnDrive and change its value as following:

3 : To Restrict A and B drives only.
4 : To Restrict C drive only.
7 : To Restrict A, B, and C drives only.
8 : To Restrict D drive only.
F : To Restrict A, B, C, and D drives only.
03FFFFFF : To Restrict all drives.

If you want more specific restrictions, like you want to restrict a combination of drives, you can use decimal no. instead of hexadecimal no. Following is a list for all drives decimal no.:

A: 1
B: 2
C: 4
D: 8
E: 16
F: 32
G: 64
H: 128
I: 256
J: 512
K: 1024
L: 2048
M: 4096
N: 8192
O: 16384
P: 32768
Q: 65536
R: 131072
S: 262144
T: 524288
U: 1048576
V: 2097152
W: 4194304
X: 8388608
Y: 16777216
Z: 33554432
ALL: 67108863

So if you want to disable a combination of drives, just sum their numbers and give the same value to NoViewOnDrive. e.g., for restricting C, D, E and F drives, give the value: 4+8+16+32 = 60

PS: You can also hide the drives using NoDrives DWORD value. The location and its value remain same as the above trick.

Difference between NoViewOnDrive and NoDrives is that NoViewOnDrive protects the drive so that no user can access that drive. On the other hand, NoDrives only hides the drive from My Computer window but users can still access that drive using RUN dialog box, address bar, etc.

Also check: How to Restrict / Hide / Remove Drives in Windows Explorer?

26. Restricting Settings and Options in Internet Explorer Web Browser

Check out following topics to restrict users from changing homepage and various settings in Internet Explorer:

How to Restrict Users from Changing Internet Explorer Homepage Settings?

How to Disable Options, Disable Tabs in Internet Explorer’s Internet Options Dialog Box?

How to Restrict Users from Deleting Browsing History Data in Internet Explorer?

[Tip] Enable Full Restricted Mode in Internet Explorer Web Browser

27. Restricting Desired Key in Keyboard or Changing Key Action

Check out following tutorial to customize any key behavior or disable a key permanently:

Customize or Disable Any Key in Your Keyboard Using SharpKeys

28. Restricting “Always use selected program to open this kind of file” Option in Open With Dialog Box?

Check out following tutorial to disable the “Always use selected program to open this kind of file” checkbox which appears in “Open With” dialog box:

How to Disable “Always use selected program to open this file” Option in Open With Dialog Box?

29. Restricting “Switch User” option in Windows Vista and Windows 7

Visit following article to learn how to disable “Switch User” option in Windows:

How to Disable “Switch User” Option in Windows Vista and 7?

30. Restricting Settings, Downloads, Bookmarks, etc in Mozilla Firefox

Check out following topic to restrict users from changing options, adding bookmarks, downloading files, etc in Mozilla Firefox:

How to Set Restrictions in Mozilla Firefox?

NOTE: If you want to remove a restriction, simply delete the new DWORD which you created to set the restriction or change its value to 0.

OK guys! That’s all for now. Above were some common restrictions which you might want to implement in your computer system. If you want to know about any specific restriction, please let me know in your comment.

PS: Mozilla Firefox users can use following extension to directly open the registry keys in Registry Editor:

Open in Regedit: Open Registry Keys Directly from Mozilla Firefox

Thanks to our reader “j_veen” for suggesting it…

Published in: Windows 10, Windows 7, Windows 8, Windows Vista, Windows XP

About the author: Vishal Gupta (also known as VG) has been awarded with Microsoft MVP (Most Valuable Professional) award. He holds Masters degree in Computer Applications (MCA). He has written several tech articles for popular newspapers and magazines and has also appeared in tech shows on various TV channels.

Comments

NOTE: Older comments have been removed to reduce database overhead.

  1. Can someone help me and make this a little easier? I messed around I thought all I did was able programs at start up. Now I cant open much of anything..I keep getting messages that I do not have permission to view this, etc. I can’t a system restore because it doesn’t have a date that goes back far enough. Can anyone tell me a simple way to undo what I did? I am very low tech, an older person, so please make it simple! Thank you, Carole Please send to my email so I will see it on my other computer, I can barely use this one at all.

  2. ^^ You can again open Registry Editor and remove the DWORD values created. It seems you applied several restrictions just for testing purposes. 😉

  3. Hi –

    I have windows XP professional, service pack 2. I tried several of these without effect. I even tried restarting my computer. Can you suggest what I might be doing wrong?

    Thanks,
    Dave

  4. ^^ These all restrictions will work in all Windows versions. Please tell me step by step how are you doing it?

  5. i wanna know how to put restrictions to windows powershell without doing the disallowrun thing which is not working in windows 10

  6. Hi! I want to restrict standard user, not administrator. How can I do that, because I’m not able to change anything in regedit while I’m on standard user. Thanks for help!

  7. I installed windows 10 last week and was just in the registry and realized that the HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies is as far as it goes on my system running windows 10 home. There is no > at the folder for policies — just the folder and when I click on it the only thing in there is default reg_sz value not set?
    Is this normal? or did the install of windows 10 (I did a clean install) not go as it should have?

  8. I have installed windows 8.1
    there is only one option seen ‘explorer’ except for ‘system’ in HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies
    so, how apply restriction which is applied on ‘system’ option to restrict like cmd.

  9. Quite informative. Thanks.
    Can any one help me with the trick to disable right click and delete option to restrict users copying or deleting data from application being accessed through with or win 7 pcs?
    Thanks in advance
    Prasant

  10. Great information and it all worked out. Looking for something a bit more technical if you are up to it. Windows 10 for some reason loves to connect to rogue servers. Downloading, accessing and/or allowing GPs (Group Policies) to be placed. I have tried quite a few things short of messing with the GPs of the system itself. Would you have any recommendations?
    Thanks
    Juan

  11. thanks a lot , it really works and i learned a lot , hope you posted more like this useful methods and again thanks a lot .

  12. How to apply these policies to Standard User. For Administrator we can see expansion link for policies but not for Standard User.

  13. I want to Restrict user to rename any folder through registry. user can not rename any folders which present in any drives.

  14. Unless you have home versions of windows you should try going to start>run and typing in gpedit.msc

  15. Er ive tried a few of these (I have Windows 10 home) and NONE of them work. If I set policies in HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies……NONE of the changes have any effect, even after a restart. I also seem to have the absurd situation where all my changes in the registery, are automatically copied over to every user (even if I only change it for one user), though the policies have no effect on any user. If I log on to a different user account, the changes automatically appear in their HKCU section which I thought wasn’t supposed to happen?
    I CAN edit the policies in HKLM but this then applies to every user. How to I edit the policies for just a single user?

  16. Dear Team,

    Plz help me to sort out this issue , I need to disable the cut copy pest from organize tab which is open in windows 7 or 10 when we open data from system

  17. Hi i need to restrict ‘This PC’ from start menu in windows 10 when i click on This PC.
    What is the registry to restrict ‘This PC’?

  18. Hello! Thank you for all of your tips. I appreciate them. Can you tell me how to re-set “TrustedInstaller” back into my User Accounts. I have read everything and I am still struggling.

Leave a Comment

Your email address will not be published. Required fields are marked *

NOTE: Your comment may not appear immediately. It'll become visible once we approve it.