Subscribe For Free Updates!

Thursday 19 June 2014

Ultimate List of All Kinds of User Restrictions for Windows


Many times people access our system and change our customized settings here and there. Wouldn't it be great if we can restrict them to change the settings and other things like restrict from changing Folder Options, Taskbar settings, Desktop settings, etc.
Today in this tutorial, we'll share a list of some important and useful restrictions, which can be put in Windows operating system.
STEP 1: Open Registry Editor
All restrictions are based on Registry editing. So you'll need to open Registry Editor by providingregedit command in RUN or Start Search box and press Enter. After that go to the registry key mentioned in step 2.
STEP 2: Create Registry Key
Once you are in Registry Editor, go to the following mentioned keys and create or modify DWORD values:
Windows_Restrictions_List.png
========================================
1. Restricting Desktop Properties (Personalization)
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\System
Create new DWORD NoDispCPL and set its value to 1
2. Restricting Taskbar Properties
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoSetTaskbar and set its value to 1
3. Restricting System Properties
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoPropertiesMyComputer and set its value to 1
4. Restricting Folder Options
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoFolderOptions and set its value to 1
5. Restricting Registry Editor
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\System
Create new DWORD DisableRegistryTools and set its value to 1
6. Restricting Task Manager
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\System
Create new DWORD DisableTaskMgr and set its value to 1
7. Restricting Control Panel
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoControlPanel and set its value to 1
8. Restricting Command Prompt
Go to following key:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System
Create new DWORD DisableCMD and set its value to 2
9. Restricting Locking/Unlocking of Taskbar
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD LockTaskbar and set its value to 1
10. Restricting right-click (context menu) on Taskbar
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoTrayContextMenu and set its value to 1
11. Restricting Toolbars in Taskbar
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoToolbarsOnTaskbar and set its value to 1
12. Restricting drag-and-drop and right-click (context menu) in Start Menu
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoChangeStartMenu and set its value to 1
13. Restricting RUN option in Start Menu
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoRun and set its value to 1
14. Restricting Shut Down, Restart, Sleep and Hibernate commands
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoClose and set its value to 1
15. Restricting Log off option in Start Menu
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD StartMenuLogOff and set its value to 1
16. Restricting Active Desktop Feature
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoActiveDesktop and set its value to 1
17. Restricting adding or removing items from Toolbars
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoToolbarCustomize and set its value to 1
18. Restricting adding or removing Toolbars
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoBandCustomize and set its value to 1
19. Restricting Autorun Feature
This method works in almost all Windows versions including XP, Vista and 7.
1. Type regedit in RUN or Start Menu searchbox and press Enter. It'll open Registry Editor.
2. Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
If the above key doesn't exist, create it.
3. In right-side pane, create a new DWORD value NoDriveTypeAutoRun and set its value to any of following according to your requirements:
FF - To disable AutoRun on all drives
20 - To disable AutoRun on CD-ROM drives
- To disable AutoRun on removable drives
- To disable AutoRun on fixed drives
10 - To disable AutoRun on network drives
40 - To disable AutoRun on RAM disks
- To disable AutoRun on unknown drives
Disable_Autorun_Functionality.png
4. If you want to disable Autorun on a combination of drives, you'll need to calculate sum of the values. For example, if you want to disable Autorun on CD-ROM drives and removable drives, you'll need to set the value to 20+4=24.
5. If you want to restore the Autorun functionality, simply delete the NoDriveTypeAutoRunDWORD value created in Step 3 Or you can set the default value which is given below:
Windows 2000: 95
Windows XP: 91
Windows Server 2003: 95
Windows Vista, Server 2008 and 7: 91
6. If you want to disable Autorun functionality for all users in your system, use the "HKEY_LOCAL_MACHINE" instead of "HKEY_CURRENT_USER" mentioned in Step 2.
20. Disabling notification of low disk space in Taskbar notification area (system tray)
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Create new DWORD NoLowDiskSpaceChecks and set its value to 1
21. Restricting Writing to USB Drives
Go to following key:
HKEY_LOCAL_MACHINE\SYSTEM\Current Control Set\Control\StorageDevicePolicies
Create new DWORD WriteProtect and set its value to 1
22. Restricting "New" option in right-click menu (context menu)
Go to following key:
HKEY_CLASSES_ROOT\Directory\Background\shellex\ContextMenu Handlers\New
And delete the value of Default, e.g., empty it.
23. Restricting "Send To" option in right-click menu (context menu)
Go to following key:
HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\ContextMenu Handlers\Send To
And delete the value of Default, e.g., empty it.
24. Restricting access to any desired application program
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer\DisallowRun
Create new String value with any name, like 1 and set its value to the desired program's EXE file.
e.g., If you want to restrict msconfig, then create a String value 1 and set its value to msconfig.exe. If you want to restrict more programs, simply create more String values with names 23 and so on and set their values to the program's exe file.
25. Restricting Drives in My Computer
Go to following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
In right-side pane, create new DWORD NoViewOnDrive and change its value as following:
3 : To Restrict A and B drives only.
4 : To Restrict C drive only.
7 : To Restrict A, B, and C drives only.
8 : To Restrict D drive only.
F : To Restrict A, B, C, and D drives only.
03FFFFFF : To Restrict all drives.
If you want more specific restrictions, like you want to restrict a combination of drives, you can use decimal no. instead of hexadecimal no. Following is a list for all drives decimal no.:
A: 1
B: 2
C: 4
D: 8
E: 16
F: 32
G: 64
H: 128
I: 256
J: 512
K: 1024
L: 2048
M: 4096
N: 8192
O: 16384
P: 32768
Q: 65536
R: 131072
S: 262144
T: 524288
U: 1048576
V: 2097152
W: 4194304
X: 8388608
Y: 16777216
Z: 33554432
ALL: 67108863
So if you want to disable a combination of drives, just sum their numbers and give the same value to NoViewOnDrive. e.g., for restricting C, D, E and F drives, give the value: 4+8+16+32 = 60
PS: You can also hide the drives using NoDrives DWORD value. The location and its value remain same as the above trick.
Difference between NoViewOnDrive and NoDrives is that NoViewOnDrive protects the drive so that no user can access that drive. On the other hand, NoDrives only hides the drive from My Computer window but users can still access that drive using RUN dialog box, address bar, etc.

========================================
NOTE: If you want to remove a restriction, simply delete the new DWORD which you created to set the restriction or change its value to 0.
OK guys! That's all for now. Above were some common restrictions which you might want to implement in your computer system. If you want to know about any specific restriction, please let me know in your comment.

Socializer Widget By Problems With Solutions
SOCIALIZE IT →
FOLLOW US →
SHARE IT →

1 comments :

  1. I Want to use this medium to appreciate an online ghost hacker, after being ripped off my money he helped me find my cheating lover and helped me hacked his WHATSAPP, GMAIL, kik and all his social media platforms and i got to know that he has being cheating on me and in less than 24 hours he helped me out with everything, hacking setting is trust worthy, contact him via: hackingsetting50@gmail.com

    ReplyDelete

If you have any doubts please let me know!