TUTORIAL: All Kinds of Restrictions for Windows XP/2003

[Vishal Gupta]

Guys!

In this tutorial, I'll tell u some interesting restrictions, which can be made in XP/2003. Like u can restrict Display properties, taskbar properties, folder options, etc.

Though many of u may know all of them or a few of them already, but I think it would be good to share them with u.

All tricks are based on Registry editing.
So I'll tell the keyname and the value, that u hv to create for the restriction! If the key is not present, then simply create it.

So here we go:

All Kinds of Restrictions for Windows 2000, XP, 2003 and Vista

[s18000rpm]

Cool Thanx

[Tech Geek]

Really cool buddy
from where do u get all this things from??

[Vishal Gupta]

thnx guys!

@Tech Geek
From my mind
I hv learnt so many Registry tricks, that I can tell most of them without opening the registry editor So actually there is no source from where I post them, its just my experience & love with registry

6 more tricks added in the end of the first post...

[Tech Geek]

u really live in the registry buddy
do u keep exploring the registry?

[Vishal Gupta]

Yeps

Thats my favorite time-pass (Registry Editing & Resource Hacking )

[Tech Geek]

But how do u know which one is what?

[Vishal Gupta]

Actually it comes with experience, I hv given so much time for such stuffs in past few years!

Even I can't remember, from where I knew about all such tricks! No1 create those Registry tricks, these r in-built in XP but the thing is how many tricks u can remember

[outlaw]

u are indeed a true registry hacker

keep up the good work buddy

[Matrix]

HI vishal
please tell me this...


1. How to stop other users frm executing types of file u want to and can passwords be given to execute specific file types ?

2. How to prevent access to event logs ?

3. and can it be done that other than commonly used exes like windows media player, winamp, etc. other exe's can be stopped to be executed by specific users ...?

please...Thanks

[iMav]

awesome post vishal

[aditya.shevade]

I want one. I disabled the browser options of IE using the hack given in the Digit Fast Track. But you can still access the browser options by right clicking the IE icon and going into the properties. Is there any way to completely forbid access to these properties.

If you are going to tell me to disable right clicking altogether then that is not what I want. Please see if you can find this.

Aditya Shevade

[Vishal Gupta]

^^
Yes! It only disables Internet Options inside the browser, but u can still access them from other methods

But there is a work-around
U can disable a particular tab in the Internet Options So if any1 try to access Internet Options from other methods, he'll not be able to access that particular tab

So just tell me which tab u want to disable, and I'll post the code

@Matrix
1.) It can't be done using registry u'll hv to use 3rd party s/w.

2.) yes! u can restrict event log for accounts other than system accounts. Goto following key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\EventLog

create new DWORD value RestrictGuestAccess and set its value to 1

3.) Yes! just create following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer\RestrictRun

and in right-side pane, create new String value with name like 1 and set its value to the program's exe which u want to be allow to run!

[piyush gupta]

@Vishal:
if i restrict registry editor then how can i reopen reg. editor

[Vishal Gupta]

I noticed that after restricting registry editor, 3rd party Registry editors work

Tuneup Utilities registry editor works even after disabling Windows default registry editor!

or u can again enable registry editor from gpedit.msc

[sridatta]

@Piyush..
u can always change registry keys without opening Regedit.. Since you know the key u disabled, its just a matter of enabling it.. You can change the registry keys through Command prompt, Run command etc..

Type the key below in Start -> Run

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Pol icies\System /v DisableRegistryTools /t REG_DWORD /d 0 /f

[ninad_mhatre85]

hey that was nice man

[Matrix]

HI vishal...Thanks for the help..
bhai tell me ..for ..

1. Any such 3rd party Software which can do this ....?

and

3.I want to restrict all the other apps to be run by others, except a few ones of course, so can something be done by regedit or any third party app that i can restrict executing or installing all the other apps other than just a few ones which i want to allow

Pleasee.

[aditya.shevade]

Hi

I want to disable the general and security tab.

Aditya Shevade

[Vishal Gupta]

^^
To disable General & Security tab:

HKEY_CURRENT_USER\Software\Policies\Microsoft\Inte rnet Explorer\Control Panel

and create following DWORD values:

Wallet
GeneralTab
SecurityTab

and set their values to 1

Originally Posted by Matrix

3.I want to restrict all the other apps to be run by others, except a few ones of course, so can something be done by regedit or any third party app that i can restrict executing or installing all the other apps other than just a few ones which i want to allow

Pleasee.

Regarding to ur 3rd point, I told na

3.) Yes! just create following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer\RestrictRun

and in right-side pane, create new String value with name like 1 and set its value to the program's exe which u want to be allow to run!

e.g., u want to allow only winamp.exe, wmp.exe, iexplore.exe, etc. then just create String values, like 1, 2, 3, and so on and give each application name as the value

[gary4gar]

great work buddy!
can u create a automactic setup of it?

[Third Eye]

Thanks for telling us Vishal........

[Vishal Gupta]

thnx

@gary4gar
I can create a single .REG file for automating the whole task but it'll not be useful to all, e.g., some members would like to restrict Desktop properties but some would not, so it'll not work for all

[aditya.shevade]

Thanks for the info.

Aditya

[vikasg03]

Thanks ,but u left one important. How to "Disable Network Control Panel" in windows 2000/xp. I know how to disable this one in win 98 by using this key
"[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\
Network]"
Value Name: NoNetSetup
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disabled, 1 = enabled)

This tweak works in 98 but not work in 2000 or xp. if u know then plz provide.

[Vishal Gupta]

I posted only frequently used Restrictions

There are many other restrictions, which I can post on demand

Regarding to ur query, u can restrict any Control Panel Applet in 2000/XP using any of following 2 tricks:

1.) If u know the exact filename of the applet, u want to restrict, (like desk.cpl for desktop properties), then simply create following key:

HKEY_CURRENT_USER\Control Panel\don't load

and in right-side pane, create a new String value with the same name of the file (like desk.cpl, if u want to restrict this applet in control panel) and set its value to 1 to restirct it.

2.) OR just create following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer\DisallowCpl

and in right-side pane create a new String value and in its name give any number, (like 1, and so on) and set its value to exact name of the applet (like "Network Connections" to restrict this applet)!

[GNUrag]

There used to be a project called RedEdit.com - now known as WinGuides.com ( http://winguides.com/registry/ )
almost all of these tricks are neatly mentioned there. They also have a utility which will do these registry edits for the user.

[Vishal Gupta]

^^
There r lots of sites along with the site u mentioned, where we can get such tricks and many more without any problem, but it doesnt mean that we should not share our information with others

I know these tricks and thats why I posted them......

[bhavik]

any way handfull of new info...

thankz

[Matrix]

Originally Posted by Matrix

1. How to stop other users frm executing types of file u want to and can passwords be given to execute specific file types ?

Originally Posted by Vishal Gupta

1.) It can't be done using registry u'll hv to use 3rd party s/w.

Originally Posted by Matrix

1. Any such 3rd party Software which can do this ....?

So Vishal can you plz suggest some free/paid apps to do this ? Thanks for the help in advance.