Policy Related Restrictions

Note: We have delineated between Windows 9x and Windows NT. Where no delineation is present, the restriction will work on either.

Disabling the change password button

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

Disabled "DisableChangePassword"=dword:00000000
Enabled "DisableChangePassword"=dword:00000001

Disable lock workstation in Windows NT SP4

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

Disabled "DisableLockWorkstation"=dword:00000000
Enabled "DisableLockWorkstation"=dword:00000001

Disable registry editing tools

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

Disabled "DisableRegistryTools"=dword:00000000
Enabled "DisableRegistryTools"=dword:00000001

Disable task manager

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

Disabled "DisableTaskMgr"=dword:00000000
Enabled "DisableTaskMgr"=dword:00000001

Deny access to display settings

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

Disabled "NoDispCPL"=dword:00000000
Enabled "NoDispCPL"=dword:00000001

Disable network control panel in Windows 9x

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Network]

Disabled "NoNetSetup"=dword:00000000
Enabled "NoNetSetup"=dword:00000001

Disable printer control panel in Windows 9x

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

Disabled "NoPrinters"=dword:00000000
Enabled "NoPrinters"=dword:00000001

Disable passwords control panel in Windows 9x

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

Disabled "NoSecCPL"=dword:00000000
Enabled "NoSecCPL"=dword:00000001

Hide display appearance tab in display properties

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

Disabled "NoDispAppearancePage"=dword:00000000
Enabled "NoDispAppearancePage"=dword:00000001

Hide background tab in display properties

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

Disabled "NoDispBackgroundPage"=dword:00000000
Enabled "NoDispBackgroundPage"=dword:00000001

Hide screen-saver settings tab in display properties

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

Disabled "NoDispScrSavPage"=dword:00000000
Enabled "NoDispScrSavPage"=dword:00000001

Hide display settings tab in display properties

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

Disabled "NoDispSettingsPage"=dword:00000000
Enabled "NoDispSettingsPage"=dword:00000001

Hide network identification page in Windows 9x

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Network]

Disabled "NoNetSetupIDPage"=dword:00000000
Enabled "NoNetSetupIDPage"=dword:00000001

Hide network access control page in Windows 9x

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Network]

Disabled "NoNetSetupSecurityPage"=dword:00000000
Enabled "NoNetSetupSecurityPage"=dword:00000001

Hide remote administration page in Windows 9x

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

Disabled "NoAdminPage"=dword:00000000
Enabled "NoAdminPage"=dword:00000001

Hide user profiles page in Windows 9x

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

Disabled "NoProfilePage"=dword:00000000
Enabled "NoProfilePage"=dword:00000001

Disable addition of printers in Windows 9x

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

Disabled "NoAddPrinter"=dword:00000000
Enabled "NoAddPrinter"=dword:00000001

Disable deletion of printers in Windows 9x

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

Disabled "NoDeletePrinter"=dword:00000000
Enabled "NoDeletePrinter"=dword:00000001

Hide General and Details pages in printer setup in Windows 9x

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

Disabled "NoPrinterTabs"=dword:00000000
Enabled "NoPrinterTabs"=dword:00000001

Hide hardware profiles page in Windows 9x

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

Disabled;"NoConfigPage"=dword:00000000
Enabled;"NoConfigPage"=dword:00000001

Hide device manager page in Windows 9x

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

Disabled;"NoDevMgrPage"=dword:00000000
Enabled;"NoDevMgrPage"=dword:00000001

Hide File system button in system settings in Windows 9x

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

Disabled "NoFileSysPage"=dword:00000000
Enabled "NoFileSysPage"=dword:00000001

Hide virtual memory button in Windows 9x

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

Disabled "NoVirtMemPage"=dword:00000000
Enabled "NoVirtMemPage"=dword:00000001

Disable Single Mode MS-DOS applications

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp]

Disabled "NoRealMode"=dword:00000000
Enabled "NoRealMode"=dword:00000001

Disable shutdown command for specified user

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

Disabled "NoClose"=dword:00000000
Enabled "NoClose"=dword:00000001

Disable common program groups from displaying in start menu

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

Disabled "NoCommonGroups"=dword:00000000
Enabled "NoCommonGroups"=dword:00000001

Don't save settings at exit

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

Disabled "NoSaveSettings"=dword:00000000
Enabled "NoSaveSettings"=dword:00000001

Remove Control Panel and Printers from Settings menu

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

Disabled "NoSetFolders"=dword:00000000
Enabled "NoSetFolders"=dword:00000001

Remove Taskbar settings from Settings menu

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

Disabled "NoSetTaskbar"=dword:00000000
Enabled "NoSetTaskbar"=dword:00000001

Disable context menus for taskbar

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

Disabled "NoTrayContextMenu"=dword:00000000
Enabled "NoTrayContextMenu"=dword:00000001

Disable explorer's default context menus

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

Disabled "NoViewContextMenu"=dword:00000000
Enabled "NoViewContextMenu"=dword:00000001

Specifying allowed applications to run in a restricted environment

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

Disabled "RestrictRun"=dword:00000000
Enabled "RestrictRun"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictRun] 

"Consecutive Numbers"="Allowed application" This section can include as many values as is necessary. Just name the values with consecutive ascending numbers

See also "How to Configure RestrictRun Key".

Copyright ©1995-2000 DEW Associates Corporation. All rights reserved.
Your privacy will be respected at all times.
Year 2000 Readiness Disclosure.