How to use the Windows Registry

1. What is Registry?

The registry is a database used to store Windows specifications. It records all the information and settings for the software you install on your machine, hardware devices, user profiles, operating system configurations, and a lot of other information..

For example, when a piece of software A is installed, there are instructions and files that refer to A that are added to the registry at a specific location. As a result, the system/other software can interact with software A and refer to more information, such as the location of files or which options to use in A, etc.

In a nutshell, the registry is like a kind of DNA for the Windows operating system.

2. Where is the registry stored?

In Win95 & 98, the Registry is recorded in 2 files: user.dat and system.dat, Windows Me is in the Classes.dat file in the Windows directory. On Windows 7, 8, and 10, the Registry is stored in the “WindowsSystem32Config” folder.

On a hard drive, the Windows Registry is not simply a file but a collection of individual files called a “hive”. Each hive contains a branch of the Registry. Specifically:

• HKEY_LOCAL_MACHINE SYSTEM: system32configsystem
• HKEY_LOCAL_MACHINE SAM: system32configsam
• HKEY_LOCAL_MACHINE SECURITY: system32configsecurity
• HKEY_LOCAL_MACHINE SOFTWARE: system32configsoftware
• HKEY_USERS UserProfile: winntprofilesusername
• HKEY_USERS.DEFAULT: system32configdefault

3. Is the registry editable?

The registry can be directly edited by changing parameters in the Registry Editor editor. Enter regedit into the Run window to launch Registry Editor.

4. Structure of the Registry

The registry has a tree structure, like a directory structure. Usually, there are six main branches. Each branch is tasked with storing separate information. Within the main branches, there are many sub-branches. These sub-branches are kept separate as well.

HKEY_CLASSES_ROOT:

Save the information shared for the entire system. Is a sub-branch of HKEY_LOCAL_MACHINE Software. The information stored here ensures that when you open a file in Windows Explorer, the program corresponding to that file will be opened. Starting in Windows 2000, this information is stored in both HKEY_LOCAL_MACHINE and HKEY_CURRENT_USER.

• HKEY_LOCAL_MACHINE Software Classes contain default settings for all users.
• HKEY_CURRENT_USER Software Classes contain settings that override the default settings and apply only to the affected user.

HKEY_CLASSES_ROOT provides a unified registry view from both sources. To change settings for affected users, the changes must be made in HKEY_CURRENT_USER Software Classes rather than in HKEY_CLASSES_ROOT. Similarly, to change default settings, changes must be made in HKEY_LOCAL_MACHINE Software Classes. If you create a key in HKEY_CLASSES_ROOT, the system will store the information in HKEY_LOCAL_MACHINESoftwareClasses. If the key is generated in KEY_CLASSES_ROOT and the key already exists in HKEY_CURRENT_USER Software Classes, the system will store the information there instead of in HKEY_LOCAL_MACHINE Software Classes.

HKEY_CURRENT_USER:

Save the information for the currently logged-in user. Folders, screen colors, and Control Panel settings are stored here. This information is associated with the user’s profile. This branch is sometimes abbreviated as HKCU. It is a sub-branch of HKEY_USERS

HKEY_LOCAL_MACHINE:

Contains computer-specific configuration information (for any user). This key is abbreviated as HKLM.

HKEY_USERS:

Store the information of all users; each user is a branch with the name of that user’s ID number

HKEY_CURRENT_CONFIG:

It stores information about the current hardware in use.

HKEY_DYN_DATA:

This is also part of the HKEY_LOCAL_MACHINE branch.

Note: The registry key in 64-bit versions of Windows XP and above will be divided into 32-bit keys and 64-bit keys.

5. Data types used in the Registry

• REG_BINARY: Binary type
• REG_DWORD: Double Word type
• REG_EXPAND_SZ: Special extension string type. VD: “%SystemRoot%”
• REG_MULTI_SZ: Special string type
• REG_SZ: Standard string type

6. Why is it important to know about the Registry?

• The registry stores all information about hardware, software, user choices, etc.Controlling the contents of the Registry is an essential requirement for you to use your PC scientifically and gain a deeper understanding of the environment. Windows workspace.
• To go further in Windows-based programming techniques, such as how to secure, crack, and hack, you need to have a certain understanding of the Registry.
• Most of the tricks in Windows that the famous Vietnamese computer magazines have and will publish are closely related to the Windows Registry.

7. Warning!

When using the Registry Editor, you must back up the Registry. Any changes can cause your computer to not boot, hang,… Run Registry Editor (File -> Export…) and save your registry backup somewhere safe.

If you are unfamiliar with the Windows Registry, please read the instructions below.

The line following the words: User Key, System Key, or Key indicates the path to the branch to be repaired or created if it does not exist.

Note: User Key: This is for the change to take effect for the person who is Logon. System Key: is for the change to take effect for all users.

The Name line is the name of the key to be created, it is a sub-branch on the right pane of the Registry

The Type line is the data type of the newly created key

The Value line is the value of the key

8. Some useful registry tweaks

Desktop settings

Allow Desktop mode to work or not:

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

• Name: ForceActiveDesktopOn
• Type: REG_DWORD (DWORD Value)
• Value: (0 = default, 1 = enabled)
  

Some of the obstacles to Desktop Mode working include:

• NoChangingWallpaper – Not allowed to change the Wallpaper.
• NoComponents – Components are not allowed to be displayed.
• NoAddingComponents – No new components are allowed.
• NoDeletingComponents – Deleting components is not allowed.
• NoEditingComponents – Components editing are not allowed.
• NoCloseDragDropBands – On the desktop, disable mouse drag and drop.
• NoMovingBands – Do not allow the function of dragging and dropping Taskbars to other places on the Desktop.
• NoHTMLWallPaper – Only shape bitmaps (BMP) are allowed.

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesActiveDesktop

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesActiveDesktop

• Type: REG_DWORD (DWORD Value)
• Value: (0 = disable restriction, 1 = enable restriction)

On the Start Menu, hide the Active Desktop function from the Settings Menu

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

• Name: NoSetActiveDesktop
• Type: REG_DWORD (DWORD Value)
• Value: (0 = disable restriction, 1 = enable restriction)

Allow no changes to the Active Desktop mode

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

• Name: NoActiveDesktopChanges
• Type: REG_DWORD (DWORD Value)
• Value: (0 = disable restriction, 1 = enable restriction)

Control Panel Settings

Control styles are not allowed to be changed.

This section will restrict some or all of the functions in the Appearance (Tab) section of Display. Set the value to 0 to show and 1 to hide with the key names given below.

• NoVisualStyleChoice – does not allow you to change the style of the windows and buttons.
• NoColorChoice – Color scheme changes are not allowed.
• NoSizeChoice – Font size change is not allowed.

You access the following key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem

• Name: NoColorChoice, NoSizeChoice, NoVisualStyleChoice, SetVisualStyle.

Turn off the Themes Settings mode in Display in the Control Panel

Themes Settings allow you to change the appearance of push-button windows. If you don’t want to use them, put them away by creating a new key with the name NoThemesTab and assigning it a value of 1.

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

• Name: NoThemesTab
• Type: REG_DWORD (DWORD Value)
• Value: (0 = default, 1 = enable restriction)

Turn off changing Keyboard Navigation Settings in Control Panel:

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

• Name: NoChangeKeyboardNavigationIndicators
• Type: REG_DWORD (DWORD Value)
• Value: (0 = default, 1 = enable restriction)

Disable the animation settings:

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

• Name: NoChangeAnimation
• Type: REG_DWORD (DWORD Value)
• Value: (0 = default, 1 = enable restriction)

Animation mode control:

Go to key:

HKEY_CURRENT_USERControl PanelDesktopWindowMetrics

• Name: MinAnimate
• Type: REG_SZ (String Value)
• Value: (0=disable, 1=enable)

Turn off Display Settings in the Control Panel:

This also means that you cannot change the resolution of the screen because the Settings item is not allowed to work.

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem

• Name: NoDispSettingsPage
• Type: REG_DWORD (DWORD Value)
• Value: (0 = disabled, 1 = enabled)

Disable the Display’s ScreenSaver item in the Control Panel: 

Turning off the ScreenSaver item does not mean turning off the Autorun ScreenSaver mode; it means hiding it from changing and editing ScreenSaver. So before turning it off, you have to consider.

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem 

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem

• Name: NoDispScrSavPage
• Type: REG_DWORD (DWORD Value)
• Value: (0 = disabled, 1 = enabled)

In the Control Panel, disable the Display wallpaper change item: 

Do not change the wallpaper or background color of the Desktop.

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem

• Name: NoDispBackgroundPage
• Type: REG_DWORD (DWORD Value)
• Value: (0 = disabled, 1 = enabled)

Turn off the Appearance section of Display in the Control Panel.

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem

• Name: NoDispAppearancePage
• Type: REG_DWORD (DWORD Value)
• Value: (0 = disabled, 1 = enabled)

Modify the hard drive settings

Change the warning parameter of % of free hard disk space (Windows XP).

The default value is 10%. You type in the key:

HKEY_LOCAL_MACHINESystemCurrentControlSetServicesLanmanServerParameters

• Name: DiskSpaceThreshold.
• Type: REG_DWORD (DWORD Value)
• Value: 0 – 99 percent (Default is 10)

Master File Table parameter control with space constraints.

Default value is 1.

HKEY_LOCAL_MACHINESystemCurrentControlSetControlFileSystem

• Name: NtfsMftZoneReservation
• Type: REG_DWORD (DWORD Value)
• Value: 1 (default) – 4 (maximum)

Disable CD writing in Windows Explorer (Windows XP). 

Windows XP lets you burn a CD easily by dragging files or folders and dropping them on the CD icon. You can turn this off.

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

• Name: NoCDBurning
• Type: REG_DWORD (DWORD Value)
• Value: (0 = Allow CDR, 1 = Disable CDR)

Change the drive’s name and icon.

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerDriveIcons

• Name: Default
• Type: REG_SZ (String Value)

Specify the program to play the Audio CD.

By default, when you insert an Audio CD into the disc, the Microsoft CD Player will open the disc. But if there is a different or slightly different program, you can specify that program instead.

HKEY_CLASSES_ROOTAudioCDShellPlayCommand

• Name: (Default)
• Type: REG_SZ (String Value)
• Value: Command-line to Execute – nhập vào đường dẫn của chương trình chơi đĩa bạn muốn.

Control the mode to automatically open the CD when the disc is inserted into the drive.

HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesCDRom

• Name: Autorun
• Type: REG_DWORD (DWORD Value)
• Value: (0=disable, 1=enable)

Change Explorer settings

Hide the Distributed File System item in Windows Explorer

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

• Name: NoDFSTab
• Type: REG_DWORD (DWORD Value)
• Value: (0 = default, 1 = enable restriction)

Hide Security

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

• Name: NoSecurityTab
• Type: REG_DWORD (DWORD Value)
• Value: (0 = default, 1 = enable restriction)

Hide Hardware User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

• Name: NoHardwareTab
• Type: REG_DWORD (DWORD Value)
• Value: (0 = default, 1 = enable restriction)

Turn off the Nenu New

Find the following key and add a “-” after the “{” sign:

HKEY_CLASSES_ROOTCLSID{D969A300-E7FF-11d0-A93B-00A0C90F2719}

Modify the Internet Explorer settings 

Hide some buttons on Internet Explorer’s ToolBar

You need to create a key with the name SpecifyDefaultButtons and assign it a value of 1 to perform the mode of hiding some buttons in the list listed below. The next step to hide any button in the list below is to create a new key with that node name and assign it the value 2.

Btn_Back	Btn_Favorites	Btn_MailNews	Btn_Copy
Btn_Forward	Btn_Folders	Btn_Size	Btn_Paste
Btn_Stop	Btn_Media	Btn_Print	Btn_Encoding
Btn_Refresh	Btn_History	Btn_Edit	Btn_PrintPreview
Btn_Home	Btn_Fullscreen	Btn_Discussions
Btn_Search	Btn_Tools	Btn_Cut

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

• Name: SpecifyDefaultButtons
• Type: REG_DWORD (DWORD Value).

Do not allow changes (Customize) on the Toolbar of Internet Explorer.

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

• Name: NoToolbarCustomize
• Type: REG_DWORD (DWORD Value)
• Value: (1 = enable restriction)

Don’t show the Option button in Internet Explorer’s Tool Menu

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

• Name: NoBandCustomize
• Type: REG_DWORD (DWORD Value)
• Value: (1 = enable restriction)

Don’t show some buttons on the Help Menu

• NoHelpMenu – Disable the entire help menu
• NoHelpItemNetscapeHelp – Remove the “For Netscape Users” menu item
• NoHelpItemSendFeedback – Remove the “Send Feedback” menu item
• NoHelpItemTipOfTheDay – Remove the “Tip of the Day” menu item
• NoHelpItemTutorial – Remove the “Tour” (Tutorial) menu item

User Key:

HKEY_CURRENT_USERSoftwarePoliciesMicrosoftInternet ExplorerRestrictions

System Key:

HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftInternet ExplorerRestrictions

• Type: REG_DWORD (DWORD Value)
• Value: (0 = restriction disabled, 1 = restriction enabled)

Do not allow downloading files from the Internet:

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet SettingsZones3

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionInternet SettingsZones3

• Name: 1803
• Type: REG_DWORD (DWORD Value)
• Value: (0 = downloads enabled, 3 = downloads disabled)

Do not allow accessing files from an Internet link

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

• Name: NoFileUrl
• Type: REG_DWORD (DWORD Value)
• Value: (0 = Enable File URLs, 1 = Disable)

Hide some buttons in Internet Explorer

• NoBrowserClose – Disable the option of closing Internet Explorer.
• NoBrowserContextMenu – Disable right-click context menu.
• NoBrowserOptions – Disable the Tools / Internet Options menu.
• NoBrowserSaveAs – Disable the ability to Save As.
• NoFavorites – Disable the Favorites.
• NoFileNew – Disable the File / New command.
• NoFileOpen – Disable the File / Open command.
• NoFindFiles – Disable the Find Files command.
• NoSelectDownloadDir – Disable the option of selecting a download directory.
• NoTheaterMode – Disable the Full Screen view option.
• NoAddressBar – Disable the address bar.
• NoToolBar – Disable the tool bar.
• NoToolbarOptions – Disable the ability to change toolbar selection.
• NoLinksBar – Disable the links bar.
• NoViewSource – Disable the ability to view the page source HTML.
• NoNavButtons – Disables the Forward and Back navigation buttons
• NoPrinting – Remove Print and Print Preview from the File menu.
• NoBrowserBars – Disable changes to browsers bars.
• AlwaysPromptWhenDownload – Always prompt user when downloading files.

User Key:

HKEY_CURRENT_USERSoftwarePoliciesMicrosoftInternet ExplorerRestrictions

System Key:

HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftInternet ExplorerRestrictions

• Type: REG_DWORD (DWORD Value)
• Value: (0 = disable restriction, 1 = enable restriction)

Hide some features in the Control Panel’s Internet Options. 

• Advanced – Prevent changes to advanced settings
• Autoconfig – Prevent changes to Automatic Configuration
• Cache – Prevent changes to temporary file settings
• CalendarContact – Prevent changes to calender and contacts
• Certificates – Prevent changes to security certificates
• Check_If_Default – Prevent changes to default browser check
• Colors – Prevent Color changes
• Connection Settings – Prevent changes to connection settings
• Connection Wizard – Disable the Connection Wizard
• Fonts – Disable font changes
• History – Disable changes to History settings
• HomePage – Disable changes to Home Page settings
• Languages – Disable Language changes
• Links – Disable Links changes
• Messaging – Disable Messaging changes
• Profiles – Disable changes to Profiles
• Proxy – Disable changes to Proxy settings
• Ratings – Disable Ratings changes
• Wallet – Disable changes to Wallet settings

User Key:

HKEY_CURRENT_USERSoftwarePoliciesMicrosoftInternet ExplorerControl Panel

System Key:

HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftInternet ExplorerControl Panel

• Type: REG_DWORD (DWORD Value)
• Value: (0 = disable restriction, 1 = enable restriction)

Hide some features in the Control Panel’s Internet Options. 

• Accessibility – disables all options under Accessibility
• GeneralTab – removes General tab
• SecurityTab – removes Security tab
• ContentTab – removes Content tab
• ConnectionsTab – removes Connections tab
• ProgramsTab – removes Programs tab
• PrivacyTab – removes Privacy tab
• AdvancedTab – removes Advanced tab
• CertifPers – prevents changing Personal Certificate options
• CertifSite – prevents changing Site Certificate options
• CertifSPub – prevents changing Publisher Certificate options
• SecChangeSettings – prevents changing Security Levels for the Internet Zone
• SecAddSites – prevents adding Sites to any zone
• Privacy Settings – prevents changs to privacy settings
• FormSuggest – disables AutoComplete for forms
• FormSuggest Passwords – prevents Prompt me to save password from being displayed
• Connwiz Admin Lock – disables the Internet Connection Wizard
• Settings – prevents any changes to Temporary Internet Files
• ResetWebSettings – disables the Reset web Setting button

User Key:

HKEY_CURRENT_USERSoftwarePoliciesMicrosoftInternet Explorer

Control Panel System Key:

HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftInternet ExplorerControl Panel

• Type: REG_DWORD (DWORD Value)
• Value: (0 = disable restriction, 1 = enable restriction)

Delete the web addresses you have visited

Go to the Registry, find the key below, and delete the sub-branches in the right window, except Default.
User Key:

HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerTypedURLs

Do not allow the installation of programs from a certain website

You generate a new key using the path shown below.

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsZoneMapDomainsrestricted.com

Create a new DWORD, name it *, and set it to 4

System Key:

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsZoneMapDomains

• Name: *
• Type: REG_DWORD (DWORD Value)
• Value: (4 = restricted)

Error message mode control

HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerMain

• Name: IEWatsonDisabled, IEWatsonEnabled
• Type: REG_DWORD (DWORD Value)

Sign in and authenticate

Don’t let the Screensaver run while you logon

Without Logon entering the system, if the machine is in the state of “doing not put the key in to unlock the door” for too long, the Screensaver will run. We can turn them off.

User Key: HKEY_USERS .DEFAULT Control Panel Desktop

• Name: ScreenSaveActive
• Type: REG_SZ (String Value)
• Value: (0 = disabled, 1 = enabled)

Show the Shutdown button in the Dialog 

It is very necessary for those who are curious to open your device but can’t access it to press the Shutdown button right in front of you instead of unplugging the dangerous source from the machine.

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogon

• Name: ShutdownWithoutLogon
• Type: REG_SZ (String Value)
• Value: (0 = disabled, 1 = enabled)

Allow auto-login

Allow users to automatically log in to the system after booting.

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogon

• Name: ForceAutoLogon
• Type: REG_SZ (String Value)
• Value: (0 = disabled, 1 = enabled)

Disable password saving mode.

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesNetwork

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesNetwork

• Name: DisablePwdCaching
• Type: REG_DWORD (DWORD Value)
• Value: (0 = disabled, 1= enabled)

The password must contain letters a-z and numbers. Other characters are not allowed.

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesNetwork

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesNetwork

• Name: AlphanumPwds
• Type: REG_DWORD (DWORD Value)
• Value: (0 = disabled, 1= enabled)

Hide the Change Password button

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem

• Name: DisableChangePassword
• Type: REG_DWORD (DWORD Value)
• Value: (0 = disabled, 1 = enabled)

Disable the WorkStation button lock mode:

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem

System Key:

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem

• Name: DisableLockWorkstation
• Type: REG_DWORD (DWORD Value)
• Value: (0 = disabled, 1 = enabled)

Turn off pressing or holding Shift mode, which stops some programs from running automatically when you logon:

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionWinlogon

• Name: IgnoreShiftOverride
• Type: REG_SZ (String Value)
• Value: (1 = Ignore Shift)

Require users to press Ctrl + Alt + Del before logging in to the system:

System Key:

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogon

• Name: DisableCAD
• Type: REG_DWORD (DWORD Value)
• Value: (0 = Require Ctrl+Alt+Delete, 1 = Disable)

Change the message line on the Logon dialog box and the Security dialog box:

System Key:

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogon

• Name: Welcome
• Type: REG_SZ (String Value)
• Value: Text to display

Do not allow the last username to be displayed: 

User Key:

HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem

System Key:

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem

• Name: DontDisplayLastUserName
• Type: REG_DWORD (DWORD Value)
• Value: (1 = remove username)

Limit the number of users who automatically log into the system:

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionWinlogon

• Name: AutoLogonCount
• Type: REG_DWORD (DWORD Value)
• Value: Number of Automatic Logins

Specify the number of people logged into the system to be tracked:

System Key:

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogon

• Name: CachedLogonsCount
• Type: REG_SZ (String Value)
• Value: 0 – 50 (0 = disabled, 10 = default)

Open the dialog box asking to enter a Password when unlocking the device and exiting the Screen Saver:

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionWinlogon

• Name: ForceUnlockLogon
• Type: REG_DWORD (DWORD Value)
• Value: 0 = default authentication, 1 = online authentication

Display a message box before logging in: 

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogon

• Name: LegalNoticeCaption, LegalNoticeText
• Type: REG_SZ (String Value)
  • LegalNoticeCation: Title bar.
  • LegalNoticeText: The content of the notice.

Display the message line in the login window:

System Key:

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogon

• Name: LogonPrompt – Message content, greetings, etc.
• Type: REG_SZ (String Value)

Permit not creating Protables before logging into the system:

User Key:

HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem

System Key:

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem

• Name: UndockWithoutLogon
• Type: REG_DWORD (DWORD Value)
• Value: (0 = disabled, 1 = enabled)

Automatically Logon to the system:

• Create a new line called DefaultUserName and set the username that you want to automatically logon with.
• Create a new line called DefaultPassword and set the password of the username that you want entered above.
• Create a new line called DefaultDomainName and set the domain for the user.
• Create a new line called DefaultDomainName and set the domain for the user.
• Create a new line with the value is AutoAdminLogon and set it to 1 to enable automatic login or 0 to disable it.

System Key:

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogon

• Name: AutoAdminLogon
• Type: REG_SZ (String Value)
• Value: (0=disable, 1=enable)

Specify the minimum length of the password:

User Key:

HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionPoliciesNetwork

System Key:

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPoliciesNetwork

• Name: MinPwdLen
• Type: REG_BINARY (Binary Value)

Mainboard – CPU

Display BIOS information

HKEY_LOCAL_MACHINEHARDWAREDESCRIPTIONSystem

• Name: SystemBiosDate, SystemBiosVersion, VideoBiosDate
• Type: REG_SZ (String Value)

Display information about the CPU

HKEY_LOCAL_MACHINEHARDWAREDESCRIPTIONSystemCentralProcessor

Name: ~MHz, Identifier, VendorIdentifier

Security

Hide the My Computer icon from the Start Menu and the Desktop: 

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesNonEnum

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesNonEnum

• Name: {20D04FE0-3AEA-1069-A2D8-08002B30309D}
• Type: REG_DWORD (DWORD Value)
• Value: (0 = show, 1 = hide)

Hide drives in My Computers:

We can hide drives from A to Z, including network drives. 0 is show all. 1 is hidden. Add these decimals together to determine which drive you want to conceal. For example, if you want to hide drives A and C, give the value of the NoDrives key 5 = 4 (drive C) + 1 (drive A).

A: 1, B: 2, C: 4, D: 8, E: 16, F: 32, G: 64, H: 128, I: 256, J: 512, K: 1024, L: 2048, M: 4096, N: 8192, O: 16384, P: 32768, Q: 65536, R: 131072, S: 262144, T: 524288, U: 1048576, V: 2097152, W: 4194304, X: 8388608, Y: 16777216, Z: 33554432, ALL: 67108863

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

• Name: NoDrives
• Type: REG_DWORD (DWORD Value)

Close the Task Manager window:

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem

• Name: DisableTaskMgr
• Type: REG_DWORD (DWORD Value)
• Value: (0 = default, 1 = disable Task Manager)

Restrict some changes to the user’s private directories:

• DisablePersonalDirChange – Limit changes to the My Documents folder.
• DisableMyPicturesDirChange – Limit changes to the My Pictures folder.
• DisableMyMusicDirChange – Limit changes to the My Music folder
• DisableFavoritesDirChange – Limit changes to the Favorite folder

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

• Name: DisablePersonalDirChange, DisableMyPicturesDirChange, DisableMyMusicDirChange, DisableFavoritesDirChange.
• Type: REG_DWORD (DWORD Value)
• Value: (0 = allow changes, 1 = restrict changes)

Turn off user tracking:

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

• Name: NoInstrumentation
• Type: REG_DWORD (DWORD Value)
• Value: (1 = enable restriction)

Do not allow the use of the Registry Editor tool to edit the Registry:

User Key:

HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem

System Key:

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem

• Name: DisableRegistryTools
• Type: REG_DWORD (DWORD Value)
• Value: (0 = allow regedit, 1 = disable regedit)

Disable the Shut Down command: 

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

• Name: NoClose
• Type: REG_DWORD (DWORD Value)
• Value: (0 = shutdown enabled, 1 = shutdown disabled)

Prevent Windows Update Component Access

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

• Name: NoWindowsUpdate
• Type: REG_DWORD (DWORD Value)
• Value: (0 = default, 1 = disabled)

The Windows key is not permitted: 

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

• Name: NoWinKeys
• Type: REG_DWORD (DWORD Value)
• Value: (0 = disable restriction, 1 = enable restriction)

When shutting down, delete the page file: 

System Key:

HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSession ManagerMemory Management

• Name: ClearPageFileAtShutdown
• Type: REG_DWORD (DWORD Value)
• Value: (0 = disabled, 1 = enabled)

Disable the specified Run commands in the Registry:

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

• Name: DisableLocalMachineRun, DisableLocalMachineRunOnce, DisableCurrentUserRun, DisableCurrentUserRunOnce
• Type: REG_DWORD (DWORD Value)
• Value: (0 = enable run, 1 = disable run)

Restrict some applications that users can run:

Create new keys named 1, 2, 3… with type REG_SZ, and enter the path for the values of those keys to specify programs not to allow the user to run.

User Key:

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

System Key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer

Name: DisallowRun