Restrictions without running Poledit
If you want to make restrictions to what users can do without having to running
Poledit, changes can be made directly to the Registry.
This will allow you to make a REG file with the specific restrictions you
want and importing them all at once.
-
Start Regedit
-
Go to HKEY_Current_User / Software / Microsoft / Windows / CurrentVersion
/ Policies
-
There should already be at least a Explorer Key
-
Additional keys that can be created under Policies
You can then add DWORD values set to 1 in the appropriate keys
In the Explorer key you can add:
-
NoDeletePrinter - Disables Deletion of Printers
-
NoAddPrinter - Disables Addition of Printers
-
NoRun - Disables Run Command
-
NoSetFolders - Removes Folders from Settings on Start Menu
-
NoSetTaskbar - Removes Taskbar from Settings on Start Menu
-
NoFind - Removes the Find Command
-
NoDrives - Hides Drives in My Computers
-
NoNetHood - Hides the Network Neighborhood
-
NoDesktop - Hides all items on the Desktop
-
NoClose - Disables Shutdown
-
NoSaveSettings - Don't save settings on exit
-
DisableRegistryTools - Disable Registry Editing Tools - NOTE: Be Careful
of this one
-
NoRecentDocsHistory - Removes Recent Document from Start Menu - Requires
IE4
-
ClearRecentDocsOnExit - Clears the Recent Documents when you Exit
-
NoInternetIcon - Removes the Internet Icon from the Desktop
In the System key you can enter:
-
NoDispCPL - Disable Display Control Panel
-
NoDispBackgroundPage - Hide Background Page
-
NoDispScrSavPage - Hide Screen Saver Page
-
NoDispAppearancePage - Hide Appearance Page
-
NoDispSettingsPage - Hide Settings Page
-
NoSecCPL - Disable Password Control Panel
-
NoPwdPage - Hide Password Change Page
-
NoAdminPage - Hide Remote Administration Page
-
NoProfilePage - Hide User Profiles Page
-
NoDevMgrPage - Hide Device Manager Page
-
NoConfigPage - Hide Hardware Profiles Page
-
NoFileSysPage - Hide File System Button
-
NoVirtMemPage - Hide Virtual Memory Button
In the Network key you can enter:
-
NoNetSetupSecurityPage - H
-
NoNetSetup - Disable the Network Control Panel
-
NoNetSetupIDPage - Hide Identification Page
-
NoNetSetupSecurityPage - Hide Access Control Page
-
NoFileSharingControl - Disable File Sharing Controls
-
NoPrintSharing - Disable Print Sharing Controls
In the WinOldApp key you can enter:
-
Disabled - Disable MS-DOS Prompt
-
NoRealMode - Disables Single-Mode MS-DOS
|