All Kinds of Restrictions for Windows XP/2003

All tricks are based on Registry editing. So You 'll get the keyname and the value,
that you have to create for the restriction! If there no such key, then create it! Let's go...

1.) Restrict Display Properties:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System

create DWORD value NoDispCPL and set its value to 1


2.) Restrict Taskbar Properties:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer

create DWORD value NoSetTaskbar and set its value to 1


3.) Restrict Folder Options:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer

create DWORD value NoFolderOptions and set its value to 1


4.) Restrict Locking/Unlocking the taskbar:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer

create DWORD value LockTaskbar and set its value to 1


5.) Restrict Active Desktop:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer

create DWORD value NoActiveDesktop and set its value to 1


6.) Restrict adding/deleting items from Toolbars:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer

create DWORD value NoToolbarCustomize and set its value to 1


7.) Restrict adding/deleting toolbars:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer

create DWORD value NoBandCustomize and set its value to 1


8.) Restrict right-click in Start Menu:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer

create DWORD value NoChangeStartMenu and set its value to 1


9.) Restrict Desktop Cleanup Wizard:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer

create DWORD value NoDesktopCleanupWizard and set its value to 1


10.) Restrict notification at low disk space:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer

create DWORD value NoLowDiskSpaceChecks and set its value to 1


11.) Restrict Taskbar Context Menu:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer

create DWORD value NoTrayContextMenu and set its value to 1


12.) Restrict Programs to run:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer\DisallowRun

create String value with any name, like 1 and set its value to the program's EXE file.

e.g., If u want to restrict msconfig, then create a String value 1 and set its value to msconfig.exe. If u want to restrict more programs, then simply create more String values with names 2, 3 and so on and set their values to the program's exe.


13.) Restrict Registry Editor:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System

create DWORD value DisableRegistryTools and set its value to 1


14.) Restrict Task Manager:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System

create DWORD value DisableTaskMgr and set its value to 1


15.) Restrict Drives in My Computer:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer

In right-side pane, create a new DWORD value NoViewOnDrive and change its value as following:

3 : To Restrict A and B drives only.
4 : To Restrict C drive only.
7 : To Restrict A, B, and C drives only.
8 : To Restrict D drive only.
F : To Restrict A, B, C, and D drives only.
03FFFFFF : To Restrict all drives.

And if you want more specific restrictions, like you want to restrict a combination of other drives, then you can use decimal no. instead of hexadecimal no. Following is a list for all drives decimal no.:

A: 1
B: 2
C: 4
D: 8
E: 16
F: 32
G: 64
H: 128
I: 256
J: 512
K: 1024
L: 2048
M: 4096
N: 8192
O: 16384
P: 32768
Q: 65536
R: 131072
S: 262144
T: 524288
U: 1048576
V: 2097152
W: 4194304
X: 8388608
Y: 16777216
Z: 33554432
ALL: 67108863

So if you want to disable a combination of drives, just sum their numbers and give the same value to NoViewOnDrive. e.g., for restricting CDEF drives, give the value: 4+8+16+32 = 60

NOTE: You can also hide the drives using NoDrives DWORD value. The location and its value remain same as the above trick.


16.) Restrict New option in context menu:

HKEY_CLASSES_ROOT\Directory\Background\shellex\Con textMenuHandlers\New

And delete the value of Default, e.g., empty it.


17.) Restrict Send To in context menu:

HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\Con textMenuHandlers\Send To

And delete the value of Default, e.g., empty it.


18.) Restrict Balloon Tips:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Explorer\Advanced

Create DWORD value EnableBalloonTips and set its value to 0


19.) Restrict Users to enable New XP StartMenu:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer

Create DWORD value NoSimpleStartMenu and set its value to 1


20.) Restrict Command Prompt:

HKEY_CURRENT_USER\Software\Policies\Microsoft\Wind ows\System

Create DWORD value DisableCMD and set its value to 2


21.) Restrict Writing to USB Drives:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\StorageDevicePolicies

Create DWORD value WriteProtect and set its value to 1