Open registry and navigate to
"HKEY_CURRENT_USER/Software/Microsoft/CurrentVersion/Policies/explorer".
Under this create a DWORD-Value and name it from the list below to
impose restriction. The value of which will be 1 to restrict and 0 to
remove restriction. Lets look at the following list:
NoDeletePrinter: Disables Deletion of already installed Printers
NoAddPrinter: Disables Addition of new Printers
NoRun : Disables or hides the Run Command
NoSetFolders: Removes Folders from the Settings option on Start Menu (Control Panel, Printers, Taskbar)
NoSetTaskbar: Removes Taskbar system folder from the Settings option on Start Menu
NoFind: Removes the Find Tool (Start >Find)
NoDrives: Hides and does not display any Drives in My Computer
NoNetHood: Hides or removes the Network Neighborhood icon from the desktop
NoDesktop: Hides all items including, file, folders and system folders from the Desktop
NoClose: Disables Shutdown and prevents the user from normally shutting down Windows.
NoSaveSettings: Means to say, ‘Don’t save settings on exit’
DisableRegistryTools: Disable Registry Editing Tools (If you
disable this option, the Windows Registry Editor(regedit.exe) too will
not work.). So be very careful.
NoRecentDocsHistory: Removes Recent Document system folder from the Start Menu (IE 4 and above)
NoFileMenu _ Hides the Files Menu in Explorer
NoActiveDesktop – No Active Desktop
NoActiveDesktopChanges- No changes allowed
NoInternetIcon – No Internet Explorer Icon on the Desktop
NoFavoritesMenu – Hides the Favorites menu
NoChangeStartMenu _ Disables changes to the Start Menu
NoFolderOptions _ Hides the Folder Options in the Explorer
NoLogoff – Hides the Log Off …. in the Start Menu
NoViewOnDrive – Restrict a drive to open
NoTrayContextMenu – No context menu in tray.
NoStartMenuSubFolders
NoWindowsUpdate
NoViewContextMenu
EnforceShellExtensionSecurity
LinkResolveIgnoreLinkInfo
NoDriveTypeAutoRun
NoStartBanner
NoSetActiveDesktop
NoNetConnectDisconnect
ClearRecentDocsOnExit: Clears the Recent Documents system folder on Exit.
RestrictRun – Disables all exe programs except those listed in the RestrictRun subkey
Under the same key
"HKEY_CURRENT_USER/Software/Microsoft/CurrentVersion/Policies" you can
create new subkeys other than the already existing Explorer key. Now
create a new key and name it System. Under this new key, system we can
create the following new DWORD values(1 for enabling the particular
option and 0 for disabling the particular
option):
· NODispCPL: Hides Control Panel
· NoDispBackgroundPage: Hides Background page.
· NoDispScrsavPage: Hides Screen Saver Page
· NoDispAppearancePage: Hides Appearance Page
· NoDispSettingsPage: Hides Settings Page
· NoSecCPL: Disables Password Control Panel
· NoPwdPage: Hides Password Change Page
· NoAdminPaqe: Hides Remote Administration Page
· NoProfilePage: Hides User Profiles Page
· NoDevMgrPage: Hides Device Manager Page
· NoConfigPage: Hides Hardware Profiles Page
· NoFileSysPage: Hides File System Button
· NoVirtMemPage: Hides Virtual Memory Button
Similarly, if we create a new subkey named WinOldApp, we can add the following
DWORD values under it(1 for enabling the particular option and 0 for disabling the
particular option):
Disabled: Disable MS-DOS Prompt
NoRealMode: Disable Single-Mode MS-DOS.