Author: Gao Shan
1. Prevent anonymous users from logging in under WIX9X
Although "WIN9X" can customize its own usage interface and specify a password for each user, anyone can enter the system by clicking "Cancel" in the login window or pressing the "ESC" key, which is the so-called anonymous login. The following method can prevent anonymous users from logging in: select the "Run" command in the "Start" menu, type the "regedit" command in the pop-up "Run" command dialog box, and press Enter. Open Registry Editor. Create a new "DWORD" type "MustBeValidated" under HKEY_LOCAL_MACHINE \NetWork \Logon, and its value is 1.
(Appendix: If you can't even enter, you can enter in safe mode and change its value to 0.)
2. Block "Run", "Find" and "Switch System Functions" in the "Start" menu
Create three new "DWORD" values in HKEY_CURRENT_USER \ Software \Microsoft \Windows \CurrentVersion\Policies \Explorer, namely "NoRun" (mask "Run", "NoFind" and "NoClose" (mask "Set Close System"). The values are all set to "1". After restarting the system, the prompt operation is restricted and cancelled. At the same time, you will find that the "Find" option in the "Start" menu is gone. To restore its settings again, you can delete the corresponding key or set the key value to "0".
3. Block the disk drive icon in "My Computer"
In a multi-user operating environment, you can set different disk drive icons for different users, which can limit the operation permissions of various users.
Open the HKEY_CURRENT_USER \SoftWare \Microsoft \Windows \CurrentVersion\Policies \Explores branch. Under this branch, the NoDrives key value name provides convenience for setting different disk drive icons for different users. The default key value is 0x000000000. The NoDrives key value is four bytes, and each bit of each byte corresponds to a drive letter (A:-Z:). The first letter represents the eight drives from A: to H:, such as: 01 is A:, 02 is B:, 04 is C:…80 is H:. And so on, the second letter represents I: to P:; the third byte represents Q: to X:; the fourth byte represents Y: and Z:. Therefore, when the corresponding bit is 1, when "My Computer" is turned on, the corresponding disk will no longer be visible. For example, if we want to close the C: disk, we just right-click the NoDrives key value name, and then select "Modify" from the shortcut menu to change its key value to 04000000; if we want to close the D: disk, change the key value to 08000000; if we want to close the C: and D:, change the key value to 0C0000000; if we want to hide all drives FFFFFFFFFFF.
4. Disable MS-DOS mode
Although we hide all drives in "My Computer", users can still access each drive using MS-DOS. Therefore, for the sake of security, we have to prohibit ordinary users from using MS-DOS. The operation steps are as follows:
Open the HKEY_CURRENT_USER \SoftWare \Microsoft \Windows \CurrentVersion \Policies \Explores branch. Create a new primary key "WinOldApp" under this branch, and then create a single-machine primary key "WinOldApp". Create a new DWORD value "Disabled" in the right window, then double-click the "Disabled" key value, and enter "1" in the "Key Value" box of the pop-up dialog box. To prevent users from entering "Restart the computer and switch to MS-DOS mode" when starting the computer again, they must also create a DWORD key value "NoRealMode" key value in the right window of the HKEY_CURRENT_USER \SoftWare \Microsoft \Windows \CurrentVersion \Policies \Explores branch. Enter 1 in the key value box in the pop-up dialog box.
5. Lock the desktop
Desktop settings include wallpapers, icons and shortcuts. Generally, after careful selection and setting, we do not want others to modify desktop settings or delete shortcuts at will. By modifying the registry, no matter how others change it, just restart the computer and your original settings will appear in front of you intact.
Open the Hkey\Users\default\Software\Microsoft\Windows\CurrentVsersion\Policies\Explorer branch. Double-click "No Save Setting" and change its key value from 0 to 1.
6. Set two IP addresses for a machine
Generally, one IP address can only be configured for one network adapter, but by modifying the system registry, multiple IP addresses can be configured for a network card:
Open HKEY_LOCAL_MACHINE \System \CurrentcontrolSet \Services \Class \NetTrans. In this directory, you can see multiple directories named 0000, 0001, 0002…, which are used to record the installation of the protocol. Find DriverDesc in the middle as the "TCP/IP" directory, and modify the two keys IPAddress and IPMask. Where IPAddress is multiple IP addresses separated by commas, and IPMask is the corresponding subnet mask. For example, when setting IPAddress to "192..168.0.230, 192.168.0.102" and IPMask to "255.255.255.0, 255.255.255.0", it means that two IP addresses 192.168.0.230 and 192.168.0.102 are set for the system.
Isn't it very interesting? If you have any good techniques, please share with me gaoshan333333@