For some public or dedicated computers, we do not want everyone to modify the system settings or run other programs. Although they sometimes think that they are not at a low level, their frequent "accidental mishaps" will keep you busy maintaining the system. In this case, we have to point out the functions of the system.
The registry is actually a series of data files, and Windows 9x/NT mainly controls the hardware, software, user environment and Windows characteristics through it. In the Windows 3.1 era, the registry functions are mainly completed by and various .ini files. When you encounter some problems that cannot be solved by introductory textbooks, modifying the registry can often get what you want.
To modify the registry, you must use the registry editor. In Windows 9x, the Registry Editor is, which is located in the Windows directory. In Windows NT, the registry editor designed for Windows NT is, which is located in the \WinNT\System32 directory. In Windows NT 4.0, the system is also provided, which is located in the \WinNT directory. It is particularly noted here that both Windows NT registry editors can be used for the modification of the registry involved in this article.
The easiest way to start the Registry Editor is to type Regedit or Regedt32 (for Windows NT operating systems) in the Run command line in the Start menu.
1. Remove the Run command (Windows 9x & NT) from the Start menu. Only partial restrictions on running applications can be restricted, and applications can still run from Explorer.
Key name [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value name NoRun
Type REG_DWORD (double word value)
Data (0=invalid; 1=valid)
2. Remove the "Login..." command (Windows 9x & NT) from the "Start" menu. On Windows NT, the "Login" button will not work.
Key Name [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value name NoClose
Type REG_DWORD (double word value)
Data (0=invalid; 1=valid)
3. Disable the "Shut System" command (Windows 9x & NT)
Key name [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value name NoLogOff
Type REG_DWORD (double word value)
Data (0=invalid; 1=valid)
4. Delete other menu items except "Taskbar" from the "Start"/"Settings" menu (Windows 9x & NT)
Key Name [HKEY_CURRENT_USER\Software\ Microsoft\Windows\Current Version\Policies\Explorer]
Value Name NoSetFolders
Type REG_DWORD (double word value)
Data (0=invalid; 1=valid)
5. Delete the "Taskbar and Start Menu" command from the "Start"/"Settings" menu (Windows 9x & NT)
Key Name [HKEY_CURRENT_USER\Software\ Microsoft\Windows\Current Version\Policies\Explorer]
Value name NoSetTaskbar
Type REG_DWORD (double word value)
Data (0=invalid; 1=valid)
6. Hide "Online Neighbors" (Windows 9x & NT)
Key Name [HKEY_CURRENT_USER\Software\ Microsoft\Windows\Current Version\Policies\Explorer]
Value Name NoNetHood
Type REG_DWORD (double word value)
Data (0=invalid; 1=valid)
7. NoEntireNetWork, Hide "Enterprise Network" in "Online Neighbors" (Windows 9x & NT)
Key Name [HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer]
Value Name NoEntireNetwork
Type REG_DWORD (double word value)
Data (0=invalid; 1=valid)
8. Hide all icons on the "Desktop" (Windows 9x & NT)
Key Name [HKEY_CURRENT_USER\Software\ Microsoft\Windows\Current Version\Policies\Explorer]
Value Name NoDesktop
Type REG_DWORD (double word value)
Data (0=invalid; 1=valid)
9. Don't save settings when exiting (Windows 9x & NT)
Key Name [HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer]
Value Name NoSaveSettings
Type REG_DWORD (double word value)
Data (0=invalid; 1=valid)
10. Run only allowed Windows applications (Windows 9x & NT), which is probably the most valuable trick, which can prevent someone from running programs you don't want to run on the public machine you are responsible for. If you combine the above tricks, then this public machine will be invulnerable. However, before using this function, be careful. Once a program is not listed, it cannot be run, so it should be listed first. In this way, even if the registry editor is disabled and the method of importing registry files can be restored.
Key Name [HKEY_CURRENT_USER\Software\ Microsoft\Windows\Current Version\Policies\Explorer]
Value name RestrictRun
Type REG_DWORD (double word value)
Data (0=invalid; 1=valid)
11. In addition, under this path, you need to create a new primary key RestrictRun, and add string values such as "1", "2", "3" and other string values under this key. The data is the program name that is allowed to run. There is no need to enter a path, just specify the file name of the executor. As shown below,
Key name [HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer\RestrictRun]
Value name 1
Type REG_SZ (string value)
Data The name of the Windows application that is allowed to run
12. Disable access to monitor icons (Windows 9x & NT)
Key Name [HKEY_CURRENT_USER\Software\ Microsoft\Windows\Current Version\Policies\System]
Value Name NoDispCPL
Type REG_DWORD (double word value)
Data (0=invalid; 1=valid)
13. Hide the Background tab on the "Show Properties" dialog box (Windows 9x & NT)
Key Name [HKEY_CURRENT_USER\Software\ Microsoft\Windows\Current Version\Policies\System]
Value Name NoDispBackgroundPage
Type REG_DWORD (double word value)
Data (0=invalid; 1=valid)
14. Hide the Screen Saver tab on the "Show Properties" dialog box (Windows 9x & NT)
Key Name [HKEY_CURRENT_USER\Software\ Microsoft\Windows\Current Version\Policies\System]
Value Name NoDispScrSavPage
Type REG_DWORD (double word value)
Data (0=invalid; 1=valid)