Policy Related Restrictions
Note: We have delineated between Windows 9x and Windows NT. Where no delineation is present, the restriction will work on either.
Disabling the change password button [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] Disabled “DisableChangePassword”=dword:00000000
Enabled “DisableChangePassword”=dword:00000001
Disable lock workstation in Windows NT SP4 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] Disabled “DisableLockWorkstation”=dword:00000000
Enabled “DisableLockWorkstation”=dword:00000001
Disable registry editing tools [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] Disabled “DisableRegistryTools”=dword:00000000
Enabled “DisableRegistryTools”=dword:00000001
Disable task manager [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] Disabled “DisableTaskMgr”=dword:00000000
Enabled “DisableTaskMgr”=dword:00000001
Deny access to display settings [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] Disabled “NoDispCPL”=dword:00000000
Enabled “NoDispCPL”=dword:00000001
Disable network control panel in Windows 9x [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Network] Disabled “NoNetSetup”=dword:00000000
Enabled “NoNetSetup”=dword:00000001
Disable printer control panel in Windows 9x [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] Disabled “NoPrinters”=dword:00000000
Enabled “NoPrinters”=dword:00000001
Disable passwords control panel in Windows 9x [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] Disabled “NoSecCPL”=dword:00000000
Enabled “NoSecCPL”=dword:00000001
Hide display appearance tab in display properties [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] Disabled “NoDispAppearancePage”=dword:00000000
Enabled “NoDispAppearancePage”=dword:00000001
Hide background tab in display properties [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] Disabled “NoDispBackgroundPage”=dword:00000000
Enabled “NoDispBackgroundPage”=dword:00000001
Hide screen-saver settings tab in display properties [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] Disabled “NoDispScrSavPage”=dword:00000000
Enabled “NoDispScrSavPage”=dword:00000001
Hide display settings tab in display properties [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] Disabled “NoDispSettingsPage”=dword:00000000
Enabled “NoDispSettingsPage”=dword:00000001
Hide network identification page in Windows 9x [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Network] Disabled “NoNetSetupIDPage”=dword:00000000
Enabled “NoNetSetupIDPage”=dword:00000001
Hide network access control page in Windows 9x [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Network] Disabled “NoNetSetupSecurityPage”=dword:00000000
Enabled “NoNetSetupSecurityPage”=dword:00000001
Hide remote administration page in Windows 9x [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] Disabled “NoAdminPage”=dword:00000000
Enabled “NoAdminPage”=dword:00000001
Hide user profiles page in Windows 9x [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] Disabled “NoProfilePage”=dword:00000000
Enabled “NoProfilePage”=dword:00000001
Disable addition of printers in Windows 9x [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] Disabled “NoAddPrinter”=dword:00000000
Enabled “NoAddPrinter”=dword:00000001
Disable deletion of printers in Windows 9x [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] Disabled “NoDeletePrinter”=dword:00000000
Enabled “NoDeletePrinter”=dword:00000001
Hide General and Details pages in printer setup in Windows 9x
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]Disabled “NoPrinterTabs”=dword:00000000
Enabled “NoPrinterTabs”=dword:00000001
Hide hardware profiles page in Windows 9x [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] Disabled;”NoConfigPage”=dword:00000000
Enabled;”NoConfigPage”=dword:00000001
Hide device manager page in Windows 9x [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] Disabled;”NoDevMgrPage”=dword:00000000
Enabled;”NoDevMgrPage”=dword:00000001
Hide File system button in system settings in Windows 9x [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] Disabled “NoFileSysPage”=dword:00000000
Enabled “NoFileSysPage”=dword:00000001
Hide virtual memory button in Windows 9x [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] Disabled “NoVirtMemPage”=dword:00000000
Enabled “NoVirtMemPage”=dword:00000001
Disable Single Mode MS-DOS applications [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp] Disabled “NoRealMode”=dword:00000000
Enabled “NoRealMode”=dword:00000001
Disable shutdown command for specified user [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] Disabled “NoClose”=dword:00000000
Enabled “NoClose”=dword:00000001
Disable common program groups from displaying in start menu [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] Disabled “NoCommonGroups”=dword:00000000
Enabled “NoCommonGroups”=dword:00000001
Don’t save settings at exit [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] Disabled “NoSaveSettings”=dword:00000000
Enabled “NoSaveSettings”=dword:00000001
Remove Control Panel and Printers from Settings menu [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] Disabled “NoSetFolders”=dword:00000000
Enabled “NoSetFolders”=dword:00000001
Remove Taskbar settings from Settings menu [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] Disabled “NoSetTaskbar”=dword:00000000
Enabled “NoSetTaskbar”=dword:00000001
Disable context menus for taskbar [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] Disabled “NoTrayContextMenu”=dword:00000000
Enabled “NoTrayContextMenu”=dword:00000001
Disable explorer’s default context menus [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] Disabled “NoViewContextMenu”=dword:00000000
Enabled “NoViewContextMenu”=dword:00000001
Specifying allowed applications to run in a restricted environment [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] Disabled “RestrictRun”=dword:00000000
Enabled “RestrictRun”=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictRun]“Consecutive Numbers”=”Allowed application” This section can include as many values as is necessary. Just name the values with consecutive ascending numbers
See also “How to Configure RestrictRun Key“.