How to modify the appearance of a registry system (5)

The control panel is an important part of windows. You can directly modify the attributes of the system, add and delete software and hardware in the system. If your computer is shared, however, if you do not want others to use the functions to modify the computer content, you can block some menu items, at least for cainiao, such protection is very effective.

The menu item shielding in the control panel is mainly based on the hkey_current_usersoftware microsoftwindowscurrent versionpolicies in the Registry and Its subkey branches. Here, we first mark this subkey branch as (*) for reference below.

Blocked menu items in Control Panel	Add a key-value position in the right window (new if this sub-key is not found)	Add Value Type	Name it	Set the value
"Show" icon	(*) System subkey Branch	DWORD dual-byte	Nodispcpl	1
"Desktop" tab in the "show" icon	(*) System subkey Branch	DWORD dual-byte	Nodispdomainpage	1
"Appearance" tab in the "display" icon	(*) System subkey Branch	DWORD dual-byte	Nodispappearancepage	1
Delete a printer from the printer icon	(*) Explorer sub-key branch	DWORD dual-byte	Nodleteprinter	1
Add a printer to the printer icon	(*) Explorer sub-key branch	String	Noaddprinter	1
Use the Task Manager	(*) System subkey Branch	DWORD dual-byte	Disabletaskmanager	1
"Add/deleteProgram"Icon	(*) Uninstall sub-key branch	String	Noaddremoveprograms	1
"Change or delete programs" in "Add/delete programs"	(*) Uninstall sub-key branch	DWORD dual-byte	Noremovepage	1
Add new programs in "Add/delete programs"	(*) Uninstall sub-key branch	DWORD dual-byte	Noaddpage	1
"Add/delete Windows Components" in "Add/delete programs"	(*) Uninstll subkey Branch	DWORD dual-byte	Nowindowssetuppage	1
Add programs from CD or floppy disk under "Add new programs" under "Add/delete programs"	(*) Uninstall sub-key branch	DWORD dual-byte	Noaddfromcdorfloppy	1
Change printer settings	(*) Explorer sub-key branch	DWORD dual-byte	Noprinters	1
Modify Control Panel	(*) Explorer sub-key branch	Binary	Nosetfolders	01 00 00 00
"Internet" tab	(*) System subkey Branch	DWORD dual-byte	Noinetcpl	1
"Telephone and modem" tab	(*) System subkey Branch	DWORD dual-byte	Notelphoncpl	1
"Power options" tab	(*) System subkey Branch	Binary	Nopower1_cpl	01 00 00 00
"Add new hardware" tab	(*) System subkey Branch	Binary	Nohdwwizcpl	01 00 00 00
"Region and language" tab	(*) System subkey Branch	Binary	Nointlcpl	01 00 00 00
"Game Controller" tab	(*) System subkey Branch	Binary	Nojoycpl	01 00 00 00
"Sound and audio devices" tab	(*) System subkey Branch	Binary	Nommsyscpl	01 00 00 00
"Network connection" tab	(*) System subkey Branch	Binary	Noncpacpl	01 00 00 00
"ODBC data source Manager" tab	(*) System subkey Branch	Binary	Noodbccp32cpl	01 00 00 00
System Tab	(*) System subkey Branch	Binary	Nosysdmcpl	01 00 00 00

In addition, the File menu in resource manager can be blocked to improve computer security.

The method is as follows: Open the (*) explorer sub-key branch, create a DWORD double-byte key value in the window on the right, name it "nofilemenu", and change the value to 1.

You can also block the drive shown in "My Computer", such as the drive C and drive E. It can be seen that "my computer" does not have these two drive letters.

The method is to open the (*) explorer sub-key branch, create a new binary value in the window on the right, and name it nodrives. The value can be set according to your preference. The drive letter number corresponds to the binary number:

Disk A corresponds to 1
Disk B Corresponds to 2
Disk C corresponds to 4
Disk D corresponds to 8
Edisk corresponds to 16
Disk F corresponds to 32

And so on, add the disk symbols you want to block, and fill in the data of the key value item in hexadecimal notation from the high position. For example, if disk C is 4, disk e is 16, and the sum is 20. If the hexadecimal format is 14, enter 14 00 00. the restart takes effect. At this time, I can't see the drive letter from my computer, but as long as I typed the drive letter in the top address bar, the content of the drive letter can be accessed directly, haha :), isn't it amazing? People who don't know can't do anything.

To more thoroughly shield the drive, we can disable the MS-DOS mode, because in DOS mode, others can still directly access the drive. Select the sub-key branch (*), right-click to create "item", name it "winoldapp", create a DWORD Value in the window on the right, and name it "disabled ", set the value to 1, and the restart takes effect.

In addition, we can also hide the folder content. This is not simply to set the folder as an implicit file, because you only need to select "show all file types" to see the hidden folder. What we need to do is to prevent others from opening this folder, and we do not know that this is a folder. For example, to protect the folder F: myfiles in the midi file format, find the CLSID of The MIDI file type in hkey_classes_root is {00022601-0000-0000-c000-000000000046}, and name f: myfiles F: myfiles. {00022601-0000-0000-c000-000000000046}, the folder icon becomes the MIDI file icon. Double-click the file system and use MIDI to open it, the contents in the folder are successfully protected. In the format of. {XXXXXXXXX}, the file looks like a txt extension, but it is actually opened by the corresponding program in the final serial number. The simplest way to judge is to check whether the icon corresponding to the file is the document file icon. If not, this is the case above. In this way, you will not accidentally open the virus program.