Modify the registry to make your computer more secure

For personal users at home using computers, such security control is sometimes not necessary, but for Internet cafes, public computer room managers and users understand these security controls are very useful, so you can easily control your computer, but also greatly reduce your maintenance work.

Disable using Registry Editor regedit

The registry for many users is very dangerous, especially beginners, in order to secure, it is best to prohibit the Registry Editor Regedit.exe run, in the public computer room is more important, or your machine accidentally was changed to a mess.

Open the registry to Hkey_current_usersoftwaremicrosoft Windowscurrentversionpoliciessystem, and if you find that there is no system primary key under policies, Then create a new primary key under it, Name System, and then create a new DWORD string value in the right margin, with the name DisableRegistryTools, and modify its value to 1, so that after you modify it, People who use this computer can no longer run Regedit.exe to modify the registry, including yourself, and if you want to recover, save the following code as a Reg.reg file and reboot:

REGEDIT4

[Hkey_current_usersoftwaremicrosoftwindowscurrentversionpoliciessystem]

"DisableRegistryTools" =dword:00000000

Hide and disable the use of the Control Panel

The control Panel is the control center of the Windows system and can be modified for many of the systems that are critical to device properties, file systems, security passwords, and you certainly need to guard against this.

Open the new DWORD value nodispcpl in Hkey_current_usersoftwaremicrosoft Windowscurrentversionpoliciessystem, and modify the value to 1 (hexadecimal).

Prohibit the use of any program

Open Hkey_current_usersoftwaremicrosoft Windowscurrentversionpoliciesexplorer, and create a new DWORD string value in the right window: "Restrictrun", Set its value to "1". This way we can prevent any programs from running in Windows98.

Modifying the registry only allows the user to use the program you specify

Open Hkey_current_usersoftwaremicrosoft Windowscurrentversionpoliciesexplorer, and create a new DWORD string value in the right window: "Restrictrun", Set its value to "1". Then, under the primary key of Restrictrun, add the string values named "1", "2", "3", and then set the value of the string "1", "2", "3" to the name of the program that you allow the user to use. For example, "1", "2", "3" are set to Word respectively. EXE, Notepa XE, Empires. EXE, users can only use Word, WordPad, the Age of Empires, so that your system will be the most secure, you can limit the user to run unnecessary software.

Disable the taskbar properties feature

Taskbar properties, you can make it easy for users to modify the Start menu, you can modify many of the Windows System properties and running programs, which in our view is a very dangerous thing, so it is necessary to prohibit changes to it.

Open Hkey_current_usersoftwaremicrosoft Windowscurrentversionpoliciesexplorer, create a new DWORD string value "Nosettaskbar" in the right pane, and then double-click Nosettaskbar "Key value, enter 1 in the key Value box of the pop-up dialog box.

Prohibit modification of display properties

Open Hkey_current_usersoftwaremicrosoft Windowscurrentversionpoliciessystem A new DOWRD string value in the right window: Then rename "New Value #" to " Nodispcpl ", and set its value to" 1 "is OK.

Disable the use of the password icon in the Control Panel to set features

Open Hkey_current_usersoftwaremicrosoft Windowscurrentversionpoliciesexplorer, create a new DWORD string value in the right window, and rename "New Value #" to " Noseccpl ", and then set its value to 1 on the line.

Prohibit using the Change Password tab under password

Open Hkey_current_usersoftwaremicrosoft Windowscurrentversionpoliciesexplorer, create a new DWORD string value in the right window, and rename "New Value #" to " Nopwdpage ", and then set its value to 1.

Prohibit using the Remote Administration tab under password

Open Hkey_current_usersoftwaremicrosoft Windowscurrentversionpoliciesexplorer, create a new DWORD string value in the right window, and rename "New Value #" to " Noadminpage ", and then set its value to 1.

Disable the use of System Management programs in Control Panel

Open Hkey_current_usersoftwaremicrosoftwindowscurrentversionpoliciessystem, create a new DWORD string value "Nodevmgrp-age" in the right window and change its value to "1 "On the line."

Prevent the Start menu from being modified

Open Hkey_current_usersoftwaremicrosoft Windowscurrentversionpoliciesexplore and create a new DWORD string in the right window: Nochangestartmenu , and change its value to "1".

Hide My Network Places on the desktop

Open Hkey_current_usersoftwaremicrosoft Windowscurrentversionpoliciesexplorer and create a new DWORD value Nonethood in the right window, with a value of 1 (hexadecimal).

Disable screen protection using passwords

Open Hkey_current_usercontrolpaneldesktopscreensaveusepassword Modify its value, the value of 0 or 1,0 for no password, 1 use a preset password, you need to set up on the line.

Do not allow changes to the boot menu

Open HKEY_USERS. Defaultsoftwaremicrosoft Windowscurrentversionpoliciesexplorer, create a new DWORD string value "Nochangestartmenu" in the right window and set the value to "1".

Prohibit the "File system" menu from appearing in System properties

Open Hkey_current_usersoftwaremicrosoft Windowscurrentversionpoliciessystem, and create a new DWORD string value in the right window: "Nofilesyspage", Then change its value to "1".

Prevent Device Manager menus from appearing in System properties

Open Hkey_current_usersoftwaremicrosoftwindowscurrentversionpoliciessystem and create a new DWORD string value in the right window: "Nodevmgrpage", Then change its value to "1".

Prohibit the "Hardware Profile" menu from appearing in System properties

Open Hkey_current_usersoftwaremicrosoftwindowscurrentversionpoliciessystem and create a new DWORD string value in the right window: "Noconfigpage", Then the value of it is "1".

Change the security password for IE

You can set the password in the Content review box on the Contents tab of the Internet Options dialog box in IE, this way, when the page is displayed, there will always be a "rating review does not allow viewing" message, and then the Password dialog box appears, asking you to enter the Guardian password. If the password is incorrect, browsing is stopped. However, if you forget this password, you will not be able to browse the pages. After the password is forgotten, even if you reinstall IE4.0 can not remove the security password, then you have recourse to the registry:

Open Hkey_local_machinesoftwaremicrosoft windowscurrentversionpolicies, under the Policies subkey select "Ratings" subkey, press Del to delete it, because Ratings keys under the key value data is encrypted password, deleted this item, ie in the password also removed.

Erase all historical records

The WINDOWS98 system retains a variety of user histories, including recently opened documents, programs, files that have been searched, and usage on the network. In the public computer room, in order to our personal security needs, we need to delete these historical records, but the general removal method is very dirty, this has to resort to the registry.

Open Hkey_current_usersoftwaremicrosoft Windowscurrentversionexplorer, delete the keys shown in the table, clear the contents of the Windowsrecent, refresh the document menu, So you can get rid of your records. Below is the table entry in this directory:

Location in Registry

Documents Menu Recentdocs

Run Dialog RunMRU

Find the Files dialog Doc find Spec MRU

Find Computer Dialog Findcomputermru

The safety and system stability of the public computer room is very important, here is only the most basic protection function, if you want to achieve good protection, you have to turn to other management software, here is just a little help you.