Win9x registry security and user rights settings _ registration Form

I'm a fan of the game, I like to have nothing to do in the system toss, I found that the Win9x registry contains a number of important system information, and the security and user rights settings in Windows. So I went into the registry, after a period of groping, to find out the Win9x registry of security and user rights set some of the key points, I now tell you, the purpose is to make the registry and win 9X system security has a more in-depth understanding, so that we can better maintain system security.

Limit Control Panel
1. Open the primary key in the registry [hkey_users\ username ' \software\microsoft\windows\currenversion\policies\system] ("username" refers to the system in which the user is established, the name of the corresponding person , or "If no multiple users are established. Default), the corresponding Control Panel item for that user is disabled if the following DWORD value is available:
"Nodispappearancepage" =1 (Disable the Display property)
"Nodispbackgroundpage" =1 (hides the background page in the Display property)
"Nodispcpl" =1 (Hide the Screen saver page in the Display property)
"Nodispscrsavpage" =1 (hide the Appearance page in the Display property)

2. The corresponding Control Panel entry for the user under [hkey_users\ username \software\microsoft\windows\currentversion\policies\network] is restricted if the following DWORD value is available:

"Nonetsetup" =1 (Disable the Network property)
"Nonetsetupidpage" =1 (Hide the identity page in the network attribute)
"Nonetsetupsecuritypage" =1 (Hide the Access control page in the network attribute)

3. The corresponding Control Panel entry for the user under [hkey_users\ username \software\microsoft\windows\currentversion\policies\system] is restricted if the following DWORD value is available:

"Noseccpl" =1 (Disable the Password property)
"Nopwdpage" =1 (Hide the Change Password page in the Password property)
"Noadminpage" =1 (Hide the Remote Administration page)
"Noprofilepage" =1 (Hide the User Profiles page in the System attribute)
"Nodevmgrpage" =1 (Hide the Device Management page in the system attribute)
"Noconfigpage" =1 (Hide the Hardware Profiles page in the System attribute)
"Nofilesyspage" =1 (Hide the File system button on the performance page of the system property)
"Novirtmempage" =1 (Hide the virtual memory button on the performance page of the system property)

Second, limit the Start menu
If you are under [hkey_users\ user name "\software\microsoft\windows\currentversion\policies\explorer]"
If there is a DWORD value "NoRun" = 1 o'clock, the "run" command in the user's Start menu is prohibited;
If there is a DWORD value of "nosetfolders" = 1 o'clock, the Set \ Folder Options command in the user's Start menu is prohibited, and if the DWORD value "Nosettaskbar" = 1 o'clock, then the "Settings \ Taskbar and Start Menu" command in the user's Start menu is disabled ；
If there is a DWORD value "Nofind" = 1 o'clock, the "find" command in the user's Start menu is prohibited;
If there is a DWORD value of "nostartmenusubfolders" = 1, the subfolder of the user's Start menu is hidden;
If a DWORD value "Noclose" = 1 o'clock, the "Shutdown System" command in the user's Start menu is prohibited;

Third, network and user settings
1. If there is a DWORD value "NoDrives" = 1 o'clock under [hkey_users\ username "\software\microsoft\windows\currentversion\policies\explorer]", the user " All the drives in my computer are hidden;
If there is a DWORD value "Nonethood" = 1 o'clock, the user's "Network Neighborhood" is hidden;
If there is a DWORD value of "noentioenetwork" = 1 o'clock, the "entire network" in the user's Network Neighborhood is hidden;
If there is a string value of "noworkgroupcontents" = 1 o'clock, the workgroup directory in the user's network Places is hidden;
If there is a DWORD value "NoDesktop" = 1 o'clock, all the program groups on the user's desktop are hidden (that is, there is no desktop);
If there is a DWORD value of "nosavesettings" = 1 o'clock, the settings made by the user when they exit the system are not saved.

2. Dial-up networking and sharing settings:
The following DWORD values are established under [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft \windows\currentversion\policies\network], and the appropriate restrictions are valid:
"Nodialin" =1 (no dial-in)
"Nofilesharing" =1 (disable file sharing)

3. Run only the list of allowed Windows programs:
[hkey_users\ user name "\software\microsoft\windows\currentversion\policies\explorer]" if there is a primary key "Restrictrun", The string value below represents a list of Windows programs that allow the user to run only.

Four, password set
The following DWORD value is established under [hkey_local_machine\software\microsoft\windows\currentversion\policies\network], the appropriate setting is valid:
"Hidesharepwds" =1 (using an asterisk (*) to hide the shared password)
"DisablePwdCaching" =1 (disable password caching; note!) If you use this setting carefully, you cannot change the password in the password attribute in Control Panel, and the user can log in with either password or without a password at logon. ）
"Alphanumpwds" =1 (make Windows password must be numbers and letters)
"Minpwdlen" =n (set the minimum length of Windows password, n is greater than or equal to 0 less than or equal to 8)

V. Disabling Registry Editor
[hkey_users\ "username" \software\microsoft\windows\currentversion\policies\system\] If there is a DWORD value "Disableregstrytools" = 1, the user is prevented from using the Registry Editing tool.

Six, disable "MSDOS" mode, disable a single mode of MSDOS application
[hkey_users\ ' username ' \software\microsoft\windows\currentversion\policies\system] If there is a primary key "Winoldapp" under its DWORD value " Disabled "= 1, the user's" MSDOS "mode is prohibited, and" Winoldapp "if the DWORD value" Norealmode "= 1, the user's single mode of the MSDOS application is disabled.

Vii. Self-starter programs
The string value under [Hkey_local_machine\software\mic Rosoft\windows\currentversion\run] Represents a program that is started from the registry;
The string value under [Hkey_local_machine\software\mic Rosoft\windows\currentversion\runonce] Represents a program that starts only once;
The string value under [Hkey_local_machine\software\mic rosoft\windows\currentversion\runservices] Represents a service program that is started from the registry;
The string value under [Hkey_local_machine\software\mic Rosoft\windows\currentversion\runservicesonce] Represents a service program that starts only once.

From this, we can see all the above DWORD value, if its value is "1" to indicate that the value is valid, the value of "0" means that the value is invalid; we can easily make the appropriate restriction valid or invalid by changing the DWORD value or removing the DWORD. (Source: Free Good World Electronic magazine)