Windows XP Registry (medium)

4. restrict the use of control panel (applicable to Windows 9x/Me/NT/2000/XP)
The control panel provides you with an intuitive interface to change some Windows parameters so that Windows interfaces and functions can better meet your needs. Improper use of control panel may cause some problems

(1) disable the entire control panel

Create a two-byte value item NoControlPanel in the Registry item HKEY_CURRENT_USERSoftware MicrosoftWindowsCurrentVersionPoliciesExplorer. If the value is 1, the control panel is forbidden. If the value is 0 or the value does not exist, the control panel is allowed.

After you restart the desktop to make the changes take effect, you can see that the "control panel" item in "Settings" in the "Start" menu is missing and you are trying to access the project in the "control panel" in other ways, for example, if you right-click on the desktop to access "display", a message box is displayed, prompting you not to perform this operation.

(2) Remove the specified items in Control Panel (applicable to Windows 2000/XP)

Sometimes we want to remove some projects in the control panel to prevent users from using them for settings, but we want to allow users to use other projects in the control panel, this is also possible.

In the Registry item HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrent version1_iesexplorer, create a dual-byte value item DisallowCpl and change its value to 1. Create a registry item hkey_current_usersoftwaremicrosoftwindowscurrentversionincluiesexplorer DisallowCpl, and create several string value items under this item in the format of "serial number = Name of the file corresponding to the control panel item ". For example, if you want to remove the "display" and "system" items in the control panel, you can create two values "1" and "2" under the item, with the values "desk. cpl (the file corresponding to the display item) and sysdm. cpl (the file corresponding to the system item ). Restart the desktop to make the change take effect. Then, go to the "control panel". You can see that the "display" and "system" items are gone.

(3) Specify the items displayed on the control panel (for Windows 2000/XP)

If we want to remove most of the projects in the control panel and only allow users to use a few projects, we can use this method. Only projects specified by the user are displayed on the control panel.

In the registry key HKEY_CURRENT_USERSoftware MicrosoftWindowsCurrent version1_iesexplore, create a two-byte value item RestrictCpl, modify its value to 1, create a registry key secret RestrictCpl, and create several strings (REG_SZ) value item in the format of "serial number = Name of the file corresponding to the control panel item ". For example, you can only use the "display" and "system" items in the control panel. You can create two values "1" and "2" under this item, with the values "desk. cpl (the file corresponding to the display item) and sysdm. cpl (the file corresponding to the system item ). Restart the desktop to make the change take effect. Then, go to the control panel. You can see that the control panel contains only "display" and "system" items.

Note: You can customize the display of items in the control panel by removing the specified project in the control panel and the project displayed in the specified control panel, but these two methods may conflict. If a conflict occurs, remove the specified project method in the Control Panel first.

(4) Remove the device management label from the system (for Windows 9x/Me)

Go to the registry key HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersion PoliciesSystem, create a dual-byte value item NoDevMgrPage, and change its value to 1. Then, go to the "System" item in the "control panel" and you can see that the "device management" tab is gone.

(5) remove the "hardware configuration" label in the "system" (applicable to Windows 9x/Me)

Go to the Registry item HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersion under PoliciesSystem, create a dual-byte value item NoConfigPage, and change its value to 1. Then, go to the "System" item in the "control panel" and you can see that the "hardware configuration" label is gone.

(6) remove the "File System" button in the "performance" label of "system" (applicable to Windows 9x/Me)

Go to the Registry item HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersion PoliciesSystem, create a dual-byte value item NoFileSysPage, and change its value to 1. Then, go to the "performance" item in the "control panel" and you can see that the "File System" button in the "performance" label is gone.

(7) remove the "virtual memory" button in the "performance" label of the "system" (applicable to Windows 9x/Me)

Go to the Registry item HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersion PoliciesSystem, create a dual-byte value item now.mempage, and change its value to 1. Then, go to the "performance" item in the "control panel" and you can see that the "virtual memory" button in the "performance" label is gone.

(8) Disable "display" items

We can disable the display items in the control panel. Although the displayed item still appears in the control panel, it cannot be used by users. In the Registry item HKEY_CURRENT_USER SoftwareMicrosoftWindowsCurrent VersionPoliciesSystem, create a two-byte value item NoDispCPL and change its value to 1. Enter "Control Panel" and double-click "display". A message box is displayed, prompting you not to perform this operation.

(9) remove the "background" label from the "display" item.

In the Registry item HKEY _ CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciessystem, create a dual-byte value item NoDispBackgr oundPage and change its value to 1.

(10) disable the "background" label in "display" (applicable to Windows 2000/XP)

In the Registry item HKEY _ CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesActiveDesktop, create a two-byte value item NoChangingWallPaper and change its value to 1.

(11) remove the "Screen Saver" tag from the "display" item

In the Registry item HKEY_CURRENT_USERSoftwareMicrosoft WindowsCurrent VersionPoliciessystem, create a two-byte value item NoDispScrSavPage and change its value to 1.

(12) Determine whether the screen saver uses password protection (applicable to Windows 2000/XP)

In the Registry item HKEY_CURRENT_USERSoftwarePolicies MicrosoftWindowsControl PanelDesktop, create a two-byte value item ScreenSaverIsSecure and change its value to 1.

(13) remove the "appearance" label from the "display" item

In the Registry item HKEY_CURRENT_USERSoftwareMicrosoft WindowsCurrent VersionPoliciessystem, create a two-byte value item NoDispAppearancePage and change it to 1.

(14) remove the "Settings" label in the "display" item.

In the Registry item HKEY_CURRENT_USERSoftwareMicrosoft WindowsCurrent VersionPoliciessystem, create a dual-byte value item NoDispSettingsPage and change its value to 1.

(15) Disable printer Deletion

In the Registry item HKEY_CURRENT_USERSoftwareMicrosoft WindowsCurrent version1_iesexplorer, create a two-byte value item NoDeletePrinter and change its value to 1.

(16) Remove "Add Printer" from "Printer"

In the Registry item HKEY_CURRENT_USERSoftwareMicrosoft WindowsCurrent version1_iesexplorer, create a dual-byte value item NoAddPrinter and change its value to 1.

(17) disable the Browse Network Printer option in the Add Printer wizard (for Windows 2000/XP)

In the Registry item HKEY_CURRENT_USERSoftwarePolicies MicrosoftWindows NTPrintersWizard, create a dual-byte value item Downlevel Browse and change its value to 1.

If you want to add a network printer, you can only enter the URL of the network printer.

(18) Remove "Add/Delete" items (applicable to Windows 2000/XP)

In the Registry item HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesUninstall, create a new string value item NoAddRemovePrograms and change its value to 1.

(19) remove the "change or delete programs" item from the "Add/Delete" item (applicable to Windows 2000/XP)

In the Registry item HKEY_CURRENT_USERSoftwareMicrosoft WindowsCurrent VersionPoliciesUninstall, create a dual-byte value item NoRemovePage and change its value to 1.

(20) Remove "Add new program" from "Add/Delete" (applicable to Windows 2000/XP)

In the Registry item HKEY_CURRENT_USERSoftwareMicrosoft WindowsCurrent VersionPoliciesUninstall, create a dual-byte value item NoAddPage and change its value to 1.

(21) Remove "Add/delete Windows Components" from "Add/Delete" (applicable to Windows 2000/XP)

In the Registry item HKEY_CURRENT_USERSoftwareMicrosoft WindowsCurrent VersionPoliciesUninstall, create a two-byte value item NoWindowsSetupPage and change its value to 1.

(22) Remove "add program from CD or floppy disk" from "Add new program" in "Add/Delete" project (for Windows 2000/XP)

In the Registry item HKEY_CURRENT_USERSoftwareMicrosoft WindowsCurrent VersionPoliciesUninstall, create a dual-byte value item NoAddFromCDor Floppy and change its value to 1.

(23) Remove "add a program from Microsoft" (for Windows 2000/XP) from "Add new programs" in the "Add/Delete" project)

In the Registry item HKEY_CURRENT_USERSoftwareMicrosoft WindowsCurrent VersionPoliciesUninstall, create a two-byte value item NoAddFromInternet and change its value to 1.

5. Prevent hacker attacks (applicable to Windows 9x/Me/NT/2000/XP)
Some parameters in the registry can be set properly to prevent hacker attacks. DoS (DoS) attacks are common hacker attacks, among which SYN flood attacks are common in DoS. Here we provide a method to prevent SYN attacks.

(1) reduce the waiting time for the SYN-ACK package

After TCP sends the SYN-ACK packet, first wait 3 seconds, if there is still no response, it will increase the time by a factor, from 3 seconds to 6 seconds, and then resend the SYN-ACK, then wait for the response. The number of resends is defined in a dual-byte value item TcpMaxConnectResponseRetransmissions in the registry. This value item is located in the Registry key HKEY_LOCAL_MACHINESYSTEMCurrentControlSet ServicesTcpipParameters. The default value is 3, indicating the weight.