Group Policy user configuration management template Windows Components
Windows Update
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesWindowsUpdate]
"DisableWindowsUpdateAccess" = dword: 00000001 (delete access using all Windows Update functions) (at least WINXP)
Group Policy user configuration management template taskbar and Start Menu
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer]
"NoSimpleStartMenu" = dword: 00000001 (force a typical menu) (at least WINXP)
"NoCommonGroups" = dword: 00000001 (delete a public program group from Start> program menu) (at least WIN2000)
"NoSMMyDocs" = dword: 00000001 (delete my document icon from Start> Document menu) (at least WIN2000)
"NoNetworkConnections" = dword: 00000001 (delete network connections from the Start Menu> Settings menu) (at least WIN2000)
"NoSMMyPictures" = dword: 00000001 (Delete "image favorites" icon from the Start Menu) (at least WINXP)
"ForceStartMenuLogOff" = dword: 00000001 (Force start menu display logout) (at least WIN2000)
"Intellimenus" = dword: 00000001 (do not customize menu) (at least WIN2000)
"NoInstrumentation" = dword: 00000001 (Disable User tracking) (at least WIN2000)
[Note] This setting prevents the system from tracking user programs, user navigation paths, and documents opened by users. The system uses this information to customize Windows functions, such as personalized menus.
"MemCheckBoxInRunDlg" = dword: 00000001 (add the "run in separate memory space" check box to the "run" dialog box) (at least WIN2000)
[Note] users are allowed to run sixteen-bit programs in a dedicated (not shared) Virtual DOS Machine (VDM) process.
"NoTaskGrouping" = dword: 00000001 (blocking project groups on the taskbar) (at least WINXP)
"LockTaskbar" = dword: 00000001 (lock the taskbar) (at least WINXP)
"NoTrayItemsDisplay" = dword: 00000001 (hide the system tray icon) (at least WINXP)
"NoToolbarsOnTaskbar" = dword: 00000001 (do not display any custom toolbar on the taskbar) (at least WINXP)
"GreyMSIAds" "= dword: 00000001 (the shortcut for installing incomplete programs in the gray show start menu) (at least WIN2000)
Group Policy user configuration management template taskbar and start menu (WINXP new style start menu)
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer]
"NoUserNameInStartMenu" = dword: 00000001 (hide user name)
"NoStartMenuMorePrograms" = dword: 00000001 (hide all programs)
"NoStartMenuMFUprogramsList" = dword: 00000001 (hide frequently used programs)
"NoStartMenuMyMusic" = dword: 00000001 (delete my music icon)
"NoStartMenuNetworkPlaces" = dword: 00000001 (delete the network neighbor icon)
Group Policy user configuration management template Desktop
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesNonEnum]
"{20D04FE0-3AEA-1069-A2D8-08002B30309D}" = dword: 00000001 (delete all my computer icons) (at least WINXP)
"{Export d8fba-ad25-11d0-98a8-0800361b1103}" = dword: 00000001 (delete all my document icons) (at least WIN2000)
"{645FF040-5081-101B-9F08-00AA002F954E}" = dword: 00000001 (delete all recycle bin icons) (at least WINXP)
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer]
"NoPropertiesMyComputer" = dword: 00000001 (delete the properties of my PC Right-click menu) (at least WIN2000SP3)
"NoPropertiesMyDocuments" = dword: 00000001 (delete attributes of my documents right-click menu) (at least WIN2000SP3)
"NoPropertiesRecycleBin" = dword: 00000001 (delete properties from the context menu of the recycle bin) (at least WINXP)
"NoRecentDocsNetHood" = dword: 00000001 (do not add open shared folders to network neighbors) (at least WIN2000)
"DisablePersonalDirChange" = dword: 00000001 (do not change my document path) (at least WIN2000)
"Notestopcleanupwizard" = dword: 00000001 (delete Desktop Cleanup Wizard) (at least WINXP)
Group Policy user configuration management template desktop activity Desktop
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer]
"ForceActiveDesktopOn" = dword: 00000001 (enable active desktop, disable user shutdown) (at least WIN2000)
[Note] This setting has a higher priority than "NoActiveDesktop.
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
"Wallpaper" = "AB" (specifies the location of the desktop Wallpaper, which cannot be changed) (at least WIN2000/ME)
"WallpaperStyle" = "0" (0: Center, 1: Tile, 2: Stretch) (at least WIN2000/ME)
Group Policy user configuration management template Control Panel
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer]
"NoControlPanel" = dword: 00000001 (forbidden access control panel) (at least WIN2000)
"ForceClassicControlPanel" = dword: 00000001 (forced to be a traditional control panel style) (at least WINXP)
"DisallowCpl" = dword: 00000001 (hide the specified control panel project) (at least WIN2000)
"RestrictCpl" = dword: 00000001 (only display the specified control panel project) (at least WIN2000)
[Note] You need to add a subkey with the same name to the preceding settings, create a new string in the subkey, and set its value to a specified control panel project, such as desk.
Windows Registry Editor Version 5.00
Group Policy User Configuration \ management template Windows component Windows Resource Manager
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer]
"NoManageMyComputerVerb" = dword: 00000001; hide "my computer" right-click "manage"
"NoShellSearchButton" = dword: 00000001; (delete the "Search" button from Resource Manager)
"NoLowDiskSpaceChecks" = dword: 00000001; (warning about disabling insufficient disk space)
"NoHardwareTab" = dword: 00000001; (delete the hardware tab from the control panel's mouse, keyboard, sound and audio devices, and drive Properties dialog box)
"NoSecurityTab" = dword: 00000001; (delete the Security tab from the file and folder attributes)
"NoChangeAnimation" = dword: 00000001; (do not change the UI of menu animation settings)
"NoChangeKeyboardNavigationIndicators" = dword: 00000001; (do not change the "Hide keyboard navigation instructions before using ALT" option in the display properties)
"NoDFSTab" = dword: 00000001; (delete DFS tab from Resource Manager)
"NoComputersNearMe" = dword: 00000001; ("My computer nearby" is not found in my network neighbor ")
"MaxRecentDocs" = dword: 0000000f; (maximum number of recent documents)
"NoRunasInstallPrompt" = dword: 00000001; (do not use the "Install Program as another user" dialog box to install the Program)
"PromptRunasInstallNetPath" = dword: 00000001; (the "Install as another user" dialog box is displayed during network installation)
; [Note] Other Logon creden。 (as the installer for other users) must be submitted only when a non-administrator user installs the program ).
"NoCDBurning" = dword: 00000001; (delete the CD burning function of resource manager)
"ConfirmFileDelete" = dword: 00000001; (confirmation File Deletion dialog box)
"NoSharedDocuments" = dword: 00000001; (delete shared documents from my computer)
"NoThumbnailCache" = dword: 00000001; (disable thumbnail cache)
"NoFileAssociate" = dword: 00000001; (do not change the file type in the folder option)
Group Policy User Configuration \ Management template Windows component Micorsoft Management Console
[HKEY_CURRENT_USERSoftwarePoliciesMicrosoftMMC]
"RestrictAuthorMode" = dword: 00000001; (prohibit users from entering the editing mode)
"RestrictToPermittedSnapins" = dword: 00000001; (restrict users to use only the management units that are particularly allowed in the List)
[HKEY_CURRENT_USERSoftwarePoliciesMicrosoftMMC {8EAD3A12-B2C1-11d0-83AA-00A0C92C9D5D}]
"Restrict_Run" = dword: 00000001; (Forbidden) (allows or disables disk management)
[HKEY_CURRENT_USERSoftwarePoliciesMicrosoftMMC {8fc0b734-a0e1-11d1-a7d3-109f87571e3}]
"Restrict_Run" = dword: 00000001; (Forbidden) (allow or deny group policies)
[HKEY_CURRENT_USERSoftwarePoliciesMicrosoftMMC {975797FC-4E2A-11D0-B702-00C04FD8DBF7}]
"Restrict_Run" = dword: 00000001; (Forbidden) (enable or disable event viewer)
[HKEY_CURRENT_USERSoftwarePoliciesMicrosoftMMC {5D6179C8-17EC-11D1-9AA9-00C04FD8FE93}]
"Restrict_Run" = dword: 00000001; (Forbidden) (allow or deny local users and groups)
[HKEY_CURRENT_USERSoftwarePoliciesMicrosoftMMC {58221C66-EA27-11CF-ADCF-00AA00A80033}]
"Restrict_Run" = dword: 00000001; (Forbidden) (Service allowed or prohibited)
[HKEY_CURRENT_USERSoftwarePoliciesMicrosoftMMC {45ac8c63-23e2-11d1-a696-00c04fd58bc3}]
"Restrict_Run" = dword: 00000001; (Forbidden) (allow or disable System Information)
[HKEY_CURRENT_USERSoftwarePoliciesMicrosoftMMC {90087284-d6d6-11d0-8353-00a0c90640bf}]
"Restrict_Run" = dword: 00000001; (Forbidden) (allow or disable Device Manager)
Group Policy User Configuration \ management template Windows component Windows Update
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesWindowsUpdate]
"DisableWindowsUpdateAccess" = dword: 00000001; (delete access using all Windows Update Functions
Group Policy User Configuration \ management template taskbar and Start Menu
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer]
"NoInstrumentation" = dword: 00000001; (Disable User tracking)
"NoTaskGrouping" = dword: 00000001; (blocking project groups on the taskbar)
"NoNetworkConnections" = dword: 00000001; Delete "network connection" from the "Start" menu (start)
"NoStartMenuSubFolders" = dword: 00000001; Delete the user folder from the "Start" menu (start)
"NoWindowsUpdate" = dword: 00000001; Delete the access and link to "Windows Update" (start)
"NoSMMyDocs" = dword: 00000001; delete from the "Start" menu