Modify the registry to improve system security-Registry use of the full 17 _ registration Form

Modify the registry to improve system security-Registry use all 17


One, hide a server
To ensure that the resources on the local area network are not illegally accessed and attacked by others, it is sometimes necessary to hide the name of the server computer specified in the LAN so that other LAN users cannot access
1, open Registry Editor, Hkey_local_ MACHINE \ SYSTEM \ currentcontrolset \services \ lanmanserver \ Parameters key values.
2, with the mouse click the key value below the hidden value name, if not found this name, then add one, its data type is REG_DWORD.
3, then double-click this item with the mouse, in the pop-up "DWORD Editor" dialog box, enter 1.
4, quit the registry edit, restart the computer can be in the local area network to hide a server.
Second, prevent other people from illegally editing the registration form
1, first edit the Hkey_current_user\software\microsoft\windows\currentversion\policies\ key value in the registry;
2, and then under the policies key value of the next new system primary key, if the primary key already exists, you can directly proceed to the next step;
3, and then in the corresponding system primary key to the right window of the space to create a new DWORD string value, and named DisableRegistryTools;
4, set the value of the DisableRegistryTools to 1, set up, restart the computer can be achieved to prevent other people from illegally editing the registry.
Third, shielding "control Panel" access
1, first in the Start menu in the Run bar input regedit command, open Registry Editor;
2, then in the interface, sequentially using the mouse to access \\HKEY_CURRENT_USER\Software\Microsoft\ Windows\currentversion\policies\system key value;
3. Then, in the right window of the corresponding system key value, right-click the window and select New/DWORD from the pop-up shortcut menu to create a new DWORD value;
4, the name of the DWORD value nodispcpl, while setting the value of Nodispcpl is 1.
Four, do not allow others to set the desktop arbitrary
1, in the editing window, hkey-users\software\microsoft\windows\curentversion\polioies\explores key value;
2, in the corresponding explores key value to the right window, with the mouse double-click "No Save Setting" subkey, and its key value from 0 to 1! Restart your computer.
V. Resisting the destruction of backdoor
There is a backdoor called backdoor, special sorting system damage to the system, we need to use the appropriate settings to prevent backdoor damage to the system.
1, first in the Registry Editor Operation window, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run;
2, in the corresponding run key value of the right window, if found the "Notepad" key value, you just delete it can achieve the purpose of preventing backdoor.
VI. Hide User Login Name
Win9x above the operating system can be the previous user login information with memory, the next time you restart the computer, in the User Name column found in the last user's login, this information may be used by illegal elements, the user poses a threat.
1, in the setting, please use the mouse to access the key value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Winlogon;
2, in the corresponding Winlogon key value to the right window, right-click the window blank, select "New"/"string" from the pop-up shortcut menu, and name the new string "DontDisplayLastUserName", and set the string value to "1";
3, after setting up, restart the computer can be hidden on the machine user login name.
Seven, do not allow user dial-up access
1, open Registry Editor, and in the editor, expand the following key values in sequence: [Hkey_local_machine\software\microsoft\windows\currentversion\policies\network];
2, in the editor to the right of the list with the mouse to select the "Nodialin" key value, if not the key value, you must create a new DWORD value, the name is set to "Nodialin";
3, then double-click the "Nodialin" key value, the editor will pop up a dialog named "String Editor", in the Text column of the dialog box, enter the value "1", where 0 of the Prohibit dial-in access function, 1 delegates to allow dial-in access;
4, after the exit and log on to the network, the above settings will work.
Viii. screen access to floppy disk
Prohibit access to floppy disk settings over the network
1, in the Registry Editor Operation window, in turn, open the key value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon;
2, in the corresponding Winlogon to the right window, check if there is no key value allocatefloppies, if not, right-click the window blank, select "New"/"DWORD value" from the pop-up shortcut menu;
3, the new DWORD is named Allocatefloppies, while its value is modified to 0 or 1, where 0 of the representatives can be access to all administrators in the domain, 1 representatives can only be accessed by local landing.
Ix. prohibit access to the File system button
In the System Properties dialog box, there is a feature button called file system that allows you to set up settings for your computer's hard disk, floppy disk, and other mobile devices. However, to prevent illegal users from tampering with the settings of these devices, you sometimes need to hide the "File System" button in the system properties, which is the following steps:
1, open the Registry Editor window, and in turn in the window to access the following key branch: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System;
2, in the corresponding system key value of the right window, with the mouse click the window blank, from the pop-up shortcut menu select "New"/"DWORD string value", named "Nofilesyspage", and its value set to "1";
3, after setting up, restart the computer.
Ten, let the "Network Neighborhood" icon Hidden
1, first in the Open Registry Editor Operation window Hkey_current_user\software\microsoft\ windows\currentversion\policies\explorer;
2, in the corresponding Explorer key value to the right of the Operation window, with the mouse click in the window blank, from the pop-up shortcut menu, with the mouse to access the "new"/"DWORD string Value", the new DWORD string value is named Nonethood, and the value is set to 1 (hexadecimal);
4, after setting up, restart the computer.
Xi. restrictions on the use of certain characteristics of the system
In internet cafes or public places, sometimes in order to ensure that the system's properties are not arbitrarily changed by other ordinary users, we have to limit the use of certain features of the system. To do this, we can use the method of modifying the Registry Editor to achieve this goal.
1, run the Registry Editor, enter the HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System key value;
2, if the key value does not exist, create a new one;
3, then set the value of the Disabletaskmanager below the key value to 1, which means that the user will be prevented from running task Manager.
4, then set the Nodispappearancepage to 1, indicating that the user will not be allowed to change the display mode in the control Panel;
5, the following nodispbackgroundpage set to 1, indicating that users will not be allowed to change the desktop background and wallpaper.
12, limit the user to use the specified program
To prevent users from illegally running or modifying programs, causing the entire computer system to be in a state of disarray, we can make the system secure by modifying the registry to allow users to use only specified programs.
1. Open the HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer key value in the Registry Editor window in turn;
2, in the corresponding Explorer key value to the right window, a new DWORD string value, named "Restrictrun", its value set to "1";
3. Add the string values named "1", "2", "3", respectively under the primary key of the Restrictrun, and set the value of the string "1", "2", "3" to the program name we allow the user to use. For example, "1", "2", "3" are set to Word respectively. EXE, Notepad. EXE, write. EXE, users can only use Word, Notepad, WordPad, so that our system will be the greatest protection, but also can limit the user to run unnecessary software.
13. Do not allow users to set screen protection password
1, open Registry Editor window, Current_user\controlpanel\desktop\screensaveusepassword key branch;
2, in the corresponding Screensaveusepassword key value of the right window, the Screensaveusepassword value set to 0 on it.
14, set the file system to NTFS format
In Windows2000 and NT systems, the user can set the partition to NTFS to ensure the security of the file system, of course, we can modify the registry method to set the file system to NTFS format, the implementation of the following steps:
1. Open Registry Editor and expand the following key values in the editor:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\FileSystem;
2. Click the Edit menu in the Registry Editor and select the "New" menu item in the Drop-down menu, and click "DWORD Value" in the submenu where it pops up.
3, enter the name of the DWORD value is "Tfsdisablelastaccessupdate"
4, then double-click the Ntfsdisablelastaccessupdate key value, the editor will pop up a dialog named "String Editor", in the Text column of the dialog box, enter the value "1", where 0 represents "Cancel" the feature, 1 represents "Enable" the feature.
The attack of WinNuke hacker program against computer
WinNuke is a highly destructive program that destroys the Windows system in your computer, causing the entire computer system to become paralyzed,
1. In the Registry Editor Operation window, click the key value hkey_local_machine\system\currentcontrolset\services\vxd\mstcp with the mouse;
2, in the corresponding MSTCP key value of the right window, with the mouse click the window blank, from the shortcut menu pop-up select "New"/"DWORD Value", and the DWORD value named "Bsdurgent", if the key value already exists, you can directly proceed to the next step;
3, and then set the Bsdurgent value to 0, restart the computer after the goal can be achieved.
16, restore the error of the registry changes
1, in the Run dialog box input regedit command, pop-up Registry Editor window;
2, in this window, click Import Registry File under the Registry menu, locate the backup. reg file from the pop-up file dialog box, and then click the OK button in the dialog box again to write the correct information to the registry;
3, when the registry damage or error changed the hardware and software settings, resulting in system startup failure, and automatic repair is invalid, with "Scanreg.exe/fix" can not be restored, in pure dos run "scanreg.exe/restory" for recovery, with five data to choose from, First select the most recent recovery, if still not, and then choose again, until the system is running normally.

(Source: Hotspot Network)