Registry Win2000 Security Settings-Registry Use the 16 _ registration Form

Use Registry Win2000 security Settings-the registry uses the full Raiders 16

Note: The changed registry entries are located in HKEY_CURRENT_USER.
If the corresponding key value under Hkey_users\ (s-1-5-21-746137067-507921405-1060284298-500) (user code) is changed for a user.

1. Prevent others from getting access to Web pages
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TypedURLs is used to save the IE history, to save the most recently browsed 25 websites and to selectively delete them.

2. Start Menu and taskbar
In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer,

(1) Prohibit up and down drag on Start Menu: New DWORD type Nochangestartmenu, Value set to: 1 (0x1).

(2) Prevent changes to the taskbar and Start Menu settings: Create a new DWORD type Nosettaskbar with the value set to: 1 (0x1).

(3) Do not keep the record of the most recently opened document: New DWORD type NoRecentDocsHistory, the value is set to: 1 (0x1).

(4) Disable personalized menu: New DWORD type Intellimenus, Value set to: 1 (0x1).

(5) Disable the user tracing function: New DWORD type noinstrumentation, the value is set to: 1 (0x1).
Note: This feature is a function of the system to track the programs that users use, the path that users navigate, and the documents they open. The system uses this information to customize Windows features such as personalized menus.

(6) To prevent the system through a comprehensive target drive to resolve a shortcut key. (NTFS only): New DWORD type Noresolvesearch, Value set to: 1 (0x1).
Note: By default, when the system cannot locate the destination file for the shortcut key (. lnk), it looks for all the paths associated with the shortcut key. If the destination file is in an NTFS partition, the system uses the ID of the target file to find the path. Setting prevents the system from parsing a shortcut key by making a comprehensive target drive search.

(7) Prevent the system from using the NTFS tracing function to parse a shortcut key. (NTFS only): New DWORD type Noresolvetrack, Value set to: 1 (0x1).

3. Desktop settings
In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer,

(1) Delete "My Network Places" on the desktop: Create a new DWORD type Nonethood with the value set to: 1 (0x1).

(2) Remove IE icon from desktop and Quick Launch: New DWORD type Nointerneticon, Value set to: 1 (0x1).

(3) Prohibit adding the most recently opened document share to My Network Places: Create a new DWORD type Norecentdocsnethood with a value of: 1 (0x1).

(4) Prevent changes to the path to the My Documents folder: Create a new DWORD type Disablepersonaldirchange with the value set to: 1 (0x1).

(5) Prohibit changes to the Desktop toolbar: New DWORD Type Noclosedragdropbands, the value is set to: 1 (0x1).

(6) Disable resizing of the Deskbar and cannot reposition items or toolbars on a locked toolbar: new DWORD Nomovingbands, with value set to: 1 (0x1).

(7) Do not save the settings when exiting: New DWORD type nosavesettings DWORD, the value is set to: 1 (0x1).

(8) Disable Active Desktop: New DWORD type Noactivedesktop, the value is set to: 1 (0x1).

(9) Enable Active Desktop: New DWORD type Forceactivedesktopon, the value is set to: 1 (0x1).

(10) Prohibit changes to the Active Desktop configuration: New DWORD type Noactivedesktopchanges, the value is set to: 1 (0x1).

(11) Hide all icons of the desktop: New DWORD NoDesktop DWORD, the value is set to: 1 (0x1).

(12) Prohibit changes to the Active Desktop configuration: New DWORD Type Noactivedesktopchanges DWORD, the value is set to: 1 (0x1).
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies, create a new Nonenum item,

(1) New DWORD type {450D8FBA-AD25-11D0-98A8-0800361B1103}, value is set to: 1 (0x1).
New Activedesktop Item,

(1) Disable the Active Desktop item, but you can use the Active Desktop: Create a new DWORD type nocomponents with a value of: 1 (0x1).

(2) Prevent users from adding Web content to the Active Desktop: Create a new DWORD type noaddingcomponents with a value of: 1 (0x1).

(3) Only bitmaps are allowed as wallpaper: New DWORD type nohtmlwallpaper with a value of: 1 (0x1).

(4) Prohibit the replacement of desktop wallpaper: New DWORD type Nochangingwallpaper, the value is set to: 1 (0x1).

Creates a new system item,

(1) Hide "appearance": New DWORD Type Nodispappearancepage, the value is set to: 1 (0x1).

(2) Prohibit Control Panel "display": New DWORD Type nodispcpl, the value is set to: 1 (0x1).

(3) Prohibit the "Screen saver" option: Create a new DWORD type nodispscrsavpage with the value set to: 1 (0x1).

(4) Hide the "Settings" option: New DWORD Type Nodispsettingspage, the value is set to: 1 (0x1).

(5) Hide "background": New DWORD Type Nodispbackgroundpage, the value is set to: 1 (0x1).


Hkey_current_user\software\policies\microsoft, creates a new Windows item, creates a new control Panel item, and creates a new desktop item under it.

(1) Disable screen saver: Create a new character type screensaveactive with the value set to: 0.

(2) For all screen protection password: New character type ScreenSaverIsSecure, the value set to: 1.

(3) Set the screen protection delay time (in seconds, the value should be between 1-86400): New character type ScreenSaveTimeOut, the value is set to the required time.

(4) Only allow users to use specific screen protection: Create a new character type SCRNSAVE.EXE, the value is set to the desired screen protection name (*.SCR).
Note: If the target screen saver is not in%SystemRoot%\System32, you need to enter the full path.


Create a new directory UI item,

(1) Specifies the maximum number of display objects to browse or search for Active Directory systems in response (set 1000, default 10000): New DWORD Querylimit with value set to 1000 (0X3E8).

(2) Display filter bar on Active Directory search: New DWORD type Enablefilter, Value set to: 1.

(3) Hide Active Directory folder: New DWORD type Hidedirectoryfolder, Value set to: 1.


4. Control Panel
In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer,

(1) Disable Control Panel including Control.exe: New DWORD Nocontrolpanel, Value set to: 1.
Note: It also prohibits the operation of Control.exe.

(2) Disable some Control Panel files: New DWORD type disallowcpl DWORD, the value is set to: 1;
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer new Disallowcpl Item, new string 1, The value is set to the disabled Control Panel file.
Note: If you want to disable more than one file at the same time, you need to create a corresponding number of strings, the name in the form of Arabic numerals to extend downward, the key value is the Control panel file that you want to disable.

(3) Only use specific Control Panel files: New DWORD type restrictcpl, the value is set to: 1;
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer new Restrictcpl Item, new string 1, The value is set to the desired Control Panel file.
Note: Multiple files can be enabled simultaneously, as in the same way.



5. Add/Remove Programs
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies, create a new uninstall item,

(1) Disable add Remove program (does not prevent the use of other methods to install, Remove Programs): New DWORD Type Noaddremoveprograms, the value is set to: 1.

(2) Hide "Change or Remove Programs": New DWORD Type Noremovepage, the value is set to: 1.

(3) Hide "Add new program": New DWORD Type Noaddpage, the value is set to: 1.

(4) Hide "Add program from CD-ROM or floppy disk": New DWORD Type Noaddfromcdorfloppy, the value is set to: 1.

(5) Hide "Add programs from Microsoft": New DWORD Type noaddfrominternet, Value set to: 1.

(6) Hide "Add Program from Network": New DWORD Type Noaddfromnetwork, Value set to: 1.

(7) Hide Add/Remove Components: New DWORD type Nowindowssetuppage, Value set to: 1.

(8 Disables "Support Information": New DWORD Type Nosupportinfo, the value is set to: 1.)

(9) Specifies the classification of the programs that appear when the user opens the Add new program page. (You must have this category in the Add/Remove definition): Create a new character type defaultcategory and set the value to the desired category.

6. Prohibit users from selecting Windwos2000 menu and dialog language (to prohibit "Japanese" as an example)
Hkey_current_user\software\policies\microsoft, creates a new control Panel item under which the new desktop item is created, the new character Multiuilanguageid, and the value set to 00000411.

7. Make hidden files completely hidden
In Hkey_local_mashine\software\microsoft\windows\currentversionexplorer\advanced\folder\hidden\showall, Modify (new DWORD) The CheckedValue value is 0, and the file that is set to hide the property is really hidden (suppresses the option to display all files). If you want to show it, just change the value of the CheckedValue to 1.

8. Forget Windows2000 login password (use carefully!) ）
Winnt\system32\config the SAM file in the directory and reboot after deletion.
Note: SAM (Security Accounts Management db): Secure account Management database, windowsnt/2000 system core, storage group account and user account information of the domain controlled by local machine and operating system. The SAM holds the description and permission information for each group in the domain, and the next section holds the description information of the domain user and the encrypted password data.
The password for the super user Administrator is stored after the last "Administrator" string in the Sam file.

9. Turn off Windows for File Protection
Warning: You can delete Windows key files directly after modification.
The system prevents users from deleting system and program files by default, and can be lifted by modifying the registry.
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, the value of sfcdisable is set to 0xffffff9d.
To use File Protection, change the value back to 0.


Operation Skill:

1. Quick Hide Task bar
The task bar automatically hides the action more slowly. If you want to speed up, display properties to eliminate the "show window contents when dragging" item in the visual effects.

2. Quickly view the location of the file
With the right mouse button, drag the file directly to the "Run" dialog box, and the file's extension and full path are displayed.

3. Achieve fast positioning in Web sites
To achieve accurate positioning in a relatively long URL, in addition to using the mouse, you can use keyboard operation to achieve. Press ctrl+←, the cursor moves quickly to the left in terms of words, and by ctrl+→, the cursor moves quickly to the right in terms of words.

4. Send email quickly
New/shortcut command → Type the location of the item → enter "mailto:" → "type the name of the shortcut" → enter "new mail". Click this shortcut to create a new e-mail message.

5. Automatically turn off the screensaver before defragmenting the disk
New defrag in Hkey_current_user\software\microsoft\windows\currentversion\applets, under new Sett ings, new string value in right window Disablescreensaver, the value is set to Yes.

6. In the logon dialog box to increase the shutdown function
In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon, the ShutdownWithoutLogon value is set to 1.

7. Once click can be shut down
In HKEY_CLASSES_ROOT\Directory\shell, the primary key for new "Close" is entered in the Key value field, "Turn Off Computer" (shown in the mouse right-click menu) to define a shortcut key after &. "Close" to create a one-level subkey "Command", enter "RUNDLL32 in the key value" column. EXE USER. Exe,exitwindows ".

8. Empty the Recycle Bin anywhere
New "{645ff040-5081-101b-9f08-00aa002f945e}" in Hkey_classes_root\*\shellex\contextmenuhandlers.

9. Speed off the shutdown
New string value FastReboot in HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Shutdown, set to 1.

10. Dialing Acceleration
modem properties → modems. Where the maximum port speed represents the maximum speed that the program will transfer data to the modem, usually faster than the modem.
Confirm that it is set to 115,200bps. Select the Advanced page and add the initialization parameters provided in the modem instruction in the "Additional initialization command". Whether there is any initialization command provided by modem, add "s11=40" command to speed up modem dialing speed.

One. IE window dynamic effect
Hkey_current_user\controlpanel\desktop\windowmetrics, in the right window to create a new string value "Minanimat" and "Maxanimat", respectively, set the value of "0", "1", in the IE window maximum , minimize the transition effect of a change.

12. Change IE browser security password
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies, delete the ratings subkey.

13. Change IE default download directory
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer, modify download Directory.

14. Modify IE Search engine
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft \internet Explorer\Search, the Customizesearch and searchassistant are changed to custom search engines.

IE default engine: http://ie.search.msn.com/{sub_rfc1766}/srchasst/srchasst.htm

15. Custom IE Browser address
About is a special protocol except HTTP, Ftp,mailto, Gopher, which allows you to use aliases to access specific Web pages.
Hkey_local_machlne\software\microsoft\internet Explorer\AboutURLs, the new string value, renamed to the Web page alias, the value set to point to the URL, not the province "http://."

16. Increase IE automatic recognition function
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\main\urltemplate: Urltemplate Branch 6 string value, the key value is "www.%s.com", "Www.%s.org", "www.%s.net", "www.%s.edu", etc., used to specify the range of IE automatic matching. Create a new two string under the Urltemplate branch whose value is set to "www.%s.com.cn" and "%s.com.cn", allowing IE to automatically recognize the ". com.cn" suffix.

17. Use Multithreading to download
In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings,
New MaxConnectionsPerServer determines the maximum number of simultaneous downloads (5~8);
For HTTP 1.0 Server, new maxconnectionsperl_oserver, number of values to maximum sync download

(Source: Hotspot Network)