Tips for using the registry in Windows

Author: Gao Shan

1. prevent anonymous users from logging on to WIX9X

Although "WIN9X" allows each user to customize their own user interface and specify a password, anyone can click "cancel" in the logon window or press "ESC" to enter the system, that is, anonymous logon. The following methods prevent anonymous users from logging on: Select the "run" command from the "Start" menu, type the "regedit" command in the "run" command dialog box that appears, and press Enter. Open Registry Editor ". Create a new "DWORD" type "MustBeValidated" under HKEY_LOCAL_MACHINE \ NetWork \ Logon with the value 1.

(Appendix: if none of them can be entered, you can enter in security mode and change the value to 0 .)

2. Disable "run", "Search", and "Disable system functions" in the "Start" menu"

Create three "DWORD" values in HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer with the names "NoRun" (blocking "running "), "NoFind" (Block "Search"), "NoClose" (Block "Shut down the system"), the value is set to "1 ", when you run the "run" and "close system" commands after restarting the system, the system prompts that the operation is restricted and canceled. At the same time, you will find that the "Search" option in the "Start" menu is missing, to restore its settings, you can delete the corresponding key or set the key value to "0.

3. Block the disk drive icon in my computer

In a multi-user operating environment, you can set different disk drive icons for different users to restrict the operation permissions of various users.

Open the HKEY_CURRENT_USER \ SoftWare \ Microsoft \ Windows \ CurrentVersion \ Policies \ Alibaba es branch. It is convenient to set the NoDrives key value for different users to different disk drive icons under this branch, the default key value is 0x00000000. The NoDrives key value is four bytes, and each bit of each byte corresponds to A drive letter (A: -- Z :). Both the first letter represents from A: to H: for example, 01 is A:, 02 is B:, 04 is C :... 80 is H :. The second letter represents I: To P:; the third byte represents Q: To X:; the fourth byte represents Y: And Z :. Therefore, when the corresponding bit is 1, you can open "my computer" and no longer see the corresponding disk. For example, to disable the C: disk, right-click the NoDrives key value name, select "modify" from the shortcut menu, and change its key value to 04000000. to disable the D: disk, change the key value to 08000000. To disable C: And D:, change the key value to 0C000000. to hide all the drive FFFFFFFF.

4. Disable MS-DOS Mode

Although we have hidden all the drives in my computer, users can still access each drive using MS-DOS, so for security, we also have to disable common users from using MS-DOS as follows:

Open the HKEY_CURRENT_USER \ SoftWare \ Microsoft \ Windows \ CurrentVersion \ Policies \ es branch. Create a primary key "WinOldApp" under this branch, and then the single-host "WinOldApp" primary key. Create a DWORD Value "Disabled" in the right window, double-click "Disabled", and enter "1" in the "key value" box in the pop-up dialog box ". To prevent users from entering reboot computer switch to MS-DOS mode when restarting the computer ", you must also create a DWORD key value "NoRealMode" in the right window of the HKEY_CURRENT_USER \ SoftWare \ Microsoft \ Windows \ CurrentVersion \ Policies \ eles branch, enter 1 in the key-Value box in the pop-up dialog box.

5. Lock the Desktop

Desktop settings include wallpaper, icons, and shortcuts. After careful selection, we do not want others to modify desktop settings or delete shortcuts at will. You can modify the Registry. No matter how others modify it, you only need to restart the computer and your original settings will appear in front of you.

Open the Hkey \ Users \ default \ Software \ Microsoft \ Windows \ CurrentVsersion \ Policies \ Explorer branch. Double-click "No Save Setting" and change its key value from 0 to 1.

6. set two IP addresses for a machine

Generally, only one IP address can be configured for one network adapter. However, you can configure multiple IP addresses for one network adapter by modifying the system registry:

Open HKEY_LOCAL_MACHINE \ System \ CurrentcontrolSet \ Services \ Class \ NetTrans. In this directory, You can see multiple names: 0000, 0001, 0002... Directory, which is used to record the installation of the Protocol. Among them, find DriverDesc as the "TCP/IP" directory and modify the IPAddress and IPMask keys. IPAddress is a comma-separated IP address, and IPMask is the corresponding subnet mask. For example, when IPAddress is set to "192 .. 168.0.230, 192.168.0.102", IPMask is set to "255.255.255.0, 255.255.255.0", two IP addresses 192.168.0.230 and 192.168.0.102 are set for the system.

How is it interesting? Do you have any good technology please share gaoshan333333@163.com with me