In the past Windows XP, we used Group Policy and third-party software to control some sensitive functions of the system, such as the control panel. In the case of multiple units sharing the machine, if the functions are not interfered with, It will always be tested by some curious people, making the system very unstable. However, under Vista
, due to version issues, group policy may not be supported. What should I do? The easiest way is to use the Registry Editor to implement restrictions on the control panel.
The first type: completely disable the control panel
Normally, through the operation of the control panel, the user can modify any one of the settings in the system, which is convenient for the user and also brings the network maintenance personnel. It was troublesome. Therefore, for the total prohibition of the unnecessary operation function, the first step is to start the registry editor, open the "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\PolicIEs\\Explorer" sub-item, and then create a new double named NoControlPanel in the Explorer sub-item. The byte value item, and set the value data of the value item to 1, and finally, exit the Registry Editor and log out or restart.
Effect: After rebooting, check the computer's "Settings" menu, you will find that there is no control panel, as shown in Figure 1. When the user right-clicks on the computer properties, a restriction window appears, showing "This operation was cancelled due to the limitations of this computer. Please contact your system administrator".
Vista
Modify the registry to completely disable the control panel - web teaching network" src="/School/UploadFiles_7810/201105/20110528223327660.jpg">
Second type: hide /display the specified items in the control panel
Fully disabling the control panel can be a preventive effect, but it is also very flexible to hide one of them. The operation method is to first open "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\ "Explorer" sub-item, create a double-byte value item named DisallowCpl in the Explorer sub-item, and set the value item data to 1, and create a new sub-item named DisallowCpl in the Explorer sub-item, and Create a new string value item named 1 in the child and set the value data of the value item to intl.cpl. Here, the area and language options in the control panel are restricted to make it shape, while others The project is correct. On the contrary, the specified item can also be displayed, and the others are not displayed. Open the "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\PolicIEs\\Explorer" sub-item. Create a new double-byte value item named RestrictCpl, set the value data of the value item to 1, and continue to create a new sub-item named RestrictCpl in it, and create a new string named 1 in it. Value item, and set the value data of the value item to intl.cpl, exit the registry, re-logout or start.
Effect: After restarting the machine, you will find that the control panel can be opened, there is only one item inside. Regional and language options, others are hidden, as shown in Figure 2.
Vista
Modify the registry to disable the Control Panel - Web Teaching Network" src="/School/UploadFiles_7810/201105/20110528223327697.jpg">
Third style: hidden tabs in the internet option
Internet options are very important to users. It is an important setting data for us to enter the Internet. It is often tampering with Trojans or humans. It can be accessed through the registry. Hide its options, such as regular items, open the "HKEY_CURRENT_USER\\Software\\PolicIEs\\Microsoft" sub-item, create a new internet explorer sub-item, and create a sub-item within the sub-item Name the child of the control panel, and create a new double-byte value item named generaltab in the control panel, and set the value to 1, and close the registry to restart the machine. If you want to hide the security item, create a double-byte value item named securitytab in the child of the control panel and set its value to 1.
Effect: You can open the internet option and find that the regular and security tabs are gone.
Fourth: Hidden Folder Options
Folder options can initially hide system files and personal data from us, avoiding unnecessary damage, but everyone knows how to open it, so it is not safe. You can use the registry to make it visible, open the "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\PolicIEs\\Explorer" sub-item, create a double-byte value item named nofolderoptions, and make it a value of 1, Exit the registry and restart the machine.
Effect: Open the control panel and you will find that the folder options are missing.
The Microsoft\\Windows\\CurrentVersion\\PolicIEs\\Explorer subkey, in which a new double-byte value item named NOaddPrinter is created, and its value is 1, exit the registry and restart the machine.
Effect: Open the printer in the settings, although you can right click and select "Add Printer", but the prompt window for this operation is disabled.