Vista modified the registry to completely disable the control panel

In the past Windows XP, we will use group policies, third-party software to control some of the system's sensitive functions, such as the control panel, in the unit, multi-person sharing In the case of a machine, if you do not intervene in the function, it will always be tested by some curious people, making the system very unstable. But under Vista, due to version issues, group policy may not be supported. What should I do? The easiest way is to use the Registry Editor to implement restrictions on the control panel.

The first type: completely disable the control panel

Normally, through the operation of the control panel, the user can modify any setting in the system, which is convenient for the user. It has caused trouble for network maintenance personnel. Therefore, if there is no need to completely disable the operation function, first start the registry editor, open the "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer" sub-item, and then create a new double named NoControlPanel in the Explorer sub-item. The byte value item, and set the value data of the value item to 1, and finally, exit the Registry Editor and log out or restart.

Effect: After rebooting, check the computer's "Settings" menu, you will find that there is no control panel, as shown in Figure 1. When the user right-clicks on the computer properties, a restriction window appears, showing "This operation was cancelled due to the limitations of this computer. Please contact your system administrator".

Second type: Hide/Show specific items in the control panel

Disabling the control panel completely can prevent the effect, but it is targeted To hide one of them, it is also very flexible. The operation method is to first open the "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer" sub-item and create a double-byte named DisallowCpl in the Explorer sub-item. Value item, and set the value item data to 1, create a new sub-item named DisallowCpl in the Explorer sub-item, and create a new string value item named 1 in the sub-item, and the value item The value data is set to intl.cpl, which limits the area and language options in the control panel to make it visible, while other items are correct. Conversely, you can also display the specified item, the others are not displayed, open the "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer" sub-item, create a new double-byte value item named RestrictCpl in it, and Set the value data of the value item to 1, continue to create a new sub-item named RestrictCpl, create a new string value item named 1 in it, and set the value data of the value item to intl. Cpl, quit the registry, log out or start again.

Effect: After restarting the machine, you will find that the control panel can be opened. The project has only one area and language option, and the others are hidden, as shown in Figure 2.

The third type: hidden tabs in the internet options

Internet options are very important to users, it is important setting data for us to enter the Internet. Often tampering with Trojans or humans, you can hide its options through the registry, such as regular items, open the "HKEY_CURRENT_USER\\Software\\Policies\\Microsoft" sub-item, create a new internet explorer sub-item, and in the sub-item Create a sub-item named control panel, and create a new double-byte value item named generaltab in the control panel, set the value to 1, and close the registry to restart the machine. If you want to hide the security item, create a double-byte value item named securitytab in the child of the control panel and set its value to 1.

Effect: You can open the internet option and find that the regular and security tabs are gone.

Fourth: Hidden Folder Options

Folder options can initially hide system files and personal data from us, avoiding unnecessary damage, but everyone knows how to open it. Therefore, it is not safe, you can use the registry to make it visible, open the "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer" sub-item, create a double-byte value item named nofolderoptions, and Make the value 1, and exit the registry to restart the machine.

Effect: Open the Control Panel and you will see that the folder options are missing.

Fifth: prohibit adding printers

Adding printers will cause the elimination of network failures and the spread of viruses. You can restrict the user from adding printers through the registry. Open the "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer" sub-item, create a new double-byte value item named NOaddPrinter, and set its value to 1, and exit the registry to restart the machine.

Effect: Open the printer in the settings, although you can right click and select "Add Printer", but the prompt window for this operation is disabled.