TO DISABLE WINDOWS MESSINGER
To disable Windows Messenger 4.5 or later for Windows XP Home or Windows XP Pro: Hive: HKEY_LOCAL_MACHINE Key: Software\Policies\Microsoft\Messenger\Client Name: PreventRun Type: REG_DWORD Value: 1 disabled
HIDE DESKTOP ICONS
To hide all Desktop Icons from Explorer, use the following Windows NT / Windows 2000 / Windows XP registry hack : Hive: HKEY_CURRENT_USER Key: Software\Microsoft\Windows\CurrentVersion\Policies\Explorer Name: NoDesktop Type: REG_DWORD Value: 1 With this key enabled, in addition, you cannot right click on the desktop to get a context menu. This is a lockdown option. Almost all Windows NT registry hacks work for Windows 2000 and Windows XP. Windows NT and Windows XP have the Software\Microsoft\Windows\CurrentVersion\Policies\Explorer key by default. Windows 2000 does not. But if you create the key with the NoDesktop value set to 1, the hack works for Windows 2000 also. When you create the Explorer key under Policies, you will be prompted for a class. Leave it blank. To hide all Desktop Icons from Explorer but still enable right-clicking on the desktop there is the following registry hack :
Hive: HKEY_CURRENT_USER Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced Name: HideIcons Type: REG_DWORD Value: 1 Thanks to Zoran Stojanovic for updating the tip for us.
TO HIDE ALL AUTORUN
This little trick will disable all autoplay features, eg. CDs, USB-memories etc. Open Regedit and configure the following registry value: Hive: HKEY_LOCAL_MACHINE Key: SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer Value Name: NoDriveTypeAutoRun Type: REG_DWORD Value: 255 (hex: 0x0ff) Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.
DISABLE ANNOYING BALLOON TIPS
You can disable those annoying balloon tips that keep popping up in Windows XP with the following Windows XP registry hack: Hive: HKEY_CURRENT_USER Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced Name: EnableBalloonTips Type: REG_DWORD Value: 0 disables tips
DISABLE CD AUTOPLAY XP HOME
To disable the CD autoplay feature, use the following Windows XP registry hack: Hive: HKEY_LOCAL_MACHINE Key: SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer Name: NoDriveTypeAutoRun Type: REG_DWORD Value: 181 hex 0x0b5
DISABLE LOW DISK ALERTS
Microsoft Windows XP will generate an alert when disk space gets low on a partition. When you click on the message, Disk Cleanup Wizard starts. When XP free disk space reaches 200MB, the following alert displays for 10 seconds, once per session: You are running out of disk space on [drive]. To free space on this drive by deleting old or unnecessary files, click here. When XP free disk space reaches 80MB, the following alert displays for 30 seconds, every four hours, twice per session: You are running very low on disk space on [drive]. To free space on this drive by deleting old or unnecessary files, click here. When XP free disk reaches 50MB, you receive the following message for 30 seconds, every five minutes, until free space is above 50 MB: You are running very low on disk space on [drive]. To free space on this drive by deleting old or unnecessary files, click here. You can disable these alerts using the following Windows XP registry hack: Hive: HKEY_CURRENT_USER Key: Software\Microsoft\Windows\CurrentVersion\Policies\Explorer Name: NoLowDiskSpaceChecks
Type: REG_DWORD Value: 1 disables alerts Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com
DISABLE WINDOWS MEDIA PLAYER UPDATE
To control whether you allow the Windows Media Player Automatic Update feature, user the following Windows XP registry hack: Hive: HKEY_LOCAL_MACHINE Key: SOFTWARE\Policies\Microsoft\WindowsMediaPlayer Name: DisableAutoUpdate Type: REG_DWORD Value: 1 The same registry hack works for Windows Media Player 7.0 and 7.1 used in NT and Windows 2000. For older Windows with Windows Media Player 6.4, the key is HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MediaPlayer\EnableAutoUpgra de, Type=REG_SZ, and value="No". Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.
DISABLE END TASK
There is a registry hack to enable or disable Windows NT TaskManager. The same registry hack applies to Windows 2000 and Windows XP. Hive: HKEY_CURRENT_USER Key: Software\Microsoft\Windows\CurrentVersion\Policies\System Name: DisableTaskMgr Type: REG_DWORD
Value: 1=Enablethis key, that is DISABLE TaskManager Value: 0=Disablethis key, that is Don't Disable, Enable TaskManager As part of the enhanced management available in Windows 2000 and Windows XP, rather than risking a registry change, as an administrator you can enable or disable Windows 2000 Pro or Windows XP Pro's TaskManager using Group Policy Editor. This can be applied to the local policy. Note: if you are trying to override your organizations group policy, you can't. As soon as you reauthenticate to the domain, the domain or OU Group Policy will rewrite the registry setting. But if the TaskManager was accidently disabled or you need to control this item for a set of standalone boxes this is for you:
Click Start Click Run Enter gpedit.msc in the Open box and click OK In the Group Policy settings window o Select User Configuration o Select Administrative Templates o Select System o Select Ctrl+Alt+Delete options o Select Remove Task Manager o Double-click the Remove Task Manager option
And as I mentioned above, since the policy is Remove Task Manager, by disabling the policy, you are enabling the Task Manager. Got XP Home - use the registry edit. Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.
DISABLE COMMAND PROMT AND EXECUTION OF BATCH FILES
Locking down Windows 2000 or Windows XP? Need to disable the command shell and/or batch files. You can use the following registry hack: Hive: HKEY_CURRENT_USER Key: Software\Policies\Microsoft\Windows\System Name: DisableCMD Type: REG_DWORD Value: 0 enable command prompt and batch files
Value: 1 disable command prompt and batch files Value: 2 disable command prompt but allow batch files Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.
ENABLE QUICK EDIT MODE IN XP
Quick edit mode allows one to use the mouse to select text, cut, copy and paste in command shell. This mode is not enabled by default. To control the mode globally, apply the following Windows NT / Windows 2000 / Windows XP registry hack. Hive: HKEY_CURRENT_USER Key: Console Name: QuickEdit Type: REG_DWORD Value: 1 enable quick edit Value: 0 default - disable quick edit mode To enable for the current command shell, right-click on the title bar, select properties, select the options tab and check the QuickEdit Mode box. Notice that this is also another method to set QuickEdit mode globally: select Save properities for future windows with same title. To copy text into the clipboard, select text with the left mouse button and press Ctrl-C To paste text into the command box, right click the mouse. If at the commandline, the command process will try to execute the text. Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com
COMMANDLINE REGISTRY TOOL
Windows XP includes powerful commandline admin utilities including reg which allows powerful scripting of the registry.
reg /?
Console Registry Tool for Windows - version 3.0 Copyright (C) Microsoft Corp. 1981-2001. All rights reserved
REG Operation [Parameter List] Operation [ QUERY | ADD SAVE | DELETE | COPY |
| LOAD | UNLOAD | RESTORE |
COMPARE | EXPORT | IMPORT ] Return Code: (Except of REG COMPARE) 0 - Succussful 1 - Failed For help on a specific operation type: REG Operation /? Examples: REG QUERY /? REG ADD /? REG DELETE /? REG COPY /? REG SAVE /? REG RESTORE /? REG LOAD /? REG UNLOAD /? REG COMPARE /? REG EXPORT /? REG IMPORT /?
reg query /? Console Registry Tool for Windows - version 3.0 Copyright (C) Microsoft Corp. 1981-2001. All rights reserved
REG QUERY KeyName [/v ValueName | /ve] [/s] KeyName [\Machine\]FullKey
Machine - Name of remote machine, omitting defaults to the current machine Only HKLM and HKU are available on remote machines FullKey - in the form of ROOTKEY\SubKey name ROOTKEY [ HKLM | HKCU | HKCR | HKU | HKCC ] SubKey - The full name of a registry key under the selected ROOTKEY /v query for a specific registry key ValueName - The name, under the selected Key, to query if omitted, all values under the Key are queried /ve query for the default value or empty value name /s queries all subkeys and values Examples: REG QUERY HKLM\Software\Microsoft\ResKit /v Version Displays the value of the registry value Version REG QUERY HKLM\Software\Microsoft\ResKit\Nt\Setup /s Displays all subkeys and values under the registry key Setup
reg add /? Console Registry Tool for Windows - version 3.0 Copyright (C) Microsoft Corp. 1981-2001. All rights reserved
REG ADD KeyName [/v ValueName | /ve] [/t Type] [/s Separator] [/d Data] [/f] KeyName [\\Machine\]FullKey Machine Name of remote machine - omitting defaults to the current machine Only HKLM and HKU are available on remote machines FullKey ROOTKEY\SubKey ROOTKEY [ HKLM | HKCU | HKCR | HKU | HKCC ] SubKey The full name of a registry key under the selected ROOTKEY
/v /ve /t
The value name, under the selected Key, to add adds an empty value name for the key RegKey data types [ REG_SZ | REG_MULTI_SZ | REG_DWORD_BIG_ENDIAN | REG_DWORD | REG_BINARY If omitted, REG_SZ is assumed | REG_DWORD_LITTLE_ENDIAN |
REG_NONE | REG_EXPAND_SZ ]
/s
Specify one charactor that you use as the separator in your data string for REG_MULTI_SZ. If omitted, use "\0" as the separator
/d /f
The data to assign to the registry ValueName being added Force overwriting the existing registry entry without prompt
Examples: REG ADD \\ABC\HKLM\Software\MyCo Adds a key HKLM\Software\MyCo on remote machine ABC REG ADD HKLM\Software\MyCo /v Data /t REG_BINARY /d fe340ead Adds a value (name: Data, type: REG_BINARY, data: fe340ead) REG ADD HKLM\Software\MyCo /v MRU /t REG_MULTI_SZ /d fax\0mail Adds a value (name: MRU, type: REG_MUTLI_SZ, data: fax\0mail\0\0) REG ADD HKLM\Software\MyCo /v Path /t REG_EXPAND_SZ /d %%systemroot%% Adds a value (name: Path, type: REG_EXPAND_SZ, data: %systemroot%) Notice: Use the double percentage ( %% ) inside the expand string
reg delete /? Console Registry Tool for Windows - version 3.0 Copyright (C) Microsoft Corp. 1981-2001. All rights reserved
REG DELETE KeyName [/v ValueName | /ve | /va] [/f] KeyName [\\Machine\]FullKey
Machine Name of remote machine - omitting defaults to the current machine Only HKLM and HKU are available on remote machines FullKey ROOTKEY\SubKey ROOTKEY [ HKLM | HKCU | HKCR | HKU | HKCC ] SubKey The full name of a registry key under the selected ROOTKEY ValueName The value name, under the selected Key, to delete When omitted, all subkeys and values under the Key are deleted /ve /va /f delete the value of empty value name delete all values under this key Forces the deletion without propmt
Examples: REG DELETE HKLM\Software\MyCo\MyApp\Timeout Deletes the registry key Timeout and its all subkeys and values REG DELETE \\ZODIAC\HKLM\Software\MyCo /v MTU Deletes the registry value MTU under MyCo on ZODIAC
reg copy /? Console Registry Tool for Windows - version 3.0 Copyright (C) Microsoft Corp. 1981-2001. All rights reserved
REG COPY KeyName1 KeyName2 [/s] [/f] KeyName [\\Machine\]FullKey
Machine Name of remote machine - omitting defaults to the current machine Only HKLM and HKU are available on remote machines FullKey ROOTKEY\SubKey ROOTKEY [ HKLM | HKCU | HKCR | HKU | HKCC ] SubKey The full name of a registry key under the selected ROOTKEY
/s /f
Copies all subkeys and values Forces the copy without propmt
Examples: REG COPY HKLM\Software\MyCo\MyApp HKLM\Software\MyCo\SaveMyApp /s Copies all subkeys and values under the key MyApp to the key SaveMyApp REG COPY \\ZODIAC\HKLM\Software\MyCo HKLM\Software\MyCo1 Copies all values under the key MyCo on ZODIAC to the key MyCo1 on the current machine
reg save /? Console Registry Tool for Windows - version 3.0 Copyright (C) Microsoft Corp. 1981-2001. All rights reserved
REG SAVE KeyName FileName KeyName ROOTKEY\SubKey
ROOTKEY [ HKLM | HKCU | HKCR | HKU | HKCC ] SubKey The full name of a registry key under the selected ROOTKEY FileName The name of the disk file to save. If no path is specified, the file is created in the current folder of the calling process Examples: REG SAVE HKLM\Software\MyCo\MyApp AppBkUp.hiv Saves the hive MyApp to the file AppBkUp.hiv in the current folder
reg restore /? Console Registry Tool for Windows - version 3.0 Copyright (C) Microsoft Corp. 1981-2001. All rights reserved
REG RESTORE KeyName FileName KeyName ROOTKEY\SubKey (local machine only)
ROOTKEY [ HKLM | HKCU | HKCR | HKU | HKCC ] SubKey The full name of a registry key to restore the hive file into. Overwriting the existing key's values and subkeys FileName The name of the hive file to restore You must use REG SAVE to create this file Examples: REG RESTORE HKLM\Software\Microsoft\ResKit NTRKBkUp.hiv Restores the file NTRKBkUp.hiv overwriting the key ResKit
reg load /? Console Registry Tool for Windows - version 3.0 Copyright (C) Microsoft Corp. 1981-2001. All rights reserved
REG LOAD KeyName FileName KeyName ROOTKEY\SubKey (local machine only)
ROOTKEY [ HKLM | HKU ] SubKey The key name to load the hive file into. Creating a new key FileName The name of the hive file to load You must use REG SAVE to create this file Examples: REG LOAD HKLM\TempHive TempHive.hiv Loads the file TempHive.hiv to the Key HKLM\TempHive
reg unload /? Console Registry Tool for Windows - version 3.0 Copyright (C) Microsoft Corp. 1981-2001. All rights reserved
REG UNLOAD KeyName KeyName ROOTKEY\SubKey (local machine only)
ROOTKEY [ HKLM | HKU ] SubKey The key name of the hive to unload Examples: REG UNLOAD HKLM\TempHive Unloads the hive TempHive in HKLM
reg compare /? Console Registry Tool for Windows - version 3.0 Copyright (C) Microsoft Corp. 1981-2001. All rights reserved
REG COMPARE KeyName1 KeyName2 [/v ValueName | /ve] [Output] [/s] KeyName [\\Machine\]FullKey
Machine Name of remote machine - omitting defaults to the current machine Only HKLM and HKU are available on remote machines FullKey ROOTKEY\SubKey If FullKey2 is not specified, FullKey2 is the same as FullKey1 ROOTKEY [ HKLM | HKCU | HKCR | HKU | HKCC ] SubKey The full name of a registry key under the selected ROOTKEY ValueName The value name, under the selected Key, to compare When omitted, all values under the Key are compared /ve /s Output /oa /od /os /on compare the value of empty value name Compare all subkeys and values [/oa | /od | /os | /on] When omitted, output only differences Output all of differences and matches Output only differences Output only matches No output
Return Code: 0 - Succussful, the result compared is identical 1 - Failed 2 - Successful, the result compared is different Examples: REG COMPARE HKLM\Software\MyCo\MyApp HKLM\Software\MyCo\SaveMyApp Compares all values under the key MyApp with SaveMyApp REG COMPARE HKLM\Software\MyCo HKLM\Software\MyCo1 /v Version Compares the value Version under the key MyCo and MyCo1 REG COMPARE \\ZODIAC\HKLM\Software\MyCo \\. /s Compares all subkeys and values under HKLM\Software\MyCo on ZODIAC with the same key on the current machine
reg export /? Console Registry Tool for Windows - version 3.0 Copyright (C) Microsoft Corp. 1981-2001. All rights reserved
REG EXPORT KeyName FileName Keyname ROOTKEY\SubKey (local machine only)
ROOTKEY [ HKLM | HKCU | HKCR | HKU | HKCC ] SubKey The full name of a registry key under the selected ROOTKEY FileName The name of the disk file to export Examples: REG EXPORT HKLM\Software\MyCo\MyApp AppBkUp.reg Exports all subkeys and values of the key MyApp to the file AppBkUp.reg
reg import /? Console Registry Tool for Windows - version 3.0 Copyright (C) Microsoft Corp. 1981-2001. All rights reserved
REG IMPORT FileName FileName The name of the disk file to import (local machine only) Examples: REG IMPORT AppBkUp.reg Imports registry entrys from the file AppBkUp.reg
Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.
BRIEFCASE ICOM
You can spiff up the Briefcase icon and replace it with an icon of a metal attache case using the following Windows NT / W2K / XP registry hack: Hive: HKEY_CLASSES_ROOT Key: CLSID\{85BBD0920-42A0-1069-A2E4-08002B30309D} Name: DefaultIcon Type: REG_EXPAND_SZ Value: %SystemRoot%\system32\syncui.dll,1 shiny metal attache icon Value: %SystemRoot%\system32\syncui.dll,0 default Briefcase icon Related Briefcase tip: Disable Briefcase Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.
CONTROL DESKTOP AND EXPLORER INFO DESCRIPTIONS
If you want to turn off the descriptions that poppup when you place the cursor above desktop icons or Explorer objects, you can use the following registy hack: Hive: HKEY_CURRENT_USER Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced Name: ShowInfoTip Type: REG_DWORD Value: 0 disable Value: 1 display info tip This tip is a Windows NT / Windows 2000 / Windows XP tip. Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com
MAKE OUTLOOK MINIMIZE TO SYSTEM TRAY RATHER THAN TASK BAR
Outlook minimizes to the TaskBar by default. Want to minimize it to the system tray (the right side of the task bar): Hive: HKEY_CURRENT_USER Key: Software\Microsoft\Office\10.0\Outlook\Preferences Name: MinToTray Type: REG_DWORD Value: 1 = System Tray, 0 = Taskbar Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com
CONFIGURE XP’s SHUDOWN EVENT TRACKER
Windows XP has a new feature Shutdown Event Tracker which allows one to record a shutdown or restart reason. You enter it into the Shut Down Windows dialog box which is displayed as part of the shutdown sequence, or when restarting a system after a sudden shutdown. Windows provides predefined reason options. You can also add custom reason options. The information you provide here is recorded in the system log in Event Viewer. To enable the feature:
Hive: HKEY_LOCAL_MACHINE Key: Software\Microsoft\Windows\CurrentVersion\Reliability Name: ShutdownReasonUI Type: REG_DWORD Value: 1=enable;0=disable Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.
CONTROL XP TASKBAR FORCED WINDOW CLUSTERING
I like the Windows XP feature of windows-clustering on the taskbar. You know, when the number of tasks grows, rather than making the icon on the taskbar smaller and smaller and smaller as the number of apps increases, it uses one icon on the taskbar for multiple running versions. I see this all the time on browser windows but XP does this if you have multiple versions of any app running. Want to control number of multiple windows for app before XP clusters : Hive: HKEY_CURRENT_USER Key: Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced Name: TaskbarGroupSize Type: REG_DWORD Value: 2 the number of windows for each app on the screen before they are clustered together Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.
CONTROL THUMBNAIL DISPLAY SIZE
Want to control the size of the Thumbnails view in My Computer? Hive: HKEY_CURRENT_USER Key: Software\Microsoft\Windows\CurrentVersion\Explorer Name: ThumbnailSize Type: REG_DWORD
Value: 25-256 25 is smallest thumbnails and 256 is largest. Experiment for your workstation and set it to what works best for you. Find that you need more space for thumbnails and would like to turn the file names off? Hold down shift when you open a folder or when you switch into thumbnail view. This will turn of the file names, giving more space for the thumbnails. Doing it again turns them back on. Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.
REMOVE WINDOWS XP SYSTEM TRAY FROM THE TASK BAR
Want to disable Windows XP notification area, system tray, on the taskbar, you can use the following registry hack: Hive: HKEY_LOCAL_MACHINE Key: Software\Microsoft\Windows\CurrentVersion\Policies\Explorer Name: NoTrayItemsDisplay Type: REG_DWORD Value: 1 Hide Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.
REMOVE MY COMPUTER FROM THE DESKTOP AND START MENU
Want to use Windows 2000 or Windows XP as a kiosk and you want to remove My Computer from the Desktop and Start Menu? Set {20D04FE0-3AEA-1069-A2D808002B30309D} = 1 in HKCU and HKLM : Hive: HKEY_CURRENT_USER Key: Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum Name: {20D04FE0-3AEA-1069-A2D8-08002B30309D} Type: REG_DWORD Value: 1 remove
Hive: HKEY_LOCAL_MACHINE Key: Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum Name: {20D04FE0-3AEA-1069-A2D8-08002B30309D} Type: REG_DWORD Value: 1 remove The above method works for Windows 2000 and XP. Follow this link for the Windows NT method. Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.
RENAME SPECIAL SYSTEM FOLDERS
My tip on changing My Computer goes into detail of how to rename the system folder using the folder's key in the HKEY_CLASSES_ROOT\CLSID. You can use the same techniques for the follwoing special folders: FOLDER VALUE KEY My Computer My Documents My Network Places Recycle Bin Network And Dial-Up Connections Printers And Faxes Internet Explorer Scheduled Tasks Search Results Fonts Default Default Default Default Default Default 7007ACC7-3202-11D1-AAD2-00805FC1270E 2227A280-3AEA-1069-A2DE-08002B30309D 871C5380-45A0-1069-A2EA-08002B303039D D6277990-4C6A-11CF-8D87-00AA0060F5BF 1F4DE370-D627-11D1-BA4F-00A0C91EEDBA D20EA4E1-3957-11D2A40B-0C5020524152 LocalizedString 20D04FE0-3AEA-1069-A2D8-08002B30309D LocalizedString 450D8FBA-AD25-11D0-98A8-0800361B1103 LocalizedString 208D2C60-3AEA-1069-A2D7-08002B30309D LocalizedString 645FF040-5081-101B-9F08-00AA002F954E
Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.
REMOVE SHARED DOCUMENTS FOLDERS FROM MY COMPUTER SYSTEM FOLDER
When you open Windows XP's My Computer System Folder you will usually see a set of folders at the top of the page under the group called Other Files Stored on This Computer. Even on a home PC shared among family members, I haven't found this useful. Certainly not on a work PC. To eliminate the Other Files Stored on This Computer folders you can use the following registry hack: Hive: HKEY_LOCAL_MACHINE Key: Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\ DelegateFolders DelegateFolders has a subkey : {59031a47-3f72-44a7-89c5-5595fe6b30ee}. Once you delete this subkey, all of the Shared Documents folders displayed on My Computer will be gone. Effect of hack is immediate. No reboot needed in XP. Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.
REMOVE AND RESTRICT ACCESS TO XP TASKBAR TRAY ICONS
You can remove and restrict access to the tray icons (next to the clock on the taskbar) using the following Windows XP registry hack: Hive: HKEY_CURRENT_USER Key: Software\Microsoft\Windows\CurrentVersion\Policies\Explorer Name: NoTrayItemsDisplay Type: REG_DWORD Value: 0 default Value: 1 enable restriction Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.
CONTROL INTERNET EXPLORER SETTINGS
If your organization needs to control Internet Explorer 5 or Internet Explorer 6 settings, you can use the following registry hacks for Windows NT / Windows 2000 / Windows XP : Hive: HKEY_CURRENT_USER for individual user Hive: HKEY_LOCAL_MACHINE for any user of PC Key: Software\Policies\Microsoft\Internet Explorer\Restrictions Type: REG_DWORD Value: 1 enable restriction Open your registry and find or create the desired subkey(s):
AlwaysPromptWhenDownload Always prompt user when downloading files. NoBrowserBars Disable changes to browsers bars. NoBrowserClose Disable the option of closing Internet Explorer. NoBrowserContextMenu Disable right-click context menu. NoBrowserSaveAs Disable the ability to Save As. NoFavorites Disable the Favorites. NoBrowserOptions Disable the Tools | Internet Options menu. NoFileNew Disable the File | New command. NoFileOpen Disable the File | Open command. NoFindFiles Disable the Find Files command. NoNavButtons Disables the Forward and Back navigation buttons NoOpeninNewWnd Disable Open in New Window option. NoPrinting Remove Print and Print Preview from the File menu. NoSelectDownloadDir Disable the option of selecting a download directory. NoTheaterMode Disable the Full Screen view option. NoViewSource Disable the ability to view the page source HTML.
RestGoMenu Remove Mail and News menu item.
Restart Internet Explorer for any of these restrictions to take effect. Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.
LOCK INTERNET EXPLORER TOOLBARS
Want to lock the Internet Explorer toolbars so they can not be moved by click-and-drag? The following registry hack works for all windows versions including Windows NT, Windows 2000 and Windows XP: Hive: HKEY_CURRENT_USER Key: Software\Microsoft\Internet Explorer\Toolbar Name: Locked Type: REG_DWORD Value: 1=locked;0=unlocked You have to restart IE for this to take effect. Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.
PERSONALIZE INTERNET EXPLORER’S TITLE
Internet Explorer ( IE ) displays the title of the page you are viewing followed by Microsoft Internet Explorer if its a standard version of IE. If you have a custom version created with the IEAK (IE admin kit) of IE it will probably have your company name. If you downloaded your IE from an ISP, the IE title will be branded, for example, -Provided by America Online. You want to change the fixed brand of IE, you can use the following registry hack in Windows NT, Windows 2000 or Windows XP: Hive: HKEY_CURRENT_USER Key: Software\Microsoft\Internet Explorer\Main Name: Window Title Type: REG_SZ Value: your choice of text, Wayne's IE, or blank
You have to restart IE for this to take effect. Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.
HIDE SECURITY TAB IN EXPLORER OBJECT PROPERTIES
To lockdown the Security tab so it will not appear when a Windows XP user opens the Properties of a file system object, you can use the following registry hack: Hive: HKEY_CURRENT_USER Key: Software\Microsoft\Windows\CurrentVersion\Policies\Explorer Name: NoSecurityTab Type: REG_DWORD Value: 1 Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com
RESTORE IE DEFAULT AUTOSEARCH PAGE
If something changes your default search page, to put it back, go to the following registry key : Hive: HKEY CURRENT USER Key: Software\Microsoft\Internet Explorer\SearchUrl and double click the default entry in the right pane of registry editor. Enter http://home.microsoft.com/access/autosearch.asp?p=%s in the Edit String dialog box. Once you restart your PC, IE's default search page should be back. This should work for IE under NT, W2K, XP and later versions of Windows. Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.
WHEN WINDOWS WON’T SHUT DOWN
Sometimes Windows gets itself in a huff and won't shut down properly for some reason. You try to shutdown your system and nothing happens for a while, and then a dialog appears telling you that a task won't shut down and you can press End Now if you want to end it now, or you can wait for Windows to try and end it itself. Well you can avoid that hassle by making a simple registry tweak (but remember to backup your registry before editing it!). Here's how: 1. Open Regedit and navigate to HKU\.Default\Control Panel\Desktop 2. Double-click on AutoEndTasks 3. Change the value from 0 to 1 4. Reboot your machine Now hung processes will end automatically when you try to shutdown or reboot your machine. One caveat: a hung process means something is wrong, and anytime you kill a hung process (whether manually or automatically) you risk possible data loss. Cheers, Mitch Tulloch Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.
NO DEFAULT ADMINISTRATOR OWNERSHIP OF FILES
Operating systems should assign ownership of files to the administrator group. XP does this somewhat inconsistently, some files are assigned to the built-in admin account and others to the admin group. No problem if there is only one admin. Could become an issue in .NET which seems to be built on XP code. In any case, to avoid a potential gotcha!, there is a registry hack: Hive: HKEY_LOCAL_MACHINE Key: SYSTEM\CurrentControlSet\Control\Lsa
Name: NoDefaultAdminOwner Type: REG_DWORD Value: 0 default=1 Note this is one of the hacks you have to be careful of value that makes it take effect. A double negative is ... Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com
XP ONLY REMEMBERS 400 FOLDER SETTINGS
Windows XP by default will remember 400 different folder settings. If you have more than 400 folders on your system, then they will start to loose their settings at random. Got lots of folders? Have unique settings? Want to set XP to remember settings for 1000 folders? Hive: HKEY_CURRENT_USER Key: Software\Microsoft\Windows\Shell Name: BagMRU Type: REG_DWORD Value: 3e8 You can set it to less by varying the value setting. Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.
SEARCH FOR ALL FILE TYPES
There is a bit of a gotcha! in Windows XP when you do a file search. XP normally only includes registered file types when searching for files and folders. If you want to be sure that the search is for all files, registered types or not, use the following registry hack for Windows XP : Hive: HKEY_LOCAL_MACHINE Key: SYSTEM\CurrentControlSet\Control\ContentIndex Name: FilterFilesWithUnknownExtensions 7/8 of Physical Memory Q184758 How to Use Poolmon to Troubleshoot Kernel Mode Memory Leaks Q177415 Heap Manager Change in Service Pack 4 Q195008 Registry Size Limit Change Results in PagedPoolSize Change Q140364 Multiple Entries in Zone File Cause Memory Leak in Dnsadmin.exe Q182713 COPY Command Causes File Cache to Grow (NT4,SP4) Q163880 Configuring Page Files for Optimization and Recovery Q197379 Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com. Windows nt/2000/xp cascading menus How fast or slow submenus appear when your mouse is over a menu, is dependent on the MenuShowDelay value. For faster fly-out menus, reduce the delay interval using the following Windows NT / Windows 2000 / Windows XP registry hack : Hive: HKEY_CURRENT_USER Key: Control Panel\Desktop Name: MenuShowDelay Type: REG_DWORD Value: 400 ms default Setting MenuShowDelay too low, can actually hurt performance if Windows is using too many cycles creating and destroying undesired menus. This is a
personalpreference item. Experiment to see what value works best for you. I like a fairly low value with zippy flyout menus. I don't like to navigate menus under Start in geological time. Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com. W2k/xp/.net enable verbose event messages You can use the following registry hack to turn on verbose boot, shutdown, logon, and logoff error messages in Windows 2000 / XP / .Net : Hive: HKEY_LOCAL_MACHINE Key: SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system Name: VerboseStatus Type: REG_DWORD Value: 1 default=0 Note: Status messages will not display if the following key is present and the value is set to 1: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Polici es\System\DisableStatusMessages You can avoid the registry hack by using a group policy setting:
Open a policy in Group Policy Editor Expand Computer Configuration, Administrative Tools, System Double-click Verbose vs normal status messages Set option to Enabled or Disabled. Click OK Close GPE
Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com. Registry tip: windows nt ntfs last access timetamp Windows NT NTFS volumes store a last access timestamp for every file and directory. The NTFS driver automatically updates this timestamp every time a file is accessed, whether for reading or writing. That means that every time you browse through a folder, view folder contents, NT is busy updating the file timestamps which might be better used
for other purposes. After browsing directories with large number of files, the NTFS log file gets filed. NT becomes sluggish or nonresponsive until the file system flushes the log to the hard disk. To disable Windows NT / Windows 2000 / Windows XP NTFS last access timestamp : Hive: HKEY_LOCAL_MACHINE Key: SYSTEM\CurrentControlSet\Control\FileSystem Name: NtfsDisableLastAccessUpdate Type: REG_DWORD Value: 1 This has no effect on "last modified" timestamp. NTFS Tips: Managing Shared Resources and Resource Security Choosing Between FAT and NTFS Web versus NTFS Permissions Getting the Most from IIS Security NTFS Security, Part 2: Implementing NTFS Special Permissions on Your Web Site Getting the Most from IIS Security NTFS Permissions Cancel an NTFS conversion NT equivalents of NetWare Rights Access NTFS from DOS, Win95 or Win98 using NTFSDOS driver NTFS Last Access TimeStamp xcopy - keep attributes How To Remove Files with Reserved Names such as LPT1 or PRN NTFS Metadata files Disable NTs 8.3 aliases for LFNs under NTFS Streams displays which NTFS files have alternate streams content VolumeID changes NT and FAT volume IDs Create a NTFS partition over 4GB during installation Windows NT NTFS Directory Compression
Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com. Keep deleted files out of the recycle bin Want to keep files or folders you delete using Explorer from being copied to the Recycle Bin? Hive: HKEY_CURRENT_USER Key: Software\Microsoft\Windows\CurrentVersion\Policies\Explorer Name: NoRecycleFiles Type: REG_DWORD Value: 1 Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com. Registry settings for the start menu in windows xp Policy:Disable the new simple Start Menu Policy:Remove pinned programs list from the Start menu Policy:Remove frequent programs list from the Start Menu Policy:Remove More Programs list from the Start menu Policy:Remove common program groups from Start Menu Policy:Gray unavailable Windows Installer programs Start Menu shortcuts Policy:Disable and remove links to Windows Update Policy:Remove user folders from the Start Menu Policy:Prohibit user from changing user folder paths Policy:Remove My Documents folder from the Start Menu Policy:Prohibit user from changing My Documents path Policy:Remove Recent Documents item from Start Menu Policy:Maximum number of recent documents Policy:Clear history of recent documents on exit Policy:Remove Favorites item from Start Menu Policy:Remove My Computer from the Start Menu Policy:Remove Network Connections from the Start Menu Policy:Remove Network Places from the Star You can use the Group Policy editor, gpedit.msc, to manage XP Start Menu options: User Configuration \ Administrative Templates \ Start Menu and Taskbar You can also set them directly via the registry using the registry key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\E xplorer The registry entries are DWORD values. A value of 1 is enabled, and a value of 0 is disabled:
Policy: Disable the new simple Start Menu Description:Disables the new simple Start menu and forces the classic Start menu. Registry Value: NoSimpleStartMenu Policy: Remove pinned programs list from the Start menu Description:Removes the pinned programs list from the Start menu. Also removes the Internet and E-mail checkboxes from the Start menu customization CPL. Registry Value: NoStartMenuPinnedList Policy:Remove frequent programs list from the Start Menu Description:Removes the frequently-used programs list from the Start menu. Registry Value: NoStartMenuMFUprogramsList Policy:Remove More Programs list from the Start menu Description:Removes the More Programs list from the Start menu. Registry Value: NoStartMenuMorePrograms Policy:Remove common program groups from Start Menu Description:Removes items in the All Users profile from the More Programs list on the Start menu. Registry Value: NoCommonGroups Policy:Gray unavailable Windows Installer programs Start Menu shortcuts Description:Displays partially installed programs in gray text on the Start menu. Registry Value: GreyMSIAds Policy:Disable and remove links to Windows Update Description:Removes the Windows Update link from the More Programs list in Start menu, from the Tools menu in IE, and blocks user access to windowsupdate.Microsoft.com. Registry Value: NoWindowsUpdate Policy:Remove user folders from the Start Menu Description:Removes all user-specific folders except My Documents (My Pictures, My Music, Favorites, and Recent Documents) from the Start menu. Also removes the corresponding checkboxes from the Start menu customization CPL. Registry Value:This is a combination of the following: NoStartMenuMyMusic , NoSMMyPictures , NoFavoritesMenu , NoRecentDocsMenu Policy:Prohibit user from changing user folder paths Description:Prevents users from changing the path to the My Pictures, My Music, Favorites, and Recent Documents folders. Registry Value: DisableMyPicturesDirChange , DisableMyMusicDirChange , DisableFavoritesDirChange . Policy:Remove My Documents folder from the Start Menu Description:Removes My Documents folder from the Start menu and corresponding checkbox from the Start menu customization CPL. Registry Value: NoSMMyDocs
Policy:Prohibit user from changing My Documents path Description:Prevents users from changing the path to the My Documents folder. Registry Value: DisablePersonalDirChange Policy:Remove Recent Documents item from Start Menu Description:Removes the Recent Documents folder from the Start menu. Also removes the corresponding checkbox from the Start menu customization CPL. Registry Value: NoRecentDocsMenu Policy:Maximum number of recent documents Description:Specifies the number of shortcuts displayed on the Recent Documents submenu. Registry Value: MaxRecentDocs Policy:Clear history of recent documents on exit Description:Deletes all shortcuts shown in the Recent Documents menu when the user logs off. Registry Value: ClearRecentDocsOnExit Policy:Remove Favorites item from Start Menu Description:Prevents users from adding the Favorites item to the Start menu. Also removes the corresponding checkbox from the Start menu customization CPL. Registry Value: NoFavoritesMenu Policy:Remove My Computer from the Start Menu Description:Removes the My Computer item from the Start Menu and the corresponding checkbox from the Start menu customization CPL. Registry Value: {20D04FE0-3AEA-1069-A2D8-08002B30309D} under HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum. Policy:Remove Network Connections from the Start Menu Description:Removes the Network Connections item from the Start menu and the corresponding checkbox from the Start menu customization CPL. Registry Value: NoNetworkConnections Policy:Remove Network Places from the Start Menu Description:Removes the Network Places item from the Start menu and the corresponding checkbox from the Start menu customization CPL. Registry Value: NoStartMenuNetworkPlaces Policy:Do not add shares of recently used documents to Network Places Description:Remote shared folders are not added to Network Places whenever you open a document in the shared folder. Registry Value: NoRecentDocsNetHood Policy:Remove Help item from Start Menu Description:Removes the Help item from the Start menu, but does not disable Help files from running. Registry Value: NoSMHelp Policy:Remove Search item from Start Menu Description:Removes the Search item from the Start menu and disables some Windows Explorer search elements. Registry Value: NoFind Policy:Remove Run item from Start Menu Description:Removes the ability to execute programs from the Run option on the Start menu, Task Manager, or by pressing Winkey + R. Also removes the corresponding checkbox from the Start menu customization CPL. Registry Value: NoRun
Policy:Add "Run in Separate Memory Space" check box to Run dialog box Description:Allows 16-bit programs to run in a dedicated Virtual DOS Machine (VDM) process. Registry Value: MemCheckBoxInRunDlg Policy:Do not use the search-based method when resolving shell shortcuts Description:Prevents the system from conducting a comprehensive search of the target drive to resolve a shortcut. Registry Value: NoResolveSearch Policy:Do not use the tracking-based method when resolving shell shortcuts Description:Prevents the system from using NTFS features to resolve a shortcut. Registry Value: NoResolveTrack Policy:Force Logoff to the Start Menu Description:Forces the Logoff button to the Start menu and prevents users from removing the Logoff option from the Start menu. Registry Value: ForceStartMenuLogoff Policy:Disable Logoff on the Start Menu Description:Removes the "Logoff" button from the Start menu and prevents users from adding the Logoff button to the Start menu. Registry Value: StartMenuLogoff Policy:Disable and remove the Turn Off Computer button Description:Removes the "Turn Off Computer" button from the Start Menu and prevents shutting down Windows using the standard shutdown user interface. Registry Value: NoClose Policy:Disable and remove the Undock PC command Description:Removes the "Undock PC" button from the Start Menu and prevents undocking of the PC (laptop). Registry Value: NoStartMenuEjectPC Policy:Disable drag-and-drop menus on the Start Menu Description:Prevents users from modifying the Start menu by dragging and dropping items. Other methods of customizing the Start menu are still enabled. Registry Value: NoChangeStartMenu Policy:Disable changes to Taskbar and Start Menu settings Description:Removes the Taskbar & Start Menu item from the Control Panel, and removes the Properties item from the Start menu (and button) context menu. Registry Value: NoSetTaskbar Policy:Disable user tracking Description:Prevents the system from remembering the programs run, paths followed, and documents used. Registry Value: NoInstrumentation Policy:Remove user name from Start Menu Description:Removes the user name from the Start menu. Registry Value: NoUserNameInStartMenu
Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com. Registry hack to disable system restore option for xp start menu and control panel
Windows XP has a new feature System Restore which allows users to restore Windows settings and configurations to an earlier point in time (called Restore Points). An administrator can turn off the System Restore feature. This tip gives you the registry hack to disable user access to the System Restore menu option in the Start menu and Control Panel. This does not turn off System Restore but removes user access to create new restore points or restore via the Start Menu or Control Panel dialogs. To disable access to System Restore via the Start menu (Start > Programs > Accessories > System Tools > System Restore), use the following registry hack: Hive: HKEY_LOCAL_MACHINE Key: SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore Name: DisableSR Type: REG_DWORD Value: 1=enable restriction;0=disable restriction To disable access to System Restore via the Control panel (Control Panel > System > System Restore), use the following registry hack: Hive: HKEY_LOCAL_MACHINE Key: SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore Name: DisableConfig Type: REG_DWORD Value: 1=enable restriction;0=disable restriction Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com. Suppress the windows tour prompt in windows xp XP displays the Windows Tour balloon prompt the first 3 times you logon to XP. If you want to suppress the XP Tour, use the following XP registry hack: Hive: HKEY_LOCAL_MACHINE Key: Software\Microsoft\Windows\CurrentVersion\Applets\Tour Name: RunCount Type: REG_DWORD Value: 0
Setting RunCount = 0 will disable the balloon prompt for all users. Although the Tour will be disabled after 3 logons, you could use the following XP registry hack to disable the Tour for a particular user: Hive: HKEY_CURRENT_USER Key: Software\Microsoft\Windows\CurrentVersion\Applets\Tour Name: RunCount Type: REG_DWORD Value: 0 Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com. Xp registry values to tune efs caching Microsoft Windows XP provides the flexibility to adjust the cache-validation time. The kernel will not validate the user credentials during this cache period. This has the net effect of faster access to encrypted files that may be opened several times during a given time period. The number of seconds the kernel will cache the session key for a user for a given file. Cached session keys are stored in nonpaged pool memory. Increasing the value of EFSKCACHEPERIOD will result in higher usage of nonpaged pool memory. This increased nonpaged pool usage might cause problems for some machines, especially machines that are trusted for delegation for remote encryption. Hive: HKEY_LOCAL_MACHINE Key: System\CurrentControlSet\Services\NTFS\EFS\Parameters Name: EFSKCACHEPERIOD Type: REG_DWORD Value: 5 secs default value; 2 sec min, 20 sec max Adjusting the user mode cache validation time upwards will improve the performance of systems that use EFS operations frequently. When EFS operations are in use, processing time is needed for the system to obtain and validate the certificates and keys. This will significantly slow system performance if the user mode cache validation time is set too low. The higher the user mode
cache validation setting, the less often the system validates; the lower the setting, the more often the system validates. If EFS security is a priority in your system, then you will want appropriate EFS credentials to be validated more frequently. For maximum security, the lowest setting will provide the most frequent validation. Hive: HKEY_LOCAL_MACHINE Key: Software\Microsoft\Windows NT\CurrentVersion\EFS Name: KeyCacheValidationPeriod Type: REG_DWORD Value: 3600 secs default value; 60 min, 86400 (1 day) max ' Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com. Disable the encrypting file system There is a registry hack to allow or disallow the EFS: Hive: HKEY_LOCAL_MACHINE Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\EFS Name: EfsConfiguration Type: REG_DWORD Value: 1 disable EFS Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com. Disable windows xp ipp internet printing Windows XP supports Internet printing protocol. IPP is beneficial because a user can print to a URL over an intranet or the Internet, view printer and job related information in Hypertext Markup Language (HTML) format, and download and install printer drivers over the Internet. To disable this functionality, use the following registry hack: Hive: HKEY_LOCAL_MACHINE Key: SOFTWARE\Policies\Microsoft\Windows NT\Printers Name: DisableWebPrinting
Type: REG_DWORD Value: 1 Disable 0 Enable Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com Disable windows messenger broadcasts on udp port 1900 In XP, the Simple Service Discovery Protocol (SSDP) discovery service searches for Universal Plug and Play devices on your home network. SSDP searches for upstream Internet gateways using UDP port 1900 - a potential security risk many organizations will want to block. OK, you decide to block SSDP services but to your surprise, your firewall and network sniffers continue to see the UDP port 1900 packets. You have disabled XP's SSDP and even Universal Plug and Play Device Host. Whats going on? This is Universal Plug and Play Network Address Translation (NAT) traversal discovery used by Messenger. If you run a sniffer trace, the following information is displayed in the data section of the packet: SSDP: Method = M-SEARCH SSDP: Uniform Resource Identifier = * SSDP: HTTP Protocol Version = HTTP/1.1 SSDP: Host = 239.255.255.250:1900 SSDP: Search Target = urn:schemas-upnp-org:device:InternetGatewayDevice:1 SSDP: Mandatory Extension = "ssdp:discover" SSDP: Maximum Wait = 3 XP's Windows Messenger is attempting to communicate to an Internet host. To block Windows Messenger's broadcasts: Hive: HKEY_LOCAL_MACHINE Key: Software\Microsoft\DirectPlayNATHelp\DPNHUPnP Name: UPnPMode Type: REG_DWORD Value: 2 disabled With UPnPMode=2, Universal Plug and Play Network Address Translation (NAT) traversal discovery does not occur. Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.
Xp time synchronization To control the number of seconds to wait between attempts to synchronize the system clock to an time source on the Internet using the following Windows XP registry hack: Hive: HKEY_LOCAL_MACHINE Key: SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpClient Name: SpecialPollInterval Type: REG_DWORD Value: #secondsdesired default Don't set it too low. Your PC clock doesn't drift that fast. Once a day is good enough. (default) will control which time server to use. The Servers key will have entries for internet time servers. For example my system has (default)=2, value 1="time.windows.com" and value 2="time.nist.gov". Meaning my time is syncronized from the nist.gov site. To control which time source to synchronize the system clock with, use the following Windows XP registry hack: Hive: HKEY_LOCAL_MACHINE Key: SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers Name: (Default) Type: REG_SZ Value: entry of choice, 1-# time servers you have default If you want to add a new time server, add a new value, in my example the next value 3="thenewtimeserver.com" Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.
Xp allows usernames to be hidden from the logon screen Windows NT / Windows 2000 and Windows XP has a security setting to hide the last logged onto account. The hack to block the last logged onto account is found in Registry Tip #70. Windows XP adds the ability to hide accounts from the Logon dialog:
Hive: HKEY_LOCAL_MACHINE Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList The UserList normally contains special accounts like the IUSR and IWAM accounts but you can add normal accounts to have them hidden from the Logon dialog list. For example, to hide my account Wayne Maples , I would add a subkey to UserList of type REG_DWORD named Wayne Maples with a value of 0. Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com. Shutdown workstation without logging on Workstation default allows anyone to shut the system down without logging on. Requiring logon prior to being able to shutdown the box is the default for server. To disble on Windows NT, Windows 2000, or Windows XP workstation: Hive: HKEY_LOCAL_MACHINE Key: Software\Microsoft\Windows NT\CurrentVersion\Winlogon Name: ShutdownWithoutLogon Type: REG_SZ Value: 1 Yes Value: 0 No Note: some Microsoft documentation lists this as REG_DWORD. That is incorrect. It is REG_SZ in NT, W2K and XP. ShutdownWithoutLogon can also be set by GUI tool, RegKey.exe from the Resource Kit. From a security perspective, not particularly useful unless the power switch is also secured. Another approach is to remove the user right Shutdown the system. By default workstation setups grants this right to Everyone, Users, and Power Users as well as Administrators. Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.
Simplified efs
If you use EFS to encyrpt hard drive data to protect it and are tired of rightclicking on files, selecting Properties, clicking Advanced, and selecting Encrypt Contents To Secure Data just to encrypt the file, try this registry tweak, which adds an Encrypt option when you right-click on files in Windows Explorer: 1. Open regedit and navigate to HKLM \ Software \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Advanced 2. Create a new DWORD value named EncryptionContextMenu and set it equal to 1 Note that once you encrypt a file, right-clicking on it in Windows Explorer gives you a Decrypt option. Cheers, Mitch Tulloch, MVP Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com. Installing msi packageswith elevated privileges
RunAs is a great way of temporarily elevating your privileges to admin level when you are logged on as an ordinary user. However, while you can right-click on .exe files and select Run As from the shortcut menu, this doesn't work with Windows Installer (.msi) packages. Here's a workaround that makes this possible. Open Registry Editor as administrator and create the following key under HKCR\Msi.Package\shell: HKCR\Msi.Package\shell\runas Now set the default value of this key to the following: Install &as...
Now create the following subkey: HKCR\Msi.Package\shell\runas\command Set the default value of this subkey to the following: msiexec /i "%1" Now you should be able to right-click on a .msi file and select Install As from the shortcut menu. Cheers, Mitch Tulloch www.mtit.com/mitch/ Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com. Disabling the runas command
For standalone Windows XP machines in a workgroup environment, you can disable Run As by hacking the Registry. Simply use Regedit.exe to locate the following key on each machine:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
Then create a new DWORD value named HideRunAsVerb and assign it a value of 1. In a domain environment, you can disable RunAs using the Software Restriction Policies feature of Group Policy. To do this, open the appropriate GPO in the Group Policy Object Editor and locate the following node in the console tree: Computer Configuration/Windows Settings/Security Settings/Software Restriction Policies
Right-click on this node and select New Software Restriction Policies, then rightclick on Additional Rules and select New Path Rule. Now type the path to
runas.exe and make sure the policy is set to disallowed.
If you prefer to apply this policy to specific users instead of computers, use a GPO linked to an OU where the user accounts reside and configuring Software Restriction Policies using User Configuration instead of Computer Configuration, such as: User Configuration/Windows Settings/Security Settings/Software Restriction Policies Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com. Enforce strong passwords There are several freeware utilities that allow for password changing with rules enforced. I recommend Microsoft's own utilities. The NT Server 4 Resource Kit has a utility, Passprop.exe , that enforces strong passwords. Another choice was introduced in SP2 is a DLL called PASSFILT.DLL, that does basically the same thing. (see AlphanumPwds registry setting below for another option). Passprop lets you set a policy to require complex passwords which contain a mix of upper and lowercase letters and numbers or symbols (this functionality depends on passfilt.dll). For example, wayne123 would not be acceptable. No uppercase letter. Passprop can also be used to make the built in administrator's account comply with account lockout policies over the network. By default, the built-in administrator account does not follow lockout policy and as such, is a wonderful target for a dictionary attack. The administrator account can never be locked out at the console. But after the number of bad password attempts set by your account policy, the administrator account will be locked out from remote access until it is unlocked in User Manager. In point of fact, a locked out built in administrator account is normally a strong indication that someone is attempting to penetrate your server or network.
There is a Windows 2000 version of passprop but you can search high and low in the Microsoft KB and not find where it is and how to get it. If you try to use the NT4 version on Windows 2000, the results are inconsistent. The W2K version of passprop.exe is in the NETMGMT.CAB found in either the Windows 2000 Pro Resource Kit or the Windows 2000 Server Resource Kit. The internal help file:
C:\WINNT>passprop /? Displays or modifies domain policies for password complexity and administrator lockout. PASSPROP [/complex] [/simple] [/adminlockout] [/noadminlockout] /complex Force passwords to be complex, requiring passwords to be a mix of upper and lowercase letters and numbers or symbols. /simple /adminlockout Allow passwords to be simple. Allow the Administrator account to be locked out.
The Administrator account can still log on interactively on domain controllers. /noadminlockout out. Don't allow the administrator account to be locked
Windows NT / Windows 2000 / Windows XP will accept anything as a password, including nothing. If you don't want to mess with passprop, you can set AlphanumPwds which forces alphanumeric passwords containing both alpha and numeric characters. It doesn't do anything else about password complexity or other features but its better than the defaults. Hive: HKEY_CURRENT_USER Key: Software\Microsoft\Windows\CurrentVersion\Policies\Network Name: AlphanumPwds
Type: REG_DWORD Value: 1 enabled Related: HOWTO: Password Change Filtering & Notification in Windows NT. See Q151082 . Microsoft introduced Syskey to encrypt password hashes. See atips92.shtml . Microsoft's Password Best Practices Don't disable the built-in Administrator account. See atips40 . If you are really serious, you could write your own Window's NT gina, Graphical Identification and Authentication DLL. The gina controls the authenication process. Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com. Automatic logon On a dedicated special function server such as print server or application server, one might want to bypass the Logon dialog box and automatically logon to the server. Not recommended. If you want to set it on your standalone workstation at home, well thats a different matter. If you want to set this on a laptop or workstation on a network, consider the word security. If you need to set autologon and twiddlying with registry hacks is daunting, see Autologon tips which points to freeware utility to do the work for you. The following registry hack details the registry keys which control automatic logon: Hive: HKEY_LOCAL_MACHINE Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Name: AutoAdminLogon Type: REG_SZ Value: 1 enable auto logon Value: 0 disable auto logon
Hive: HKEY_LOCAL_MACHINE Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Name: DefaultUserName Type: REG_SZ Value: account to logon automatically Hive: HKEY_LOCAL_MACHINE Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Name: DefaultPassword Type: REG_SZ Value: pw for DefaultUserName above Caution: Password is stored in clear text. Set security permissions on Winlogon subkey to protect the account used. Hive: HKEY_LOCAL_MACHINE Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Name: DefaultDomainName Type: REG_SZ Value: if domain account, domain name; if local account, server name Windows 2000 / XP has an additional registry setting to force autologon and ignore bypass attempts. This can be valuable with a kiosk environment: Hive: HKEY_LOCAL_MACHINE Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Name: ForceAutoLogon Type: REG_SZ Value: 1 The following registry values must not exist: LegalNoticeCaption, LegalNoticeText. These values force a person logging into a PC to acknowledge having read the notice. If these values exist, the legal notice dialog hangs until someone hits enter. Don't just null out the values. Delete them.
The value DontDisplayLastUserName determines whether the logon dialog box displays the username of the last user that logged onto the PC. The value does not exist by default. If it exists, you must set it to 0 or the value of DefaultUser will be wiped and autologon will fail. Finally, the value RunLogonScriptSync determines whether a logon script will run synchronously or asynchronously. It should not effect this process but there have been reports that setting the value=1, that is, sychronous, is more stable. Whether you use the Autologon utility or the registry approach, there are times when you must logon as another user or need the logon dialog to appear. Hold down the shift key until during boot until the logon dialog appears. For the control freaks, even the shift override can be blocked (also see ForceAutoLogon above) : Hive: HKEY_LOCAL_MACHINE Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Name: IgnoreShiftOverride Type: REG_SZ Value: 1 If you want to enable autologon for a certain number of times, follow the above instructins and use the following Windows NT / W2K / XP registry hack: Hive: HKEY_LOCAL_MACHINE Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Name: AutoLogonCount Type: REG_DWORD Value: # autologons you want to allow Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com. Prevent logon screensaver from launching
Nt registry tip 77 gives the hack to activate the screen saver when no one is logged on. There is a security risk as I document in Admin Tip #262 to replace login.scr which can be used to hack into an NT / Windows 2000 / XP systems. The exposure requires physical access. The real control involves restricting physical access. But if you want to prevent the logon screensaver from launching, use the following NT / W2K /XP registry hack. Hive: HKEY_USERS Key: .DEFAULT\Control Panel\Desktop Name: ScreenSaveActive Type: REG_SZ Value: 0 disabled Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com. Block html script processing windows media player Several version specific patches to secure Windows Media Player against script attacks. Another approach is to block html script processing by WMP. This is a W2K / XP tip. Hive: HKEY_CURRENT_USER Key: Software\Microsoft\MediaPlayer\Preferences Name: PlayerScriptCommandsEnabled Type: REG_DWORD Value: 0 Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com. Add administrator to windows xp welcome logon screen Want to easily switch between a user account and the builtin administrator account? Add the Administrator account to the Windows XP Welcome screen. Hive: HKEY_LOCAL_MACHINE Key: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList Name: Administrator
Type: REG_DWORD Value: 1 display on userlist Reboot and you will see Administrator as one of you logon choices. If you logon to a normal user account and want to switch to the builtin account:
Click Start Click Logoff icon Click Switch Users icon Select Administrator , another account, or the the one you are logged onto.
Enabling Switch Users is incompatible with VMWare workstation. VMWare is a niffty tool for support people. An NT or Linux version is available. You can use it to run virtual machines. For example, my primary operating system is Windows XP Pro. I use VMWare to run Windows NT, Window 2000, Windows XP Home, Mandrake Linux, and XP Pro in virtual machines running in windows. I highly recommend it if you need to run multiple operating systems or multiple versions of the same OS. Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com. Block xp registration To use Windows Update, you have register XP. If you want support from Microsoft without having to give them you private data (name, email, phone, ...), you can use the following registry hack to fool XP into thinking that XP has been registered. This is essentially the same hack used in Win98 to block registration. Don't be confused - this is not blocking Product Activation. This will only work if you have not installed XP. If you have installed XP and there is internet connectivity, you already are registered.
Your PC must not be connected to the network. During XP setup answer no when setup asks you to use Windows Dynamic Update. Dynamic update connects to Microsoft to register XP. Once the installation is completed, reboot to Safe mode. Click Start Click Run Rename %systemroot%\System32\regwizc.dll and %systemroot%\System32\Dllcach\regwizc.dll to regwizc.dll.bka or whatever. By renaming the regwizc DLL, it blocks other windows components from registering XP to Microsoft. Apply registry hack:
Hive: HKEY_LOCAL_MACHINE Key: SOFTWARE\Microsoft\WindowsNT\CurrentVersion Name: RegDone Type: REG_SZ Value: 1 its registered
Change the IE home page to something besides Microsoft's web site. Reboot to Normal mode and reconnect your nic card before the XP Windows GUI loads.
Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com. Xp desktop theme control restriction Want to control access to the desktop theme settings including the Windows styles, buttons, schemes and fonts? You can use one or more of the following registry settings: Hive: HKEY_CURRENT_USER Key: Software\Microsoft\Windows\CurrentVersion\Policies\System Name: NoColorChoice Name: NoSizeChoice Name: NoVisualStyleChoice Type: REG_DWORD Value: 1 disabled The above settings let you restrict specific controls. If you want to hide the Themes Settings page: Hive: HKEY_CURRENT_USER Key: Software\Microsoft\Windows\CurrentVersion\Policies\Explorer Name: NoThemesTab Type: REG_DWORD Value: 1 Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.
Microsoft outlook – force reading email to plain text There have been email exploits based on html coding. Outlook 2002 in Office XP Service Pack 1 adds a the capability for individual users to restrict Outlook to read all nondigitally-signed e-mail or nonencrypted e-mail in plain text format. The SP also allows an admin to use a policy to do the same thing for users, groups, ... For an individual, you can use the following registy hack: Hive: HKEY_CURRENT_USER Key: Software\Microsoft\Office\10.0\Outlook\Options\Mail Name: ReadAsPlain Type: REG_DWORD Value: 1 disable This registry hack effects
the preview pane as well as open messages pictures become attachments to avoid their loss object model (custom code solutions) may behave unexpectedly digitally signed messages are not altered.
Related tips:
How to Obtain the Latest Office XP Service Pack (Q307841) Outlook Keyboard ShortCuts Outlook 2000 Disk Space Outlook Book Tips
This tip is a Windows NT / Windows 2000 / Windows XP tip. Well I guess you could say that. Its actually an Office XP Outlook tip. Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com. Restrict access to the windows update feature If your organization needs to block their users from using Windows Update to update Windows components, you can use the following registry hack for Windows NT / Windows 2000 / Windows XP :
Hive: HKEY_CURRENT_USER Key: Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate Name: DisableWindowsUpdateAccess Type: REG_DWORD Value: 1 Equivalent is HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer DWORD value NoWindowsUpdate = 1. If this restriction is in place, if you try Windows Update, you will receive message: Network policy settings prevent you from using Windows Update to download and install updates on your computer. If you believe you have received this message in error, please check with your system administrator. Article not looking right or info is missing? Let us know so that we can fix it: info@windowsnetworking.com.