Make a copy of the Windows registry

We start by opening start -> run and typing regedit and pressing accept, the
registry editor with HKEY_ type folders

In the main menu, we click on registration and then click on 'Export log file' or
Export
copy of the record (example: my documents). We give a name to the copy, for example
backuprecord. We verify that the file type is *.reg and that the export interval
all

Alright! If we happen to have any problems with the registration, we just need to look for our copy.
(backup record), we open it (by double clicking) and the record would return to the same situation of
before.

A copy of the record weighs approximately 90MB.

Prevent access to screen properties

If you share your PC with other people and don't want them to change the screensaver
you can prevent access to screen properties by editing the registry:

Run Regedit Click on Start/run, type Regedit

Once you are in the Registry Editor, go to the key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

Select in the Edit menu | New | DWord Value

You write as the value name: NoDispCPL
Then you click on the newly created element and in the value information box
you write 1.

1 = activate the protection

0 = deactivate
In this case, you do not need to restart your PC.

Make the admin account appear

Within the regedit we will navigate to:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\SpecialAccounts\UserList

If it doesn't exist, we will create a new value: Second mouse button -> new value, which is
DWORD, we name it ->

Administrator -> OK. We double click on it and give it the DECIMAL value -> 1 If it exists,
we only need to modify the value by 1.
 Remove the password from the Iexplorer content accessor

Protecting access to the content advisor with a password will be useful so that none
users can modify the established security level.

However, what happens when we forget the password? Uninstall and reinstall Internet Explorer.
it will be useless because the supervisor's key for the content advisor is located in the
Register. To delete it, we will start the Windows registry editor with the command
"[Link]" from the Start/Run menu.

There we will locate the key:

HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\Windows\Current
Version\Policies\Ratings

We deleted the parameter 'key', which contains the content advisor's key encrypted.
By erasing this value we will delete the password. Then we restart the PC.

Restrict the applications that users can run

Windows provides the ability to restrict the applications that users can
execute on a workstation. To do this, we will start the registry editing tool
from the system, with the command '[Link]', from the Start/Run menu and we will locate the
key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

There we will create or modify the DWORD value 'RestrictRun' (without quotes) to the value '1' to
activate the restriction or '0' to deactivate it. Immediately afterwards, we will need to define the applications.
its execution will be restricted since by default the execution of all will be allowed.
For this, we will move to the key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Restric
tRun

And we will introduce alphanumeric values whose name will be consecutive numbers and how
The content will contain the names of the executables for each application.

Restrict access to the system registry editor

To obtain ownership over a branch of the registry or to restrict access to it,
we will open the system registry editor, with the command '[Link]' from the menu
Start/Run and we will locate the key whose properties we want to modify.

In the Edit menu or from the context menu that appears when right-clicking
using the mouse we will select the Permissions option, which will open a dialog box with the different
existing access permissions for system users over that branch.

We will click on the Advanced button and move to the Owner tab. In the
In the 'Change Owner' dialog box, we will select the account that will take possession of
we will push on Apply. Just like from a folder in Windows Explorer
We will try to confirm if we want to replace the owner of the rest of the keys and branches.

that hang from the selected one.

Prevent team users from downloading from

internet

Windows XP offers the ability to prevent users on the same machine from performing
file downloads from the Internet, for this we have to resort to the Windows registry
the following form:

We click on the Start button and then on Run, we type Regedit and press the button
Accept.

Now in the register we navigate through the following keys:

HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Internet Settings/Zones

When opening the last folder of Zones, we will see several folders, the one we are interested in is the
folder number 3. Now we click on folder number 3 and in the right panel we will see the
values that are associated.

We look for the value 1803, we double click on it, in the window that shows us.
we write the number 3 and press the Accept button. The next time someone tries
downloading something from the Internet will receive a warning message that security does not allow you to
download that file.

Clarification: This restriction only affects the user to whom the restriction has been applied, and
Logically, this trick should be done from the user account to be restricted.

Restrict the applications that users can make

When we use a shared computer with other users, we may want to

restrict the applications that other users of the PC can use for various reasons, the
the correct way to do it is as follows:

We click on the Start button and then on Run, then we type Regedit and
We press the Accept button.

Now we look for the following string to open it:

HKEY_CURRENT_USER/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer

We will now create or modify the DWORD value RestricRun with the value '1' to activate the
restriction, and with the value "0" to deactivate it.

Next, we will need to define which applications will be restricted. For this, we will go
to the key:

HKEY_CURRENT_USER/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer/Re
stricRun

At this point, we will introduce alphanumeric values whose name will be consecutive numbers.
and as content, they will have the names of the executables of each application.

To finish, we close the Registry Editor and restart the computer.

The problem is that if you only want to disable one, the task of enabling the rest is very
long... however, there is also "DisallowRun" which does block the specified program
allowing others to function normally,

in addition to being created the same as the previous one except for the name of the key, which is the one already
indicate. I don’t know if this will help, but when I was looking for something like this, I noticed that in all the
pages had the same information until I finally found the key "DisallowRun". Good luck
Well, I hope they understand it.

First let's go to the key:

HKEY_CURRENT_USER/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer

Now we will create or modify the DWORD value DisallowRun with the value "1" to activate
the restriction, and with the value "0" to deactivate it.

Next, we will have to define which applications will be restricted. For this, we will go
to the key:

HKEY_CURRENT_USER/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer/Di
sallowRun

At this point we will introduce alphanumeric values whose names will be consecutive numbers.
and as content, they will have the names of the executables of each application.

To finish, we close the Registry Editor and restart the computer.

Disable the right mouse button

To disable the right mouse button and prevent it from showing context menus
When we click on the Desktop or on the Explorer, follow these steps:

We click on the Start Button and then on Run, we type Regedit and press the
Press the Enter key and the registry editor will open.

Now in the Registry Editor we navigate through the following keys:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

If we don't have the MoViewContexMenu entry, we have to create it. We click with the mouse.
right and then we choose the

value DWORD, then we change its name to MoViewContexMenu

Finally, we double-click on it and give it the value '1' to hide the context menu.
Press '0' to unhide it.

We close the registry editor and that's it, now when we right-click on a
The desktop area will no longer show the context menu.

We will close the session and restart Windows for the changes to take effect.

Lock the desktop icons

In Windows XP, the desktop icons can also be locked by accessing the registry.
Windows. To perform this trick we will do the following:

We open the Windows Registry and navigate to the following branch:

HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer

Once we have selected the Explorer folder, we click on the right panel with the
right click to create a new entry.

We click on New and then on DWORD, now we give it the following name
NoSaveSettings.

Then we double click on the new entry and give it the value 1 and press the button.
Accept. Finally, we close all the windows we have open and restart the
computer.

Hide the 'shut down the system' button from the start button

If your computer is used by several users in the same session, you may want to
disable the Shut Down system button that appears when pressing the start button, if this is yours
in case follow these steps to hide that button:

Press the Start button and then Run, type Regedit and press the OK button.

Now we will search for the following keys:

HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Policies/Explorer.

We create or modify the value of the DWORD type NoClose with the content "1" to hide the
start menu button or '0' to show it. Although it will always be available from the
task manager.

If the key is not created, you will most likely need to create it and name it NoClose.
then you must assign the value "1" or "0" according to your needs, as we have explained in the
step 3.

Restrictions for the active desktop

Some of the features of the Windows active desktop can be controlled and
disabled individually through the register...

For this, we will start the system registry editing tool with the command
"[Link]" from the Start menu/Run and we will locate the key:
HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\ CurrentVersion\
Policies\ActiveDesktop

There we will create or modify the existing DWORD values, which will have the content '1' for
activate the configuration restriction of those elements or "0" to deactivate the restriction:

Disables the ability to change the wallpaper.

"NoAddingComponents" disables the ability to add components.
Disables the ability to delete components.
Disables the ability to edit components.
NoHTMLWallPaper disables the use of files other than bitmap (.bmp) as
desktop background.

Prevent programs from being uninstalled

Go to the register and search for the branch:
KEY_CURRENT_USER\Software\Microsoft\Windwdows\CurrentVersion\Policies\Uninstall

Then we create a DWORD value and name it NoAddRemovePrograms, we double click

click and we assign it the value 1.

Note: If the UNINSTALL branch does not exist, create it through the Edit/New/Key menu.

Download more than 2 files at the same time

By default, Windows is configured so that you cannot download more than two files.
from the same web or FTP server.

We will explain how to remove this restriction and set our own maximum number of downloads.
what we want to achieve:

1- Let's go to We type 'regedit' and press ENTER.

2- Once inside the Windows Registry, we will search for the following string:

HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/InternetSettings

3- Within this point, we must create two DWORD keys. To do this, we press the
right mouse button inside the 'InternetSettings' folder and in the menu that appears
let's go to "New - DWORD Value". When the new keys appear, we must change the
default name for the following:

MaxConnectionsPerServer
y
Max Connections Per 1.0 Server

4- Once we have named the two keys, we must double-click on them and edit.
the numerical value we want. For example, if we want to be able to download 100.
simultaneous files from the same server, we double click on both keys and put
the value 100.
 Change the default search engine of Internet Explorer

If we click on Internet Explorer an exploratory column opens with the

default search engine by Microsoft which is MSN, which limits us quite a bit at the moment
to search for certain information. If we want to change this default search engine to our
preferred Google, we must do the following:

Let's go to we write "regedit" and enter the following branch:

HKEY_LOCAL_MACHINE/Software/Microsoft/Internet Explorer/Search

We edit the 'SearchAssistant' option by double-clicking and writing [Link]

We close the registration to validate the changes.

Prevent them from changing the homepage

Especially if many people have access to a PC, we may be interested in not allowing us
change the Home page of Internet Explorer. To do this, we can block it, using the
registry (regedit).

Let's go to:
HKEY_CURRENT_USER/Software/Policies/Microsoft

Where we create a new key called Internet Explorer.

Within this new key, we create another key named Control Panel, and within it,
we create a DWORD value named Homepage to which we assign the value 1 (if
we want to change it, it will be necessary to give it a value of 0).

Title it Internet Explorer

Within the record, access the key:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\InternetExplorer\Main

Title
Company Name
Default search

Tricks to restrict the internet

Start and then in Run, where you must type [Link]. Once in it,
it is necessary to locate the chain:

HKEY_CURRENT_USER\Software\Policies\ Microsoft\Internet Explorer\Restrictions

_NoBrowserOptions_ blocks access to the Tools/Internet Options menu.
_NoBrowserSaveAs_ disables File/Save As.

What to do if it shows a virus or missing files at startup.

To remove the activation of viruses or unnecessary files in the Windows game we must
follow the next path within the registry editor:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

In the window we will see the system RUN of the equipment which shows us all the programs
or files that run at startup of the PC.

To delete or disable unnecessary files or programs from our PC, we just need to
select those from the list that the Regedit window shows and delete it by pressing the key
"Supr". Then it will ask us if we want to delete it.

When the PC is restarted, all the changes made should work.

perfectly on the startup path, without errors when starting Windows.

Allow read-only access on USB ports.

USB ports are a whole problem. There is no middle way that allows me to leave
access to these, but at the same time, prevent files from being copied left and right. However
a possible solution, which may be sufficient for most, would be to place those
ports in "Read-Only" mode, that is, when connecting a USB flash drive, you will be able to access the
files of this, but you will not be able to copy anything to it.

To avoid this, I need to enter regedit. I click on 'Start/Run', and I type 'regedit'.
You must open a window just like the one below. Once we have entered, we must search.
the following key:

HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/StorageDevicesPolicies

If the key "StorageDevicesPolicies" does not exist, we can create it manually, and then on the side
window right, create a 'DWORD' key, named 'WriteProtect', with its value
It will be "1". How to create the WriteProtect key? Simple, right-click on the right panel of the
window, the contextual menu "New/DWORD Value" will appear.

You don't even need to restart. From now on, whenever you insert a USB flash drive,
this will work as 'Read Only'. If you want to return to the previous state, that is, totally
free, enter the key I mentioned above, "WriteProtect", and change the value from "1" to "0". Each
Every time you change the values of this key, you must restart, otherwise it will not detect the change.

Deactivate USB port of the PC

For many Windows computer and system administrators, the connection port
USB can pose a great threat to the security of businesses. A quick way
to disable reading and writing to any USB port, it is through the regedit application
from Windows. It is recommended to make a backup of the registry in case of any disaster.

To disable access to the USB port, in Windows 2000 and Windows XP.

Click on Start and then click on Run.

2. In the "Open" box, type regedit and then click OK.
3. Next, click on the following registry key:

HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ UsbStor

4. In the right panel, double-click on Start.

5. In the data box, click on hexadecimal value, type 4, and then click on
Accept.
6. Exit the registry editor.

To activate the disabled port, follow the same steps as initially and in the box of
data click on hexadecimal Value, type 3 and then click on Accept.