【笔记】Windows通过注册表禁用系统关键组件
前言
Windows通过注册表禁用系统关键组件
Explorer
隐藏时钟
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值HideClock数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值HideClock数据为十六进制的0x00000001
禁用关机
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoClose数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoClose数据为十六进制的0x00000001
禁用注销
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoLogoff数据为十六进制的0x01000000HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoLogoff数据为十六进制的0x01000000
禁用鼠标右键
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoViewContextMenu数据为十六进制的0x01000000HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoViewContextMenu数据为十六进制的0x01000000
禁用控制面板
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoControlPanel数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoControlPanel数据为十六进制的0x00000001
禁用桌面
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoDesktop数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoDesktop数据为十六进制的0x00000001
禁用文件菜单(Win7及以下)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoFileMenu数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoFileMenu数据为十六进制的0x00000001
禁用搜索
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoFind数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoFind数据为十六进制的0x00000001
禁用文件夹选项
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoFolderOption数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoFolderOption数据为十六进制的0x00000001
禁用实用模式(Win7及以下)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoRealMode数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoRealMode数据为十六进制的0x00000001
禁用最近的文档菜单
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoRecentDocsMenu数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoRecentDocsMenu数据为十六进制的0x00000001
禁用运行
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoRun数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoRun数据为十六进制的0x00000001
禁止通过快捷键打开资源管理器
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoSetFolders数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoSetFolders数据为十六进制的0x00000001
禁用文件夹菜单
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoViewContextMenu数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoViewContextMenu数据为十六进制的0x00000001
禁用MS-DOS
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值WinOlaApp数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值WinOlaApp数据为十六进制的0x00000001
禁用网上邻居
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoNetHood数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoNetHood数据为十六进制的0x00000001
禁用控制面板的网络属性
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoNetSetup数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoNetSetup数据为十六进制的0x00000001
禁用驱动器的相关功能
禁用驱动器
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoDrives数据为十六进制的0xffffffffHKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoDrives数据为十六进制的0xffffffff
禁止某一个驱动器
禁止C盘
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoDrives数据为十进制的4HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoDrives数据为十进制的4
禁止D盘
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoDrives数据为十进制的5HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoDrives数据为十进制的5
同时禁止C盘和D盘
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoDrives数据为十进制的45HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoDrives数据为十进制的45
禁止预览驱动器中的文件
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoViveOnDrive数据为十六进制的0xffffffffHKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoViveOnDrive数据为十六进制的0xffffffff
禁止某一个驱动器
禁止C盘
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoViveOnDrive数据为十进制的4HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoViveOnDrive数据为十进制的4
禁止D盘
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoViveOnDrive数据为十进制的5HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoViveOnDrive数据为十进制的5
同时禁止C盘和D盘
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoViveOnDrive数据为十进制的45HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoViveOnDrive数据为十进制的45
禁用驱动器自动运行
禁止所有驱动器的自动运行
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoDrivesTypeAutoRun数据为十六进制的0x000000ffHKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoDrivesTypeAutoRun数据为十六进制的0x000000ff
隐藏驱动器
隐藏所有驱动器
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoDrives数据为十六进制的0xFFFFFFFFHKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoDrives数据为十六进制的0xFFFFFFFF
隐藏A盘
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoDrivesA数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoDrivesA数据为十六进制的0x00000001
禁用开始菜单的相关功能
禁止修改开始菜单
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoChangeStartMenu数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoChangeStartMenu数据为十六进制的0x00000001
禁用开始菜单更多选项
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoStartMenuMorePrograms数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoStartMenuMorePrograms数据为十六进制的0x00000001
禁用开始菜单游戏选项
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoStartMenuGame数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoStartMenuGame数据为十六进制的0x00000001
禁用开始菜单音乐选项
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoStartMenuMusic数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoStartMenuMusic数据为十六进制的0x00000001
禁用开始菜单网络位置选项
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoStartMenuNetworkPlaces数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoStartMenuNetworkPlaces数据为十六进制的0x00000001
禁用开始菜单固定列表
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoStartMenuPinnedList数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoStartMenuPinnedList数据为十六进制的0x00000001
禁用开始菜单的收藏夹
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoFavouritesMenu数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoFavouritesMenu数据为十六进制的0x00000001
禁用打印机的相关功能
禁用打印机
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoPrinters数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoPrinters数据为十六进制的0x00000001
禁用删除打印机
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoDeletePrinter数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoDeletePrinter数据为十六进制的0x00000001
禁用添加打印机
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoAddPrinter数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值NoAddPrinter数据为十六进制的0x00000001
仅允许白名单中的程序运行
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值RestrictRun数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建DWORD值RestrictRun数据为十六进制的0x00000001
设置白名单
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建项RestrictRunHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictRun新建字符串值,数据为允许的应用程序名,无需设置绝对路径只需要文件名即可,需要包含扩展名
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer新建项RestrictRunHKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictRun新建字符串值,数据为允许的应用程序名,无需设置绝对路径只需要文件名即可,需要包含扩展名
重启资源管理器
System
禁止修改密码
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System新建DWORD值DisableChangePassword数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System新建DWORD值DisableChangePassword数据为十六进制的0x00000001
锁定工作区
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System新建DWORD值DisableLockWorkstation数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System新建DWORD值DisableLockWorkstation数据为十六进制的0x00000001
禁用任务管理器
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System新建DWORD值DisableTaskMgr数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System新建DWORD值DisableTaskMgr数据为十六进制的0x00000001
禁用注册表编辑器
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System新建DWORD值DisableRegistryTools数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System新建DWORD值DisableRegistryTools数据为十六进制的0x00000001
禁用命令提示符
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System新建DWORD值DisableCMD数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\System新建DWORD值DisableCMD数据为十六进制的0x00000001
禁用登录页面的关机按钮
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System新建DWORD值ShutdownWithoutLogon数据为十六进制的0x00000001HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\System新建DWORD值ShutdownWithoutLogon数据为十六进制的0x00000001
ActiveDesktop
禁用桌面小组件
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop新建DWORD值NoAddingComponents数据为十六进制的0x00000001
禁止修改桌面
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop新建DWORD值NoComponents数据为十六进制的0x00000001
禁止修改桌面壁纸
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop新建字符串值NoChangingWallpaper数据为DWORD:1