home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
PC World 2008 September
/
PCWorld_2008-09_cd.bin
/
system
/
regrun
/
regruns.exe
/
regruns580.exe
/
{app}
/
Windows NT4.rbm
< prev
next >
Wrap
Text File
|
2000-02-01
|
44KB
|
846 lines
@#$Node 0 System Managment
@#$Node 1 Logon
@#$Key 2 Auto Logon (no need enter Name and Password)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\
1. Open the key.
2. Create a new String Value, and name it 'DefaultUserName'.
3 .Modify the data of 'DefaultUserName' to match the default user name.
2. Create a new String Value with name 'DefaultPassword' and enter in the password.
3. Add the new String Value, and enter AutoAdminLogon as name of value. Set it to "1".
4. Logoff and logon again automatically.
@#$Key 2 Login Shell immediatelly with Login Script
HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\winlogon\RunLogonScriptSync
RunLogonScriptSync REG_DWORD
Range: 0 (disabled) or 1 (enabled)
Default: 0
Determines whether the logon script and Program Manager are synchronized. If the value of this entry is 1,
Program Manager does not begin loading the desktop until the logon script has finished running. If the value is
0, the logon script and Program Manager can run simultaneously.
Note: This value entry also appears in HKEY_LOCAL_MACHINE\Software\Microsoft
\Windows NT\CurrentVersion\Winlogon. The HKEY_LOCAL_MACHINE value applies to all users. The
HKEY_CURRENT_USER value applies only to the current user. You can use the System Policy Editor to
change this value.
@#$Key 2 Parse Autoexec.bat
HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\winlogon\ParseAutoexec
ParseAutoexec REG_SZ
Range: 0 or 1
Default: 1
If the value is set to 1, Autoexec.bat is parsed when you log on to Windows NT. If the value is set to 0,
Autoexec.bat is not parsed. This has no effect on the parsing of Autoexec.nt or Config.nt.
Note: You can use the System Policy Editor to change this value.
@#$Key 2 Restricts access to the CDs in the CD-ROM drives
HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\winlogon\AllocateCDRoms
AllocateCDRoms REG_SZ
Range:1
Restricts access to the CDs in the CD-ROM drives only to the user currently logged on to the computer. In
this mode, CDs are allocated to the user as part of the interactive logon process, and freed for general use or
for reallocation only when that user logs off. Satisfies part of C2 security requirement that removable media
must be able to be secured. If this value entry is not added, the contents of the CDs in the drives will be
available to all processes on the system.
@#$Key 2 Restricts access to the disks in the floppy disk drives
HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\winlogon\AllocateFloppies
AllocateFloppies REG_SZ
Range:1
Restricts access to the disks in the floppy disk drives only to the user currently logged on to the computer. In
this mode, floppy disks are allocated to the user as part of the interactive logon process, and freed for general
use or for reallocation only when that user logs off. Satisfies part of C2 security requirement that removable
media must be able to be secured. If this value entry is not added, the contents of the floppy disks in the
drives will be available to all processes on the system.
@#$Key 2 Auto restart shell if it stops
HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\winlogon\AutoRestartShell
AutoRestartShell REG_DWORD
Range: 0 or 1
Default: 1 (enabled)
Specifies whether the WindowsáNT user interface (usually Explorer.exe) is restarted automatically if it stops
unexpectedly. If this value is set to 1, and the Windows NT user interface, or one of the third party
components of the user interface fails, the interface will be restarted automatically. If this value is set to 0, the
user must restart the interface by logging off and logging on again.
@#$Key 2 Don't display last user name when logon
HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\winlogon\DontDisplayLastUserName
DontDisplayLastUserName REG_SZ
Range: 0 or 1
Default: 0 (false)
By default, Windows NT displays the name of the last person to log on in the Username space of the Logon
Information dialog box. If you add this value entry and set it to 1, the Username space is always blank when
the Logon Information dialog box appears.
Note: You can use the System Policy Editor to change this value.
@#$Key 2 Set a message when the user logon
HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\winlogon\LegalNoticeCaption
LegalNoticeCaption REG_SZ
Range: String
Default: (none)
Specifies a caption for a message to appear when the user presses CTRL+ALT+DEL during logon. Add this
value entry if you want to add a warning to be displayed when a user attempts to log on to a Windows NT
system. The user cannot proceed with logging on without acknowledging this message.
To specify text for the message, you must also specify a value for LegalNoticeText.
Note: You can use the System Policy Editor to change this value.
LegalNoticeText REG_SZ
Range: String
Default: (none)
Specifies the message to appear when the user presses CTRL+ALT+DEL during logon. Add this value entry if
you want to add a warning to be displayed when a user attempts to log on to a Windows NT system. The user
cannot proceed with logging on without acknowledging this message.
To include a caption for the logon notice, you must also specify a value for
LegalNoticeCaption.
Note: You can use the System Policy Editor to change this value.
@#$Key 2 Logon Prompt
HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\winlogon\LogonPrompt
LegalNoticeText REG_SZ
Range: String
Default: (none)
Specifies the message to appear when the user presses CTRL+ALT+DEL during logon. Add this value entry if
you want to add a warning to be displayed when a user attempts to log on to a Windows NT system. The user
cannot proceed with logging on without acknowledging this message.
To include a caption for the logon notice, you must also specify a value for
LegalNoticeCaption.
Note: You can use the System Policy Editor to change this value.
@#$Key 2 Specifies own shell program.
HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\winlogon\Shell
Shell REG_SZ
Range: Executable names
Default: Explorer.exe
Specifies executables that are run by USERINIT and that are expected to be in the user's shell program. If for
some reason Winlogon cannot start the entries listed in Userinit, then Winlogon will execute the entries in Shell
directly.
@#$Node 1 Shutdown
@#$Key 2 Powerdown After Shutdown
HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\winlogon\PowerdownAfterShutdown
PowerdownAfterShutdown REG_SZ
Range: 0 or 1
Default: 0 on Windows NT Server, 1 on Windows NT Workstation
Determines whether the Shutdown and Power Off option appears in the Shutdown Computer dialog box. (This
dialog box appears when you press CTRL+ALT+DELETE and then click the Shut Down button.) The option
appears only if the value of this entry is 1. See also ShutdownWithoutLogon and NoClose.
Note: The Power Off option is not supported on all computers.
You need to replace hall.dll!
@#$Key 2 Shutdown Without Logon
HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\winlogon\ShutdownWithoutLogon
ShutdownWithoutLogon REG_SZ
Range: 0 or 1
Default: 0 on Windows NT Server, 1 on Windows NT Workstation
Specifies whether the Shut Down button in the Logon Information dialog box is enabled. If the value is set to
1, users can click the Shut Down button to stop the operating system without logging on or turning off power
to the computer. If it is set to 0, the Shut Down button is disabled. See also NoClose and
PowerdownAfterShutdown.
Note: You can use the System Policy Editor to change this value.
@#$Key 2 Specifies the default option for the Logoff dialog box
HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\winlogon\LogoffSetting
LogoffSetting REG_DWORD
Range: 0, 1, 2, or 3
Default: 0
Specifies the default option for the Logoff dialog box.
Valid values are:
0 = Logoff
1 = Shutdown
2 = Shutdown and Restart
3 = Shutdown and Power Off (when supported).
@#$Key 2 Set the default value for the Shutdown Computer dialog box
HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\winlogon\ShutdownSetting
ShutdownSetting REG_DWORD
Range: 0, 1, 2, or 3
Default: 0
Specifies the default value for the Shutdown Computer dialog box. This dialog box appears when you press
CTRL+ALT+DELETE and then click the Shut Down button.
Valid values are:
0 = Logoff
1 = Shutdown
2 = Shutdown and Restart
3 = Shutdown and Power Off (when supported).
@#$Key 2 Clear PageFile At Shutdown
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\ClearPageFileAtShutdown
ClearPageFileAtShutdown REG_DWORD
Range:0 or 1
Default: 0
Specifies whether inactive pages in the paging file are filled with zeros when the system stops. If this value is
set to 1, as the system stops, WindowsáNT fills all inactive pages in the paging file with zeros so that they
cannot be read by another process. It cannot fill all pages with zeros because some are being used by the
system or other remaining active processes. This is a WindowsáNT security feature.
@#$Node 1 Control Panel
@#$Key 2 Accessibility
HKEY_CURRENT_USER\Control Panel\Accessibility
@#$Key 2 Date/Time
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\TimeZoneInformation
@#$Key 2 Devices
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES
@#$Key 2 Display
HKEY_CURRENT_USER\Control Panel\Desktop
@#$Key 2 Fonts
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts
@#$Key 2 Keyboard
HKEY_CURRENT_USER\Control Panel\Desktop
@#$Key 2 Modems
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Unimodem
@#$Key 2 Mouse
HKEY_CURRENT_USER\Control Panel\Mouse
@#$Key 2 Multimedia
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\MULTIMEDIA
@#$Key 2 Ports
HKEY_LOCAL_MACHINE\HARDWARE\RESOURCEMAP\
@#$Key 2 Printers
HKEY_CURRENT_USER\Printers\
@#$Key 2 International Settings
HKEY_CURRENT_USER\Control Panel\International
@#$Key 2 SCSI Adapters
HKEY_LOCAL_MACHINE\HARDWARE\RESOURCEMAP\ScsiAdapter\
@#$Key 2 Services
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\
@#$Key 2 Sounds
HKEY_CURRENT_USER\APPEVENTS\SCHEMES\APPS\.DEFAULT
@#$Key 2 Tape Devices
HKEY_LOCAL_MACHINE\HARDWARE\RESOURCEMAP\OtherDrivers\TapeDevices\
@#$Key 2 UPS
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UPS\
@#$Node 1 Automatically Running Programs Everytime Windows Starts
@#$Key 2 Auto Run when Windows NT starts in early state
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager
Add the values with desired names and values.
All programs start in early state of Windows NT loading.
Value examples:
autocheck autochk * /r\DosDevice\<drive letter>: - check all drivers
autocheck autochk * - auto check
autocheck autochk /k:x * - exclude drive x from checks
Only for NT 4.0 with SP2 or higher
chkntfs /x <drive letter>:
e.g. chkntfs /x f: would exclude the check of drive f:
To set the system back to checking all drives just type
chkntfs /d
@#$Key 2 Services Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
The programs started from this key are activated before user login.
Examples:
SystemTray (systray)
Network Monitor Agent (nmagent.exe) etc.
Note: You may add manually only programs that specially designed to run as service.
@#$Key 2 All Users Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
For each program you wish to start automatically create a new string value using a descriptive name, and set
the value of the string to the program executable. e.g.
To automatically start Notepad, add a new entry of "Notepad"="c:\windows\notepad.exe"
Note: Remember to include the full path, if the directory is not included in your default search path.
@#$Key 2 Run Programs only for Current User
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
If you activated the multiuser environment you may add auto start programs for each user/
To automatically start Notepad, add a new entry of "Notepad"="c:\windows\notepad.exe"
Note: Remember to include the full path, if the directory is not included in your default search path.
@#$Key 2 Run Services Once
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce
The Windows installation system uses this key to setup software.
All programs that started from this key loaded only one time and before programs from
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
@#$Key 2 Run Once
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
If you want a program to run only once and then never run again, perform the above but add the values under
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce. Once the program
has run it gets deleted from the RunOnce key.
@#$Key 2 Specifies executables to be run by Winlogon in the system context
HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\winlogon\System
System REG_SZ
Range: Executable names
Default: lsass.exe
Specifies executables to be run by Winlogon in the system context. These are activated during system
initialization.
@#$Key 2 Set executables to be runned when a user logs on
HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\winlogon\Userinit
Userinit REG_SZ
Range: Executable names
Default: USERINIT,NDDEAGNT.EXE
Specifies executables to be run by Winlogon when a user logs on. These executables are run in the user
context. The first entry (USERINIT) is responsible for executing the shell program. NDDEAGNT.EXE is needed
to run NetDDE.
@#$Key 2 Rename Files on reboot
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\FileRenameOperations
Entries for the FileRenameOperation support the MoveFileEx delayed-rename
and delayed-delete capabilities. Entries are stored under this Registry
path:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\FileRenameOperations
These entries should be maintained only by the system.
@#$Key 1 Creating Program Aliases in Windows
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths
A hidden feature in the Windows registry allows you to create program aliases. Allowing you to create, for
example, an alias called EDIT.EXE that when executed actually runs another program, e.g.
NOTEPAD.EXE
1. Using Regedit, open the key found below. There should be a number of sub-keys already visible below the
key.
2. Create a new sub-key, and rename it to the name of the alias you wish to create (e.g. EDIT.EXE).
3. Modify the (default) value to equal the fully qualified path and filename of the application you want to be
launched when you execute the alias (e.g. 'c:\windows\notepad.exe').
4. Exit Regedit, and to test use the Start | Run command type in the name of your alias (i.e. EDIT.EXE)
and the aliased program should be launched, in this case Notepad.
@#$Key 1 Uninstall Applications
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
All Windows 9x or NT compatible programs must include an Uninstall program, sometimes though the program
may get removed but entry in Add/Remove programs doesn't, from this key you can remove those orphaned
entries.
To see which application each sub-key represents, open it and there should be at least two values
'DisplayName' and 'UninstallString'. 'DisplayName' is the name used in the Add/Remove programs list, and
'UninstallString' is the program used to uninstall the application.
To remove a program from the list you can simple delete the sub-key representing that program.
@#$Key 1 Registry Size
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\RegistrySizeLimit
RegistrySizeLimit REG_DWORD
Range: 0 -or- Megabytes: 4 - 0xFFFFFFFF (Actual range: 4MB ù 80% of paged pool)
Default: 25% of the size of the paged pool
Establishes the maximum amount of paged pool space (and disk paging file space) that can be consumed by
Registry data from all applications. (It does not allocate space in the paged pool, nor does it assure that the
space will be available if needed.)
If the value of this entry is 0, the system adjusts the RegistrySizeLimit dynamically based on the size of the
paged pool.
If both RegistrySizeLimit and PagedPoolSize are set to 0, PagedPoolSize is set approximately equal to the
amount of physical random access memory on the computer, and RegistrySizeLimit is set to approximately 25%
of PagedPoolSize.
If the value of this entry is 0xFFFFFFFF, the system sets RegistrySizeLimit to 80% of the size of the paged pool.
This value entry is designed to prevent the Registry from consuming space needed by processes. The space
controlled by RegistrySizeLimit includes the hive space, as well as some of the RegistryÆs run-time structures.
Other Registry run-time structures are protected by their own size limits or by other means.
Note: To ensure that a user can always start the system and edit the Registry, the Registry is not subject to
the maximum set in RegistrySizeLimit until after the first successful loading of a hive (that is, the loading of a
user profile).
@#$Key 1 Size of System Memory Cache
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\LargeSystemCache
Value: LargeSystemCache REG_DWORD
Range: 0, 1, 2, 3
Default: 0
On servers, this value determines whether the file system cache or the working sets of processes are given
priority for space in memory. To change this value, double-click Network in Control Panel, click the Services
tab, then double-click Server. To favor the cache, click Maximize Throughput for File Sharing. To favor
working sets, click Maximize Throughput for Network Applications.
Values:
0 Minimize memory used.
1 Balance (cache and working sets have equal priority).
2 Maximize throughput for file sharing (the cache has a higher priority).
3 Maximize throughput for network applications (the working sets have higher priority).
@#$Key 1 Changing the Location of Windows Installation Files
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\SETUP\SOURCEPATH\
if you need to change the location of Windows distributive set he value "SourcePath"
@#$Key 1 Enable or Disable the CD-ROM Autorun
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CDRom
This will stop applications from auto launching wehn you insert a CD-ROM disc.
Set the Value "Autorun" to the "0" (disable) or "1"(enable).
@#$Key 1 Disable PC Speaker sound on Errors
HKEY_CURRENT_USER\Control Panel\Sound
if you can't find a way to off your PC Speaker, you can a chance to do it:
1. Open a Key.
2. Locate the value 'Beep' if it doesn't already exist create it, by selecting Edit | New | String Value and naming
the new value 'Beep'.
3. Modify the value of 'Beep' to either 'Yes' beeping enabled, or 'No' beeping disabled.
@#$Key 1 Allows you to specify a different task manager
HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\winlogon\Taskman
Taskman REG_SZ
Range: Executable name
Default: (none)
Allows you to specify a different task manager.
@#$Key 1 Clear the Run history
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU
Select the value to remove and press Del.
@#$Key 1 The order in which the service is loaded
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\GroupOrderList
For a service listed under CurrentControlSet\Services, the value of the Group entry plus any Tag entry
determines the order in which the service is loaded. But not all services have a Tag entry, and not all groups
have an entry in the GroupOrderList subkey. The ServiceGroupOrder subkey specifies the order for loading
groups.
The entries in the key are all of type REG_BINARY. These are the default entries that define the order within
groups:
Base
Filter
Keyboard Class
Keyboard Port
Ndis
Pointer Class
Pointer Port
Primary Disk
SCSI Miniport
Video
@#$Node 0 Windows Enhancement
@#$Key 1 Automatically View Thumbnails of Bitmap Files
HKEY_CLASSES_ROOT\Paint.Picture\DefaultIcon
This setting will make Explorer show us a "thumbnail" version of any bitmap files that happens to be in the
current folder, rather than the generic bitmap icon ordinarily used.
Open a registry key:
HKEY_CLASSES_ROOT\.bmp
and look to the Default Value (located on the right pane).
If you use a standard assosiations you'll see "Paint.Picture" (or any name, for example "BMP_Pict").
Then go to the registry key HKEY_CLASSES_ROOT\Paint.Picture\DefaultIcon (or to
HKEY_CLASSES_ROOT\BMP_pict\DefaultIcon) and change the Default Value to " %1".
You need logoff and logon to see changes!
@#$Key 1 Full Window Drag Option
HKEY_CURRENT_USER\Control Panel\Desktop\DragFullWindows
This setting enables the Full Windows Drag function, which allow you to view the contents of window while
dragging it across the screen, instead of just the standard outline.
1. Go to the Key.
2. Set the value of "DragFullWindows" to "1" to enable, if the value doesn't exit create it.
3. Exit Regedit and reboot.
@#$Key 1 Can I enable the mouse snap-to?
HKEY_CURRENT_USER\Control Panel\Mouse
1. If the value SnapToDefaultButton not exists, add a new string value "SnapToDefaultButton" (watch the
case).
2. Set this value to 1.
3. Logoff and login again
@#$Node 1 Explorer
@#$Key 2 How can I open a command prompt at my current directory in Explorer?
HKEY_CLASSES_ROOT\DIRECTORY\SHELL\
1. Add a new key and enter a name of DOSHere (or anything else)
2. Under the new key add another key named "command" (only in lowercase).
3. Under the key (DOSHere) double click on (Default) and enter a name that will be displayed when you right
click on the directory, e.g. "&DOS Command Prompt Here"
4. Move to the command key and again double click on (Default) and enter
c:\cmd.exe /k cd "%1"
5. That's all!
If you want to add this feature to files:
go to the HKEY_CLASSES_ROOT\*\shell\ and repeat steps 1-5.
@#$Key 2 Adding Explore From Here to Every Folder
HKEY_CLASSES_ROOT\*\shell\
When you right click on any file this will give you a popup menu and an option to "Explore From Here", which
will open up and explorer window of this file.
1. Go to the HKEY_CLASSES_ROOT\*\shell\rootexplore key, if it doesn't already exist then create it.
2. Edit the "(Default)" setting to read "E&xplore From Here".
3. Under rootexplore create a new key called "command", and edit the "(Default)" setting to read
"explorer.exe /e,/idlist,%i".
You not need to reboot!
Open explorer and go!
If you want to do it for folders:
go to the HKEY_CLASSES_ROOT\DIRECTORY\SHELL\ and repeat procedure.
@#$Key 2 When I double-click on My Computer, I want it to launch Explorer
HKEY_CLASSES_ROOT\CLSID\20D04FE0-3AEA-1069-A2D8-08002B30309D\Shell\
1. Open HKEY_CLASSES_ROOT\CLSID\20D04FE0-3AEA-1069-A2D8-08002B30309D\Shell.
2. Add a new key called Open.
3. In the Open key, add a new key called Command.
4. Add a value to the Command key as a regular string value, with no name.
5. As the string, enter Explorer.exe.
The next time you double-click My Computer, it will launch Explorer, and not My Computer. If you want to make
the system use
My Computer again, take out the two values listed.
@#$Key 2 Prevent Open Explorer from restarting when you restart
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\
If you wish to prevent certain open (or minimized apps) such as Explorer.exe or Control Panel from
automatically opening when you restart, go to the key. If the right hand pane doesn't have an entry for
NoSaveSettings that is type REG_BINARY, add it. Now, change value to hexadecimal 1 (right hand pane will
look like 01 00 00 00) Close all applications (or you will get a scary message) and reboot.
@#$Key 2 Is there a way to automatically refresh the contents of my folders?
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Update\UpdateMode
1. Go to the Key.
2. Edit the UpdateMode value, and change it to 0 in Windows NT or 00 in
Windows 95. The next time you make changes in Explorer, they will be immediate.
@#$Node 1 Icons and Shortcuts
@#$Key 2 Displaying Hi-Color Icons
HKEY_CURRENT_USER\Control Panel\Desktop\WindowMetrics\Shell Icon BPP
The key let's you display icons in high-color mode, without having to install the Plus Pack option. Note: You
need a graphics card capable of displaying above 256 colors for this to be useful.
Value:
"Shell Icon BPP"= "16"
@#$Key 2 Removing Icons from your Desktop
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace
This key contains a number of subkeys which hold information about the namespace extensions of icons on
your desktop. Through this key you can control which icons are visible on the desktop, including the My
Computer, Inbox, MSN and Internet icons.
The name of each key is a globally unique identifier (GUID), and the default value of each key is a
human-readable name for the namespace extension, although this is not the same name as the icon on the
desktop.
To delete an icon from your desktop:
1. Step through the subkeys until you find the key representing the icon you want to remove from your
desktop, delete the key and the icon should disappear.
@#$Key 2 Desktop Icon Redraw Frequency
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
If you desktop icons are redrawing too frequently, change this setting.
Try editing:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer
Add Value of "Max Cached Icons" with type REG_SZ. Set it to "8000".
@#$Key 2 Change the icon for My Comuter
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\DefaultIcon
Change the Default value of key to the icon required, e.g. "c:\myicons\newicon.ico,0".
The 0 shows it is icon 1 in the file.
@#$Key 2 How to change the Network Neighborhood icon
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{208D2C60-3AEA-1069-A2D7-08002B30309D}\DefaultIcon
Change the Default value of key to the icon required, e.g. "c:\myicons\newicon.ico,0".
The 0 shows it is icon 1 in the file.
@#$Key 2 How to change the Recycle Bin icons
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon
Change the Default value of key to the icon required, e.g. "c:\myicons\newicon.ico,0".
The 0 shows it is icon 1 in the file.
@#$Key 2 How can I recreate the Recycle bin icon?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace
1. Enter a new key "{645FF040-5081-101B-9F08-00AA002F954E}"
2. Change the Default value to "Recycle Bin".
@#$Key 2 How to delete or rename Inbox icon
HKEY_CLASSES_ROOT\CLSID\{00020D75-0000-0000-C000-000000000046}\ShellFolder
Change the Attributes value from 72000000 to:
50000000 (activate rename command)
60000000 (activate delete command)
@#$Key 2 How can I get rid of the arrow over the shortcuts?
HKEY_CLASSES_ROOT\lnkfile
Select IsShortcut value and delete it
Also, do it in HKEY_CLASSES_ROOT\piffile.
@#$Node 1 Wallpaper
@#$Key 2 How to display a wallpaper other than the center of the screen?
HKEY_CURRENT_USER\Control Panel\Desktop\
1. Open a key.
2 Add a Value "WallpaperOriginX" with the number of picels for left offset.
3. Next select Add a Value "WallpaperOriginY" with the number of picels for top offset.
3. Logoff and on to get music!
@#$Key 2 Change Wallpaper for current user
HKEY_CURRENT_USER\Control Panel\desktop
This key lets you change the wallpaper that appears prior to anyone logging in to the system.
1. Using Regedit, open the key.
2. Modify Value Name Wallpaper' to equal the BMP you want to use as the background (e.g.
c:\windows\mylogo.bmp').
3. Reboot your PC for the changes to take affect.
Note: In the same key, you should also be aware of, and possibly set: "Pattern"="(None)"
"TileWallpaper"="0"
@#$Key 2 Change the Wallpaper Shown Prior to Logon
HKEY_USERS\.DEFAULT\Control Panel\Desktop
This key lets you change the wallpaper that appears prior to anyone logging in to the system.
1. Using Regedit, open the key.
2. Modify Value Name Wallpaper' to equal the BMP you want to use as the background (e.g.
c:\windows\mylogo.bmp').
3. Reboot your PC for the changes to take affect.
Note: In the same key, you should also be aware of, and possibly set: "Pattern"="(None)"
"TileWallpaper"="0"
@#$Node 1 Creating a Shortcut to the System Folders
@#$Key 2 What is CLSID?
HKEY_CLASSES_ROOT\CLSID
Everything in Windows is dealt with as a number instead of as a name.
People, however, tend to deal with things by name.
CLSID is where all the numbers are listed for icons, applications, directories, file types, and more.
Each one must be unique, and is assigned to the manufacturer by Microsoft.
The manufacturer then puts the CLSID into the installation program files so it can update the Registry upon
installation.
For example:
Create a new folder on your desktop and name it "Control
Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}" It should look like the normal Control Panel icon (not a
shortcut). You can now move the icon anywhere on your desktop or start menu.
The same can be achieved for others by substituting these values:
For Dial Up Networking
Dial-Up Networking.{992CFFA0-F557-101A-88EC-00DD010CCC48}
For Printers
Printers.{2227A280-3AEA-1069-A2DE-08002B30309D}
For Control Panel
Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}
My Computer
My Computer.{20D04FE0-3AEA-1069-A2D8-08002B30309D}
For Network Neighborhood
Network Neighborhood.{208D2C60-3AEA-1069-A2D7-08002B30309D}
For the Inbox
InBox.{00020D75-0000-0000-C000-000000000046}
For the Recycle Bin
Recycle Bin.{645FF040-5081-101B-9F08-00AA002F954E}
For more check out the HKEY_CLASSES_ROOT\CLSID key.
@#$Key 2 Removing Item Types from the New Menu
HKEY_CLASSES_ROOT\.txt\ShellNew
When you right-click on your desktop or other selected applications there is a New sub-menu which contains
a list a default templates. This list can be modified to include only the templates you want.
Each template exists in the [HKEY_CLASSES_ROOT] hive associated with a file extension. Whether it is
visible or not in the New menu is controlled by whether the related entry has a sub-key called 'ShellNew'.
For example on the New menu there is usually an entry for "Text Document". This is visible because of the
key: [HKEY_CLASSES_ROOT\.txt\ShellNew] If you were to rename the key so it no longer had a sub-key
called 'ShellNew' by changing it to [HKEY_CLASSES_ROOT\.txt\ShellNewOld] it would disappear from the
New menu.
1. Open Regedit, and using the Find function (Ctrl+F) search for any values of 'ShellNew'.
2. Several should be found under the [HKEY_CLASSES_ROOT] hive, if you do not want them to be displayed
rename 'ShellNew' to 'ShellNewOld'.
Note: Changes should take place immediately without needing to reboot.
@#$Node 1 Menu
@#$Key 2 How to set the delay for cascading menus?
HKEY_CURRENT_USER\Control Panel\Desktop\MenuShowDelay
You may set a delay for open menu.
Change the Value "MenuShowDelay".
@#$Key 2 Easily Use Notepad to Open a File
HKEY_CLASSES_ROOT\*\shell
Enabling this setting will allow you to use Notepad to open a file by simply right clicking on the icon. Also the
Notepad will be used to open the files by default if no association already exists.
1. Go to the key "HKEY_CLASSES_ROOT\*\shell", if it doesn't exist create it.
2. Under shell create a new key called open, and edit the string "(Default)" to read "Open With Notepad".
3. Under open create a new key called command, and edit the string "(Default)" to read "notepad.exe %1".
Now when you right click on a file you should see "Open with Notepad" as one of the options.
@#$Key 2 Add the QuickView Option to All Files
HKEY_CLASSES_ROOT\*\QuickView
If you ever wanted to add QuickView to the context menu of all file types, it may be a tedious task doing so
using Windows Explorer's Options - File Type window. This tip shows how to do it in a couple of easy steps.
1. Open the registry and create a sub-key called QuickView in HKEY_CLASSES_ROOT\*. In the (Default) the
the sub-key, type an asterisk ->*.
2. Close the registry and open an Explorer window. Right-click on any file and the QuickView command will
appear.
Note: You need to have QuickView installed on your PC. If not, Go to Control Panel, Add/Remove Programs
and add it from the Accessories group in the Windows Setup tab.
@#$Key 2 How to add an item to the context menu?
HKEY_CLASSES_ROOT\Unknown
1. Open a key
2. Click on the Shell subkey and right click on it.
3. Add a new key with the name you want to be displayed, e.g. the name of the application.
4..Right click on the new subkey and add newt key "Command".
5. Click on the newly created Command and double click on "(Default)"
6 .Enter the path and name of the executable with %1, i.e. c:\program files\myedit\myedit.exe %1
@#$Node 0 Internet
@#$Key 1 Change the default Internet Browser
HKEY_CLASSES_ROOT\http\shell\open\command
Change the Default value to
c:\ie5\iexplore.exe -nohome for Internet Explorer or
c:\Netscape\netscape.exe -h "%1" for Netscape
@#$Key 1 Use DDE for Internet browser
HKEY_CLASSES_ROOT\http\shell\open\ddeexec\Application
Change the Default value to "NSShell" for Netscape or "IExplore" for Internet Explorer.
Also, you may set it for "https" protocol.
@#$Key 1 Add your command to the Internet Explorer context menu
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt
1. Under the main key you need create a subkey with any name.
2. Edit Default value of the new key and type in it the full path your file.
For example: "c\windows\greatissoft.htm".
3. Add a new binary value Context and set it to the 1.
OK!
@#$Key 1 How can I get back the confirmation box about execution EXE files in IE?
HKEY_CLASSES_ROOT\Exefile
In Internet Explorer, when I download things from the Internet, it asks whether I should save the .EXE file to
disk or if it should just run it. There is also a selection for it not to ask me again. I told it to open the file, and
never to ask me again, but I have changed my mind. How do I get the dialog box back? The setting is in
HKEY_CLASSES_ROOT\Exefile for either Windows NT or Windows 95.
Change the EditFlags value from d8 07 01 00 (don't ask any more) to d8 07 00 00 (ask every time).
@#$Key 1 How to change a dial-up user name?
HKEY_CURRENT_USER\RemoteAccess\Profile\
1. Go to the Key.
2. Open a subkey with a your dial-up name.
3. Change a value "User" to desired name.
4. Logoff and logoon again.
@#$Key 1 Increase perfomance of Internet conncetion by change MTU value
HKLM\System\CurrentControlSet\Services\Class\NetTrans\
By default, Windows NT attempts to discover the maximum transmission unit (MTU) of all connections
beyond your local subnet. Limiting TCP segments to this size reduces fragmentation at the routers along
your connection path, increasing your throughput. You may have inadvertantly disabled this feature while
tuning your network.
Tip!
You can change this value for network adaper or dial-up adapter!
1. Go to the Key. There are many subkeys under it (0000,0001,0002...).
Find a key with the value "DriveDesc"="TCP/IP".
2. If a DWORD value MaxMTU not exists, create it. Set it to 576.
MaxMTU specifies the maximum size datagram IP that can pass to a media driver. Subnetwork Access
Protocol (SNAP) and source routing headers (if used on the media) are not included in this value. For example,
on an Ethernet network, MaxMTU will default to 1500. The actual value used will be the minimum of the value
specified with this parameter and the size reported by the media driver. The default is the size reported by the
media driver; an Ethernet network defaults to 1500 bytes and a Point-to-Point (PPP) Protocol dial-up
connection defaults to 576 bytes.
@#$Node 0 Security
@#$Key 1 Locking down that desktop
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Desktop restrictions can be implemented by editing the following Explorer values in the registry: (all values
default to 0)
NoCommonGroups REG_DWORD
set it to 1 so that common program groups do not appear on the Start menu.
NoDesktop REG_DWORD
set it to 1 to hide all desktop icons.
NoDrives REG_DWORD
The low order (right most) bit is drive A: while the 26th bit is Drive Z:
To hide a drive, turn on its' bit. These drives will still appear in File Manager. To remove File Manager,
delete winfile.exe.
If your not happy working in Hex, add these decimal number to hide the drive(s):
A: 1, B: 2, C: 4, D: 8, E: 16, F: 32, G: 64, H: 128, I: 256, J: 512, K: 1024, L: 2048, M: 4096, N: 8192, O:
16384, P: 32768, Q: 65536, R: 131072, S: 262144, T: 524288, U: 1048576, V: 2097152, W: 4194304, X:
8388608, Y: 16777216, Z: 33554432, ALL: 67108863
NoFileMenu REG_DWORD
If set to 1, the File menu in Explorer is removed.
NoFind REG_DWORD
set it to 1 to remove the Find command from the Start Menu.
NoNetConnectDisconnect REG_DWORD
A value of 1 removes the "Map Network Drive" and Disconnect Network Drive menu and right click
options.
NoNetHood REG_DWORD
Set it to 1 to remove the Network Neighborhood icon and prevent network access from explorer (it will
still work from a command prompt).
NoRun REG_DWORD
If set to 1, the Run command is removed from the Start menu.
NoSetFolders REG_DWORD
Set it to 1 to hide Control Panel and Printers and My Computer in Explorer and on the Start Menu.
NoSetTaskbar REG_DWORD
If set to 1, only Drag and Drop can be used to alter the Start Menu and Desktop. The Taskbar does not
appear on the Start Menu.
NoTrayContextMenu REG_DWORD
If set to 1, menus do not display upon right click of the taskbar, start button, clock, or taskbar application
icons. The entry is only available for NT 4.0 with SP 2 or greater.
NoViewContextMenu REG_DWORD
If set to 1, menus do not display upon right click of the desktop or Explorer's results pane. The entry is
only available for NT 4.0 with SP 2 or greater.
RestrictRun REG_DWORD
Set it to 1 and only programs that you define at:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictRun
can be run on the Workstation.
NoClose REG_DWORD
Set it to 1 to remove the ShutDown button from the Start Menu. This does not disable shutdown from
CTRL+ALT+DEL. To totally disable a users ability to shutdown, remove the "advanced" right to
"Shutdown the System" from Policies/User Rights of User Manager for Domains.
EnforceShellExtensionSecurity - A value of 1 causes Windows NT to only load the shell extensions
listed in the Approved subkey
(HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell
Extensions\Approved).
NoDriveAutoRun - A bitmapped value (see NoDrives from Tip 050) that determines wether the autorun
feature is disabled on that drive. If the drives bit is set to 1, autorun (see tip 007) is disabled.
NoSaveSettings - A value of 1 prevent changes to the positions of icons and open windows, and the size
and position of the taskbar from being saved.
NoStartBanner - A value of 1 hides the arrow and Click here to begin caption that appear on the
taskbar when you start Windows NT.
NoStartMenuSubFolders - Hides the folders at the top section of the Start menu when the value is set to
1. Items appear, but folders are hidden.
To really lock down the desktop, replace the Explorer or Progman shell with your own launcher. Edit
HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon\Shell and
replace the current .exe with YourOwnLauncher.exe.
@#$Key 1 Restricting system features
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM
To restrict the use of system features, edit: (the System sub-key must be added)
All of the following entries are type REG_DWORD and have a default of 0. If these entries are set to 1,
the restriction is enabled.
DisableTaskMgr - Prevents TaskMgr.exe from running. This entry is only supported from NT 4.0 with
SP2 or greater.
NoDispAppearancePage - Removes the ability to change the colors or color scheme on the desktop from
Control Panel.
NoDispBackgroundPage - Removes the ability to change wallpaper and backround pattern from Control
Panel.
NoDispCPL - Disables the Display option in Control Panel
NoDispScrSavPage - The Screen Saver tab does not appear in the Display Properties page of Control
Panel.
NoDispSettingsPage - The Settings and Plus tab do not appear in the Display Properties page of Control
Panel.
DisableLockWorkstation - To disable the Lock Workstation button, Add Value
DisableLockWorkstation
0, the default, leaves it enabled.
1 disables the Lock Workstation button
DisableChangePassword - To disable the Change Password button, Add Value
DisableChangePassword
0, the default, leaves it enabled.
1 disables the Change Password button
@#$Key 1 A few more restrictions
HKEY_CURRENT_USER\Software\Microsoft\Windows
A few more restrictions are located at HKEY_CURRENT_USER\Software\Microsoft\Windows:
NoWorkgroupContents - If the value of this entry is 1, Network Neighborhood does not display
computers in the local workgroup or domain.
NoEntireNetwork - A value of 1 restricts Network Neighborhood from displaying or accessing
computers outside the local workgroup or domain. The user can still use the Start/Run, Map/Connect
Network Drive, and the Command Prompt.
@#$Key 1 Hide the computer from Network Browsers
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\LANMANSERVER\PARAMETERS
Set the value "Hidden" from 0 to 1.
You should then reboot.
You can also type "net config server /hidden:yes"
@#$Key 1 Set access to own registry from other users
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\SECUREPIPESERVERS
Under the main key add new key "winreg".
You need reboot.
To add users to allowed list add the keys:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg\AllowedPaths\M
achine.
Create the values with machine names that can allowed access to your registry.
@#$Node 0 My bookmarks
@#$Key 1 RegRun II
HKEY_CURRENT_USER\Software\Greatis\Regrun2
@#$Key 1 Audio CD Player
HKEY_CLASSES_ROOT\AudioCD\shell\play\command
@#$Node 0 WWW Links
@#$Key 1 NT FAQ
http://www.ntfaq.com
You have a question?
Go to NTFAQ!
@#$Key 1 NT Registry Hacks
http://www.jsiinc.com
Many Tips and Hacks!
@#$Key 1 SysInternals
http://www.sysinternals.com
Utilities, source and articles
@#$Key 1 RegEdit.com
http://regedit.com
Tips, tricks and forums.
@#$Key 1 NT BugTraq
http://www.ntbugtraq.com/
@#$Key 1 Beverlry Hills Software
http://www.bhs.com/
@#$Key 1 Windows NT Magazine
http://www.winntmag.com/
@#$Key 1 NT Security
http://www.ntsecurity.com/
@#$Key 1 Miningco
http://windowsnt.miningco.com
Articles, programs etc.