Rabu, 09 September 2009

Windows XP SP2 Registry Keys for Student PCs

These are the registry keys I ZEN out to our student PC's (which is why they are a bit draconian) but so far, so good. I've tried to keep the format consistent where I can and add any notes. This isn't really a reg file, more my notes, but again, someone may find them useful!!!

;Disable Information Bar Prompt in Internet Explorer
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InformationBar]
"FirstTime"=dword:00000000

;Override Antivirus Monitoring
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusOverride"=dword:00000001

;Override Windows Firewall Monitoring
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirewallOverride"=dword:00000001

;Disable Anti-virus Notifications
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify"=dword:00000001

;Disable Firewall Notifications
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirewallDisableNotify"=dword:00000001

;Disable Windows Firewall
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\ StandardProfile]
"EnableFirewall"=dword:00000000

;Disable Windows Firewall
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\ DomainProfile]
"EnableFirewall"=dword:00000000

;Disable Security Center Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc]
"Start"=dword:00000004

;Disable Automatic Updates Notifications
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"UpdatesDisableNotify"=dword:00000001

; Enforce Classic Shell
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"ClassicShell"=dword:00000001

; Remove My Computer from the desktop
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum]
"{20D04FE0-3AEA-1069-A2D8-08002B30309D}"=dword:00000001

; Remove IE icon from desktop
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoInternetIcon"=dword:00000001

; Setup Cache for Desktop
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ Session Manager\Memory Management]
"LargeSystemCache"=dword:00000000

; Disable fast user switching
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"AllowMultipleTSSessions"=dword:00000000

; Disable .NET password balloon
[HKEY_CURRENT_USER\Software\Microsoft\MessengerService]
"PassportBalloon"=Binary Value "0a 00 00 00"

; Hide last user login name
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DontDisplayLastUserName"=dword:00000001

; Hide You have mail balloon
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\UnreadMail]
"MessageExpiryDays"=dword:00000000

; Disable popup balloons
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"EnableBalloonTips"=dword:00000001

; Lock taskbar position
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
TaskbarSizeMove=dword:00000000

; Clear the page file on Shutdown
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management]
"ClearPageFileAtShutdown"=dword:00000001

; Disable save settings on exit
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoSaveSettings"=dword:00000001

; Remove Manage option from desktop
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoManageMyComputerVerb"=dword:00000001

; Numlock setting
[HKEY_USERS\.DEFAULT\Control Panel\Keyboard]
"InitialKeyboardIndicators"=REG_SZ:2

;Popup errors on startup
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"NoPopUpsOnBoot"=dword:00000001
"Error Mode"=dword:00000002

; No Shared Documents Setting
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoSharedDocuments"=dword:00000001

;Special Folders
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders]
"Cache"=String "%*TEMPDIR%"
"Cookies"=String "f:\w2k\Cookies"
"Desktop"=String "c:\windows\desktop"
"Favorites"=String "f:\W2K\Favorites"
"My Pictures"=String "f:\W2K\My Documents\My Pictures"
"Personal"=String "f:\W2K\My Documents"

; Delete local cache profile on logout
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"DeleteRoamingCache"=dword:00000001

; No Delete Printer
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDeletePrinter"=dword:00000001

; Disable Control Panel
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoControlPanel"=dword:00000001

;Control Panel Classic View (cuz I hate the new look)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"ForceClassicControlPanel"=dword:00000001

; Lock IE Toolbars
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar]
"Locked"=dword:00000001

; Disable IE Splash screen
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions]
"NoSplash"=dword:00000001

; IE Proxy Settings
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"=String "ftp=172.19.1.120:8080;http=172.19.1.120:8080;https=172.19.1.120:8080"
"ProxyEnable"=dword:00000001
"ProxyOverride"=String "salisbury.ac.uk; salisbury-college.ac.uk"

;Web FTP View
[HKEY_CURRENT_USER\Software\Microsoft\Ftp]
"Use Web Based FTP"=String No

; Change IE Search engine
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search]
"SearchAssistant" =String "http://www.google.com/ie"

;Disable IE Password Caching
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"DisablePasswordCaching"=dword:00000001

;Disable IE Content Filter
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ratings\.Default]
"Enabled"=dword:00000000

;Restrict Web Sites from Installing Software
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains]
"*"=dword:00000004

;Disable IE Auto Updates
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"NoUpdateCheck"=dword:00000001

;Disable IE Script debugger
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Disable Script Debugger"=String "Yes"

;Mailto Groupwise
[HKEY_CLASSES_ROOT\mailto\shell\open\command]
(Default)=String "C:\Novell\GroupWise\grpwise.exe"

;Disable Media Player Auto Upgrade
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsMediaPlayer]
"DisableAutoUpdate"=DWORD "1"

;Disable recent file list in Media Player
[HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences]
"AddToMRU"=Binary "00"

;Disable Install from Media
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Installer]
"DisableMedia"=DWORD "1"

;Disable Author Mode in MMC
[HKEY_CURRENT_USER\Software\Policies\Microsoft\MMC]
"RestrictAuthorMode"=DWORD "1"

0 komentar:

Posting Komentar