Windows Registry Editor Version 5.00
;-----------------------
; Explorer GUI lockdown registry edits
;
; check http://unattended.msfn.org/unattended.xp/view/web/17/
; for syntax
;-----------------------
; USE: These registry entries are meant for to lock down a "guest" user into "kiosk" mode.
;
; BIG SCARY WARNING: IF YOU RUN INCORRECTLY, REFORMATTING AND STARTING OVER IS THE ONLY OPTION!!!
;
; ____________
; --)-----------|____________|
; ,' ,'
; -)------======== ,' ____ ,'
; `. `. ,' ,'__ ,'
; `. `. ,' ,'
; `. `._,'_______,'__
; [._ _| ^-- || |
; ____,...-----|__________ll_|\
; ,.,..-------""""" "----' ||
; .-"" |=========================== ______________ |
; "-...l_______________________ | |' || |_]
; [`-.|__________ll_| Incom's T-65B X-wing
; ,' ,' `. `. Space Superiority
; ,' ,' `. ____`. Starfighter (2)
; -)---------======== `. `.____`.
; `. `.
; `.________`.
; --)-------------|___________|
;
;HKEY_LOCAL_MACHINE (HKLM) are the local machine keys. The changes you make
; in this hive affect all users. Therefore, disabling a service makes it
; unavailable for all users.
;START of X's Registry entries
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoRun"=dword:00000001
"NoSMHelp"=dword:00000001
"NoFind"=dword:00000001
"LockTaskbar"=dword:00000001
"NoViewContextMenu"=dword:00000001
"NoNetHood"=dword:00000001
"NoCommonGroups"=dword:00000001
"NoRecentDocsMenu"=dword:00000001
"NoControlPanel"=dword:00000001
"NoSetTaskbar"=dword:00000001
"NoChangeStartMenu"=dword:00000001
"NoNetworkConnections"=dword:00000001
"NoTrayContextMenu"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"AutoAdminLogon"="1"
"DefaultUserName"="test"
"DefaultPassword"="test"
"DefaultDomainName"="%COMPUTER_NAME%
"ForceAutoLogon"="1"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableChangePassword"=dword:00000001
"DisableLockWorkstation"=dword:00000001
"DisableTaskMgr"=dword:00000001
;END of M's Registry entries
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"TaskbarSizeMove"=dword:00000000
;Disable Automatic Restart in the event of a BSOD
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl]
"AutoReboot"=dword:00000000
;Disables Error Reporting, but notifies when errors occur
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting]
"DoReport"=dword:00000000
;Disable Messenger Service (to stop spam. Does not affect MSN or Windows Messenger)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Messenger]
"Start"=dword:00000004
;Disable Remote Registry Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
"Start"=dword:00000004
;Disable System Restore Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srservice]
"Start"=dword:00000004
;Disable Recent Documents Menu
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoRecentDocsMenu"=hex:01,00,00,00
;Remove "Shortcut to" on shortcuts
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer]
"link"=hex:00,00,00,00
;Alphabetically sort Favorites and start menu
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start
Menu]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start
Menu2]
;Disable IE just in time debugger
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Disable Script Debugger"="yes"
;Search with google from the address bar instead of MSN
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\G]
@="http://www.google.com/search?q=%s"