Modify the registry to make Windows Vista more secure

The first type: completely disable the control panel Normally, through the operation of the control panel, the user can modify any one of the settings in the system, which is convenient for the user and brings trouble to the network maintenance personnel. Therefore, for the total prohibition of the unnecessary operation function, the steps first start the Registry Editor, open the "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer" sub-item, and then create a new one named NoControlPanel in the Explorer sub-item. Double-byte value item, and set the value data of the value item to 1, and finally, exit the Registry Editor and log out or restart.

Effect: After rebooting, check the computer's >Settings> menu and you will see that there is no control panel, as shown in Figure 1. When the user right clicks on the computer properties, a restriction window appears, showing "This operation was cancelled due to the limitations of this computer. Please contact your system administrator for the words ".

Second type: Hide/Show specific items in the control panel

Disabling the control panel completely can prevent the effect, but it is targeted to hide one of them. Very flexible, the operation is to first open the "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer"; sub-item, create a double-byte value item named DisallowCpl in the Explorer sub-item, and the value item Set the data to 1, create a new sub-item named DisallowCpl in the Explorer sub-item, and create a new string value item named 1 in the sub-item, and set the value data of the value item to intl.cpl. Here, the area and language options in the Control Panel are limited to make them visible, while other items are correct. Conversely, the specified item can also be displayed, and the others are not displayed. Open the "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer" sub-item and create a new double-byte value item named RestrictCpl in it. Set the value data of the value item to 1, continue to create a new sub-item named RestrictCpl, create a new string value item named 1 in it, and set the value data of the value item to intl .cpl, log out of the registry, log out or start again.

Effect: After restarting the machine, you will find that the control panel can be opened. The items inside have only one area and language option, and others are hidden, as shown in Figure 2.

The third type: hidden tabs in the internet options

Internet options are very important to users, it is important setting data for us to enter the Internet, often tampering with Trojans or humans You can hide its options through the registry, such as regular items, open the "HKEY_CURRENT_USER\\Software\\Policies\\Microsoft", create a new internet explorer sub-item, and create a control panel named control panel in the sub-item. Child, and create a new double-byte value item named generaltab in the control panel, and set the value to 1, shut down the registry and restart the machine. If you want to hide the security item, create a double-byte value item named securitytab in the child of the control panel and set its value to 1.

Effect: You can open the internet option and find that the regular and security tabs are gone.

Fourth: Hidden Folder Options

Folder options can initially hide system files and personal data for us, avoiding unnecessary damage, but everyone knows how to open it. Therefore, it is not safe, you can use the registry to make it visible, open the "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer"; sub-item, in which a double-byte value item named nofolderoptions is created. And make its value 1, to exit the registry and restart the machine.

Effect: Open the Control Panel and you will see that the folder options are missing.

Fifth: prohibit adding printers

Adding printers will cause the elimination of network failures and the spread of viruses. You can restrict the users from adding printers through the registry. Open the "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer” subkey, create a new double-byte value item named NOaddPrinter, and set its value to 1, exit the registry and restart the machine.

Effect: Open the printer in the settings, although you can right click and select ”Add Printer”, but the prompt window that is disabled is displayed.

Modifying the remote desktop port makes Windows Vista more secure

Windows Vista supports remote desktop and terminal service connections so that remote users can control the local computer. For anti-virus software, the remote control of this terminal service is a Trojan that cannot be killed.

Enter regedit in the Windows Vista Start menu to open the Registry Editor. Locate the HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlTerminal ServerWdsrdpwdTdsdcp branch. On the right side, you can find a port named REG_DWORD. We double-click to modify it to be port 3389. As shown in the figure:

Note: Since 1~1024 ports have been allocated, in order to prevent conflicts, it is recommended to modify any port to 655 port and above 65535, such as 2007, 2038, etc.