======De Windows registry======
**[[http://technet.microsoft.com/en-us/library/cc974061.aspx|Microsoft TechNet - Windows 2000 Registry Reference]]** \\
**[[http://technet.microsoft.com/en-us/library/cc778196(WS.10).aspx|Microsoft TechNet - Windows Server 2003 Resource Kit Registry Reference]]** \\
[[http://en.wikipedia.org/wiki/Windows_registry|Windows Registry (Wikipedia)]] \\
[[http://www.registrytweaker.net/regfiles.php|Basic things about Registry Files]] \\
[[http://www.pctools.com/guides/registry/detail/|Registry Guide for Windows]] \\
[[http://www.uninets.net/~blaisdel/RegistryTweakXP.htm|Welcome to Bo's Tweaky Clean Windows XP]] \\
[[http://www.optimizingpc.com/optimize/registrytweaks.html|Windows XP registry tweaks]] \\
[[http://www.windowsitlibrary.com/Content/237/1.html|Viewing and Manipulating the Registry]] \\
[[http://www.virtualplastic.net/|VirtualPlastic.net ..surgery for Windows. Collected tweaks & links to change the look.]] \\
[[http://support.microsoft.com/kb/126713|Resetting Default Access Controls on Selected Registry Keys]] \\
[[http://support.microsoft.com/kb/173646|HOWTO: Use a Custom Jet Profile to Alter Data Access Behavior]] \\
=====Handige lokaties=====
[[http://technet.microsoft.com/en-us/library/bb742541.aspx|Microsoft Technet - Windows 2000 Registry Chapter 6 - System and Startup Settings]] \\
====Folder redirection=====
Opgeslagen in waardes onder: \\
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders \\
Bron:[[http://technet.microsoft.com/en-us/library/bb457061.aspx|Deploying Windows XP Part I:Planning]] \\
Bron2:[[http://support.microsoft.com/kb/242557|Registry Settings for Folder Redirection in Windows]] \\
====PATH====
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment]
"Path"="%SystemRoot%\\system32;%SystemRoot%;%SystemRoot%\\System32\\Wbem"
====Key waar ook Citrix gebruik van maakt====
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server
====Instelling voor default printer====
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
"Device"="\\\\printserver\\printernaam,winspool,Ne04:"
====Proxy instellingen met exclusions voor dial-up verbinding====
Voor het via de registry overzetten van proxy instellingen voor dialup moet een snapshot gemaakt worden van de onderstaande registry keys.
Alleen ""Mijn Verbinding"=hex(3):hexadecimale waarde" is niet voldoende.
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"DefaultConnectionSettings"=hex(3):hexadecimale waarde
"SavedLegacySettings"=hex(3):hexadecimale waarde
"Mijn Verbinding"=hex(3):hexadecimale waarde
[HKEY_CURRENT_USER\RemoteAccess\Profile\Mijn Verbinding]
"EnableAutodisconnect"=dword:00000000
"DisconnectIdleTime"=dword:00000014
"EnableExitDisconnect"=dword:00000000
"RedialAttempts"=dword:0000000A
"RedialWait"=dword:00000005
====Run Registry Keys====
Article last modified on 09-27-1995
------------------------------------------
The information in this article applies to:
- Microsoft Windows 95
----------------------------------------------
SUMMARY
=======
There are seven Run keys in the registry that
cause programs to be run automatically:
1. HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Run
2. HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Run
3. HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\RunOnce
4. HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\RunOnce
5. HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\RunServices
6. HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\RunServicesOnce
7. HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\RunOnce\Setup
MORE INFORMATION
================
Keys 1-4 are run each time a new user logs in.
Keys 5-6 are run in the background when the logon
dialog box first appears,or at this stage of the
boot process if there is no logon. These keys are
for background services such as remote registry
service and are run only once per boot.
Key 7 is run as part of Setup's first-boot activities,
or after you use the Add/Remove Programs Wizard.
Under each of these keys is a series of subkeys.
The subkeys are used to allow multiple sub-entries
to exist without overwriting one another.
The value for a subkey is a command line. For
keys 1-4, the command line can be prefixed with
an asterisk to indicate that it should be run even
in Safe mode. By default, Run keys are ignored in
Safe mode. For keys 3-4, the command line can be
prefixed with an exclamation point to defer deletion of
the subkey until after the command has been completed.
You cannot combine the two prefixes.
For keys 3, 4, and 6, the subkey is deleted before the
command line is run unless overridden as noted above.
As a result, if a RunOnce operation fails to run
properly, the component that failed will not be asked
to run again when the next time you start the computer.
Key 7 is used only by Setup. This key displays
the progress dialog box as the keys are run one at
a time. For key 7, the name of the subkey is the
name that is displayed in the dialog box.
KBCategory: kbsetup
KBSubcategory: win95
Additional reference words: 95
=============================================================================
Copyright Microsoft Corporation 1995.
Bron:[[http://techsupt.winbatch.com/TS/T000001029F22.html|Wilson WindowWare Tech Support - Registry Run Keys]]
====Add or Remove Programs====
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall
Bron:[[http://support.microsoft.com/kb/314481/en-us|Microsoft Support - How to manually remove programs from the Add or Remove Programs tool]] \\
====Add or Remove Programs cache====
Hier word een cache bijgehouden van de lijst met applicaties onder Add or Remove Programs:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache
Zie ook:[[http://support.microsoft.com/kb/266668/en|Microsoft Support - Add/Remove Programs tool displays installed programs incorrectly]] \\
=====Verschil tussen ControlSet00x en CurrentControlSet=====
ControlSet001 may be the last control set you booted with, while ControlSet002 could be what is known as the last known good control set, or the control set that last successfully booted Windows NT. The CurrentControlSet subkey is really a pointer to one of the ControlSetXXX keys.
The most valuable and reliable control set is CurrentControlSet. If you need to modify system settings in the Registry, CurrentControlSet is the best subkey to choose because you know that it is the correct control set. You also know that if your modifications harm your system configuration, you will still be able to boot using the last known good control set.
BRON: http://support.microsoft.com/kb/q100010/
=====Gratis registry tools=====
http://www.softpanorama.org/Unixification/free_registry_tools.shtml
Resplendence Registrar Registry Manager \\
http://www.resplendence.com/reglite
Registry Jumper \\
http://www.eolsoft.com/freeware/registry_jumper/
Gratis tools uit NT resource kit \\
http://www.chaminade.org/MIS/Articles/RegistryEdit.htm
=====Bestandsassociatie=====
Een entry in HKEY_CURRENT_USER\Software\Classes\Applications\ zorgt ervoor dat een applicatie verschijnt in de Open With lijst. \\
Om een bestand met een bepaalde extensie te openen met dat programma moet er nog een entry staan in HKEY_CURRENT_USER\SOFTWARE\Classes\ met de naam van het type extensie (die naam is te zien door onder HKEY_CLASSES_ROOT te kijken naar de extensie, in dit geval HKEY_CLASSES_ROOT\.2ls, dan is daar de naam te zien onder Data bij de (Default) entry). Wat ik nu in HKEY_CURRENT_USER\SOFTWARE\Classes\2ls_auto_file heb neergezet staat normaal onder HKEY_LOCAL_MACHINE\SOFTWARE\Classes\2ls_auto_file, maar dezelfde entry werkt ook als je 'm onder HKEY_CURRENT_USER zet en daar heb je geen admin rechten voor nodig.
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\SOFTWARE\Classes\2ls_auto_file]
@=""
[HKEY_CURRENT_USER\SOFTWARE\Classes\2ls_auto_file\shell]
[HKEY_CURRENT_USER\SOFTWARE\Classes\2ls_auto_file\shell\open]
[HKEY_CURRENT_USER\SOFTWARE\Classes\2ls_auto_file\shell\open\command]
@="\"C:\\Program Files\\Voorbeeld\\Voorbeeldapp.exe\" \"%1\""
[HKEY_CURRENT_USER\Software\Classes\Applications\Voorbeeldapp.exe]
[HKEY_CURRENT_USER\Software\Classes\Applications\Voorbeeldapp.exe\shell]
[HKEY_CURRENT_USER\Software\Classes\Applications\Voorbeeldapp.exe\shell\open]
[HKEY_CURRENT_USER\Software\Classes\Applications\Voorbeeldapp.exe\shell\open\command]
@="\"C:\\Program Files\\Voorbeeld\\Voorbeeldapp.exe\" \"%1\""
=====Internet Explorer======
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SavedLegacySettings in User's hive names the ProxyServer
DefaultConnectionSetting \\
http://kixtart.org/forums/ubbthreads.php?ubb=showflat&Number=170982&page=1
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings \\
ProxyServer REG_SZ proxy.naam.nl:8080
ProxyEnable op 1 = vinkje
ProxyEnable op 0 = geen vinkje
IE moet worden herstart voordat de instelling wordt meegenomen.
=====Lokatie My Computer shell extensions=====
My Computer shell extensions. Te vinden onder:
HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
=====Run, RunOnce, RunOnceEx=====
Description of the RunOnceEx Registry Key \\
http://support.microsoft.com/kb/310593
Syntax for the RunOnceEx Registry Key \\
http://support.microsoft.com/kb/232509
=====Start Menu=====
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs:Order = 0800000etc.
=====Tweaks HKEY_CURRENT_USER=====
Windows Registry Editor Version 5.00
;----------------------------------------------
;Tweaks to improve the functionality of Windows
;----------------------------------------------
;Disable the Desktop Cleanup Wizard
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\CleanupWiz]
"NoRun"=dword:00000001
;NoLowDiskSpaceChecks won\'t check if you are low on diskspace and pop up a balloon telling you.
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoLowDiskSpaceChecks"=dword:00000001
;Change MenuShowDelay (Start Menu load speed)
[HKEY_CURRENT_USER\Control Panel\Desktop]
"MenuShowDelay"="20"
;Disable Recent Documents Menu
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoRecentDocsMenu"=hex:01,00,00,00
;Remove "Shortcut to" on shortcuts
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer]
"link"=hex:00,00,00,00
;Remove "set programs default" from startmenu
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoSMConfigurePrograms"=dword:00000001
;Disable Notify on new apps
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"Start_NotifyNewApps"=dword:00000000
;Do not group similar items on the Taskbar
;----------------------------------------------
Start Menu and Folder Settings Twaks
;----------------------------------------------
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"Hidden"=dword:00000001
"ShowCompColor"=dword:00000001
"HideFileExt"=dword:00000000
"DontPrettyPath"=dword:00000000
"ShowInfoTip"=dword:00000001
"HideIcons"=dword:00000000
"MapNetDrvBtn"=dword:00000000
"WebView"=dword:00000000
"Filter"=dword:00000000
"SuperHidden"=dword:00000001
"SeparateProcess"=dword:00000000
"ListviewAlphaSelect"=dword:00000001
"ListviewShadow"=dword:00000001
"ListviewWatermark"=dword:00000001
"TaskbarAnimations"=dword:00000001
"StartMenuInit"=dword:00000002
"StartButtonBalloonTip"=dword:00000002
"CascadeNetworkConnections"="YES"
"TaskbarSizeMove"=dword:00000000
"EnableBalloonTips"=dword:00000000
"Start_LargeMFUIcons"=dword:00000001
"Start_MinMFU"=dword:00000006
"Start_ShowControlPanel"=dword:00000002
"Start_EnableDragDrop"=dword:00000001
"StartMenuFavorites"=dword:00000000
"Start_ShowHelp"=dword:00000001
"Start_ShowMyComputer"=dword:00000001
"Start_ShowMyMusic"=dword:00000002
"Start_ShowPrinters"=dword:00000001
"Start_ShowRun"=dword:00000001
"Start_ScrollPrograms"=dword:00000000
"Start_ShowSearch"=dword:00000000
"Start_ShowRecentDocs"=dword:00000002
"Start_AutoCascade"=dword:00000001
"Start_NotifyNewApps"=dword:00000000
"Start_AdminToolsRoot"=dword:00000002
"StartMenuAdminTools"="YES"
"NoNetCrawling"=dword:00000000
"FolderContentsInfoTip"=dword:00000001
"FriendlyTree"=dword:00000001
"WebViewBarricade"=dword:00000001
"DisableThumbnailCache"=dword:00000000
"ShowSuperHidden"=dword:00000001
"ClassicViewState"=dword:00000000
"PersistBrowsers"=dword:00000000
"Start_ShowNetPlaces_ShouldShow"=dword:00000041
"Start_ShowNetPlaces"=dword:00000000
"Start_ShowNetConn_ShouldShow"=dword:00000042
"StartMenuRun"=dword:00000001
"StartMenuChange"=dword:00000001
"CascadeControlPanel"="YES"
"CascadePrinters"="NO"
"StartMenuScrollPrograms"="NO"
"IntelliMenus"=dword:00000001
;----------------------------------------------
;Windows Explorer and Internet Explorer Tweaks
;----------------------------------------------
;Alphabetically sort Favorites and start menu
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2]
;Disable IE just in time debugger
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Disable Script Debugger"="yes"
;Search with google from the address bar instead of MSN
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\G]
@="http://www.google.com/search?q=%s"
;Disable webservice for searching file-extensions
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer]
"NoInternetOpenWith"=dword:00000000
Bron: http://unattended.msfn.org/unattended.xp/view/web/17/
=====Tweaks HKEY_LOCAL_MACHINE=====
Windows Registry Editor Version 5.00
;-----------------------
;Operating System Tweaks
;-----------------------
;Disable Automatic Restart in the event of a BSOD
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl]
"AutoReboot"=dword:00000000
;Speed up shutdown
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control]
"WaitToKillServiceTimeout"="3000"
;Disables Error Reporting, but notifies when errors occur
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting]
"DoReport"=dword:00000000
;Do not use Simple File Sharing
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"forceguest"=dword:00000000
;Speed up Network Browsing by removing Network Scheduled Tasks
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RemoteComputer\
NameSpace\{D6277990-4C6A-11CF-8D87-00AA0060F5BF}]
;Disables Windows Tour bubble popup
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Applets\Tour]
"RunCount"=dword:00000000
;Disable System Restore
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000001
;Recycle bin uses 3% of available space (not 10%)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\BitBucket]
"Percent"=dword:00000003
;Disable Autoupdates
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoUpdate"=dword:00000001
;Disable Autoupdates
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update]
"AUOptions"=dword:00000001
"AUState"=dword:00000007
;Change the code page for Cyrillic support
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nls\CodePage]
"1252"="c_1251.nls"
[ HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
"KeepRASConnections"="1"
;Make the Windows XP registration with Microsoft unnecessary
[HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion]
"RegDone"="1"
;---------------
;Services Tweaks
;---------------
;Disable Messenger Service (to stop spam. Does not affect MSN or Windows Messenger)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Messenger]
"Start"=dword:00000004
;Disable Remote Registry Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
"Start"=dword:00000004
;Disable UPS
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UPS]
"Start"=dword:00000004
;Disable System Restore Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srservice]
"Start"=dword:00000004
;Disable Indexing Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CiSvc]
"Start"=dword:00000004
;Disable Wireless Zero Configuration
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WZCSVC]
"Start"=dword:00000004
;Disable Smart Card Helper
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SCardDrv"]
"Start"=dword:00000004
;Disable Portable Media Serial Number
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WmdmPmSN"]
"Start"=dword:00000004
;Disable Remote Desktop Help Session Manager
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RDSessMgr"]
"Start"=dword:00000004
;Disable Imapi CD-Burning Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ImapiService]
"Start"=dword:00000004
;Disable IPSEC Services
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent"]
"Start"=dword:00000004
;Disable Security Center
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc]
"Start"=dword:00000004
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv]
"Start"=dword:00000004
;----------------------------------------------
;Tweaks to improve the functionality of Windows
;----------------------------------------------
;Remove Shared Documents from My Computer
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer
\NameSpace\DelegateFolders\{59031a47-3f72-44a7-89c5-5595fe6b30ee}]
;Allow renaming of Recycle Bin
[HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\ShellFolder]
"Attributes"=hex:50,01,00,20
"CallForAttributes"=dword:00000000
;Administrative tools on Control Panel
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel
\NameSpace\{D20EA4E1-3957-11d2-A40B-0C5020524153}]
@="Administrative Tools"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"TaskbarGlomming"=dword:00000000
;Disable webservice for searching file-extensions (see HKCU for the second part)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system]
"NoInternetOpenWith"=dword:00000001
; Don\'t Search Windows Update For Drivers (New HW Detected)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DriverSearching]
"DontSearchWindowsUpdate"=dword:00000001
"DontPromptForWindowsUpdate"=dword:00000001
;Show protected operating system files
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder
\SuperHidden]
"DefaultValue"=dword:00000001
;Speeds up copying/moving of zip files (disable windows built in zip functionality)
[-HKEY_CLASSES_ROOT\.zip\CompressedFolder]
[-HKEY_CLASSES_ROOT\CLSID\{E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CompressedFolder]
;----------------------------------------------
;Other Tweaks
;----------------------------------------------
;Disables Preview of Movie file formats (allowing you to move/rename/delete without errors)
[-HKEY_CLASSES_ROOT\.avi\ShellEx]
[-HKEY_CLASSES_ROOT\.mpg\ShellEx]
[-HKEY_CLASSES_ROOT\.mpe\ShellEx]
[-HKEY_CLASSES_ROOT\.mpeg\ShellEx]
; Remove Briefcase And Rich-Text-Document From New Menu
[-HKEY_CLASSES_ROOT\.bfc\ShellNew]
[-HKEY_CLASSES_ROOT\.rtf\ShellNew]
[-HKEY_CLASSES_ROOT\.bmp\ShellNew]
[-HKEY_CLASSES_ROOT\.wav\ShellNew]
[-HKEY_CLASSES_ROOT\.zip\CompressedFolder\ShellNew]
Bron: http://unattended.msfn.org/unattended.xp/view/web/17/