Zoals altijd: eerst een backup maken van de huidige instellingen voor het toepassen van onderstaande registry bestanden!
Bronnen:
Windows XP SP2 Registry Keys for Student PCs
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "ForceActiveDesktopOn"=dword:00000000 "NoActiveDesktop"=dword:00000001
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList] "Administrator"=dword:00000001
Source:How-to remove or add the Administrator Account to the Windows XP Welcome Screen.
Windows Registry Editor Version 5.00 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "AllowMultipleTSSessions"=dword:00000000 "LogonType"=dword:00000000
Voor permanent instellen:
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment] "DEVMGR_SHOW_NONPRESENT_DEVICES"="1"
Voor eenmalig gebruik, via de command prompt met (onder Vista cmd als admin starten):
set devmgr_show_nonpresent_devices=1
Gevolgd door:
devmgmt.msc
Vervolgens “Show hidden devices” aanvinken in het View menu van de Device Manager.
;Disable Automatic Restart in the event of a BSOD [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl] "AutoReboot"=dword:00000000
Bron:Regtweaks.txt
Het aanstaan van deze optie geeft soms problemen bij Citrix web client programma's of bij sommige SSL pagina's (evt. in combinatie met een proxy).
Ook bekend als de setting in Internet Explorer getiteld: “Do not save encrypted pages to disk”.
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings] "DisableCachingOfSSLPages"=dword:0000001
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings] "DisableCachingOfSSLPages"=dword:00000000
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState] "Use Search Asst"="no"
Op drive en directory:
Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\Directory\shell\cmdhere] @="CMD Prompt Here" [HKEY_CLASSES_ROOT\Directory\shell\cmdhere\command] @="C:\\Windows\\System32\\cmd.exe /k cd \"%1\"" [HKEY_CLASSES_ROOT\Drive\shell\cmdhere] @="CMD Prompt Here" [HKEY_CLASSES_ROOT\Drive\shell\cmdhere\command] @="C:\\Windows\\System32\\cmd.exe /k cd \"%1\""
Getest met Outlook 2003.
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\11.0\Outlook\Preferences] "DoAging"=dword:00000000 "PromptForAging"=dword:00000000 "DeleteExpired"=dword:00000000 "ArchiveOld"=dword:00000000 "ArchiveMount"=dword:00000000 "ArchiveDelete"=dword:00000000
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DriverSearching] "DontSearchWindowsUpdate"=dword:00000001 "DontPromptForWindowsUpdate"=dword:00000001
Voor als de toegang tot de Windows Firewall Control Panel is uitgeschakeld.
Herstart vereist.
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\StandardProfile] "EnableFirewall"=dword:00000001 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess] "Start"=dword:00000002
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\StandardProfile] "EnableFirewall"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess] "Start"=dword:00000004
Meer informatie in: Deploying Windows Firewall Settings for Microsoft Windows XP with Service Pack 2
Windows Registry Editor Version 5.00
// Enable Client Log Files for Troubleshooting Group Policy
// Group Policy core (UserEnv) and registry CSE: %windir%\debug\usermode\UserEnv.log
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"UserEnvDebugLevel"=dword:00030002
// Security CSE: %windir%\security\logs\winlogon.log
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}]
"ExtensionDebugLevel"=dword:00000002
// Folder Redirection CSE: %windir%\debug\usermode\fdeploy.lng
// Software Installation CSE: %windir%\usermode\appmgmt.log
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Diagnostics]
"FdeployDebugLevel"=dword:0000000f
"Appmgmtdebuglevel"=dword:0000009b
// Windows Installer (deployment-related actions): %windir%\temp\MSI*.log
// Windows Installer (user-initiated actions): %temp%\MSI*.log
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer]
"Logging"="voicewarmup"
"Debug"=dword:00000003
At least the UserEnvDebugLevel and ExtensionDebugLevel registry changes require a reboot to take effect. (Tested on Windows Server 2012 R2.)
Windows Registry Editor Version 5.00 // Server Log Files for Troubleshooting Group Policy // %temp%\gpmgmt.log // Use gpmgmttracelevel 1 for error logging only // Use gpmgmttracelevel 2 for error and verbose logging [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Diagnostics] "gpmgmttracelevel"="2" "gpmgmtlogfileonly"="1" // %windir%\debug\usermode\gpedit.log // %windir%\debug\usermode\gptext.log [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "GPEditDebugLevel"=dword:00010002 "GPTextDebugLevel"=dword:00010002
Examples:
Give My Computer the name of this computer (LocalizedString = %computername%):
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}]
"LocalizedString"=hex(2):25,00,43,00,6f,00,6d,00,70,00,75,00,74,00,65,00,72,00,\
6e,00,61,00,6d,00,65,00,25,00,00,00
Give My Computer the name of the currently logged on user combined with the name of this computer (LocalizedString = %username% on %computername%):
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}]
"LocalizedString"=hex(2):25,00,55,00,53,00,45,00,52,00,4e,00,41,00,4d,00,45,00,\
25,00,20,00,6f,00,6e,00,20,00,25,00,43,00,4f,00,4d,00,50,00,55,00,54,00,45,\
00,52,00,4e,00,41,00,4d,00,45,00,25,00,00,00
On Windows 7 the Administrator(s) do not have write access to HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}, TrustedInstaller has been given those rights.
To enable the import of the registry key from the examples above, do the following:
SET RKEY=HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
SET TMPDIR=C:\Temp
REM Save current ACL and owner on RKEY
setacl -on "%RKEY%" -ot reg -actn list -lst "f:sddl;w:d,s,o" -bckp "%TMPDIR%\setacl-backup.txt"
REM Temporarily grant Administrator full access to the RKEY
setacl -on "%RKEY%" -ot reg -actn setowner -ownr "n:Administrator"
setacl -on "%RKEY%" -ot reg -actn ace -ace "n:Administrator;p:full"
%SYSTEMROOT%\regedit.exe /s UsernameOnComputer.reg
REM Restore saved ACL on RKEY
setacl -on "%RKEY%" -ot reg -actn restore -bckp "%TMPDIR%\setacl-backup.txt"
Dit word geregeld door de DWORD waarde van onderstaande GUID keys op 0 te zetten voor tonen of 1 voor verbergen.
Dit word ook nog eens per start menu, classic of nieuw, ingesteld.
Onderstaande zet de My Documents, My Computer en My Network Places zichtbaar op de desktop.
Windows Registry Editor Version 5.00
// 00000000 = visible on desktop
// 00000001 = not visible on desktop
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel]
// My Documents
"{450D8FBA-AD25-11D0-98A8-0800361B1103}"=dword:00000000
// My Computer
"{20D04FE0-3AEA-1069-A2D8-08002B30309D}"=dword:00000000
// My Network Places
"{208D2C60-3AEA-1069-A2D7-08002B30309D}"=dword:00000000
// Internet Explorer (only < IE 7 ?)
"{871C5380-42A0-1069-A2EA-08002B30309D}"=dword:00000000
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu]
// My Documents
"{450D8FBA-AD25-11D0-98A8-0800361B1103}"=dword:00000000
// My Computer
"{20D04FE0-3AEA-1069-A2D8-08002B30309D}"=dword:00000000
// My Network Places
"{208D2C60-3AEA-1069-A2D7-08002B30309D}"=dword:00000000
// Internet Explorer (only < IE 7 ?)
"{871C5380-42A0-1069-A2EA-08002B30309D}"=dword:00000000
Om op een Windows Server 2003 x64 Standard Terminal Server de “My…” iconen aan te levere op de desktop kun je het volgende registerbestand importeren:
Windows Registry Editor Version 5.00
// 00000000 = visible on desktop
// 00000001 = not visible on desktop
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel]
// My Documents
"{450D8FBA-AD25-11D0-98A8-0800361B1103}"=dword:00000000
// My Computer
"{20D04FE0-3AEA-1069-A2D8-08002B30309D}"=dword:00000000
// My Network Places
"{208D2C60-3AEA-1069-A2D7-08002B30309D}"=dword:00000000
// Internet Explorer (only < IE 7 ?)
"{871C5380-42A0-1069-A2EA-08002B30309D}"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu]
// My Documents
"{450D8FBA-AD25-11D0-98A8-0800361B1103}"=dword:00000000
// My Computer
"{20D04FE0-3AEA-1069-A2D8-08002B30309D}"=dword:00000000
// My Network Places
"{208D2C60-3AEA-1069-A2D7-08002B30309D}"=dword:00000000
// Internet Explorer (only < IE 7 ?)
"{871C5380-42A0-1069-A2EA-08002B30309D}"=dword:00000000
Windows Registry Editor Version 5.00
// 00000000 = visible on desktop
// 00000001 = not visible on desktop
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel]
"{59031a47-3f72-44a7-89c5-5595fe6b30ee}"=dword:00000000
De standaard(?) instellingen:
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PageSetup] "header"="&w&bPage &p of &P" "footer"="&u&b&d" "margin_bottom"="0.75000" "margin_left"="0.75000" "margin_right"="0.75000" "margin_top"="0.75000"
Bijv. voor het maken van een verbinding met een oude ( v2.0 en lager?) Samba server (XP):
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation\parameters] "enableplaintextpassword"=dword:00000001
Getest op Windows XP.
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings] "ProxyEnable"=dword:00000001
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings] "ProxyEnable"=dword:00000000
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server] "fDenyTSConnections"=dword:00000000
REM Enable RDP connections. "%SYSTEMROOT%\system32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t "REG_DWORD" /d 0 /f
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server] "fDenyTSConnections"=dword:00000001
REM Disable RDP connections. "%SYSTEMROOT%\system32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t "REG_DWORD" /d 1 /f
REM Enable multiple sessions per user. "%SYSTEMROOT%\system32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fSingleSessionPerUser /t "REG_DWORD" /d 0 /f
REM Disablemultiple sessions per user. "%SYSTEMROOT%\system32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fSingleSessionPerUser /t "REG_DWORD" /d 1 /f
Voor het instellen van de screensaver (XP):
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Control Panel\Desktop] "SCRNSAVE.EXE"="C:\\WINDOWS\\system32\\ss3dfo.scr"
Bron: snapshot van registry wijziging na veranderen screensaver.
Service Pack 1:
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Disable Script Debugger"="yes"
Service Pack 2:
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Disable Script Debugger"="yes" "DisableScriptDebuggerIE"="yes"
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\security center] "FirewallDisableNotify"=dword:00000000 "AntiVirusDisableNotify"=dword:00000000 "UpdatesDisableNotify"=dword:00000000
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\security center] "FirewallDisableNotify"=dword:00000001 "AntiVirusDisableNotify"=dword:00000001 "UpdatesDisableNotify"=dword:00000001
Onder HKCU is voor de huidige gebruiker (getest op XP, opnieuw inloggen is mogelijk vereist), onder HKU\.DEFAULT is voor het loginscherm.
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Control Panel\Colors] "Background"="255 255 255" [HKEY_CURRENT_USER\Control Panel\Desktop] "Wallpaper"="C:\\WINDOWS\\desktop.bmp" "WallpaperStyle"="0" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] "ListviewShadow"=dword:00000000 [HKEY_USERS\.DEFAULT\Control Panel\Colors] "Background"="255 255 255" [HKEY_USERS\.DEFAULT\Control Panel\Desktop] "Wallpaper"="C:\\WINDOWS\\desktop.bmp" "WallpaperStyle"="0" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] "ListviewShadow"=dword:00000000
“Background” is een RGB waarde 255 255 255 staat voor wit.
“WallpaperStyle” is de stijl van de wallpaper:
0 = centered
1 = tiled
2 = stretched
ListviewShadow op 0 zorgt ervoor dat er geen witte tekst met een zwarte schaduw op de, in dit geval witte, desktopachtergrond word getekend.
Bron voor WallpaperStyle: Specify the Background Image and Wallpaper Style (Windows 2000/Me/XP)
Import the following registry key and reboot:
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nls\Language] "Default"="0409"
Source:eggheadcafe - How to change Language for non-unicode programs from registry
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState] "Use Search Asst"="no"
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa] "forceguest"=dword:00000000
Windows Registry Editor Version 5.00 // Computer Configuration\Administrative Templates\Windows Components\Windows Media Player: // Prevent Automatic Updates (Media Player 9 and later) // Do Not Show First Use Dialog Boxes (Media Player 9 and later) // Prevent Media Sharing (Media Player 11 and later) [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsMediaPlayer] "DisableAutoUpdate"=dword:00000001 "GroupPrivacyAcceptance"=dword:00000001 "PreventLibrarySharing"=dword:00000001
The GroupPrivacyAcceptance is the group policy registry key for all users on the computer.
To disable it for just one user, add the following to the HKCU:
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences] "AcceptedPrivacyStatement"=dword:00000001
Source:Coretech - Disable the Windows Media Player wizard on first run
When you install an application that comes with its own private Java Runtime Environment, the Lucida fonts that go with that private JRE are registered systemwide. To reset these to the JRE directory import the following (valid for Java 1.6 32-bit on 32-bit Windows and Java 1.6 64-bit on 64-bit Windows):
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts] "Lucida Bright Demibold (TrueType)"="C:\\Program Files\\Java\\jre6\\lib\\fonts\\LucidaBrightDemiBold.ttf" "Lucida Bright Demibold Italic (TrueType)"="C:\\Program Files\\Java\\jre6\\lib\\fonts\\LucidaBrightDemiItalic.ttf" "Lucida Bright Italic (TrueType)"="C:\\Program Files\\Java\\jre6\\lib\\fonts\\LucidaBrightItalic.ttf" "Lucida Bright Regular (TrueType)"="C:\\Program Files\\Java\\jre6\\lib\\fonts\\LucidaBrightRegular.ttf" "Lucida Sans Demibold (TrueType)"="C:\\Program Files\\Java\\jre6\\lib\\fonts\\LucidaSansDemiBold.ttf" "Lucida Sans Regular (TrueType)"="C:\\Program Files\\Java\\jre6\\lib\\fonts\\LucidaSansRegular.ttf" "Lucida Sans Typewriter Bold (TrueType)"="C:\\Program Files\\Java\\jre6\\lib\\fonts\\LucidaTypewriterBold.ttf" "Lucida Sans Typewriter Regular (TrueType)"="C:\\Program Files\\Java\\jre6\\lib\\fonts\\LucidaTypewriterRegular.ttf"
Tested on Windows 7/2008R2:
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] "Start_ShowPrinters"=dword:00000000
Source: regshot and MSFN Windows 7 Forum - Devices and Printers, how to remove from start menu