Microsoft TechNet - Windows 2000 Registry Reference
Microsoft TechNet - Windows Server 2003 Resource Kit Registry Reference
Windows Registry (Wikipedia)
Basic things about Registry Files
Registry Guide for Windows
Welcome to Bo's Tweaky Clean Windows XP
Windows XP registry tweaks
Viewing and Manipulating the Registry
VirtualPlastic.net ..surgery for Windows. Collected tweaks & links to change the look.
Resetting Default Access Controls on Selected Registry Keys
HOWTO: Use a Custom Jet Profile to Alter Data Access Behavior
Opgeslagen in waardes onder:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
Bron:Deploying Windows XP Part I:Planning
Bron2:Registry Settings for Folder Redirection in Windows
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment] "Path"="%SystemRoot%\\system32;%SystemRoot%;%SystemRoot%\\System32\\Wbem"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] "Device"="\\\\printserver\\printernaam,winspool,Ne04:"
Voor het via de registry overzetten van proxy instellingen voor dialup moet een snapshot gemaakt worden van de onderstaande registry keys. Alleen ““Mijn Verbinding”=hex(3):hexadecimale waarde” is niet voldoende.
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections] "DefaultConnectionSettings"=hex(3):hexadecimale waarde "SavedLegacySettings"=hex(3):hexadecimale waarde "Mijn Verbinding"=hex(3):hexadecimale waarde [HKEY_CURRENT_USER\RemoteAccess\Profile\Mijn Verbinding] "EnableAutodisconnect"=dword:00000000 "DisconnectIdleTime"=dword:00000014 "EnableExitDisconnect"=dword:00000000 "RedialAttempts"=dword:0000000A "RedialWait"=dword:00000005
Article last modified on 09-27-1995 ------------------------------------------ The information in this article applies to: - Microsoft Windows 95 ---------------------------------------------- SUMMARY ======= There are seven Run keys in the registry that cause programs to be run automatically: 1. HKEY_LOCAL_MACHINE\Software\Microsoft\ Windows\CurrentVersion\Run 2. HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run 3. HKEY_LOCAL_MACHINE\Software\Microsoft\ Windows\CurrentVersion\RunOnce 4. HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\RunOnce 5. HKEY_LOCAL_MACHINE\Software\Microsoft\ Windows\CurrentVersion\RunServices 6. HKEY_LOCAL_MACHINE\Software\Microsoft\ Windows\CurrentVersion\RunServicesOnce 7. HKEY_LOCAL_MACHINE\Software\Microsoft\ Windows\CurrentVersion\RunOnce\Setup MORE INFORMATION ================ Keys 1-4 are run each time a new user logs in. Keys 5-6 are run in the background when the logon dialog box first appears,or at this stage of the boot process if there is no logon. These keys are for background services such as remote registry service and are run only once per boot. Key 7 is run as part of Setup's first-boot activities, or after you use the Add/Remove Programs Wizard. Under each of these keys is a series of subkeys. The subkeys are used to allow multiple sub-entries to exist without overwriting one another. The value for a subkey is a command line. For keys 1-4, the command line can be prefixed with an asterisk to indicate that it should be run even in Safe mode. By default, Run keys are ignored in Safe mode. For keys 3-4, the command line can be prefixed with an exclamation point to defer deletion of the subkey until after the command has been completed. You cannot combine the two prefixes. For keys 3, 4, and 6, the subkey is deleted before the command line is run unless overridden as noted above. As a result, if a RunOnce operation fails to run properly, the component that failed will not be asked to run again when the next time you start the computer. Key 7 is used only by Setup. This key displays the progress dialog box as the keys are run one at a time. For key 7, the name of the subkey is the name that is displayed in the dialog box. KBCategory: kbsetup KBSubcategory: win95 Additional reference words: 95 ============================================================================= Copyright Microsoft Corporation 1995.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall
Bron:Microsoft Support - How to manually remove programs from the Add or Remove Programs tool
Hier word een cache bijgehouden van de lijst met applicaties onder Add or Remove Programs:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache
Zie ook:Microsoft Support - Add/Remove Programs tool displays installed programs incorrectly
ControlSet001 may be the last control set you booted with, while ControlSet002 could be what is known as the last known good control set, or the control set that last successfully booted Windows NT. The CurrentControlSet subkey is really a pointer to one of the ControlSetXXX keys.
The most valuable and reliable control set is CurrentControlSet. If you need to modify system settings in the Registry, CurrentControlSet is the best subkey to choose because you know that it is the correct control set. You also know that if your modifications harm your system configuration, you will still be able to boot using the last known good control set.
http://www.softpanorama.org/Unixification/free_registry_tools.shtml
Resplendence Registrar Registry Manager
http://www.resplendence.com/reglite
Registry Jumper
http://www.eolsoft.com/freeware/registry_jumper/
Gratis tools uit NT resource kit
http://www.chaminade.org/MIS/Articles/RegistryEdit.htm
Een entry in HKEY_CURRENT_USER\Software\Classes\Applications\ zorgt ervoor dat een applicatie verschijnt in de Open With lijst.
Om een bestand met een bepaalde extensie te openen met dat programma moet er nog een entry staan in HKEY_CURRENT_USER\SOFTWARE\Classes\ met de naam van het type extensie (die naam is te zien door onder HKEY_CLASSES_ROOT te kijken naar de extensie, in dit geval HKEY_CLASSES_ROOT\.2ls, dan is daar de naam te zien onder Data bij de (Default) entry). Wat ik nu in HKEY_CURRENT_USER\SOFTWARE\Classes\2ls_auto_file heb neergezet staat normaal onder HKEY_LOCAL_MACHINE\SOFTWARE\Classes\2ls_auto_file, maar dezelfde entry werkt ook als je 'm onder HKEY_CURRENT_USER zet en daar heb je geen admin rechten voor nodig.
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\SOFTWARE\Classes\2ls_auto_file] @="" [HKEY_CURRENT_USER\SOFTWARE\Classes\2ls_auto_file\shell] [HKEY_CURRENT_USER\SOFTWARE\Classes\2ls_auto_file\shell\open] [HKEY_CURRENT_USER\SOFTWARE\Classes\2ls_auto_file\shell\open\command] @="\"C:\\Program Files\\Voorbeeld\\Voorbeeldapp.exe\" \"%1\"" [HKEY_CURRENT_USER\Software\Classes\Applications\Voorbeeldapp.exe] [HKEY_CURRENT_USER\Software\Classes\Applications\Voorbeeldapp.exe\shell] [HKEY_CURRENT_USER\Software\Classes\Applications\Voorbeeldapp.exe\shell\open] [HKEY_CURRENT_USER\Software\Classes\Applications\Voorbeeldapp.exe\shell\open\command] @="\"C:\\Program Files\\Voorbeeld\\Voorbeeldapp.exe\" \"%1\""
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SavedLegacySettings in User's hive names the ProxyServer
DefaultConnectionSetting
http://kixtart.org/forums/ubbthreads.php?ubb=showflat&Number=170982&page=1
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings
ProxyServer REG_SZ proxy.naam.nl:8080
ProxyEnable op 1 = vinkje ProxyEnable op 0 = geen vinkje
IE moet worden herstart voordat de instelling wordt meegenomen.
My Computer shell extensions. Te vinden onder:
HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
Description of the RunOnceEx Registry Key
http://support.microsoft.com/kb/310593
Syntax for the RunOnceEx Registry Key
http://support.microsoft.com/kb/232509
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs:Order = 0800000etc.
Windows Registry Editor Version 5.00 ;---------------------------------------------- ;Tweaks to improve the functionality of Windows ;---------------------------------------------- ;Disable the Desktop Cleanup Wizard [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\CleanupWiz] "NoRun"=dword:00000001 ;NoLowDiskSpaceChecks won\'t check if you are low on diskspace and pop up a balloon telling you. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoLowDiskSpaceChecks"=dword:00000001 ;Change MenuShowDelay (Start Menu load speed) [HKEY_CURRENT_USER\Control Panel\Desktop] "MenuShowDelay"="20" ;Disable Recent Documents Menu [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoRecentDocsMenu"=hex:01,00,00,00 ;Remove "Shortcut to" on shortcuts [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer] "link"=hex:00,00,00,00 ;Remove "set programs default" from startmenu [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoSMConfigurePrograms"=dword:00000001 ;Disable Notify on new apps [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "Start_NotifyNewApps"=dword:00000000 ;Do not group similar items on the Taskbar ;---------------------------------------------- Start Menu and Folder Settings Twaks ;---------------------------------------------- [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] "Hidden"=dword:00000001 "ShowCompColor"=dword:00000001 "HideFileExt"=dword:00000000 "DontPrettyPath"=dword:00000000 "ShowInfoTip"=dword:00000001 "HideIcons"=dword:00000000 "MapNetDrvBtn"=dword:00000000 "WebView"=dword:00000000 "Filter"=dword:00000000 "SuperHidden"=dword:00000001 "SeparateProcess"=dword:00000000 "ListviewAlphaSelect"=dword:00000001 "ListviewShadow"=dword:00000001 "ListviewWatermark"=dword:00000001 "TaskbarAnimations"=dword:00000001 "StartMenuInit"=dword:00000002 "StartButtonBalloonTip"=dword:00000002 "CascadeNetworkConnections"="YES" "TaskbarSizeMove"=dword:00000000 "EnableBalloonTips"=dword:00000000 "Start_LargeMFUIcons"=dword:00000001 "Start_MinMFU"=dword:00000006 "Start_ShowControlPanel"=dword:00000002 "Start_EnableDragDrop"=dword:00000001 "StartMenuFavorites"=dword:00000000 "Start_ShowHelp"=dword:00000001 "Start_ShowMyComputer"=dword:00000001 "Start_ShowMyMusic"=dword:00000002 "Start_ShowPrinters"=dword:00000001 "Start_ShowRun"=dword:00000001 "Start_ScrollPrograms"=dword:00000000 "Start_ShowSearch"=dword:00000000 "Start_ShowRecentDocs"=dword:00000002 "Start_AutoCascade"=dword:00000001 "Start_NotifyNewApps"=dword:00000000 "Start_AdminToolsRoot"=dword:00000002 "StartMenuAdminTools"="YES" "NoNetCrawling"=dword:00000000 "FolderContentsInfoTip"=dword:00000001 "FriendlyTree"=dword:00000001 "WebViewBarricade"=dword:00000001 "DisableThumbnailCache"=dword:00000000 "ShowSuperHidden"=dword:00000001 "ClassicViewState"=dword:00000000 "PersistBrowsers"=dword:00000000 "Start_ShowNetPlaces_ShouldShow"=dword:00000041 "Start_ShowNetPlaces"=dword:00000000 "Start_ShowNetConn_ShouldShow"=dword:00000042 "StartMenuRun"=dword:00000001 "StartMenuChange"=dword:00000001 "CascadeControlPanel"="YES" "CascadePrinters"="NO" "StartMenuScrollPrograms"="NO" "IntelliMenus"=dword:00000001 ;---------------------------------------------- ;Windows Explorer and Internet Explorer Tweaks ;---------------------------------------------- ;Alphabetically sort Favorites and start menu [-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites] [-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu] [-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2] ;Disable IE just in time debugger [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Disable Script Debugger"="yes" ;Search with google from the address bar instead of MSN [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\G] @="http://www.google.com/search?q=%s" ;Disable webservice for searching file-extensions [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer] "NoInternetOpenWith"=dword:00000000
Windows Registry Editor Version 5.00
;-----------------------
;Operating System Tweaks
;-----------------------
;Disable Automatic Restart in the event of a BSOD
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl]
"AutoReboot"=dword:00000000
;Speed up shutdown
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control]
"WaitToKillServiceTimeout"="3000"
;Disables Error Reporting, but notifies when errors occur
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting]
"DoReport"=dword:00000000
;Do not use Simple File Sharing
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"forceguest"=dword:00000000
;Speed up Network Browsing by removing Network Scheduled Tasks
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RemoteComputer\
NameSpace\{D6277990-4C6A-11CF-8D87-00AA0060F5BF}]
;Disables Windows Tour bubble popup
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Applets\Tour]
"RunCount"=dword:00000000
;Disable System Restore
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000001
;Recycle bin uses 3% of available space (not 10%)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\BitBucket]
"Percent"=dword:00000003
;Disable Autoupdates
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoUpdate"=dword:00000001
;Disable Autoupdates
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update]
"AUOptions"=dword:00000001
"AUState"=dword:00000007
;Change the code page for Cyrillic support
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nls\CodePage]
"1252"="c_1251.nls"
[ HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
"KeepRASConnections"="1"
;Make the Windows XP registration with Microsoft unnecessary
[HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion]
"RegDone"="1"
;---------------
;Services Tweaks
;---------------
;Disable Messenger Service (to stop spam. Does not affect MSN or Windows Messenger)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Messenger]
"Start"=dword:00000004
;Disable Remote Registry Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
"Start"=dword:00000004
;Disable UPS
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UPS]
"Start"=dword:00000004
;Disable System Restore Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srservice]
"Start"=dword:00000004
;Disable Indexing Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CiSvc]
"Start"=dword:00000004
;Disable Wireless Zero Configuration
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WZCSVC]
"Start"=dword:00000004
;Disable Smart Card Helper
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SCardDrv"]
"Start"=dword:00000004
;Disable Portable Media Serial Number
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WmdmPmSN"]
"Start"=dword:00000004
;Disable Remote Desktop Help Session Manager
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RDSessMgr"]
"Start"=dword:00000004
;Disable Imapi CD-Burning Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ImapiService]
"Start"=dword:00000004
;Disable IPSEC Services
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent"]
"Start"=dword:00000004
;Disable Security Center
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc]
"Start"=dword:00000004
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv]
"Start"=dword:00000004
;----------------------------------------------
;Tweaks to improve the functionality of Windows
;----------------------------------------------
;Remove Shared Documents from My Computer
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer
\NameSpace\DelegateFolders\{59031a47-3f72-44a7-89c5-5595fe6b30ee}]
;Allow renaming of Recycle Bin
[HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\ShellFolder]
"Attributes"=hex:50,01,00,20
"CallForAttributes"=dword:00000000
;Administrative tools on Control Panel
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel
\NameSpace\{D20EA4E1-3957-11d2-A40B-0C5020524153}]
@="Administrative Tools"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"TaskbarGlomming"=dword:00000000
;Disable webservice for searching file-extensions (see HKCU for the second part)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system]
"NoInternetOpenWith"=dword:00000001
; Don\'t Search Windows Update For Drivers (New HW Detected)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DriverSearching]
"DontSearchWindowsUpdate"=dword:00000001
"DontPromptForWindowsUpdate"=dword:00000001
;Show protected operating system files
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder
\SuperHidden]
"DefaultValue"=dword:00000001
;Speeds up copying/moving of zip files (disable windows built in zip functionality)
[-HKEY_CLASSES_ROOT\.zip\CompressedFolder]
[-HKEY_CLASSES_ROOT\CLSID\{E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CompressedFolder]
;----------------------------------------------
;Other Tweaks
;----------------------------------------------
;Disables Preview of Movie file formats (allowing you to move/rename/delete without errors)
[-HKEY_CLASSES_ROOT\.avi\ShellEx]
[-HKEY_CLASSES_ROOT\.mpg\ShellEx]
[-HKEY_CLASSES_ROOT\.mpe\ShellEx]
[-HKEY_CLASSES_ROOT\.mpeg\ShellEx]
; Remove Briefcase And Rich-Text-Document From New Menu
[-HKEY_CLASSES_ROOT\.bfc\ShellNew]
[-HKEY_CLASSES_ROOT\.rtf\ShellNew]
[-HKEY_CLASSES_ROOT\.bmp\ShellNew]
[-HKEY_CLASSES_ROOT\.wav\ShellNew]
[-HKEY_CLASSES_ROOT\.zip\CompressedFolder\ShellNew]