Table of Contents
Zoals altijd: eerst een backup maken van de huidige instellingen voor het toepassen van onderstaande registry bestanden!
Bronnen:
Windows XP SP2 Registry Keys for Student PCs
Active Desktop (XP) uitzetten
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "ForceActiveDesktopOn"=dword:00000000 "NoActiveDesktop"=dword:00000001
Add Administrator to XP Welcome Screen
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList] "Administrator"=dword:00000001
Source:How-to remove or add the Administrator Account to the Windows XP Welcome Screen.
Disable XP Welcome Screen (and with it Fast User Switching)
Windows Registry Editor Version 5.00 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "AllowMultipleTSSessions"=dword:00000000 "LogonType"=dword:00000000
Alle verborgen apparaten tonen in Device Manager (2k/XP/2k3)
Voor permanent instellen:
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment] "DEVMGR_SHOW_NONPRESENT_DEVICES"="1"
Voor eenmalig gebruik, via de command prompt met (onder Vista cmd als admin starten):
set devmgr_show_nonpresent_devices=1
Gevolgd door:
devmgmt.msc
Vervolgens “Show hidden devices” aanvinken in het View menu van de Device Manager.
Automatisch herstarten uitzetten
;Disable Automatic Restart in the event of a BSOD [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl] "AutoReboot"=dword:00000000
Bron:Regtweaks.txt
Cachen van SSL pagina's in Internet Explorer (6) aan- of uitzetten
Het aanstaan van deze optie geeft soms problemen bij Citrix web client programma's of bij sommige SSL pagina's (evt. in combinatie met een proxy).
Ook bekend als de setting in Internet Explorer getiteld: “Do not save encrypted pages to disk”.
Aanzetten
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings] "DisableCachingOfSSLPages"=dword:0000001
Uitzetten
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings] "DisableCachingOfSSLPages"=dword:00000000
Classic Search in Explorer (XP)
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState] "Use Search Asst"="no"
Command Prompt Here (XP)
Op drive en directory:
Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\Directory\shell\cmdhere] @="CMD Prompt Here" [HKEY_CLASSES_ROOT\Directory\shell\cmdhere\command] @="C:\\Windows\\System32\\cmd.exe /k cd \"%1\"" [HKEY_CLASSES_ROOT\Drive\shell\cmdhere] @="CMD Prompt Here" [HKEY_CLASSES_ROOT\Drive\shell\cmdhere\command] @="C:\\Windows\\System32\\cmd.exe /k cd \"%1\""
Disable Archiving in Outlook
Getest met Outlook 2003.
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\11.0\Outlook\Preferences] "DoAging"=dword:00000000 "PromptForAging"=dword:00000000 "DeleteExpired"=dword:00000000 "ArchiveOld"=dword:00000000 "ArchiveMount"=dword:00000000 "ArchiveDelete"=dword:00000000
Disable Windows Update driversearch
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DriverSearching] "DontSearchWindowsUpdate"=dword:00000001 "DontPromptForWindowsUpdate"=dword:00000001
Firewall uit en aan (XP SP2)
Voor als de toegang tot de Windows Firewall Control Panel is uitgeschakeld.
Herstart vereist.
Aanzetten
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\StandardProfile] "EnableFirewall"=dword:00000001 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess] "Start"=dword:00000002
Uitzetten
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\StandardProfile] "EnableFirewall"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess] "Start"=dword:00000004
Meer informatie in: Deploying Windows Firewall Settings for Microsoft Windows XP with Service Pack 2
Turn on Logfiles for troubleshooting Group Policy
On the client
Windows Registry Editor Version 5.00
// Enable Client Log Files for Troubleshooting Group Policy
// Group Policy core (UserEnv) and registry CSE: %windir%\debug\usermode\UserEnv.log
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"UserEnvDebugLevel"=dword:00030002
// Security CSE: %windir%\security\logs\winlogon.log
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}]
"ExtensionDebugLevel"=dword:00000002
// Folder Redirection CSE: %windir%\debug\usermode\fdeploy.lng
// Software Installation CSE: %windir%\usermode\appmgmt.log
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Diagnostics]
"FdeployDebugLevel"=dword:0000000f
"Appmgmtdebuglevel"=dword:0000009b
// Windows Installer (deployment-related actions): %windir%\temp\MSI*.log
// Windows Installer (user-initiated actions): %temp%\MSI*.log
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer]
"Logging"="voicewarmup"
"Debug"=dword:00000003
At least the UserEnvDebugLevel and ExtensionDebugLevel registry changes require a reboot to take effect. (Tested on Windows Server 2012 R2.)
On the server
Windows Registry Editor Version 5.00 // Server Log Files for Troubleshooting Group Policy // %temp%\gpmgmt.log // Use gpmgmttracelevel 1 for error logging only // Use gpmgmttracelevel 2 for error and verbose logging [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Diagnostics] "gpmgmttracelevel"="2" "gpmgmtlogfileonly"="1" // %windir%\debug\usermode\gpedit.log // %windir%\debug\usermode\gptext.log [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "GPEditDebugLevel"=dword:00010002 "GPTextDebugLevel"=dword:00010002
Change MyComputer icon name
- Open regedit.
- Go to HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}.
- Modify the value of LocalizedString, you can use variables like %computername%, %username% and text.
Examples:
Give My Computer the name of this computer (LocalizedString = %computername%):
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}]
"LocalizedString"=hex(2):25,00,43,00,6f,00,6d,00,70,00,75,00,74,00,65,00,72,00,\
6e,00,61,00,6d,00,65,00,25,00,00,00
Give My Computer the name of the currently logged on user combined with the name of this computer (LocalizedString = %username% on %computername%):
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}]
"LocalizedString"=hex(2):25,00,55,00,53,00,45,00,52,00,4e,00,41,00,4d,00,45,00,\
25,00,20,00,6f,00,6e,00,20,00,25,00,43,00,4f,00,4d,00,50,00,55,00,54,00,45,\
00,52,00,4e,00,41,00,4d,00,45,00,25,00,00,00
Windows 7
On Windows 7 the Administrator(s) do not have write access to HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}, TrustedInstaller has been given those rights.
To enable the import of the registry key from the examples above, do the following:
- Download SetACL.
- Use the following batch file:
SET RKEY=HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
SET TMPDIR=C:\Temp
REM Save current ACL and owner on RKEY
setacl -on "%RKEY%" -ot reg -actn list -lst "f:sddl;w:d,s,o" -bckp "%TMPDIR%\setacl-backup.txt"
REM Temporarily grant Administrator full access to the RKEY
setacl -on "%RKEY%" -ot reg -actn setowner -ownr "n:Administrator"
setacl -on "%RKEY%" -ot reg -actn ace -ace "n:Administrator;p:full"
%SYSTEMROOT%\regedit.exe /s UsernameOnComputer.reg
REM Restore saved ACL on RKEY
setacl -on "%RKEY%" -ot reg -actn restore -bckp "%TMPDIR%\setacl-backup.txt"
My Computer, My Desktop, My Documents, Internet Explorer op de desktop aan/uit zetten
Dit word geregeld door de DWORD waarde van onderstaande GUID keys op 0 te zetten voor tonen of 1 voor verbergen.
Dit word ook nog eens per start menu, classic of nieuw, ingesteld.
Onderstaande zet de My Documents, My Computer en My Network Places zichtbaar op de desktop.
Windows Registry Editor Version 5.00
// 00000000 = visible on desktop
// 00000001 = not visible on desktop
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel]
// My Documents
"{450D8FBA-AD25-11D0-98A8-0800361B1103}"=dword:00000000
// My Computer
"{20D04FE0-3AEA-1069-A2D8-08002B30309D}"=dword:00000000
// My Network Places
"{208D2C60-3AEA-1069-A2D7-08002B30309D}"=dword:00000000
// Internet Explorer (only < IE 7 ?)
"{871C5380-42A0-1069-A2EA-08002B30309D}"=dword:00000000
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu]
// My Documents
"{450D8FBA-AD25-11D0-98A8-0800361B1103}"=dword:00000000
// My Computer
"{20D04FE0-3AEA-1069-A2D8-08002B30309D}"=dword:00000000
// My Network Places
"{208D2C60-3AEA-1069-A2D7-08002B30309D}"=dword:00000000
// Internet Explorer (only < IE 7 ?)
"{871C5380-42A0-1069-A2EA-08002B30309D}"=dword:00000000
Om op een Windows Server 2003 x64 Standard Terminal Server de “My…” iconen aan te levere op de desktop kun je het volgende registerbestand importeren:
Windows Registry Editor Version 5.00
// 00000000 = visible on desktop
// 00000001 = not visible on desktop
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel]
// My Documents
"{450D8FBA-AD25-11D0-98A8-0800361B1103}"=dword:00000000
// My Computer
"{20D04FE0-3AEA-1069-A2D8-08002B30309D}"=dword:00000000
// My Network Places
"{208D2C60-3AEA-1069-A2D7-08002B30309D}"=dword:00000000
// Internet Explorer (only < IE 7 ?)
"{871C5380-42A0-1069-A2EA-08002B30309D}"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu]
// My Documents
"{450D8FBA-AD25-11D0-98A8-0800361B1103}"=dword:00000000
// My Computer
"{20D04FE0-3AEA-1069-A2D8-08002B30309D}"=dword:00000000
// My Network Places
"{208D2C60-3AEA-1069-A2D7-08002B30309D}"=dword:00000000
// Internet Explorer (only < IE 7 ?)
"{871C5380-42A0-1069-A2EA-08002B30309D}"=dword:00000000
For the Windows 7 version of My Documents
Windows Registry Editor Version 5.00
// 00000000 = visible on desktop
// 00000001 = not visible on desktop
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel]
"{59031a47-3f72-44a7-89c5-5595fe6b30ee}"=dword:00000000
Page Setup Internet Explorer (XP (SP2))
De standaard(?) instellingen:
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PageSetup] "header"="&w&bPage &p of &P" "footer"="&u&b&d" "margin_bottom"="0.75000" "margin_left"="0.75000" "margin_right"="0.75000" "margin_top"="0.75000"
Plaintext passwords aanzetten
Bijv. voor het maken van een verbinding met een oude ( v2.0 en lager?) Samba server (XP):
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation\parameters] "enableplaintextpassword"=dword:00000001
Proxy aan- en uitzetten voor de huidige gebruiker
Getest op Windows XP.
Aanzetten
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings] "ProxyEnable"=dword:00000001
Uitzetten
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings] "ProxyEnable"=dword:00000000
Remote Desktop - Enable / Disable
Enable
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server] "fDenyTSConnections"=dword:00000000
REM Enable RDP connections. "%SYSTEMROOT%\system32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t "REG_DWORD" /d 0 /f
Disable
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server] "fDenyTSConnections"=dword:00000001
REM Disable RDP connections. "%SYSTEMROOT%\system32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t "REG_DWORD" /d 1 /f
Enable / Disable multiple sessions per user
Enable
REM Enable multiple sessions per user. "%SYSTEMROOT%\system32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fSingleSessionPerUser /t "REG_DWORD" /d 0 /f
Disable
REM Disablemultiple sessions per user. "%SYSTEMROOT%\system32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fSingleSessionPerUser /t "REG_DWORD" /d 1 /f
Screensaver
Voor het instellen van de screensaver (XP):
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Control Panel\Desktop] "SCRNSAVE.EXE"="C:\\WINDOWS\\system32\\ss3dfo.scr"
Bron: snapshot van registry wijziging na veranderen screensaver.
Script Debugger uitzetten in Internet Explorer XP
Service Pack 1:
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Disable Script Debugger"="yes"
Service Pack 2:
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Disable Script Debugger"="yes" "DisableScriptDebuggerIE"="yes"
Security Center waarschuwingen aan- en uitzetten (XP SP2)
Aanzetten
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\security center] "FirewallDisableNotify"=dword:00000000 "AntiVirusDisableNotify"=dword:00000000 "UpdatesDisableNotify"=dword:00000000
Uitzetten
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\security center] "FirewallDisableNotify"=dword:00000001 "AntiVirusDisableNotify"=dword:00000001 "UpdatesDisableNotify"=dword:00000001
Wallpaper
Onder HKCU is voor de huidige gebruiker (getest op XP, opnieuw inloggen is mogelijk vereist), onder HKU\.DEFAULT is voor het loginscherm.
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Control Panel\Colors] "Background"="255 255 255" [HKEY_CURRENT_USER\Control Panel\Desktop] "Wallpaper"="C:\\WINDOWS\\desktop.bmp" "WallpaperStyle"="0" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] "ListviewShadow"=dword:00000000 [HKEY_USERS\.DEFAULT\Control Panel\Colors] "Background"="255 255 255" [HKEY_USERS\.DEFAULT\Control Panel\Desktop] "Wallpaper"="C:\\WINDOWS\\desktop.bmp" "WallpaperStyle"="0" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] "ListviewShadow"=dword:00000000
“Background” is een RGB waarde 255 255 255 staat voor wit.
“WallpaperStyle” is de stijl van de wallpaper:
0 = centered
1 = tiled
2 = stretched
ListviewShadow op 0 zorgt ervoor dat er geen witte tekst met een zwarte schaduw op de, in dit geval witte, desktopachtergrond word getekend.
Bron voor WallpaperStyle: Specify the Background Image and Wallpaper Style (Windows 2000/Me/XP)
Set language for non-Unicode programs to English (US)
Import the following registry key and reboot:
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nls\Language] "Default"="0409"
Source:eggheadcafe - How to change Language for non-unicode programs from registry
Disable XP Search Assistants
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState] "Use Search Asst"="no"
Disable simple file sharing
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa] "forceguest"=dword:00000000
Windows Media Player settings
Windows Registry Editor Version 5.00 // Computer Configuration\Administrative Templates\Windows Components\Windows Media Player: // Prevent Automatic Updates (Media Player 9 and later) // Do Not Show First Use Dialog Boxes (Media Player 9 and later) // Prevent Media Sharing (Media Player 11 and later) [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsMediaPlayer] "DisableAutoUpdate"=dword:00000001 "GroupPrivacyAcceptance"=dword:00000001 "PreventLibrarySharing"=dword:00000001
The GroupPrivacyAcceptance is the group policy registry key for all users on the computer.
To disable it for just one user, add the following to the HKCU:
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences] "AcceptedPrivacyStatement"=dword:00000001
Source:Coretech - Disable the Windows Media Player wizard on first run
Re-register Lucida fonts from JRE dir
When you install an application that comes with its own private Java Runtime Environment, the Lucida fonts that go with that private JRE are registered systemwide. To reset these to the JRE directory import the following (valid for Java 1.6 32-bit on 32-bit Windows and Java 1.6 64-bit on 64-bit Windows):
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts] "Lucida Bright Demibold (TrueType)"="C:\\Program Files\\Java\\jre6\\lib\\fonts\\LucidaBrightDemiBold.ttf" "Lucida Bright Demibold Italic (TrueType)"="C:\\Program Files\\Java\\jre6\\lib\\fonts\\LucidaBrightDemiItalic.ttf" "Lucida Bright Italic (TrueType)"="C:\\Program Files\\Java\\jre6\\lib\\fonts\\LucidaBrightItalic.ttf" "Lucida Bright Regular (TrueType)"="C:\\Program Files\\Java\\jre6\\lib\\fonts\\LucidaBrightRegular.ttf" "Lucida Sans Demibold (TrueType)"="C:\\Program Files\\Java\\jre6\\lib\\fonts\\LucidaSansDemiBold.ttf" "Lucida Sans Regular (TrueType)"="C:\\Program Files\\Java\\jre6\\lib\\fonts\\LucidaSansRegular.ttf" "Lucida Sans Typewriter Bold (TrueType)"="C:\\Program Files\\Java\\jre6\\lib\\fonts\\LucidaTypewriterBold.ttf" "Lucida Sans Typewriter Regular (TrueType)"="C:\\Program Files\\Java\\jre6\\lib\\fonts\\LucidaTypewriterRegular.ttf"
Remove Devices and Printers from Start Menu
Tested on Windows 7/2008R2:
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] "Start_ShowPrinters"=dword:00000000
Source: regshot and MSFN Windows 7 Forum - Devices and Printers, how to remove from start menu