User Tools

Site Tools


os:windows:registry

De Windows registry

Handige lokaties

Folder redirection

Opgeslagen in waardes onder:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

Bron:Deploying Windows XP Part I:Planning
Bron2:Registry Settings for Folder Redirection in Windows

PATH

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment]
"Path"="%SystemRoot%\\system32;%SystemRoot%;%SystemRoot%\\System32\\Wbem"

Key waar ook Citrix gebruik van maakt

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server

Instelling voor default printer

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
"Device"="\\\\printserver\\printernaam,winspool,Ne04:"

Proxy instellingen met exclusions voor dial-up verbinding

Voor het via de registry overzetten van proxy instellingen voor dialup moet een snapshot gemaakt worden van de onderstaande registry keys. Alleen ““Mijn Verbinding”=hex(3):hexadecimale waarde” is niet voldoende.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"DefaultConnectionSettings"=hex(3):hexadecimale waarde
"SavedLegacySettings"=hex(3):hexadecimale waarde
"Mijn Verbinding"=hex(3):hexadecimale waarde

[HKEY_CURRENT_USER\RemoteAccess\Profile\Mijn Verbinding]
"EnableAutodisconnect"=dword:00000000
"DisconnectIdleTime"=dword:00000014
"EnableExitDisconnect"=dword:00000000
"RedialAttempts"=dword:0000000A
"RedialWait"=dword:00000005

Run Registry Keys

Article last modified on 09-27-1995
------------------------------------------
The information in this article applies to:
 
 - Microsoft Windows 95
----------------------------------------------
 
SUMMARY
=======
 
There are seven Run keys in the registry that 
cause programs to be run automatically:
 
1. HKEY_LOCAL_MACHINE\Software\Microsoft\
   Windows\CurrentVersion\Run
 
2. HKEY_CURRENT_USER\Software\Microsoft\
   Windows\CurrentVersion\Run
 
3. HKEY_LOCAL_MACHINE\Software\Microsoft\
   Windows\CurrentVersion\RunOnce
 
4. HKEY_CURRENT_USER\Software\Microsoft\
   Windows\CurrentVersion\RunOnce
 
5. HKEY_LOCAL_MACHINE\Software\Microsoft\
   Windows\CurrentVersion\RunServices
 
6. HKEY_LOCAL_MACHINE\Software\Microsoft\
   Windows\CurrentVersion\RunServicesOnce
 
7. HKEY_LOCAL_MACHINE\Software\Microsoft\
   Windows\CurrentVersion\RunOnce\Setup
 
MORE INFORMATION
================
 
Keys 1-4 are run each time a new user logs in.
 
Keys 5-6 are run in the background when the logon 
dialog box first appears,or at this stage of the 
boot process if there is no logon. These keys are
for background services such as remote registry 
service and are run only once per boot.
 
Key 7 is run as part of Setup's first-boot activities, 
or after you use the Add/Remove Programs Wizard.
 
Under each of these keys is a series of subkeys. 
The subkeys are used to allow multiple sub-entries 
to exist without overwriting one another.
 
The value for a subkey is a command line. For 
keys 1-4, the command line can be prefixed with 
an asterisk to indicate that it should be run even 
in Safe mode. By default, Run keys are ignored in 
Safe mode. For keys 3-4, the command line can be 
prefixed with an exclamation point to defer deletion of
the subkey until after the command has been completed. 
You cannot combine the two prefixes.
 
For keys 3, 4, and 6, the subkey is deleted before the 
command line is run unless overridden as noted above. 
As a result, if a RunOnce operation fails to run 
properly, the component that failed will not be asked 
to run again when the next time you start the computer.
 
Key 7 is used only by Setup. This key displays 
the progress dialog box as the keys are run one at 
a time. For key 7, the name of the subkey is the
name that is displayed in the dialog box.
 
KBCategory: kbsetup
KBSubcategory: win95
Additional reference words: 95
=============================================================================
Copyright Microsoft Corporation 1995.

Bron:Wilson WindowWare Tech Support - Registry Run Keys

Add or Remove Programs

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall

Bron:Microsoft Support - How to manually remove programs from the Add or Remove Programs tool

Add or Remove Programs cache

Hier word een cache bijgehouden van de lijst met applicaties onder Add or Remove Programs:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache

Zie ook:Microsoft Support - Add/Remove Programs tool displays installed programs incorrectly

Verschil tussen ControlSet00x en CurrentControlSet

ControlSet001 may be the last control set you booted with, while ControlSet002 could be what is known as the last known good control set, or the control set that last successfully booted Windows NT. The CurrentControlSet subkey is really a pointer to one of the ControlSetXXX keys.

The most valuable and reliable control set is CurrentControlSet. If you need to modify system settings in the Registry, CurrentControlSet is the best subkey to choose because you know that it is the correct control set. You also know that if your modifications harm your system configuration, you will still be able to boot using the last known good control set.

BRON: http://support.microsoft.com/kb/q100010/

Gratis registry tools

Bestandsassociatie

Een entry in HKEY_CURRENT_USER\Software\Classes\Applications\ zorgt ervoor dat een applicatie verschijnt in de Open With lijst.
Om een bestand met een bepaalde extensie te openen met dat programma moet er nog een entry staan in HKEY_CURRENT_USER\SOFTWARE\Classes\ met de naam van het type extensie (die naam is te zien door onder HKEY_CLASSES_ROOT te kijken naar de extensie, in dit geval HKEY_CLASSES_ROOT\.2ls, dan is daar de naam te zien onder Data bij de (Default) entry). Wat ik nu in HKEY_CURRENT_USER\SOFTWARE\Classes\2ls_auto_file heb neergezet staat normaal onder HKEY_LOCAL_MACHINE\SOFTWARE\Classes\2ls_auto_file, maar dezelfde entry werkt ook als je 'm onder HKEY_CURRENT_USER zet en daar heb je geen admin rechten voor nodig.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\SOFTWARE\Classes\2ls_auto_file]
@=""

[HKEY_CURRENT_USER\SOFTWARE\Classes\2ls_auto_file\shell]

[HKEY_CURRENT_USER\SOFTWARE\Classes\2ls_auto_file\shell\open]

[HKEY_CURRENT_USER\SOFTWARE\Classes\2ls_auto_file\shell\open\command]
@="\"C:\\Program Files\\Voorbeeld\\Voorbeeldapp.exe\" \"%1\""

[HKEY_CURRENT_USER\Software\Classes\Applications\Voorbeeldapp.exe]

[HKEY_CURRENT_USER\Software\Classes\Applications\Voorbeeldapp.exe\shell]

[HKEY_CURRENT_USER\Software\Classes\Applications\Voorbeeldapp.exe\shell\open]

[HKEY_CURRENT_USER\Software\Classes\Applications\Voorbeeldapp.exe\shell\open\command]
@="\"C:\\Program Files\\Voorbeeld\\Voorbeeldapp.exe\" \"%1\""

Internet Explorer

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections

SavedLegacySettings in User's hive names the ProxyServer

DefaultConnectionSetting
http://kixtart.org/forums/ubbthreads.php?ubb=showflat&Number=170982&page=1

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings
ProxyServer REG_SZ proxy.naam.nl:8080

ProxyEnable op 1 = vinkje ProxyEnable op 0 = geen vinkje

IE moet worden herstart voordat de instelling wordt meegenomen.

Lokatie My Computer shell extensions

My Computer shell extensions. Te vinden onder:

HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}

Run, RunOnce, RunOnceEx

Description of the RunOnceEx Registry Key
http://support.microsoft.com/kb/310593

Syntax for the RunOnceEx Registry Key
http://support.microsoft.com/kb/232509

Start Menu

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs:Order = 0800000etc.

Tweaks HKEY_CURRENT_USER

Windows Registry Editor Version 5.00 
;----------------------------------------------
;Tweaks to improve the functionality of Windows
;----------------------------------------------
;Disable the Desktop Cleanup Wizard
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\CleanupWiz]
"NoRun"=dword:00000001
;NoLowDiskSpaceChecks won\'t check if you are low on diskspace and pop up a balloon telling you.
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoLowDiskSpaceChecks"=dword:00000001
;Change MenuShowDelay (Start Menu load speed)
[HKEY_CURRENT_USER\Control Panel\Desktop]
"MenuShowDelay"="20"
;Disable Recent Documents Menu
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoRecentDocsMenu"=hex:01,00,00,00
;Remove "Shortcut to" on shortcuts
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer]
"link"=hex:00,00,00,00
;Remove "set programs default" from startmenu
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoSMConfigurePrograms"=dword:00000001
;Disable Notify on new apps
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"Start_NotifyNewApps"=dword:00000000
;Do not group similar items on the Taskbar
;----------------------------------------------
Start Menu and Folder Settings Twaks
;----------------------------------------------
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"Hidden"=dword:00000001
"ShowCompColor"=dword:00000001
"HideFileExt"=dword:00000000
"DontPrettyPath"=dword:00000000
"ShowInfoTip"=dword:00000001
"HideIcons"=dword:00000000
"MapNetDrvBtn"=dword:00000000
"WebView"=dword:00000000
"Filter"=dword:00000000
"SuperHidden"=dword:00000001
"SeparateProcess"=dword:00000000
"ListviewAlphaSelect"=dword:00000001
"ListviewShadow"=dword:00000001
"ListviewWatermark"=dword:00000001
"TaskbarAnimations"=dword:00000001
"StartMenuInit"=dword:00000002
"StartButtonBalloonTip"=dword:00000002
"CascadeNetworkConnections"="YES"
"TaskbarSizeMove"=dword:00000000
"EnableBalloonTips"=dword:00000000
"Start_LargeMFUIcons"=dword:00000001
"Start_MinMFU"=dword:00000006
"Start_ShowControlPanel"=dword:00000002
"Start_EnableDragDrop"=dword:00000001
"StartMenuFavorites"=dword:00000000
"Start_ShowHelp"=dword:00000001
"Start_ShowMyComputer"=dword:00000001
"Start_ShowMyMusic"=dword:00000002
"Start_ShowPrinters"=dword:00000001
"Start_ShowRun"=dword:00000001
"Start_ScrollPrograms"=dword:00000000
"Start_ShowSearch"=dword:00000000
"Start_ShowRecentDocs"=dword:00000002
"Start_AutoCascade"=dword:00000001
"Start_NotifyNewApps"=dword:00000000
"Start_AdminToolsRoot"=dword:00000002
"StartMenuAdminTools"="YES"
"NoNetCrawling"=dword:00000000
"FolderContentsInfoTip"=dword:00000001
"FriendlyTree"=dword:00000001
"WebViewBarricade"=dword:00000001
"DisableThumbnailCache"=dword:00000000
"ShowSuperHidden"=dword:00000001
"ClassicViewState"=dword:00000000
"PersistBrowsers"=dword:00000000
"Start_ShowNetPlaces_ShouldShow"=dword:00000041
"Start_ShowNetPlaces"=dword:00000000
"Start_ShowNetConn_ShouldShow"=dword:00000042
"StartMenuRun"=dword:00000001
"StartMenuChange"=dword:00000001
"CascadeControlPanel"="YES"
"CascadePrinters"="NO"
"StartMenuScrollPrograms"="NO"
"IntelliMenus"=dword:00000001
;----------------------------------------------
;Windows Explorer and Internet Explorer Tweaks
;----------------------------------------------
;Alphabetically sort Favorites and start menu
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2]
;Disable IE just in time debugger
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Disable Script Debugger"="yes"
;Search with google from the address bar instead of MSN
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\G]
@="http://www.google.com/search?q=%s"
;Disable webservice for searching file-extensions
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer]
"NoInternetOpenWith"=dword:00000000

Bron: http://unattended.msfn.org/unattended.xp/view/web/17/

Tweaks HKEY_LOCAL_MACHINE

Windows Registry Editor Version 5.00 
;-----------------------
;Operating System Tweaks
;-----------------------
;Disable Automatic Restart in the event of a BSOD
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl]
"AutoReboot"=dword:00000000
;Speed up shutdown
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control]
"WaitToKillServiceTimeout"="3000"
;Disables Error Reporting, but notifies when errors occur
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting]
"DoReport"=dword:00000000
;Do not use Simple File Sharing
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"forceguest"=dword:00000000
;Speed up Network Browsing by removing Network Scheduled Tasks
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RemoteComputer\
NameSpace\{D6277990-4C6A-11CF-8D87-00AA0060F5BF}]
;Disables Windows Tour bubble popup
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Applets\Tour]
"RunCount"=dword:00000000
;Disable System Restore
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000001
;Recycle bin uses 3% of available space (not 10%)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\BitBucket]
"Percent"=dword:00000003
;Disable Autoupdates
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoUpdate"=dword:00000001
;Disable Autoupdates
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update]
"AUOptions"=dword:00000001
"AUState"=dword:00000007
;Change the code page for Cyrillic support
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nls\CodePage]
"1252"="c_1251.nls"
[ HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
"KeepRASConnections"="1"
;Make the Windows XP registration with Microsoft unnecessary
[HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion]
"RegDone"="1"
;---------------
;Services Tweaks
;---------------
;Disable Messenger Service (to stop spam. Does not affect MSN or Windows Messenger)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Messenger]
"Start"=dword:00000004
;Disable Remote Registry Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
"Start"=dword:00000004
;Disable UPS
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UPS]
"Start"=dword:00000004
;Disable System Restore Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srservice]
"Start"=dword:00000004
;Disable Indexing Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CiSvc]
"Start"=dword:00000004
;Disable Wireless Zero Configuration
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WZCSVC]
"Start"=dword:00000004
;Disable Smart Card Helper
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SCardDrv"]
"Start"=dword:00000004
;Disable Portable Media Serial Number
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WmdmPmSN"]
"Start"=dword:00000004
;Disable Remote Desktop Help Session Manager
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RDSessMgr"]
"Start"=dword:00000004
;Disable Imapi CD-Burning Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ImapiService]
"Start"=dword:00000004
;Disable IPSEC Services
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent"]
"Start"=dword:00000004
;Disable Security Center
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc]
"Start"=dword:00000004 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv]
"Start"=dword:00000004
;----------------------------------------------
;Tweaks to improve the functionality of Windows
;----------------------------------------------
;Remove Shared Documents from My Computer
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer
\NameSpace\DelegateFolders\{59031a47-3f72-44a7-89c5-5595fe6b30ee}]
;Allow renaming of Recycle Bin
[HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\ShellFolder]
"Attributes"=hex:50,01,00,20
"CallForAttributes"=dword:00000000
;Administrative tools on Control Panel
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel
\NameSpace\{D20EA4E1-3957-11d2-A40B-0C5020524153}]
@="Administrative Tools"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"TaskbarGlomming"=dword:00000000
;Disable webservice for searching file-extensions (see HKCU for the second part)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system]
"NoInternetOpenWith"=dword:00000001
; Don\'t Search Windows Update For Drivers (New HW Detected)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DriverSearching]
"DontSearchWindowsUpdate"=dword:00000001
"DontPromptForWindowsUpdate"=dword:00000001
  ;Show protected operating system files
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder
\SuperHidden]
"DefaultValue"=dword:00000001
  ;Speeds up copying/moving of zip files (disable windows built in zip functionality)
[-HKEY_CLASSES_ROOT\.zip\CompressedFolder]
[-HKEY_CLASSES_ROOT\CLSID\{E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CompressedFolder]

;----------------------------------------------
;Other Tweaks
;----------------------------------------------
;Disables Preview of Movie file formats (allowing you to move/rename/delete without errors)
[-HKEY_CLASSES_ROOT\.avi\ShellEx]
[-HKEY_CLASSES_ROOT\.mpg\ShellEx]
[-HKEY_CLASSES_ROOT\.mpe\ShellEx]
[-HKEY_CLASSES_ROOT\.mpeg\ShellEx]
; Remove Briefcase And Rich-Text-Document From New Menu
[-HKEY_CLASSES_ROOT\.bfc\ShellNew]
[-HKEY_CLASSES_ROOT\.rtf\ShellNew]
[-HKEY_CLASSES_ROOT\.bmp\ShellNew]
[-HKEY_CLASSES_ROOT\.wav\ShellNew]
[-HKEY_CLASSES_ROOT\.zip\CompressedFolder\ShellNew]

Bron: http://unattended.msfn.org/unattended.xp/view/web/17/

os/windows/registry.txt · Last modified: 2010/07/21 15:25 by bas

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki