注册表-禁用程序-仅开放程序-禁用注册表

注册表Policies的权限设置，system为完全控制，其他系统管理员账户都为只读。可防止360修复注册表禁用。可用gpedit.msc恢复注册表。禁用gpedit.msc可设置mmc.exe的权限。

 

 

注册表内容：

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDriveTypeAutoRun"=dword:00000091
"NoSharedDocuments"=dword:00000000
"Intellimenus"=dword:00000000
"NoRecentDocsHistory"=dword:00000000
"ClearRecentDocsOnExit"=dword:00000000
"NoInstrumentation"=dword:00000000
"NoThumbnailCache"=dword:00000001
"ForceStartMenuLogOff"=dword:00000001
"NoResolveTrack"=dword:00000001
"DisallowRun"=dword:00000001
"RestrictRun"=dword:00000001

 

不许运行的程序：

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun]
"1"="notepad.exe"

 

仅允许运行的程序：

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictRun]
"1"="cmd.exe"
"2"="mmc.exe"

 

禁用注册表：

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableRegistryTools"=dword:00000002

转载于:https://blog.51cto.com/huangbao/772202