winsecurity2.html

黑客培训教程

			<p>Links</p>
		</td>
		<td>
			<p>enable/disable links settings</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>Messaging</p>
		</td>
		<td>
			<p>enable/disable MS messaging settings</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>Profiles</p>
		</td>
		<td>
			<p>enable/disable profiles settings</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>ProgramsTab</p>
		</td>
		<td>
			<p>enable/disable programs tab</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>Proxy</p>
		</td>
		<td>
			<p>enable/disable proxy server settings</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>Ratings</p>
		</td>
		<td>
			<p>enable/disable ratings settings</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>ResetWebSettings</p>
		</td>
		<td>
			<p>enable/disable Reset web settings</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>SecAddSites</p>
		</td>
		<td>
			<p>enable/disable Security Add sites settings</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>SecChangeSettings</p>
		</td>
		<td>
			<p>enable/disable security changes</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>SecurityTab</p>
		</td>
		<td>
			<p>enable/disable security tab</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>Settings</p>
		</td>
		<td>
			<p>enable/disable settings boxes</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>Wallet</p>
		</td>
		<td>
			<p>enable/disable MS wallet settings (MS IE 5.xx and newer ONLY)</p>
		</td>
	</tr>
</table> 

<h4>Change/Add Restrictions And Features</h4>

<p>If you want to make restrictions to what users can do or use on there computer without 
having to run poledit.exe, you can edit the registry. You can add and delete Windows 
features by editing the registry. In this key the value 0 is ON and the value 1 is Off.</p> 
<p>Example: to Save Windows setting add or modify the value name NoSaveSettings to 0, if set 
to 1 Windows will not save settings. And NoDeletePrinter set to 1 will not allow the user 
to delete a printer.</p>

<p>The same key shows up at:</p>
<p class="white">HKEY_USERS\(yourprofilename)\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer</p>
<p>so change it there also if you are using different profiles.</p>

<ol>
	<li>Open RegEdit</li>
	<li>Go to HKEY_CURRENT_USER\Software\Microsoft\CurrentVersion\Policies</li>
	<li>Go to the Explorer Key (Additional keys that can be created under Policies are System, Explorer, Network and WinOldApp)</li>
	<li>You can then add DWORD or binary values set to 1 in the appropriate keys for ON and 0 for off.</li>
</ol>
<p>The following keys are valid:</p>

<table align="center" border="1" cellpadding="0" cellspacing="0" width="80%">
	<tr>
		<th>
			<p>Key Name</p>
		</th>
		<th>
			<p>Description</p>
		</th>
	</tr>
	<tr>
		<td valign="top">
			<p>NoDeletePrinter</p>
		</td>
		<td>
			<p>disables deletion of printers</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>NoAddPrinter</p>
		</td>
		<td>
			<p>disables addition of printers</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>NoRun</p>
		</td>
		<td>
			<p>disables run command</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>NoSetFolders</p>
		</td>
		<td>
			<p>removes folders from settings on Start menu</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>NoSetTaskbar</p>
		</td>
		<td>
			<p>removes taskbar from settings on Start menu</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>NoFind</p>
		</td>
		<td>
			<p>removes the find command</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>NoDrives</p>
		</td>
		<td>
			<p>hides drives in My Computer</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>NoNetHood</p>
		</td>
		<td>
			<p>hides the network neighborhood</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>NoDesktop</p>
		</td>
		<td>
			<p>hides all icons on the desktop</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>NoClose</p>
		</td>
		<td>
			<p>disables shutdown</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>NoSaveSettings</p>
		</td>
		<td>
			<p>don't save settings on exit</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>DisableRegistryTools</p>
		</td>
		<td>
			<p>disable registry editing tools</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>NoRecentDocsMenu</p>
		</td>
		<td>
			<p>hides the documents shortcut at the Start button</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>NoRecentDocsHistory</p>
		</td>
		<td>
			<p>clears history of documents</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>NoFileMenu</p>
		</td>
		<td>
			<p>hides the file menu in explorer</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>NoActiveDesktop</p>
		</td>
		<td>
			<p>no active desktop</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>NoActiveDesktopChanges</p>
		</td>
		<td>
			<p>no changes allowed to active desktop</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>NoInternetIcon</p>
		</td>
		<td>
			<p>no internet explorer icon on the desktop</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>NoFavoritesMenu</p>
		</td>
		<td>
			<p>hides the favorite menu</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>NoChangeStartMenu</p>
		</td>
		<td>
			<p>disables changes to the Start memu</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>NoFolderOptions</p>
		</td>
		<td>
			<p>hides the folder options in the explorer</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>ClearRecentDocsOnExit</p>
		</td>
		<td>
			<p>empty the recent documents folder on reboot</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>NoLogoff</p>
		</td>
		<td>
			<p>hides the log off option in the Start menu</p>
		</td>
	</tr>
	<tr>
		<td valign="top">
			<p>RestrictRun</p>
		</td>
		<td>
			<p>disables all exe programs exept for those listed in the RestrictRun subkey</p>
		</td>
	</tr>
</table>

<a name="policyeditor"></a>	
<h4>POLICY EDITOR</h4>
<p>Tips/Info</p>

<p>INDEX</p>
<ol>
	<li>Customize your system with the System Policy Editor</li>
	<li>Don't want someone else changing your Windows?</li>
	<li>Restrictions without running Poledit</li>
	<li>Poledit Tips</li>
</ol>

<p>1. Power users: Customize your system with the System Policy Editor</p>
<p>The policy editor comes free on the Win9x CD. Here's how to install it: 
Open the Control Panel and double-click on the Add/Remove Programs icon. 
Select the Windows Setup tab, then click on the Have Disk button. Click on the 
Browse button and find the ADMIN\APPTOOLS\POLEDIT folder on your Win9x installation CD. 
Click on OK twice. Select both System Policy Editor and Group Policies 
and click on the Install button.</p>

<p>2. Don't want someone else changing your Windows environment?</p>
<p>Use the System Policy Editor, located on the Win 95 installation CD-ROM. 
Don't put the Policy Editor on your own hard drive or you'll make it too easy 
for others to change your configuration. When you need it, pop in the CD-ROM, select 
Start... Run, and run the command d:\admin\apptools\poledit\poledit.exe, 
where d is your CD-ROM drive.</p>

<p>3. Restrictions without running Poledit:</p>
<p>If you want to make restrictions to what users can do without having to 
running Poledit, changes can be made directly to the Registry.</p>

<p>This will allow you to make a .reg file with the specific restrictions you 
want and importing them all at once.</p>

<ol>
	<li>Start Regedit</li>
	<li>Go to <font class="white">HKEY_Current_User\Software\Microsoft\CurrentVersion\Policies</font></li>
	<li>There should already be at least a Explorer key</li>
	<li>Additional keys that can be created under Policies are System, Network and WinOldApp</li>
	<li>You can then add DWORD values set to 1 in the appropriate keys</li>
	<li>In the Explorer key you can add:<br><br></li>
	<table align="center" border="1" cellpadding="0" cellspacing="0" width="80%">
		<tr>
			<th>
				<p>Key Name</p>
			</th>
			<th>
				<p>Description</p>
			</th>
		</tr>
		<tr>
			<td valign="top">
				<p>NoDeletePrinter</p>
			</td>
			<td>
				<p>Disables Deletion of Printers</p>
			</td>
		</tr>
		<tr>
			<td valign="top">
				<p>NoAddPrinter</p>
			</td>
			<td>
				<p>Disables Addition of Printers</p>
			</td>
		</tr>
		<tr>
			<td valign="top">
				<p>NoRun</p>
			</td>
			<td>
				<p>Disables Run Command</p>
			</td>
		</tr>
		<tr>
			<td valign="top">
				<p>NoSetFolders</p>
			</td>
			<td>
				<p>Removes Folders from Settings on Start Menu</p>
			</td>
		</tr>
		<tr>
			<td valign="top">
				<p>NoSetTaskbar</p>
			</td>
			<td>
				<p>Removes Taskbar from Settings on Start Menu </p>
			</td>
		</tr>
		<tr>
			<td valign="top">
				<p>NoFind</p>
			</td>
			<td>
				<p>Removes the Find Command</p>
			</td>
		</tr>
		<tr>
			<td valign="top">
				<p>NoDrives</p>
			</td>
			<td>
				<p>Hides Drives in My Computer</p>
			</td>
		</tr>
		<tr>
			<td valign="top">
				<p>NoNetHood</p>
			</td>
			<td>
				<p>Hides the Network Neighborhood</p>
			</td>
		</tr>
		<tr>
			<td valign="top">
				<p>NoDesktop</p>
			</td>
			<td>
				<p>Hides all items on the Desktop</p>
			</td>
		</tr>
		<tr>
			<td valign="top">
				<p>NoClose</p>
			</td>
			<td>
				<p>Disables Shutdown</p>
			</td>
		</tr>
		<tr>
			<td valign="top">
				<p>NoSaveSettings</p>
			</td>
			<td>
				<p>Don't save settings on exit</p>
			</td>
		</tr>
		<tr>
			<td valign="top">
				<p>DisableRegistryTools</p>
			</td>
			<td>
				<p>disable registry editing tools<br>NOTE: remember to be careful of this one!</p>
			</td>
		</tr>		
	</table>
	<br>
	<li>In the System key you can add:<br><br></li>
	<table align="center" border="1" cellpadding="0" cellspacing="0" width="80%">
		<tr>
			<th>
				<p>Key Name</p>
			</th>
			<th>
				<p>Description</p>
			</th>
		</tr>
		<tr>
			<td valign="top">
				<p>NoDispCPL</p>
			</td>
			<td>
				<p>Disable Display Control Panel</p>
			</td>
		</tr>
		<tr>
			<td valign="top">
				<p>NoDispBackgroundPage</p>
			</td>
			<td>
				<p>Hide Background Page</p>
			</td>
		</tr>
		<tr>
			<td valign="top">
				<p>NoDispScrSavPage</p>
			</td>
			<td>
				<p>Hide Screen Saver Page</p>
			</td>
		</tr>
		<tr>
			<td valign="top">
				<p>NoDispAppearancePage</p>
			</td>
			<td>
				<p>Hide Appearance Page</p>
			</td>
		</tr>
		<tr>
			<td valign="top">
				<p>NoDispSettingsPage</p>
			</td>
			<td>
				<p>Hide Settings Page</p>
			</td>
		</tr>
		<tr>
			<td valign="top">
				<p>NoSecCPL</p>
			</td>
			<td>
				<p>Disable Password Control Panel</p>
			</td>
		</tr>
		<tr>
			<td valign="top">
				<p>NoPwdPage</p>
			</td>
			<td>
				<p>Hide Password Change Page</p>
			</td>
		</tr>
		<tr>
			<td valign="top">
				<p>NoAdminPage</p>
			</td>
			<td>
				<p>Hide Remote Administration Page</p>
			</td>
		</tr>
		<tr>
			<td valign="top">
				<p>NoProfilePage</p>
			</td>
			<td>
				<p>Hide User Profiles Page</p>
			</td>
		</tr>
		<tr>
			<td valign="top">
				<p>NoDevMgrPage</p>
			</td>
			<td>
				<p>Hide Device Manager Page</p>
			</td>
		</tr>
		<tr>
			<td valign="top">
				<p>NoConfigPage</p>
			</td>
			<td>
				<p>Hide Hardware Profiles Page</p>
			</td>
		</tr>
		<tr>
			<td valign="top">
				<p>NoFileSysPage</p>
			</td>
			<td>
				<p>Hide File System Button</p>
			</td>
		</tr>
		<tr>
			<td valign="top">
				<p>NoVirtMemPage</p>
			</td>