This document focuses on Registry values related to desktop restrictions. Many of these keys can be modified using the System Policy Editor so I have omitted them here. For information about all of the registry values, see the Registry Help file (Regentry.hlp) on the Windows NT Resource Kit CD.
All of these desktop restriction keys are located here:
Or if you followed the directions in Loading a Hive into HKEY_USERS the %SID% will represent the usernames.
This entry allows you to hide local and network drives selectively. When you hide a drive, the icon representing the drive does not appear in My Computer, Explorer, or Network Neighborhood, and the drive letter does not appear as a choice in the Open menu of applications. This allows you to protect certain drives, including the floppy disk drive, from misuse or to direct users to save their work to certain drives.
The technique for calculating the value to hide a drive is based on the Binary number system (using only one's and zero's). The low order (right most) bit is drive A: while the 26th bit is Drive Z: To hide a drive, turn on its' bit.
If you are not comfortable converting binary values to decimal values, add these decimal number to hide the drive(s):
The value to hide the C drive would be 4
The value to hide the C and D drive would be the decimal number 12
These drives will still appear in File Manager and the Command Prompt. To remove File Manager, delete winfile.exe.
If set to 1, the File menu in Explorer is removed.
If set to 1, menus do not display upon right click of the taskbar, start button, clock, or taskbar application icons. The entry is only available for NT 4.0 with SP 2 or greater.
If set to 1, menus do not display upon right click of the desktop or Explorer's results pane. The entry is only available for NT 4.0 with SP 2 or greater.