Active Desktop Active Desktop Security and Restrictions Control Panel Control Panel Security Restrictions Desktop and Explorer Desktop and Explorer Restrictions Login and Authentication Login and Authentication Settings Network Network and Workgroup Security Settings

Remote Access Remote Access Security Settings Software Security Settings for Windows Applications Start Menu and Taskbar Start Menu and Taskbar Restrictions System System Security Restrictions and Settings

Hide Drives in My Computer (All Versions) Popular
This setting allows you to control which drives are visible in "My Computer". It is possible to hide all drives or just selected ones.

Disable Task Manager (Windows NT/2000/XP)
This setting controls the ability for users to start Task Manager and view processes, running applications and make changes to the priority or state of the individual processes.

Restrict Changes to User Folder Locations (Windows 2000/Me/XP)
These restrictions disable the ability for users to change the location of user-specific folders such as My Documents, My Pictures, My Music and Favorites.

Disable User Tracking (Windows 2000/XP)
This setting stops Windows from recording user tracking information including which applications a user runs and which files and documents are being accessed.

Disable Registry Editing Tools (All Versions) Popular
This setting disables the ability to run the registry editing tools Regedit.exe or Regedt32.exe interactively.

Disable the Shut Down Command (All Versions) Popular
This option allows you to stop users from being able to shutdown the computer by disabling the shut down command.

Restrict Access to the Windows Update Feature (All Versions)
Windows 98 and later contain a feature known as Windows Update, which allows users to update Windows specific software over the Internet. This setting allows you to restrict access to this feature.

Disable Windows Hotkeys (All Versions)
This tweak disables the use of Windows hotkeys.

Disable User Profiles (Windows 95/98/Me)
This setting can be used to disable the use of user profiles.

Implement a User Based Custom Shell (Windows 2000/XP)
Windows allows you to selectively specify the system shell based on the logged in user. For example this allows one user to use the standard explorer interface and another to use the legacy progman shell.

Clear the Page File at System Shutdown (Windows NT/2000/XP)
Windows does not normally clear or recreate the page file. On a heavily used system this can be both a security threat and performance drop. Enabling this setting will cause Windows to clear the page file whenever the system is shutdown.

Disable Run Commands Specified in the Registry (Windows 98/Me/2000/XP)
This restriction is used to disable the ability to run startup programs specified in the registry when Windows launches.

Restrict Users from Running Specific Applications (Windows 2000/Me/XP)
This setting allows you to specify applications and filenames that users are restricted from running.

Restrict Applications Users Can Run (All Versions) Popular
Windows gives the ability to restrict the applications that can be run by users on a workstation.