Академический Документы
Профессиональный Документы
Культура Документы
http://litres.ru
. Windows 7: ; ; 2010
ISBN 978-5-49807-812-0
Windows 7,
,
.
Microsoft
Windows 7 .
,
,
.
, Windows 7,
,
.
.
.
1.
Windows 7
HKEY_CLASSES_ROOT
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_USERS\.DEFAULT
HKEY_USERS\S-[
]
HKEY_CURRENT_CONFIG
17
17
20
22
23
25
28
29
29
30
31
32
32
34
35
36
38
39
44
46
50
REG-
REG-
REG-
REG-
REG-
REG.EXE
(
EXPORT)
( ADD)
2. Windows 7
Windows
51
53
55
55
57
57
57
59
60
63
63
63
65
65
69
70
71
73
73
74
75
76
76
Aero Peek,
77
78
79
79
80
81
82
83
85
85
85
85
86
86
87
88
88
89
89
92
Windows Aero
Flip3D
Aero Shake
92
93
94
95
96
96
96
96
97
98
98
99
101
102
105
106
109
111
111
112
112
112
Windows
114
114
114
115
116
116
117
118
119
123
124
124
126
127
127
128
129
130
,
,
Windows
3.
Windows 7
Internet Explorer
131
131
132
132
133
133
134
134
135
136
137
138
139
140
141
142
143
144
144
148
148
,
Internet Explorer
IE8
(
)
(
)
149
149
149
151
151
151
151
152
152
152
153
153
154
155
155
155
156
156
157
157
HTML-
HTML-
Internet
Explorer
Internet Explorer
158
158
159
159
160
160
160
161
161
161
162
162
162
163
163
163
164
165
165
166
-
Windows Media
CMD BAT
Windows
166
167
168
168
169
169
170
170
170
171
171
172
173
173
175
175
176
176
177
178
178
4.
:
!
IconViewer
HKEY_CLASSES_ROOT
HKEY_CLASSES_ROOT
DefaultIcon
shell
shellex
Windows
Windows
179
181
182
183
184
189
192
192
195
197
198
199
199
200
201
203
204
204
206
Windows 7
207
208
209
210
212
212
213
214
214
216
217
218
226
226
229
229
231
233
235
235
236
236
: REG HTML
/
,
ActiveX
Windows Media Center
Windows 7
BSOD
SuperFetch
5. :
Registrar Registry Manager Lite Edition:
237
238
240
241
242
242
246
247
252
256
259
262
265
267
269
271
272
Registry Life:
Process Monitor:
Registry Workshop:
EnhanceMySe7en
7Tweak
WinTuning 7
Tweak-7, Little Tweaker, XdN Tweaker
276
278
282
285
286
294
297
299
301
303
303
303
304
304
305
305
305
306
Windows
BAT-
PowerShell
,
C#
306
306
307
308
309
310
310
313
315
315
315
316
318
319
320
325
Windows 7
.
, Windows,
, .
Windows 98,
. . ,
. , - .
, .
, ,
,
.
. . ,
.
CHM. ,
.
. , ,
.
.
,
.
, Windows 98,
Windows 7.
Internet Explorer 4.0/5.5/6.0. , , IE - . . Internet Explorer 7 , .
Windows Vista
Windows 7 .
,
, , - . , Windows ,
. , ,
,
, , .
,
Windows 7.
, Windows 7, . , . ,
.
.
.
, Windows . :
Windows ?
, . , .
,
. , ,
Windows 7.
, . ,
. , ,
.
, .
, . , !
, , comp@piter.com ( , ).
!
http://www.piter.com .
1.
Windows 7
Windows , , .
Windows.
, . ,
.
. ,
, .
,
.
.
,
.
,
, , ,
, Windows,
. Windows . ,
,
.
.
.
regedit.
regedit.exe (. 1.1).
Windows,
.
. 1.1.
regedit.exe,
. ( ) UAC . -
,
OK, - (. 1.2).
. 1.2.
,
,
. :
.
regedit
.
. ,
, ,
.
.
. .
, -
, . , .
.
Windows 7
( ), :
1. HKEY_CLASSES_ROOT.
2. HKEY_CURRENT_USER.
3. HKEY_LOCAL_MACHINE.
4. HKEY_USERS.
5. HKEY_CURRENT_CONFIG.
.
HKEY_PERFOMANCE_DATA.
,
.
.
HKEY
. .
. ,
.
HKEY_CLASSES_ROOT
HKEY_CLASSES_ROOT ,
,
.
ActiveX- , . ,
, TXT
.
HKCR, .
.
HKEY_CURRENT_USER
HKEY_CURRENT_USER -
, Windows 7 , , : , , ,
.
HKCU. .
.
HKEY_LOCAL_MACHINE
HKEY_LOCAL_MACHINE ( ), .
.
HKLM.
HKEY_LOCAL_MACHINE\SOFTWARE\Classes
HKEY_CLASSES_ROOT.
. , HKLM HKCU,
HKCU
.
HKEY_USERS
HKEY_USERS ( HKU)
.
.
HKEY_CURRENT_USER,
HKEY_USERS, .
. .
(. 1.3).
. 1.3. HKEY_USERS
HKEY_USERS\.DEFAULT
,
HKEY_USERS\.DEFAULT
HKCU, . , .
HKEY_USERS\.DEFAULT ,
(, ).
HKEY_USERS\S-[ ]
HKEY_USERS
. -
SID ( ).
, , - . , SID , . ,
whoami.exe, Windows 7, /user:
whoami /user
,
cmd.exe cmd. ,
,
Enter (. 1.4).
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft
\Windows NT\CurrentVersion\ProfileList, SID .
ProfilelmagePath. SID ,
,
(. 1.5).
. 1.4. Windows
. 1.5. ProfileImagePath
HKEY_CURRENT_CONFIG
HKEY_CURRENT_CONFIG ( HKCC)
,
. -
HKEY_LOCAL_MACHINE\SYSTEM
\CurrentControlSet\Hardware-Profiles.
.
, .
().
. ,
. (Setup.exe, Install.exe . .), .
.
, %SystemRoot
%\System32\Config. HKEY_CURRENT_USER
%SystemRoot%\Profiles\_. .
%SystemRoot% -
, .
.
, .
.
REG_BINARY (Binary Value)
, . .
REG_DWORD (DWORD Value) , .
.
: 1 (True)/0
(False). Windows 7 DWORD: 32- 64- .
REG_EXPAND_SZ
(Expandable String Value)
.
.
, -
. :
%systemroot% (, C:\Windows).
%windir% .
%systemroot% ,
%systemroot% ,
, %windir%, (
).
%systemdrive% ( , :).
%userprofile% , .
%programfiles% ,
Windows (
, C:\Program Files).
%username% , .
computername%
( ).
REG_MULTI_SZ (MultiString Value)
.
REG_SZ (String Value).
.
,
,
.
:
REG_FULL_RESOURCE_DESCRIPTOR,
REG_LINK, REG_NONE, REG_RESOURCE_LIST.
( ), ,
, , ( ) .
.
.
,
, ,
. , ,
-
, .
,
.
(. 1.6).
. 1.6.
,
, . ,
, .
.
, ,
100 .
.
, , .
,
. ,
.
,
.
, ,
.
, (. 1.7)
.
-
.
, ,
.
(. 1.8).
, , .
. 1.7.
. 1.8.
, , ,
: , -,
.
, , .
. , ,
.
.
.
HKEYCURRENTUSER.
Software
.
.
#1. .
, Test,
Enter (. 1.9).
,
.
#1
(
F2).
, .
. 1.9.
. ,
. , ,
( ).
.
Test.
.
.
#1,
. ,
, ,
CatName (. 1.10),
Enter. ,
.
. 1.10.
(
).
,
. , ,
Enter (. 1.11).
. 1.11.
DWORD.
.
DWORD (32 ).
DWORD
#1,
. -
, CatAge,
Enter.
.
CatAge
8 (. 1.12). ,
,
.
. 1.12.
DWORD
8 .
,
Test , CatName
CatAge, ,
(. 1.13).
. 1.13.
, ( ) , REG- .
, ,
. ,
.
Test.
.
.
, cat.reg,
(. 1.14).
. Delete. ( ) .
Test.
, Delete
.
,
(. 1.15).
. 1.14.
. 1.15.
, ,
,
, .
, .
... REG- .
cat.reg,
.
,
(.
1.16). .
,
F5 .
. 1.16.
REG- ,
.
,
cat.reg, ,
. 1.17.
. 1.17.
, .
REG-
REGEDIT <_>
(,
D: test.reg)
REGEDIT D:\test.reg
, .
...
, . . C
, .
:
, .
Test.
...
(.
1.18).
, .
. .
Test (
, )
.
.
. 1.18.
REG-
.
. ,
.
REG.
REG-
REG-, ,
.
Windows Registry Editor Version 5.00 Test
[HKEY_CURRENT_USER\Software\Test]
CatName=""
CatAge=dword:00000008
REG-
REG -.
Windows Registry Editor Version 5.00
,
, Windows 98 Windows NT 4.0, REGEDIT4. , . Windows 7 .
Windows 98
. .
,
, ; ( ).
Test .
REG-. .
Test
, . ,
, :
[HKEY_CURRENT_USER\Software\Test]
, :
CatName=""
REG- -
,
,
. . , REG- , .
, REG
.
,
.
.
REG-
REG- , .
, (. 1.19)
REG.
,
, .
. 1.19.
REG-
.REG. REG-
, .
REG-
!
. ,
REG-.
,
OK, , ,
.
,
/S:
REGEDIT /S D:\test.reg
, REG-.
, Windows
,
, .
C REG- . .
cat.reg :
Windows Registry Editor Version 5.00
[-HKEY_CURRENT_USER\Software\Test]
REG-, .
,
.
,
.
.
.
() (=):
Windows-Registry-Editor-Version-5.00 Test
[HKEY_CURRENT_USER\Software\Test]
CatName=""
CatAge= ,
CatAge .
REG.EXE
,
, Windows 7 REG.EXE,
.
, .
( EXPORT)
REG EXPORT,
:
REG EXPORT <_> <_> [/y]
<_>
: \ (
).
HKLM-|-HKCU-|-HKCR-|-HKU-|-HKCC.
.
<_> ,
.
/y .
,
.
Test,
,
.
(cmd.exe).
(,
cat.reg D:):
reg export HKCU\Software\Test-d:\cat.reg
(.1.20).
,
(,
).
. 1.20. -
( ADD)
REG ADD . , ,
REG-. :
REG ADD <_> [/v <_> | /
ve] [/t <>] [/s <>] [/d <>] [/f]
_-[\\<>\]<>.
<> .
, .
HKLM HKU.
<> \<>. : HKLM | HKCU |
HKCR | HKU | HKCC. .
/v ,
.
/ve (
) .
/t .
: REG_SZ | REG_MULTI_SZ |
REG_EXPAND_SZ | REG_DWORD | REG_QWORD |
REG_BINARY | REG_NONE. ,
REG_SZ.
/s , REG_MULTI_SZ.
, \0.
/d , .
/f
.
HKCU\Software
\Test BOSS :
REG ADD \\BOSS\HKCU\Software\Test
REG.EXE : QUERY,
DELETE, COPY, SAVE, RESTORE, LOAD, UNLOAD,
COMPARE, IMPORT. .
REG.EXE, /?.
CMD.EXE
reg /?
,
,
(. 1.21).
. 1.21.
REG EXE
, .
:
reg import /?
.
, ,
: ,
, .
2. Windows 7
,
, . , Windows 95! , , 90%
Windows Vista, 70% Windows XP,
60% Windows 98/Me, 50% Windows 95.
,
. .
, ,
REG-,
Windows,
, . , . 1
:
HKCU\Control Panel\Desktop
: , , , ,
.
.
: :
HKEY_CURRENT_USER HKEY_LOCAL_MACHINE.
,
,
.
, -
, HKEY_LOCAL_MACHINE. ,
HKEY_CLASS_ROOT. ,
. , . ,
.
, :
, .
.
. .
, .
Windows
Windows
.
PaintDesktopVersion DWORD 1
HKCU\Control Panel\Desktop. (. 2.1). ,
0 .
. 2.1. Windows
, , ,
.
. ,
, NoDesktop DWORD 1 HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\Explorer.
, .
:
.
.
.
.
.
, .
-
, . . HKCU\Software\Microsoft\Windows
\CurrentVersion\Explorer\HideDesktopIcons
\NewStartPanel DWORD-:
{59031a47-3f72-44a7-89c5-5595fe6b30ee} ;
{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}
;
{20D04FE0-3AEA-1069-A2D8-08002B30309D}
;
{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}
.
0,
. ,
.
, , . -
. , , .
RecycleBinDrives
HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\ Explorer .
, , . 0ffffffff, .
,
NoPropertiesRecycleBin DWORD 1 HKCU\ Software\Microsoft\Windows
\CurrentVersion\Policies\Explorer.
, (, . .) .
,
. .
. , (.
2.2). HKCU\SOFTWARE\Microsoft
\Windows\CurrentVersion\Policies\Explorer ConfirmFileDelete DWORD 1.
. 2.2.
, . ,
, .
.
NoPropertiesMyComputer DWORD
1 HKCU\Software\Microsoft
\Windows\CurrentVersion\Policies\Explorer.
, .
NoManageMyComputerVerb DWORD 1 HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\Explorer.
compmgmt
msc. .
. A:, -. , A: - .
, .
NoDrives DWORD, . HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\Explorer.
NoDrives :
. , .
, .
A: F::
000000001 :;
000000002 B:;
000000004 C:;
000000008 D:;
000000010 E:;
000000020 F: . .
,
A:, 0x00000001.
A: C:,
0x00000005 . .
0x03FFFFFF.
Windows , .
NoViewOnDrive
DWORD , .
NoDrives, . ,
D:,
0x00000008. , D: , , (. 2.3). , -
, .
. 2.3.
, ,
(C:).
ShowDriveLettersFirst
DWORD HKCU\Software\Microsoft
\Windows\CurrentVersion\Explorer.
:
1
( );
2 ;
4 .
2 ,
-
(. 2.4)!
. 2.4.
.
HKLM\Software\Microsoft\Windows
\CurrentVersion\Explrer
DriveIcons. , . : DefaultIcon
DefaultLabel.
.
,
. ,
::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft
\Windows\CurrentVersion\Explorer\DriveIcons\C
\DefaultIcon]
@="explorer.exe,8"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft
\Windows\CurrentVersion\Explorer\DriveIcons\C
\DefaultLabel]
@=" "
@
. . 2.5. , : .
. 2.5.
NoSecurityTab
DWORD
1 HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\Explorer.
,
.
, .
, , . , . HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\Explorer
NoCustomizeWebView DWORD 1.
.
HKCU\Software\Microsoft\Windows
\CurrentVersion\Explorer\Advanced
ExtendedUIHoverTime DWORD , 20
000. 20
. .
Aero Peek,
Aero Peek
. Aero Peek
. HKCU\Software\Microsoft
\Windows\CurrentVersion\Explorer\Advanced
DWORD
DesktopLivePreviewHoverTime
.
1 (1000 ). 500 () 2000 (2 ).
,
.
Aero
Peek,
2.1.
,
, , . .
, .
, , . HKCU\Control Panel
\Accessibility MessageDuration
. 5 .
: | Windows?
, NoTrayItemsDisplay DWORD
1 HKCU\Software\Microsoft
\Windows\CurrentVersion\Policies\Explorer. ,
, ,
(. 2.6).
, , -
, .
HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\Explorer NoAutoTrayNotify DWORD
1.
, , .
. 2.6.
HKCU\Software
\Microsoft\Windows\CurrentVersion\Policies\Explorer
,
:
TaskbarNoNotification 1.
1 HideSCAVolume.
1 HideSCAHealth.
HideSCANetwork 1.
HideClock DWORD 1.
(
)
HideSCAPower 1.
, , .
, , HKCU\Software\Classes\Local-Settings\Software
\Microsoft\Windows\CurrentVersion\TrayNotify -
PastIconsStream IconStreams
.
, . :
.
.
.
.
, .
,
,
NoToolbarsOnTaskbar DWORD 1 HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\Explorer.
(. 2.7).
. 2.7.
. , ,
.
TaskbarNoAddRemoveToolbar DWORD 1 HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\Explorer.
(. 2.8).
. 2.8.
. 2.9.
,
. ,
, NoMovingBands DWORD
1, HKCU\Software\Microsoft
\Windows\CurrentVersion\Policies\Explorer.
(explorer.exe) . ,
.
, HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\Explorer
NoViewContextMenu DWORD 1.
, -
, ,
, ,
.
, . HKCR\lnkfile IsShortcut ( , , IsShortcutTemp,
).
- ,
Windows . link REG_BINARY
00 00 00 00 HKCU\Software
\Microsoft\Windows\CurrentVersion\Explorer.
, 1a 00 00 00. . .
2.10 , .
. 2.10.
, (Run as...).
, HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\Explorer
HideRunAsVerb DWORD 1.
,
.
. , , .
.
HKCU\Software\Microsoft
\Windows\CurrentVersion\Policies\Explorer
NoDrivesInSendToMenu DWORD 1.
( ),
C:\Users
\<_>\Documents, ,
: , , (. 2.11).
. 2.11
,
DisablePersonalDirChange DWORD 1 HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\Explorer. ,
, , (. 2.12).
. 2.12
, ,
, (. 2.13). , .
. 2.13.
, , , .
, -
- shell.windows.com/fileassoc/0409/xml/
redir.asp?Ext=rar ( RAR-
). .
NoInternetOpenWith
DWORD 1 HKCU
\SOFTWARE\Microsoft\Windows\CurrentVersion
\Policies\Explorer. ABSE, ,
.
(. 2.14), ,
.
. 2.14.
, ,
HKEY_CLASSES_ROOT\Applications.
, . , - -
,
NoOpenWith .
Windows. , , (. 2.15).
. HKCU\SOFTWARE\Microsoft\Windows
\CurrentVersion\Policies\comdlg32.
. 2.15.
, . -
.
. HKEY_CURRENT_USER\Software\Microsoft
\Windows\CurrentVersion\Policies
\comdlg32\PlacesBar,
( ) Place0, Place1,
Place2, Place3, Place4.
, DWORD. ,
, . DWORD,
( ):
0 ;
2 ;
4 ;
5 ;
6 ;
7 ;
8 ;
9 (SendTo);
10 ;
11 ;
13 Network Shortcuts;
14 ;
15 Templates ();
16 ;
17 ;
18 ;
24 %systemroot%;
25 %systemroot%\System32;
26 %ProgramFiles%;
27 ;
28 %userprofiles%;
a ;
b ;
2b ;
2e .
, Place0
Place1,
(. 2.16).
. 2.16.
.
.
.
NoBackButton
DWORD 1.
Windows Aero
Microsoft , . .
Shift
. ,
( ). , . , AnimationsShiftKey DWORD
1 HKCU\Software\Microsoft\Windows\DWM.
Flip3D
Windows
Flip3D, Win+Tab. , Alt+Tab.
DisallowFlip3d DWORD
1 HKCU\SOFTWARE\Policies
\Microsoft\Windows\DWM
Flip3D.
Aero Shake
Windows 7 Aero
Shake, .
Aero Shake, HKCU
. . ,
- .
.
HKCU\Control Panel
\Desktop MenuShowDelay,
400. 0 . 0 32 767. (
100 200.) , , .
, . ,
HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\Explorer
NoStartMenuMorePrograms DWORD
1. , .
.
, . , ,
. : : %SYSTEMDRIVE%\ProgramData
\Microsoft\Windows\Start
Menu\Programs.
NoCommonGroups
DWORD
HKCU\Software\Microsoft
\Windows\CurrentVersion\Policies\Explorer, 1.
, , . ., drag-n-drop,
HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\Explrer NoChangeStartMenu DWORD
1.
Windows 7 .
, . ,
. .
UseDefaultTile DWORD
HKLM\SOFTWARE\Microsoft\Windows
, . , , .
. . NoStartMenuPinnedList DWORD
1 HKCU\Software\Microsoft
\Windows\CurrentVersion\Policies\Explorer. .
-
.
. HKCU\Software
\Policies\Microsoft\Windows\Explorer NoSearchEverywhereLinkInStartMenu
DWORD 1.
, , .
(. 2.17).
, .
,
.
.
. 2.17.
, , -
HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\Explorer. . 2.2 .
.
,
.
2.2.
(. 2.18)
.
. 2.18.
, , . .
, ,
Windows XP, . , ForceClassicControlPanel DWORD
1 HKCU\Software\Microsoft
\Windows\CurrentVersion\Policies\Explorer.
, .
, ,
. , . ,
,
.
.
. ,
,
.
,
.
.
HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies
Programs
NoProgramsCPL DWORD 1. ,
, (. 2.19):
. 2.19.
NoProgramsAndFeatures DWORD 1.
- (
| | ), HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\Programs
NoInstalledUpdates DWORD 1.
:
.
Windows
Windows. HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\Programs
NoWindowsFeatures DWORD
1.
, ,
(. 2.20).
. 2.20.
( ) . HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\Programs
NoDefauItPrograms DWORD
1.
,
,
(. . 2.20).
(
)
HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\Explorer
NoSetTaskbar DWORD 1. , .
, , .
,
: , , ,
(. 2.21).
. 2.21.
, -
.
, .
.
.
, DWORD- NoThemesTab
1 HKCU\Software\Microsoft
\Windows\CurrentVersion\Policies\Explorer.
. DWORD-
NoChangingWallpaper 1
HKCU\Software\Microsoft\Windows\ CurrentVersion
\Policies\ActiveDesktop.
.
Internet Explorer
.
HKCU\Software
\Policies\Microsoft\Windows\Control Panel\Desktop
Wallpaper, BMP-.
WallpaperStyle,
.
:
0
( );
1 ,
;
2
.
,
.
, HKCU\Software\Microsoft
\Windows\CurrentVersion\Policies\System
NoDispAppearancePage DWORD
1.
Windows 7 14 , .
.
,
,
.
HKCU\AppEvents\Schemes\Apps\.Default.
, .
HKCU\Software\Policies\Microsoft\Windows
\Personalization NoChangingSoundScheme
DWORD 1.
, , ,
, , ,
, .
,
HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\System
NoDispScrSavPage DWORD 1.
. , HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\System
ScreenSaverPowerButton DWORD
1.
. , : , , .
.
. 2.22.
, . , , - , . -
Windows , , .
HKCU\SOFTWARE\Microsoft
\Windows\CurrentVerson\Policies\Explorer
RestrictRun DWORD
1.
RestrictRun . , 1, () .
. , Word.exe, Excel.exe...
Regedit exe,
!
RestrictRun 0.
. HKCU\SOFTWARE\Microsoft\Windows
\CurrentVerson\Policies\Explorer DisallowRun DWORD 1.
DisallowRun .
, 1, () . . , Word.exe, Excel.exe. :
1 calc.exe;
2 thebat.exe;
3 hl.exe.
, Windows Explorer, (Task Manager), .
cmd.exe.
.
HKCU\SOFTWARE\Microsoft
\Windows\CurrentVerson\Policies\System DisableRegistryTools DWORD
1. , (.2.23). , Windows, REG REG.EXE. .
Windows 7 !
.
. 2.23.
HKCU\SOFTWARE\Microsoft\Windows
\CurrentVerson\Policies\System
DisableRegistry Tools.
,
.
Windows, INF-
.
Windows
Ctr+Alt+Del
,
. Ctrl+Shift+Esc. Windows (taskmgr.exe), HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\System
DisableTaskMgr DWORD 1.
,
, ,
.
TurnOffSPIAnimations DWORD 1 HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\Explorer.
, Windows,
.
Windows.
3.
Windows 7
Windows 7
. ,
Paint. , , . , .
.
.
,
,
.
Internet Explorer
( ) Internet Explorer.
: : ,
, , ,
, (.
3.1).
. 3.1. :
,
.
HKCU\Software\Policies\Microsoft\Internet Explorer
\Control Panel ( Internet Explorer Control
Panel )
DWORD.
, , . , , , (.
3.2).
. 3.2.
General Tab 1.
. , , , HomePage DWORD
1. ,
(. 3.3).
. 3.3.
.
,
.
, Settings DWORD
1.
(. 3.4).
Cache .
.
History DWORD
1.
GeneralTab 1.
. 3.4.
, .
,
SecAddSites DWORD 1.
, .
SecChangeSettings DWORD 1.
PrivacyTab 1.
, Privacy
Settings DWORD 1.
ContentTab 1.
,
.
Ratings DWORD 1.
, , , Certificates
1. CertifSite ( CertifPers),
CertifPub.
ConnectionsTab 1.
, . ,
AutoConfig 1.
-
Proxy, 1 (. 3.5).
. 3.5.
ProgramsTab 1.
,
Internet Explorer
,
Internet Explorer ,
Check_If_Default
1.
AdvancedTab 1.
IE8
IE8
. ,
Microsoft.
.
(
)
,
.
HKCU\Software\Microsoft\Internet
Explorer\Main :
IE8RunOnceLastShown 1
(DWORD);
IE8RunOncePerInstallCompleted 1
(DWORD);
IE8RunOnceCompletionTime (empty) (BINARY);
IE8TourShown 1 (DWORD);
IE8TourShownTime (empty) (BINARY);
IE8RunOnceLastShown_TIMESTAMP (empty)
(BINARY).
(
)
. HKLM
\Software\Policies\Microsoft\Internet
Explorer\Main
DisableFirstRunCustomize
DWORD. :
1 .
.
2 .
NoFileMenu DWORD
HKCU\Software\Microsoft
\Windows\CurrentVersion\Policies\Explorer
,
,
Windows.
( Ctrl+N)
Internet Explorer.
, HKCU\Software\Policies\Microsoft
\lnternet Explorer\Restrictions -
NoFileNew DWORD 1.
.
,
( Ctrl+O), NoFileOpen DWORD 1
HKCU\Software\Policies\Microsoft\lnternet
Explorer\Restrictions.
.
.... , HKCU\Software
\Policies\Microsoft\lnternetExplorer\Restrictions NoBrowserSaveAs DWORD
1.
... HKCU
\Software\Policies\Microsoft\lnternet Explorer
DisablelmportExportFavorites
DWORD 1.
,
-
.
-
.
.
,
( , Alt+F4,
), HKCU\Software
\Policies\Microsoft\lnternet Explorer\Restrictions NoBrowserClose DWORD 1.
HTML-
HTML-
HTML- .
, L\SOFTWARE\Microsoft\lnternet Explorer
\View Source Editor\Editor Name
( ),
exe- .
(
F11) Internet Explorer
. NoTheaterMode DWORD 1 HKCU\Software
\Policies\Microsoft\Internet Explorer\Restrictions.
,
. , .
Internet Explorer 8, HKCU\Software
\Policies\Microsoft\lnternet Explorer\Restrictions NoFavorites DWORD
1. -
, Internet
Explorer .
, HKCU\Software\Policies\Microsoft
\lnternet Explorer\Recovery ( Recovery
)
NoReopenLastSession DWORD 1.
Internet Explorer
, NoBrowserOptions DWORD
1 HKCU\Software\Policies
\Microsoft\lnternet Explorer\ Restrictions.
.
Internet Explorer
,
NoBrowserContextMenu DWORD 1
HKCU\Software\ Policies\Microsoft\lnternet
Explorer\Restrictions.
- , -
. Internet Explorer. C
. HKCU\Software
\Policies\Microsoft\lnternet Explorer\Restrictions NoOpeninNewWnd
1.
Internet Explorer 7, ( ).
. DWORD
HKLM\SOFTWARE\Policies
\Microsoft\Internet Explorer\TabbedBrowsing. .
Enabled . 0, . 1, .
OpenInForeground . 1,
.
QuickTabsThreshold -
0, .
PopupsUseNewWindow
.
, ,
:
0 ;
1 ;
2 .
, NoSelectDownloadDir
DWORD 1
HKCU\Software\Policies\Microsoft\Internet Explorer
\Restrictions.
.
Internet Explorer 8 , -
, . ,
NoBrowserSaveWebComplete
DWORD 1
HKCU\Software\Policies\Microsoft\Internet Explorer
\Infodelivery\Restrictions.
-, HTML .
Internet Explorer
IE8
.
Windows
Internet Explorer.
Window Title HKCU\Software
\Microsoft\Internet Explorer\Main.
,
. , .
- .
. ,
, -
Internet Explorer 8, -
, . HKCU\Software
\Microsoft\Internet Explorer\Main AutoSearch DWORD, :
0 ;
4 ;
5 ;
6 .
Internet Explorer 8
,
.
Enable AutoImageResize HKCU
\Software\Microsoft\Internet Explorer\Main. yes, ; no .
Internet
Explorer.
HKCU\Software\Microsoft\Windows
\CurrentVersion\Explorer\AutoComplete
AutoSuggest.
yes,
; no .
Internet Explorer 8 , .
/ . Use FormSuggest, HKCU\Software\Microsoft\Internet
Explorer\Main.
yes ; no, .
, Internet Explorer .
HKCU\Software\Microsoft
\Internet Explorer\Main FormSuggest Passwords. : yes, ; no .
Windows Media
Windows Media
: , . . .
Windows Media
(
). HKCU
\Software\Policies\Microsoft\WindowsMediaPlayer:
SetAndLockSkin DWORD 1, Windows
Media DefaultSkin;
DefaultSkin ,
1
SetAndLockSkin.
( ...). DWORD
HKCU\Software\Policies\Microsoft
\WindowsMediaPlayer ( WindowsMediaPlayer
). - ,
1. , .
HideNetworkTab (. 3.6).
HideSecurityTab (. . 3.6).
. 3.6.
HidePrivacyTab
(. . 3.6).
DisableAutoUpdate
Windows Media.
(. 3.6). ,
HKEY_LOCAL_MACHNIE (HKLM\SOFTWARE
\Policies\Microsoft\WindowsMediaPlayer).
,
HKCU\Software\Policies
\Microsoft\WindowsMediaPlayer. DWORD.
PreventLibrarySharing 1,
.
DontUseFrameInterpolation 1,
. .
EnableScreensaver -
0,
.
PreventCDDVDMetadataRetrieval 1,
Windows Media
.
PreventMusicFileMetadataRetrieval 1,
Windows Media
.
PreventCodecDownload
1, Windows Media
( ).
CMD BAT
(cmd.exe) BAT
CMD. DWORD DisableCMD HKCU\Software
\Policies\Microsoft\Windows\System. :
0 ( ) cmd bat-;
1 , cmd bat;
2 bat-.
cmd.exe :
.
...
QuickEdit 1 HKCU\Console.
. (cmd.exe)
( Alt+).
.
. , C:\> ( ). HKLM\SYSTEM\CurrentControlSet\Control
\Session Manager\Environment
PROMPT REG_EXPAND_SZ, :
$B | ( );
$D ;
$G > ( );
$L < ( );
$N ;
$P ;
$Q = ( );
$T ;
$V Windows;
$$ ( ).
Windows
Windows
(
Journal.exe
. 3.7.
, (
). HKCU\Software
\Policies\Microsoft\TabletPC 1 DisableNoteWriterPrinting DWORD.
(
SoundRecorder.exe), ,
. 3.8.
(Snipping Tool.exe)
Windows Vista .
.
DisableSnippingTool DWORD HKCU/
Software/Policies/Microsoft/TabletPC, 1. -
Windows.
.
4.
, .
HKEY_CURRENT_USER, .
,
, .
, ,
HKEY_LOCAL_MACHINE HKEY_CLASS_ROOT.
:
!
,
, .
, .
.
, . , ,
, . - , .
, .
,
, : ,
.
HKEY_LOCAL_MACHINE
HKEY_CURRENT_USER,
HKEY_CLASS_ROOT . , ,
. Windows 7.
,
, . .
HKEY_CLASS_ROOT. - . ,
HKEY_CLASSES_ROOT\CLSID\{323CA680C24D-4099-B94D-446DD2D7249E}\ShellFolder.
Attributes- DWORD . .
OK,
,
(. 4.1).
. 4.1.
. ,
.
ShellFolder.
, , ... . ShellFolder (. 4.2),
, .
. 4.2.
-
Administrators
Administrators (. 4.3). OK Attributes.
.
, , .
, .
. 4.3.
IconViewer
, . ,
.
.
, ICO.
, .
. (EXE), (CPL) (DLL)
, .
,
. , , -.
.
IconViewer, http://
www.botproductions.com/iconview/iconview.html.
, .
, , Icons.
.
imageres.dll,
C:\Windows\System32.
. Icons (. 4.4).
, . , , (#). .
, .
(Preview).
. 4.4. Icons
HKEY_CLASSES_ROOT
, HKEY_CLASSES_ROOT. ? , , . - , Windows , .
, ,
,
HKEY_CLASSES_ROOT.
,
.
HKEY_CLASSES_ROOT
, HKEY_CLASSES_ROOT.
HKEY_CLASSES_ROOT. (name_ID).
TXT.
HKEY_CLASSES_ROOT.
.txt. (. 4.5).
. 4.6. HKEY_CLASSES_ROOT\txtfile
. .
Text Document.
Windows,
, .
EditFlags, .
DefaultIcon
DefaultIcon. ,
, . IconViewer . ,
%SystemRoot%
\system32\imageres.dll,-102. , imageres.dll
102 (. 4.7).
. 4.7. HKEY_CLASSES_ROOT\txtfile
\Defaulticon
,
,
, .
shell
, ,
shell. , Windows ,
. shell ,
(verb).
: edit, open,
print, printto. , ,
, ,
open, print edit. -
command,
(. 4.8).
. 4.8. HKEY_CLASSES_ROOT\txtfile\Shell
\open\command
, , open.
%1, :
%SystemRoot%\system32\NOTEPAD.EXE-%1
%1 . , sample.txt, D:, C:\Windows\system32\notepad.exe
D:\sample.txt.
shellex
shellex. , . ( PropertySheetHandlers).
, ,
, . , Windows 7.
, .
.
,
. HKLM\SOFTWARE\Microsoft\Windows
\CurrentVersion\Policies\System
legalnoticecaption legalnoticetext.
,
!
,
. ,
!, -
: ! ? .
.
. , , ,
. ,
Windows, , LegalNoticeCaption
LegalNoticeText HKLM\Software\Microsoft
\WindowsNT\CurrentVersion\Winlogon. , REG .
Windows
,
, , ,
, . HKLM\SOFTWARE\Microsoft\Windows
\CurrentVersion\Policies\System
DWORD DisplayLastLogonInfo ,
1.
background1280x1024.jpg;
background1024x768.jpg;
background1280x960.jpg;
background1600x1200.jpg;
background1440x900.jpg;
background1920x1200.jpg;
background1280x768.jpg;
background1360x768.jpg.
%windir%\system32\oobe\info
\backgrounds (
).
, ,
BackgroundDefault.jpg.
,
.
, ,
Windows,
, .
, , C:\Windows\System32\oobe
\background.bmp .
. HKLM\Software\Microsoft
\Windows\CurrentVersion\Authentication\LogonUI
\Background
DWORD
OEMBackground 1.
, , C#, .
, , . , HKLM\SOFTWARE\Microsoft\Windows
\CurrentVersion\Authentication\LogonUI ButtonSet DWORD.
0 2. :
0 , ( ) ( );
1 , () ( );
2 , (
).
.
,
shutdownwithoutlogon DWORD 0. HKLM\SOFTWARE
\Microsoft\Windows\CurrentVersion\Policies\System.
,
OEM-.
. 4.9.
Windows 7 .
backgroundDefault.jpg C:\Windows
\System32\oobe\info\backgrounds\ (
, ).
256 .
HKLM\Software\Policies\Microsoft\Windows
\System UseOEMBackground -
DWORD 1 (. 4.9).
.
, Ctrl+Alt+Del,
.
Windows
Ctrl+Alt+Del
Windows (Windows
Security)
;
;
;
;
.
HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\System. , 1:
DisableLockWorkstation ;
DisableChangePassword -
;
DisableTaskMgr
(
, : , . .).
. NoLogof DWORD
1 HKCU\Software\Microsoft\Windows
\CurrentVersion\Policies\Explorer.
, Windows, ,
. ,
, .
RegisteredOwner ( )
RegisteredOrganization ( )
HKLM\SOFTWARE\Microsoft\WindowsNT
\CurrentVersion.
Windows. ( ).
,
DisableConfig DWORD 1
HKLM\SOFTWARE\Policies\Microsoft\Windows NT.
. . . (, , ). , ,
. , .
HKLM\Software\Microsoft
\Windows\CurrentVersion
Run RunOnce. ( ),
. ,
( ). , Once. , , . ,
, - -
, . .
, . , ,
.
Windows.
HKCU\SOFTWARE\Microsoft\Windows
\CurrentVersion , : Run Runonce.
, .
, . DWORD.
HKLM\SOFTWARE\Microsoft
\Windows\CurrentVersion\Policies\Explorer. , Run LOCAL MACHINE DisableLocalMachineRun 1.
Run, HKEY_LOCAL_MACHINE.
RunOnce.
DisableLocalMachineRunOnce.
Run HKEY_CURRENT_USER
DisableCurrentUserRun.
RunOnce
HKEY_CURRENT_USER
DisableCurrentUserRunOnce.
.
, . , . .
. . . . , HKLM\SOFTWARE\Microsoft\Windows
\CurrentVersion\Explorer\MyComputer\NameSpace
{645FF040-5081-101B-9F08-00AA002F954E}.
. HKCR\CLSID\{20D04FE0-3AEA-1069A2D8-08002B30309D}\shell ,
(, ). command,
. notepad.exe.
Windows. , ,
. , .
.
Windows 7
Windows (.4.10), HKCR\CLSID\{031E4825-7B94-4dc3-B131E946B44C8DD5}\DefaultIcon,
.
. 4.10.
256 256,
Windows 7. ,
,
.
,
Icon Viewer (http://www.botproductions.com/
iconview/iconview.html), . , ,
. , 1023 C:\Windows
\System32\imageres.dll. . :
%SystemRoot%\system32\imageres.dll,-1027
,
.
:
,
. , ,
, ,
.
remove-libraryicon reg
;
disable-libraries reg:
;
restore-libraries-default-settings
reg:
.
Ch4,
libraries zip.
. . () ,
HKEY_CLASSES_ROOT\CLSID
\{031E4825-7B94-4dc3B131E946B44C8DD5}\ShellFolder
Attributes DWORD b090010d. ,
(. 4.11).
. 4.11.
,
b080010d.
,
( ) . -
. HKEY_CLASSES_ROOT\CLSID
\{14074e0b-7216-4862-96e6-53cada442a56}\lnstance
\lnitPropertyBag
Defaultlcon, .
Windows 7 DLL- (, C:\Windows\System32\imageres.dll). :
%SystemRoot%\system32\imageres.dll,-1008
,
1001:
%SystemRoot%\system32\imageres.dll,-1001
Windows 7 (
), . 4.12.
,
, .
Powercfg. exe. , .
. ,
HKLM\SYSTEM
\CurrentControlSet\Control\Power\PowerSettings.
. , , ,
Description,
Attributes, 1, . 0.
. 4.12.
:
http://oszone
net/.
reg- ( 4 1),
Ch4,
power zip.
4.1.
, . 4.13.
Attributes, 0 , . . 4.14 .
Power7.reg (. 4.2) -
(. 4.15).
. 4.13. ,
. 4.14.
4.2.
,
. , - . ,
,
. .
. 4.15.
, . , . ,
, , .
, , . : . , ,
,
. .
, , .
, , , , -
,
!
HKLM\SOFTWARE\Microsoft
\Windows\CurrentVersion\Explorer
Shell Icons ( , ). 4.
, .
, DLL. C:\Windows\System32\shell32.dll,-246.
(.
4.16).
. 4.16.
,
.
, 4
Shell Icons.
(C:\\<>), , , , ,
. . (. 4.17).
. 4.17.
, Windows
. .
,
. , HKLM\SOFTWARE\Microsoft\Windows
\CurrentVersion\Explorer\FolderDescriptions
\{56784854C6CB-462B-8169-88E350ACB882}\PropertyBag NoCustomize DWORD 0. ,
:
(. 4.18),
. , ,
NoCustomize 1.
. 4.18.
: .
,
, Property
Bag NoCustomize 0.
: HKLM\SOFTWARE\Microsoft\Windows
\CurrentVersion\Explorer\FolderDescriptions
\{B4BFCC3A-DB2C-424CB0297FE99A87C641}\PropertyBag. ,
, NoCustomize 1.
,
. ,
, (. 4.19).
. 4.19.
. :
, .
, , , ,
. HKCR\CLSID\{20D04FE0-3AEA-1069A2D8-08002B30309D}\ShellFolder
Attributes DWORD b094010c. -
.
,
b084010c.
,
.
HKCR\CLSID\{F02C1A0DBE21-4350-88B0-7367FC96EF3C}\ShellFolder
Attributes DWORD
b0940064. .
, b0040064.
. HKCR\CLSID
\{323CA680-C24D-4099B94D-446DD2D7249E}\ShellFolder -
Attributes DWORD
a9400100. .
,
a0900100.
. ,
, , , Word
. . (. 4.20). ,
, .
. 4.20.
, ,
.
(TXT),
. ,
TXT:HKCR
\.txt.
ShellNew
(. 4.21), -
. 4.21. , TXT-
:
Command
, .
NullFile
. .
FileName
-, ( , ) .
- .
Data
, -. ,
, -
.
ShellNew
:
IconPath
, , . shell32.dll,51, .
MenuText
, .
ShellNew Config, .
NoExtension
,
.
DontRename
. .
{D969A300-E7FF-11d0A93B-00A0C90F2719} HKCR\Directory
\Background\shellex\ContextMenuHandlers\New.
,
!
.
, ,
.
, ShellNew. , . HKCR\.txt
ShellNew.
BMP, ZIP, LNK
. .
, , Folder Briefcase.
(.jnt),
(Journal.exe).
ShellNew HKCR\.jnt\jntfile.
, , -
.
. REG
HTM. .
, REG
, HTM -, - .
: REG HTML
, , REG- . -
. 4.22.
. ,
HTML-
.
C:\Windows\ShellNew index.html :
<html>
<head>
<meta http-equiv="Content-Type" content="text/
html; charset=windows-1251">
<title> </title>
</head>
<body>
</body>
</html>
, REG-.
HKCR\.html
ShellNew.
HKCR\.html
\ShellNew FileName,
-
index.html (. 4.23).
. 4.23.
HTML, ,
index.htm.
, HKCR\AllFilesystemObjects\shellex
\ContextMenuHandlers\SendTo.
,
.
.
HKCR\Directory\Background\Shell.
, ,
. , , .
, HKCR\Directory
\Background\Shell . ,
, , .
notepad ,
.
, -
, ,
.
, , , (. 4.24).
. 4.24.
,
(. 4.25).
,
.
, ,
.
. 4.25.
notepad -
. . ,
. :
MUIVerb
,
.
Extended , Shift.
HKCR\Directory
\Background\shell\cmd,
. ,
Shift,
.
LegacyDisable
. , , ,
.
ProgrammaticAccessOnly , .
NoWorkingDirectory , (
)
.
. ,
command.
, .
notepad.exe
(.4.26).
. 4.26.
, .
, ,
.
.
, , , , . .
. Alt, ,
... .
, . VBS-, IconsOnly HKCU\Software\Microsoft
\Windows\CurrentVersion\Explorer\Advanced.
ToggleThumb
HKCU\ Software\Classes\Directory\Background\Shell
/ .
. , -
HKCU, .
ToggleThumb
c command wscript.exe %WinDir%
\togglethumbs.vbs (. 4.27).
. 4.27.
, .
4.1.
Set WscripthShell = CreateObject(WScript.Shell)
strRegPath = HKCU\Software\Microsoft\Windows
\CurrentVersion\ Explorer\Advanced\IconsOnly
strParIconsOnly
=
WscripthShell.RegRead(strRegPath)
If strParIconsOnly = 0 Then
scripthShell.RegWrite
strRegPath,1,"REG_DWORD"
Else
scripthShell.RegWrite
strRegPath,0,"REG_DWORD"
End If
WscripthShell.SendKeys {F5}
togglethumbs.vbs
Windows.
. ,
(. 4.28).
/
Adobe Photoshop,
(.4.29).
. 4.28.
. 4.29.
:
:
ToggleThumbsInstall reg
,
/ .
togglethumbs vbs ,
C:\Windows
.
Ch4
togglethumb zip.
, ActiveX
,
ActiveX.
,
ActiveX-, HKCR\Directory\Background\ShellEx
\ContextMenuHandlers.
CLSID ActiveX-.
,
HKCR\Directory\Background\ShellEx
\ContextMenuHandlers
.
. Test (. 4.30).
. 4.30. , ActiveX-
, CLSID, . , .
4.3. CLSID
(
)
,
:
4.4. CLSID
Windows 7
Windows Media Center.
.
(http://pavelmvp spaces live com/)
.
Windows 7
, Windows Media Center.
Windows Vista. ,
, : HKLM\SOFTWARE\Microsoft\Windows
\CurrentVersion\explorer\AutoplayHandlers.
:
Windows Media Center,
,
Windows Media Center (. 4.31).
. 4.31.
HKEY_LOCAL_MACHINE\SYSTEM
\CurrentControlSet (. 4.32).
. 4.32. CurrentControlSet
Hardware Profiles. . Windows 7 ( , ), . Windows 7 , .
Services.
. ,
,
, . , . 4.33
.
ImagePath. .
Enum. ,
(. 4.34).
. 4.33.
. 4.34. DVD-
BSOD
HKEY_LOCAL_MACHINE\SYSTEM
\CurrentControlSet\Services\i8042prt\Parameters, -
CrashOn CtrlScroll
REG_DWORD 1 (. 4.35).
. 4.35. ,
BSOD
.
BSOD
Ctrl , , Scroll Lock.
SuperFetch
SuperFetch , .
HKEY_-LOCAL_MACHINE\SYSTEM
\CurrentControlSet\Control\SessionManager\Memory
Management\PrefetchParameters , , EnablePrefetcher EnableSuperFetch.
(. 4.36) ( 3).
. 4.36. SuperFetch
SuperFetch
, .
. -
, -
( ), . ,
EnablePrefetcher EnableSuperFetch 0.
,
. , , - . ,
.
-, , ,
Windows 7.
http://www.microsoft.com. Windows 7
, , Microsoft.
.
( ) ,
.
http://sysinternals.com. Microsoft.
Sysinternals 1996 .
Windows, (
)
.
http://oszone.net/.
Windows 7 , . . .
http://sevenforums.com/. ,
Windows 7.
http://user.alexanderklimov.ru. .
http://www.thewindowsclub.com/. ,
.
http://www.winhelponline.com/blog/.
: , , .
5. :
. . ,
. , ,
, , , .
. ,
. , , .
,
.
, ,
,
.
Manager .
,
Bookmarks Bookmark Editor (. 5.2). ,
. - ,
, , , .
. 5.2. ,
,
.
,
.
:
(Tools Registry Monitor). , .
(Tools
Defragment Registry).
, .
,
Windows 7.
,
.
Registry Life:
, , , ,
.
Registry Life (http://
www.chemtable.com/RegistryLife_rus.htm) (. 5.3).
, . ,
, .
(
) .
Process Monitor:
, , Regmon, .
, Filemon.
(Mark Russinovich) (Bryce Cogswell)
Process Monitor.
, .
http://
sysinternals.com. Procmon.exe.
Process Monitor (. 5.4) , , .
(. 5.5).
,
, All events.
Format () .
CSV (Comma Separated Values , ) .
PML, Process Monitor, .
XML
.
, -, Process
Monitor, .
Registry Workshop:
, , Regedit.exe
. - .
,
, -
. . ,
,
--.
Registry Workshop (http://
torchsoft.com/en/rw_information.html), (. 5.6).
,
. Undo
Redo
.
Drag-n-Drop .
,
.
, , , REG-,
,
Windows Mobile. Registry Workshop
Windows,
.
, Registry Workshop .
, 30 .
. . , ,
, , , .
, ,
, , ,
. , ,
.
,
,
.
.
,
Windows 7, ,
.
.
,
.
. ,
.
-.
.
EnhanceMySe7en
EnhanceMySe7en
http://www.seriousbit.com. (. 5.7).
) , . ,
, .
Most Used Tweaks ( )
(. 5.8).
:
Perfomance ().
,
. , .
SuperFetch.
Security (), . 5.9, , .
. , Disable Registry Editor
, , , .
, ( ).
Customizations (), . 5.11,
, .
, , .
, , , ,
, . , ,
, ,
,
.
.
5.11.
EnhanceMySe7en,
Customizations, Start Menu
.
, -
- ,
.
,
, ,
,
. ,
, EnhanceMySe7en,
,
. , -,
, -
,
.
7Tweak
7Tweak (http://www.daoisoft.com/)
(. 5.12), , , . ,
,
, , .
. 5.12. 7Tweak
, UAC ( , , , ).
( , ). , (Optimizations Visual Effects),
None ( ), Few (), Medium (
), Many (), All visual themes enabled
( ) (. 5.13).
. 5.13. 7Tweak,
, (.
5.14).
. 5.14. 7Tweak
Discard
WinTuning 7
. 5.15. WinTuning 7
, , , .
, .
,
.
.
. ,
. , , -
Windows.
WinTuning
7
.
,
,
,
.
,
.
, .
. ,
,
- . , , , , , -
.
. ,
.
Tweak-7, http://www.totalidea.com.
Little
Tweaker,
http://
leelusoft.blogspot.com/2009/05/windows-7-littletweaker.html.
XdN Tweaker, http://xenomorph.net.
,
.
Windows 7, , .
,
.
, .
-
, , .
Windows 7.
, : gpedit.msc.
,
Local Group Policy Editor (. 5.16).
,
,
.
,
, .
.
:
.
.
.
. 5.16.
,
, , -
, .
,
TaskbarNoNotification.
. .
Windows 7 . .
. -
. , .
,
ConfirmFileDelete. Windows Windows
.
, -
,
.
.
NoTrayltemsDisplay.
. HideClock.
.
.
, ... . , . ,
DisallowCpl.
, .
. RestrictCpl,
.
DisableRegistryTools.
.
, ( UseOEMBackground).
-
gpedit. msc.
.
. . .
Windows
Ctrl+Alt+Del Windows , , , . ,
( ) . ,
. , , .
Ctrl+Alt+Del :
.
DisableChangePassword.
. DisableLockWorkstation.
.
DisableTaskMgr.
.
NoLogoff.
, Windows Windows .
. MaxRecentDocs.
,
. ,
Windows 7. , -
Windows,
, ? ,
. , .
Microsoft Excel, . Group Policy Settings
Reference for Windows and Windows Server
http://www.microsoft.com/downloads/
details.aspx?FamilyID=18c90c80-8b0a-4906-a4f5ff24cc2030fb&-displaylang=en.
. Windows 7
.
. . .
, , , . .
BAT-
BAT- -
. .
REG.EXE, . , .
REG-EXPORT
regbackup.bat :
5.1.
BAT-
CD \
MD D:\RegistryBackup
CD D:\RegistryBackup
REG EXPORT HKLM D:\RegistryBackup\hklm.reg
REG EXPORT HKCU D:\RegistryBackup\hkcu.reg
REG EXPORT HKCR D:\RegistryBackup\hkcr.reg
REG EXPORT HKCC D:\RegistryBackup\hkcc.reg
REG EXPORT HKU D:\RegistryBackup\hku.reg
BAT- D:
\RegistryBackup REG-, .
, .
, REG IMPORT
( regrestore.bat):
5.2. REG- BAT-
CD \
CD D:\RegistryBackup
REG IMPORT D:\RegistryBackup\hklm.reg
REG IMPORT D:\RegistryBackup\hkcu.reg
REG IMPORT D:\RegistryBackup\hkcr.reg
REG IMPORT D:\RegistryBackup\hkcc.reg
REG IMPORT D:\RegistryBackup\hku.reg
Windows XP,
CMD BAT-.
BAT.
:
Ch5 regbackup
bat regbackup cmd.
PowerShell
BAT-,
CMD-, WSH- . Microsoft
Windows PowerShell , .
, PowerShell.
PowerShell.
powershell
Enter, Windows PowerShell.
PowerShell
. ,
HKEY_CURRENT_USER
cd ( set-location
sl): d hkcu:
dir
. 5.17 Windows PowerShell.
. 5.17. PowerShell
HKEY_CURRENT_USER .
HKEY_CURRENT_USER reg:
sl hkcu:
$reg =-gci. rec ea silentlycontinue
gci getchilditem. . () , HKEY_CURRENT_USER.
recurse , .
, ea silentlycontinue , -
, .
- .
NewItem. Test. Test2:
cd hkcu:
New-Item HKCU:\Software\Test2
Remove-Item:
Remove-Item HKCU:\Software\Test2
Rename-Item. Test2,
TestPowerShell:
New-Item HKCU:\Software\Test2
Rename-Item
TestPowerShell
HKCU:\Software\Test2
, , , .
TestPowerShell CatName .
New-ItemProperty HKCU:\Software\TestPowerShell
-Name CatName -PropertyType string -Value
. 5.18 .
. 5.18.
DWORD :
#- CatAge
DWORD 8
New
ItemProperty
-path
HKCU:\Software
\TestPowerShell -name CatAge -propertyType DWord
-value8
#-
Get-ItemProperty HKCU:\Software\TestPowerShell
.
,
.
#- CatAge 7
Set-ItemProperty-HKCU:\Software\TestPowerShell name CatAge -value 7
#- CatAge
Rename-ItemProperty
path-HKCU:\Software
\TestPowerShell -name CatAge -newname-
#- CatName
Remove-ItemProperty
HKCU:\Software
\TestPowerShell -name CatName
.
C#
C#. .NET
Framework Microsoft.Win32.Registry, . .
, . ,
Internet Explorer
Windows Title.
: using Microsoft.Win32;
private void ChangeIETitle(string Title)
{
RegistryKey
newIETitle
=
Registry.CurrentUser.OpenSubKey(
@"SOFTWARE\Microsoft\Internet Explorer\Main",
true);
newIETitle.SetValue(Window Title, Title);
newIETitle.Close();
}
private void butChangeTitleIE_Click(object sender,
EventArgs e)
{
ChangeIETitle( );
MessageBox.Show( IE
);
}
HKEY_CURRENT_USER.
.
, HKEY_LOCAL_MACHINE?
Windows 7
.
:
private void AddNewValue()
{
RegistryKey
myKey
=
Registry.LocalMachine.CreateSubKey(
SOFTWARE\\Test\\Preferences,
RegistryKeyPermissionCheck.Default);
try
{
myKey.SetValue(MyKey, MyValue);
}
catch (Exception ex)
{
Console.WriteLine(ex.Message);
}
finally
{
myKey.Close();
}}
private void butVirtualization_Click(object sender,
EventArgs e)
{
AddNewValue();
MessageBox.Show(
);
}
, . UAC,
Windows Vista.
,
. Microsoft - UAC,
Windows 7. (. 5.20).
. 5.20.
. UAC, - ,
( ). , UAC -. Project | Project Properties
Application Resources Manifest Create applications
without a manifest. ,
. ,
. . -
Test HKEY_LOCAL_MACHINE
\SOFTWARE\Test. ,
. .
. Microsoft .
(
), ,
UAC,
HKEY_CURRENT_USER\Software\Classes
\VirtualStore\MACHINE\SOFTWARE. , , .
. ,
. . Microsoft ,
.
:
Ch5
ChangeIETitle zip,
.
, . , ,
. . .
,
,
Windows Vista
Windows 7, .
.
, . !