1. Allow specified applications in explorer (omogucava samo odredjenim aplikacijama da se startuju u exploreru, tako sto se pravi lista):

   HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictRun\1   SUCCESS   "word.exe"   

2. Prevent lunching dosbox cmd in windows (onemoguciti command.com sasvim, bez potrebe da se brise i da se slucajno nakace neki virusi):

                HKCU\Software\Policies\Microsoft\Windows\System\DisableCMD   SUCCESS   0x2   

3. revent these aplications to run in explorer (onemogucava nekim aplikacijama da se startuju u exploreru, korisna stvar):

   HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\1   SUCCESS   "cmd.exe"   

4. Window instaler runs all programs (daje maximalne privilegije svim setup programima tokom instalacije):

   HKLM\Software\Policies\Microsoft\Windows\Installer\AlwaysInstallElevated   SUCCESS   0x1   

5. Enable alternate credentials (koriscenje svih dostupnih direktorijuma u windowsu uvek):

   HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\   SUCCESS   Access: 0xF003F    

6. Request alternate credentials when instaling from netword share (koriscenje svih dostupnih direktorijuma u windowsu uvek):

   HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\PromptRunasInstallNetPath   SUCCESS   0x1   
   

7. Ova podesavanja onemogucuju startup programima da se pokrenu zajedno sa windowsom:

                HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisableLocalMachineRun   NOT FOUND      
   
                HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisableLocalMachineRunOnce   NOT FOUND      
   
                HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisableCurrentUserRun   NOT FOUND      
   
                HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisableCurrentUserRunOnce   NOT FOUND      

8. Disable the ability to customize toolbars: /en

   HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoToolbarCustomize   NOT FOUND      

9. Remove the options to hide or change toolbars: /en

   HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoBandCustomize   NOT FOUND      

10. Remove the distributed file system tab: /en

   HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDFSTab   NOT FOUND      

11. Secure desktop restriction: /en

   HKLM\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Windows\SecureDesktop   NOT FOUND      

12. Disable the new meni item: /en

                HKCR\CLSID\{D969A300-E7FF-11d0-A93B-00A0C90F2719}   SUCCESS   Access: 0x20009    

13. Remove the ability to modify file types (ne mogu da se menjaju extenzije fajlova i njihovo brisanje, preko folder options dijaloga):

                HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFileAssociate   NOT FOUND      
   
14. Enable require alphanumeric windows password (prihvata sve kao sifru, i nedozvoljene karaktere, brojeve itd.):

   HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network\AlphanumPwds   SUCCESS   0x1   


15. Hide computer from browser list (sakriva bilo koji tip windowsa sa browser liste, bilo da je server ili workstation)...:

   HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters\Hidden   SUCCESS   0x1   

16. Ova podesavanja odredjuju da li su izmenjivi i ostali mediji za skladistenje raspolozivi svim korisnicima:

  secure access to removable drives:

   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\AllocateDASD   SUCCESS   "1"   

  secure access to floppy drives:

                HKLM\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon\AllocateFloppies   SUCCESS   "1"   

  secure access to cd-rom drives:

   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\AllocateCDRoms   SUCCESS   "1"   

17. Ova podesavanja kriju logove od svih korisnika (cak i od administratora):

  restricted application logs access:

   HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\RestrictGuestAccess   SUCCESS   0x1   

  restricted security logs access:

   HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Security\RestrictGuestAccess   SUCCESS   0x1   

  restricted system logs access:

   HKLM\SYSTEM\CurrentControlSet\Services\EventLog\System\RestrictGuestAccess   SUCCESS   0x1   

18. Ukljucivanje windows tunneling protokola (sigurnosnih filtera, ko hoce moze da stiklira celu granu pod 'parameters'):

                HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\EnableSecurityFilters   SUCCESS   0x1

19. Za dial-up (cuva log svake konekcije u fajlu device.log)....

HKLM\SYSTEM\CurrentControlSet\Services\RasMan\Parameters\Logging   SUCCESS   0x1   


eto

 

ima par korisnih stvari ...