Disable Feature Cripplers Like WinLock by Changing Windows Registry Policies
When I was a high school senior. I was in charge of the network and the technology lab. Part of my job included maintaining and fixing the computers. As a systems administrator, I required full access to the network and the machines. Unfortunately, some of the computers were locked. Back when I was a freshman that the previous systems administrator installed a feature crippler called Winlock on all of the machines to prevent students from changing settings like the desktop background and installing programs like computer games.
I hate it when people install programs the cripple functions in the operating system. But, I suppose it was necessary back then since the computers in the lab had Windows 98 installed. Unfortunately, Windows operating systems like 98 are not based on the NT Kernel. Therefore, WinLock was necessary in order to render a "guest user" environment for the students.
Cracking WinLock
Unfortunately, everybody in the past who had anything to do with the computer department forgot the password. So, I had to try some rudimentary workarounds like deleting the Winlock *.exe files. When that didn't work, I was at the verge of just reinstalling Windows. But, I decided to first look into the registry. There, I found where all the Winlock magic came from. In fact, it wasn't really magic. I discovered that you didn't have to buy expensive software to cripple features for guest users. If you knew what you were doing, you just have to change a couple of registry keys. The related keys are as follows:
-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
-
"NoWindowsUpdate"=dword:00000001
-
"NoDrives"=dword:00000004
-
"NoCommonGroups"=dword:00000001
-
"NoSetFolders"=dword:00000001
-
"NoDesktop"=dword:00000001
-
-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32]
-
"NoPlacesBar"=dword:00000001
-
-
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
-
"NoDriveTypeAutoRun"=hex:95,00,00,00
-
"NoRun"=dword:00000001
-
"NoFind"=dword:00000001
-
"NoSetFolders"=dword:00000001
-
"NoSetTaskBar"=dword:00000001
-
"NoDesktop"=dword:00000001
-
"NoClose"=dword:00000001
-
"NoAddPrinter"=dword:00000001
-
"NoDeletePrinter"=dword:00000001
-
"NoPrinterTabs"=dword:00000001
-
"NoActiveDesktop"=dword:00000001
-
"NoActiveDesktopChanges"=dword:00000001
-
"NoSetActiveDesktop"=dword:00000001
-
"NoInternetIcon"=dword:00000001
-
"ClassicShell"=dword:00000001
-
"NoFileMenu"=dword:00000001
-
"NoViewContextMenu"=dword:00000001
-
"NoFavoritesMenu"=dword:00000001
-
"NoChangeStartMenu"=dword:00000001
-
"NoFolderOptions"=dword:00000001
-
"NoRecentDocsMenu"=dword:00000001
-
"CDRAutoRun"=hex:00,00,00,00
-
-
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictRun]
-
"0"="WINLOCK.EXE"
-
"1"="LAUNCHER.EXE"
-
"2"="LOCKWALL.EXE"
-
-
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Network]
-
"NoNetSetup"=dword:00000001
-
"NoNetSetupIDPage"=dword:00000001
-
"NoNetSetupSecurityPage"=dword:00000001
-
"NoFileSharingControl"=dword:00000001
-
"NoPrintSharingControl"=dword:00000001
-
-
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\System]
-
"DisableRegistryTools"=dword:00000001
-
"NoDispCPL"=dword:00000001
-
"NoDispAppearancePage"=dword:00000001
-
"NoDispBackgroundPage"=dword:00000001
-
"NoDispScrSavPage"=dword:00000001
-
"NoDispSettingsPage"=dword:00000001
-
"NoConfigPage"=dword:00000001
-
"NoDevMgrPage"=dword:00000001
-
"NoFileSysPage"=dword:00000001
-
"NoVirtMemPage"=dword:00000001
-
"NoAdminPage"=dword:00000001
-
"NoProfilePage"=dword:00000001
-
"NoPwdPage"=dword:00000001
-
"NoSecCPL"=dword:00000001
Windows Policies
To enable or disable features in the operating system, you would just change the relevant keys in these registry entries. For example, to disable the control panel you just change (or create) a dword "NoDispCPL" with the value of 00000001 in HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\System.
Quick Fix
I made it easy for you. If you have a crippling software or some features have somehow been disabled, I created a registry file that will enable everything.
- Just copy the text at the end of this article and paste it in a new file called "cure.reg" on the C: drive.
- Restart your computer in MS-DOS mode.
- Then at the C:\> prompt, enter "regedit cure.reg".
- When it is complete just restart the computer. Basically this cure.reg file contains the text of the keys above but instead of 00000001 (which mean "yes") it replaces it with 00000000 (which means "no").
-
REGEDIT4
-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
-
"NoWindowsUpdate"=dword:00000000
-
"NoDrives"=dword:00000004
-
"NoCommonGroups"=dword:00000000
-
"NoSetFolders"=dword:00000000
-
"NoDesktop"=dword:00000000
-
-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32]
-
"NoPlacesBar"=dword:00000000
-
-
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
-
"NoDriveTypeAutoRun"=hex:95,00,00,00
-
"NoRun"=dword:00000000
-
"NoFind"=dword:00000000
-
"NoSetFolders"=dword:00000000
-
"NoSetTaskBar"=dword:00000000
-
"NoDesktop"=dword:00000000
-
"NoClose"=dword:00000000
-
"NoAddPrinter"=dword:00000000
-
"NoDeletePrinter"=dword:00000000
-
"NoPrinterTabs"=dword:00000000
-
"NoActiveDesktop"=dword:00000000
-
"NoActiveDesktopChanges"=dword:00000000
-
"NoSetActiveDesktop"=dword:00000000
-
"NoInternetIcon"=dword:00000000
-
"ClassicShell"=dword:00000000
-
"NoFileMenu"=dword:00000000
-
"NoViewContextMenu"=dword:00000000
-
"NoFavoritesMenu"=dword:00000000
-
"NoChangeStartMenu"=dword:00000000
-
"NoFolderOptions"=dword:00000000
-
"NoRecentDocsMenu"=dword:00000000
-
"CDRAutoRun"=hex:00,00,00,00
-
-
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictRun]
-
"0"="WINLOCK.EXE"
-
"1"="LAUNCHER.EXE"
-
"2"="LOCKWALL.EXE"
-
-
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Network]
-
"NoNetSetup"=dword:00000000
-
"NoNetSetupIDPage"=dword:00000000
-
"NoNetSetupSecurityPage"=dword:00000000
-
"NoFileSharingControl"=dword:00000000
-
"NoPrintSharingControl"=dword:00000000
-
-
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\System]
-
"DisableRegistryTools"=dword:00000000
-
"NoDispCPL"=dword:00000000
-
"NoDispAppearancePage"=dword:00000000
-
"NoDispBackgroundPage"=dword:00000000
-
"NoDispScrSavPage"=dword:00000000
-
"NoDispSettingsPage"=dword:00000000
-
"NoConfigPage"=dword:00000000
-
"NoDevMgrPage"=dword:00000000
-
"NoFileSysPage"=dword:00000000
-
"NoVirtMemPage"=dword:00000000
-
"NoAdminPage"=dword:00000000
-
"NoProfilePage"=dword:00000000
-
"NoPwdPage"=dword:00000000
-
"NoSecCPL"=dword:00000000
-
-
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp]
-
"Disabled"=dword:00000000
-
"NoRealMode"=dword:00000000
-
-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
-
"WinLock Account Updater"="C:\PROGRAM FILES\VISIONSOFT\WINLOCK PRO\LAUNCHER.EXE 2"
-
"WinLock CPLBlocker"="C:\PROGRAM FILES\VISIONSOFT\WINLOCK PRO\LAUNCHER.EXE 4"
Note that this article only applies to Windows 95 to ME. Windows NT, XP, and Vista use a different, much easier way to change policies.
Hope this works! Comment on your experience!

Subscribe by RSS Feed
Stumble it!
Furl This!
Reddit!
April 1st, 2007 at 12:48 am
Used this to info to "cripple" my sons win98 pc to I didnt have ti reinstall windows every week after he installed yet another crappy game of the internet...
September 22nd, 2007 at 3:21 am
thanks for the fix
February 15th, 2010 at 3:25 am
Thank-you very much! This is helpful... very helpful.