注冊表-禁用程序-僅開放程序-禁用注冊表
注冊表Policies的權限設置，system為完全控制，其他系統(tǒng)管理員賬戶都為只讀。可防止360修復注冊表禁用。可用gpedit.msc恢復注冊表。禁用gpedit.msc可設置mmc.exe的權限。
注冊表內容：
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDriveTypeAutoRun"=dword:00000091
"NoSharedDocuments"=dword:00000000
"Intellimenus"=dword:00000000
"NoRecentDocsHistory"=dword:00000000
"ClearRecentDocsOnExit"=dword:00000000
"NoInstrumentation"=dword:00000000
"NoThumbnailCache"=dword:00000001
"ForceStartMenuLogOff"=dword:00000001
"NoResolveTrack"=dword:00000001
"DisallowRun"=dword:00000001
"RestrictRun"=dword:00000001
不許運行的程序：
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun]
"1"="notepad.exe"
僅允許運行的程序：
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictRun]
"1"="cmd.exe"
"2"="mmc.exe"
禁用注冊表：
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableRegistryTools"=dword:00000002
