注冊表Policies的權限設置，system為完全控制，其他系統管理員賬戶都為只讀。可防止360修復注冊表禁用。可用gpedit.msc恢復注冊表。禁用gpedit.msc可設置mmc.exe的權限。

注冊表內容：

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

"NoDriveTypeAutoRun"=dword:00000091

"NoSharedDocuments"=dword:00000000

"Intellimenus"=dword:00000000

"NoRecentDocsHistory"=dword:00000000

"ClearRecentDocsOnExit"=dword:00000000

"NoInstrumentation"=dword:00000000

"NoThumbnailCache"=dword:00000001

"ForceStartMenuLogOff"=dword:00000001

"NoResolveTrack"=dword:00000001

"DisallowRun"=dword:00000001

"RestrictRun"=dword:00000001

不許運行的程序：

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun]

"1"="notepad.exe"

僅允許運行的程序：

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictRun]

"1"="cmd.exe"

"2"="mmc.exe"

禁用注冊表：

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"DisableRegistryTools"=dword:00000002