The following is a .reg file I created to semi-secure my local computers from inside users... the only one that worked was the last regedit to disable the start button. Can you review this and tell me what I'm doing wrong so I can correct it and use this.
Here's the file:
Windows Registry Editor Version 5.00
;Disable Control Panel
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoControlPanel"=dword:1
;Disable Right Click
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
"NoViewContextMenu"=dword:1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
"NoViewContextMenu"=dword:1
;Remove My Computer From Desktop (No Desktop Items)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
NonEnum]
"{20D04FE0-3AEA-1069-A2D8-08002B30309D}"=dword:1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
NonEnum]
"{20D04FE0-3AEA-1069-A2D8-08002B30309D}"=dword:1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
NonEnum]
"NoDesktop"=dword:1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
NonEnum]
"NoDesktop"=dword:1
;Disable Recycle Bin Properties
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
"NoPropertiesRecycleBin"=dword:1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
"NoPropertiesRecycleBin"=dword:1
;Disable Start Button
;Delete Previous Entry
[-HKEY_CLASSES_ROOT\CLSID\{5b4dae26-b807-11d0-9815-00c04fd91972}]
;Re-create with new name
[HKEY_CLASSES_ROOT\CLSID\{-5b4dae26-b807-11d0-9815-00c04fd91972}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5b4dae26-b807-11d0-9815-00c04fd91972}]
"Menu Band"=reg_sz
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5b4dae26-b807-11d0-9815-00c04fd91972}\InProcServer32
""=reg_expand_sz:%SystemRoot%\system32\browseui.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5b4dae26-b807-11d0-9815-00c04fd91972}\InProcServer32
"ThreadingModel"=reg_sz:Apartment