Disallow running a .exe file:

C:\\> reg add
"HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer" /v DisallowRun /t REG_DWORD /d "00000001" /f
C:\\> reg add "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\DisallowRun" /v badfile.exe /t REG_SZ /d <BAD FILE NAME>.exe /f

Disable Remote Desktop:

C:\\> reg add "HKLM\\SYSTEM\\CurrentControlSet\\Control\\TerminalServer" /f /v fDenyTSConnections /t REG_DWORD /d 1

Send NTLMv2 response only/refuse LM and NTLM: (Windows 7 default)

C:\\> reg add HKLM\\SYSTEM\\CurrentControlSet\\Control\\Lsa\\ /v lmcompatibilitylevel /t REG_DWORD /d 5 /f

Restrict Anonymous Access:

C:\\> reg add HKLM\\SYSTEM\\CurrentControlSet\\Control\\Lsa /v restrictanonymous /t REG_DWORD /d 1 /f

Do not allow anonymous enumeration of SAM accounts and shares:

C:\\> reg add HKLM\\SYSTEM\\CurrentControlSet\\Control\\Lsa /vrestrictanonymoussam /t REG_DWORD /d 1 /f

Disable IPV6:

C:\\> reg add HKLM\\SYSTEM\\CurrentControlSet\\services\\TCPIP6\\Parameters /v DisabledComponents /t REG_DWORD /d 255 /f

Disable sticky keys:

C:\\> reg add "HKCU\\ControlPanel\\Accessibility\\StickyKeys" /v Flags /t REG_SZ /d 506 /f Disable Toggle Keys:
C:\\> reg add "HKCU\\ControlPanel\\Accessibility\\ ToggleKeys" /v Flags /t REG_SZ Id 58 /f

Disable Filter Keys:

C:\\> reg add "HKCU\\ControlPanel\\Accessibility\\Keyboard Response" /v Flags /t REG_SZ /d 122 /f

Disable On-screen Keyboard:

C:\\> reg add HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Authentication\\LogonUI /f /v ShowTabletKeyboard /t REG_DWORD /d 0

Disable Administrative Shares - Workstations:

C:\\> reg add HKLM\\SYSTEM\\CurrentControlSet\\Services\\LanmanServer\\Parameters /f /v AutoShareWks /t REG_DWORD /d 0