I'll start the list:
Magic Kingdom
461.3000R Parade 1 (PL 162.2) main channel - very active during parade
463.7500R Parade 2 (PL 162.2) secondary channel
These are the only 2 repeaters that are still analog for WDW. Everything else is on their Linked Capacity Plus MOTOTRBO system using Enhanced Privacy encryption and RAS. There are many analog/DMR simplex comms in the parks mainly for restaurants but I can't confirm since you most likely be stopped by security if you attempt to take your radio into the parks.
Most hotels, hospitals, universities, malls, and businesses use MOTOTRBO conventional and trunked systems. There are a few that are still analog. Check out the hotel section of RR database. World Center Marriott is the biggest.
Mears transportation uses an analog LTR system and can be received in conventional mode if you don't have a LTR capable scanner. The main activity on that system are talkgroups on home channel 15 (Disney magical Express and Disney Cruise Lines busses) and home channel 20 (Motor coach busses and motor shuttles). Those frequency are 860.3125 and 860.7875 respectively. Although you won't be able to track these without an LTR capable scanner, scanning conventionally would yield good results.
Finally not all law enforcement on the Orange County system is encrypted, mainly due to interoperability reasons. If you look at the RR database, PSAP, Metro 1 through 8, Detail 1, ORL-IOP1 through 10 plus a few others not listed are clear (unencrypted). If there is something major that happens in the county and other agencies are involved, most likely those channels will be patched to one of the Metro talkgroups.