First. Restricted, hidden disk partitions
For the convenience of use, we sometimes store some data belonging to personal privacy level in public computers shared by multiple people, in order to ensure these data Security, data protection can be achieved by limiting or hiding disk partitions.
In the left pane of the Opened "Group Policy" dialog box, click "Local Computer Policy & Rarr; User Configuration & Rarr; Administrative Templates & Rarr; Windows Components & Rarr; Windows Explorer", then Go to the right pane and double-click "Allow the ‘My Computer & rsquo; Access Drive" item, then open the "Delete from ‘My Computer & rsquo; Access Drive Properties" setting window to select &ldquo ; Enabled & rdquo;, select “ Enabled & rdquo;, the drop-down list for selecting a drive will appear below, select the drive we wish to limit and click "OK".
If you want to turn off all drives, including CD-ROM drives, you can check "Restrict all drives". Under "Windows Explorer", there are also "Deleted & lsquo; these specified drives in My Computer & rsquo;", this policy can hide the specified drive, but this strategy can be broken through IE browser In the address bar, type C: Enter to open the hidden C drive partition. For this reason, we still use “limit"
Second. Let "Run" & rdquo; appear in the start menu
Familiar with DOS friends often call the command line window on a black background for dos operation, but the Windows 7 start menu is gone. ; Run & rdquo; items of the trace, although the "start" menu of the "search" box can be used as "run" box, or click & ldquo; start & rarr; all programs & rarr; attachment & rarr; run ”, can open the "run" window, but even the first test Windows 7 system "old bird" rd also feel uncomfortable. At this time, we can click “Start”→All Programs→Accessories→Run, enter gpedit.msc in the Open “Run” dialog box and press Enter to start the “Group Policy” dialog box. . In the left pane of the "Group Policy" dialog box, click “User Configuration →Administrative Templates →Start Menu and Taskbar", then double-click in the right pane to add the run command to [Start] menu & rdquo; item, in the open "Add the run command to the [Start] menu properties & rdquo; dialog box under the "Settings" tab, select "ld"; Enabled & rdquo;, then click & ldquo; & rdquo; Exit, so "Run" & rdquo; will appear in the "Start" menu.
Third. Close & ldquo;Balloons>Notifications
Sometimes when you are working, a prompt pops up, forcing you to click, which is very annoying. In fact, in the left pane of the "Group Policy" dialog box that opens, click "User Configuration & Rarr; Administrative Templates & Rarr; Start Menu and Taskbar", and then double-click in the right pane. ; close all balloon notifications, select "“ Enabled" in the "Set all" tab of the "Close all balloon notification properties" dialog box, and then click "OK" to exit. You can turn off the annoying "balloon notification".
Fourth. Prevent passwords from being guessed.
When our Windows 7 user password settings are relatively simple, it is easy for illegal users to log in to the system by retrying multiple times and guessing the user password. In fact, we can Limit the number of times "guess". When a user attempts to log in to the system and enters the wrong password for a certain threshold, the account is automatically locked. Before the account lockout period expires, the user will not be available unless the administrator manually unlocks the account. In the left pane of the Opened "Group Policy" dialog box, click <; Computer Settings & Rarr; Windows Settings & Rarr; Security Settings & Rarr; Account Policies & Rarr; Account Lockout Policy & rdquo;, then to the right pane In the "Account Lockout Threshold" item, here you can set the number of failed login attempts for the user account to be locked. The value is between 0 and 999. The default value is 0. The number of logins is unlimited. We can change to 3 or 10.
Fifth. Cancel the "Start Logout" in the Start menu. In the left pane of the "Group Policy" dialog box that opens, click “User Configuration & Rarr; Administrative Templates & Rarr; Start menu and taskbar & rdquo;, then double-click in the right pane “ delete the & lsquo; logout & rsquo; & rdquo; item on the [Start] menu, in the open & ldquo; delete [start] menu & lsquo; logout & rsquo In the Properties & rdquo; dialog box, under the “Settings> tab, select “Enabled”, then click &ld;; OK” to exit. This “logout” item will disappear in the start menu. However, this setting only works for the "Start" menu, and does not affect the "Windows Security" dialog box (you can press the “Ctrl+Alt+Del” key combination to open the "Logout” project.
Six. Record the time of the last login to Windows 7 system
Windows 7 system can record our login information, so you can compare the time of login twice before each login system, if found Inconsistent time indicates that someone has tried to log in to your account illegally. In fact, in the left pane of the Opened Group Policy dialog box, click “Computer Configuration & Rarr; Administrative Templates & Rarr; Windows Components & Rarr; Login Options & rdquo;, then double-click in the right pane The "Show information about previous logins during user login" item is turned on in the "Show information about previously logged in during user login" dialog box under the "Settings" tab under the "Settings" tab. ”, then click "OK" to exit. This way, the next time you start your computer, Windows 7 will prompt you for the last login time before the user enters the system desktop.
Seven. Rename the Administrator
Everyone knows that the system administrator account Administrator has the highest authority, and because of this, some viruses and Trojans always use the account name Administrator, which everyone knows, to create the event. In fact, we You can also change the name to make it impossible for those outsiders to start. In the left pane of the Open Groups dialog box, click “Computer Configuration →Windows Settings →Security Settings →Local Policies →Security Options”, then double-click in the right pane “Account: Rename System Administrator Account” item, in the newly opened "Account: Rename System Administrator Account Properties" dialog box, you can change the system administrator account Administrator name.
The eighth. Give "ldclose the computer" and add a "lock" & rdquo;
sometimes need to temporarily leave the computer in the unit, in order to prevent others from peeking on the information on the computer, we can pass ""WIN+ L”Shortcut key to lock the computer, but on the lock page can also execute "turn off the computer", although others can not tamper with the machine, but can shut down, it is necessary to "turn off the computer" for this purpose One "lock”. In the left pane of the Opened Group Policy dialog box, click “Computer Configuration →Windows Settings →Security Settings →Local Policies →Security Options”, then to the right window Find and double-click "Shutdown: Allow shutdown before login" item, set its property to "ldquo" in the pop-up properties dialog box, and click "“OK".
Conclusion: The above are 8 tips for group strategy.