Compared with the old version of the operating system, Windows Server 2008 system is definitely a different system, the system has introduced a lot of eye-catching features, and it has greatly improved in operational security. . However, this does not mean that everyone can use the Windows Server 2008 system efficiently. After a period of intimacy with the system, we may encounter a lot of troubles. These troubles directly affect Our operational efficiency. In fact, we need to make some targeted settings for the Windows Server 2008 system, and “forced” more potential to enjoy higher operational efficiency! 1. Strictly forbid the login password as the server system, Windows Server The 2008 system is often the target of attack by others. When the system user password we use is not enough, “strong”, a malicious attacker can easily log in repeatedly through “multiple guesses” and then the system login password. The login system illegally attacked the server. So what measures should we take to strictly prohibit illegal attackers from guessing or blasting the Windows Server 2008 system login password? In fact, it is very simple, we can strictly prohibit the guessing of the server system login password according to the following operations: First open the Windows Server 2008 system "Start" menu, from the "Run" command, in the pop-up system run text box, enter the string command "Gpedit.msc", click the "OK" button to enter the group policy editor Dialog box; secondly, display the area on the left side of the edit dialog box, position the mouse in the "Computer Settings" branch option, and expand under the corresponding branch option, "Windows Settings /Security Settings /Account Policy /Account Lockout Policy" ”Group Policy sub-item, in the corresponding area of the "Account Lockout Policy" group policy sub-item, find the target group policy "Account Lockout Threshold", right-click this option, pop-up shortcut Execute the “Properties" command in the menu to open the target group policy property settings. Port (as shown), in this setting window, we can freely set the number of login attempts that trigger the system account to be locked as required. This value is usually between 0 and 999. In order to strictly forbid the login password, we should Set this parameter to “3”, and finally click the “OK" button to save the above settings, so that when an illegal attacker attempts to log in to the Windows Server 2008 system, the number of incorrect passwords is more than 3 times. The corresponding system will automatically lock the currently logged in user account. 2, prohibit module installation dragging network performance We all know that Windows Server 2008 system has added a new module installation service, the system service will automatically run when the server system tries to update online through the network, we often find valuable during the running process The system CPU resources are consumed a lot, this phenomenon directly drags down the network performance of the Windows Server 2008 system, reducing the speed of the online update of the corresponding system. In order to prevent the system module installation operation from dragging the network performance, we can disable the Windows Server 2008 system to automatically run the module installation service according to the following operation: "Windows Module Installer": First open the Windows Server 2008 system "Start" menu, from the midpoint Select the “Run” command, in the pop-up system run text box, enter the “services.msc” dialog box, click the “OK” button to enter the service list window of the corresponding system; secondly in the service list window On the right side of the display area, find the target system service "Windows Module Installer", right-click the service option, and execute the "Properties" command from the pop-up shortcut menu to open the property settings window of the target system service, such as Figure; then click on the “General” tab in the property settings window. In this tab page, we will find that the target system service has been enabled by the Windows Server 2008 system by default. In this case, we should promptly Click “stop” Button, temporarily disable the target system service, and adjust the startup type parameter of the system service to "disable" or "traffic", and finally click the "OK" button to save the above setting operation, such a When the Windows Server 2008 system performs an online update operation through the network in the future, its network connection performance will not be affected by the module installation service "Windows Module Installer". 3, optimize the cache to improve file access speed as a server system, Windows Server 2008 system usually stores important data information, in order to ensure the security of these important information, Windows Server 2008 system in the default state, often read the disk partition Write stability is more important, but it will slow down the access speed of system files. If we do not store much important data information in the Windows Server 2008 system, or if we are not very concerned about the security of file access, then we can consider the reasonable optimization of the disk partition cache under Windows Server 2008 system. To improve the file access speed as much as possible, here are the specific optimization steps: First, log in to the Windows Server 2008 system desktop with a privileged account, open the corresponding system's "Start" menu, and then click "Programs", " Server Manager, menu option, enter the server manager console window of the corresponding system; secondly, in the left sub-pane of the server manager console window, use the mouse to expand one by one; Diagnose & rdquo;, & nbsp; Branch option, under the "Device Manager" branch option, right click on the target disk device and execute the "Properties" command in the context menu, in the target disk properties dialog box that appears. , click on the “Strategy” tab to enter The option setting page shown in the figure; check the "Enable advanced performance" in the check target option setting page, "Enable write cache on disk", etc. The options are not selected normally, if they are not selected When we should re-select them in time, click the "OK" button to save the optimized cache settings, so that the speed of Windows Server 2008 system access files can be greatly improved. 4, close the IDE channel in the idle state Under normal circumstances, when we start the Windows Server 2008 system, the operating system will automatically load all the hardware installed in the corresponding host, this loading process will often drag the system The normal startup speed will also consume a lot of valuable system resources. In fact, many hardware installed in the Windows Server 2008 system are rarely used. Temporarily turning off these idle hardware can effectively improve Windows. Server 2008 system startup efficiency and operational efficiency. For example, when we enter the device manager interface in the Windows Server 2008 system environment and expand the branch option <;IDE ATA/ATAPI controller" from this interface, we may be able to find that the corresponding system contains two IDE channels. The two IDE channels are called the main IDE channel and the secondary IDE channel under the traditional operating system; however, in the Windows Server 2008 working environment, there is no distinction between the main IDE channel and the secondary IDE channel. Since many users only have one hard disk device installed in their computer, we can temporarily shut down another IDE channel that is not used by appropriate settings, so as to save valuable resources and improve system startup speed. To close a target IDE channel, we can first open the Device Manager list interface of the Windows Server 2008 system, find the IDE channel option that needs to be closed, and right-click the option and execute the right-click menu. “Properties” command, enter the property setting interface of the corresponding IDE channel; click the “Advanced Settings” tab in the property setting interface to open the option setting page as shown in the figure; here, we can clearly After seeing the specific working mode of the current IDE hard disk device, once the IDE channel is confirmed to be idle, execute the “Uninstall” command in the right-click menu, so that the idle IDE channel can be temporarily turned off. According to the same steps, we can also use other hardware devices that are rarely used in the Windows Server 2008 system environment, which can improve the operating efficiency of Windows Server 2008 system to a greater extent.