Home Standard Edition Win7 system without group policy optimization

  

In general, the pre-installed Win7 Home Edition computer configuration is relatively low, especially some notebooks and netbooks, and the user's computer knowledge and technical level is limited, so this article Optimized for the two most representative goals in the daily use of computers, mainly including the following two points.

First, it is safer. The most representative is to lock the IE home key value to prevent malicious tampering.

Second, more efficient. Turn off some useless features, such as the system's own burning feature to save system resources.

The most common problem encountered by users is that their IE homepage has been tampered with, resulting in a lot of inexplicable windows popping up after opening IE. It can be said that it is inexhaustible and incessant, which is very troublesome. . This is often caused by malicious tampering and hijacking of the IE homepage when the user is online or installing some software. Therefore, locking the IE home page is very necessary.

In the Ultimate version, users can lock the homepage through Group Policy's "Disable Change Home Page Settings". For the home version, the key value of the IE homepage is actually controlled by the key value of “HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\Main”; the “Start Page” value in the right window is the home page of IE. Therefore, to lock the IE homepage without being tampered with, we only need to set the current account's permission for the above key values ​​to "ld read only".

You can also make a "regeini.ini” placed on the D drive, then start the command prompt as an administrator, and then enter “regeini d:\ egeini”(“regeini.exe” The system comes with a command to modify the registry permissions).

Tip: Run as administrator: Click “Start →All Programs →Accessories", then right click on “command prompt” in the pop-up menu Select “Run as administrator>

After the completion, the user only reads the above key values ​​without changing the permissions. The user can change the homepage in IE, but the settings will not be saved. After closing, the IE is still the original homepage, naturally Achieved the purpose of locking the home page.

Tip: The registry modification generally needs to restart the system to take effect. If it needs to take effect immediately, you can open the task manager and terminate the process with the task manager after the process is terminated. Then enter “explorer.exe” Re-run.

Expand the above key values ​​of the registry, right click on the “Main” key value, then select “Permissions", select “Advanced” in the pop-up window, then switch to “ Click the current administrator account as the owner (if the current account does not appear in the list, click “other accounts”, manually enter the current account name).

Click “OK"Return to the permission settings window and click “Add” to add the current administrator account to the list and set the account's read permission for this key value to "ld"; Control & rdquo;, after refreshing the registry, you can change the key value of “Start Page”.

In addition to locking IE, there are other security optimization settings that users can selectively optimize based on their own situation.

Some system default settings may not be suitable for all users. For example, if the netbook user does not have an optical drive, then the system's own burning function is useless. Even if some brand computers have optical drives, there may not be a lot of common users using the system's own burning function, and third-party software can be used to achieve better results, so we can turn off burning to save system resources.

Similarly, in order to facilitate everyone's operation, double-click the "noburn.reg" file in the download file to import the registry, the optimization is complete, simple? Let's verify, if your computer has a CD-ROM drive, Then open "ldquo; computer", right click on the CD-ROM icon, you will find that the menu of "burn to disc" has disappeared, because the function has been closed!

Start Registry Editor , expand to  HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer”, then delete the <quo;Explorer” item, and resume the burning function after restarting.

In addition to turning off the system's own CD burning function, users can also turn off the system's "send error report" function; if the user is not connected to the printer, you can also turn off the system printing service if the user's computer hard disk Space is limited, you can also selectively turn off the system restore protected partitions and so on.

From the above we can see that although the home version does not have a group policy, but with the registry editor and the system itself, we can also achieve Group Policy optimization. Compared with the previous operating system, Win7 has been greatly improved in terms of security and ease of use. As long as the UAC function, IE protection mode and NTFS permission provided by Win7 itself are combined, high security effects can be obtained. Therefore, for the average home user, the home version is enough, not necessarily to install the flagship version. And if the average user has more needs, as long as you have a certain amount of computer knowledge, you can completely make the home version into a "flagship version" for your needs.

Copyright © Windows knowledge All Rights Reserved