Group Policy program is located in the "C:\\WINNT\\SYSTEM32" folder and is named "gpedit.msc". When starting Group Policy, first click the [Start] button and select "Run". Command, enter the "gpedit.msc" command in the "Run" text box, then click [OK] to start the Windows Group Policy. Let's look at the application example of Windows XP Professional Local Group Policy: prohibit changing the display properties in Right click on the blank space of the Windows desktop, select "Properties", enter the "Display Settings" dialog box, you can set the desktop theme, desktop background, screen saver, display settings, etc., if you do not want others to change each Item settings, you can hide it by group policy. In the Group Policy console, expand [User Configuration] → [Administrative Templates] → [Control Panel] → [Display] branch, enable the hidden desktop tab, hide Theme tab, hidden protector tab, hidden settings Tabs and other items can also be personalized for desktop themes, screen savers, etc. It is forbidden to change the start menu and taskbar. We can prohibit users from changing the start menu and taskbar settings after entering the computer through Group Policy. Expand [User Configuration] → [Administrative Templates] → [Taskbar and Start Menu] branch, and double-click the "Block Changes" taskbar and Start Menu 'Settings" policy in the right pane, in the pop-up "Settings" dialog box. In the box, click the “Enabled” option box. Later, when we right-click on the Start menu or the taskbar, an error message will appear stating that a setting prohibits this operation. Disable the Registry Manager in order to prevent others. After entering the computer, modify the registry file, you can disable access to the registry editor in Group Policy. Expand the [User Settings] → [Administrative Templates] → [System] branch, and then double-click in the right window. "Block access to the registry "Tools" policy, then select "Enable" in the pop-up dialog box. Restrict the use of the application If your computer has multiple users set up, you want to limit the applications that users can run, you can also set it in Group Policy. When setting, expand [User Configuration] → [Administrative Template] → [System], then double-click the "Run only licensed Windows application" policy in the right window, then select the "Enable" option in the pop-up dialog box to activate In the following "Application List" (as shown in the figure), click the [Display] button here, and a "Show Content" dialog box will pop up. Click the [Add] button here to add the application that is allowed to run. Users can only run programs in the Allowed Applications List. Disable Add/Remove Programs Hide the Add/Remove Programs option on your computer to prevent other users from installing and uninstalling applications at will. In the group policy, expand [User Configuration] → [Administrative Templates] → [Control Panel] → [Add/Remove Programs] in the group policy, double-click the "Delete Add/Remove Programs" policy on the right side, and click "Delete Add/Remove". Click the "Enable" option in the Programs dialog box, then click [OK]. In addition, in the "Add/Remove Programs" branch, you can also add "Add New Programs", "Add Programs from CD-ROM or Floppy Disk", "Add Programs from Microsoft", and "From" in the Windows Add/Remove Programs item. The network add program and other items are hidden, and the function of protecting system files and applications in the computer is started. Prohibit setting up new dialing If you don't want others to dial up on your computer, Group Policy can do the same. To block "Create a new connection", first expand the [User Configuration]→[Administrative Template]→[Network]→[Network Connection] branch in the group policy; double-click the “No Access to New Connection Wizard” in the right window. A setting dialog box pops up. At this time, in the setting dialog box "Enabled" single option, click [OK]. With this setting, "Create a new connection" does not appear in the "Network Connections" folder and the "Start Menu".