Windows XP Group Policy Application
Group Policy is the primary tool for administrators to define and control programs, network resources, and operating system behavior for users and computers. Various software, computer, and user policies can be set up by using Group Policy. For example, you can use Group Policy to remove icons from the desktop, customize the Start menu, and simplify the Control Panel. In addition, you can add scripts that run on your computer (when the computer starts or stops, and when users log in or log out), and even configure Internet Explorer.
The "Group Policy" program is located in the "C:\\WINNT\\SYSTEM32" folder and is named "gpedit.msc". When starting Group Policy, first click the [Start] button, select the "Run" command, enter the "gpedit.msc" command in the "Run" text box, and then click [OK] to start the Windows Group Policy.
This article focuses on the application of the local Group Policy for Windows XP Professional. Group Policy can be set up in two ways for the local computer: local computer configuration and local user configuration.
1, delete, and basic knowledge of Group Policy
2, delete "task bar" and "Start" menu with options and disable
3, the desktop-related options Disable
4. Disable access to “Control Panel”
5. Prevent users from using “Add or Remove Programs”
6. Set User Permissions in Windows Xp
7, remote shutdown
8 in Windows XP, Windows 98 shared directory access problems in Windows XP rejected solve
9, so that Internet speed Windows XP Professional upgrade 20%
10, is prohibited from running MSN Messenger
11, disable IE6 browser settings, menu items and toolbar
12, set file and folder auditing
a group policy basics
group policy for users and computer administrators is to define and major utilities, network resources and control operating system behavior. Various software, computer, and user policies can be set up by using Group Policy. For example, you can use Group Policy to remove icons from the desktop, customize the Start menu, and simplify the Control Panel. In addition, you can add scripts that run on your computer (when the computer starts or stops, and when users log in or log out), and even configure Internet Explorer.
This article focuses on the application of the local Group Policy for Windows XP Professional. Group Policy can be set up in two ways for the local computer: local computer configuration and local user configuration. All policy settings are saved to the relevant items in the registry. The settings for the computer policy are saved to the HKEY_LOCAL_MacHINE related items in the registry, and the user's policy settings are saved to the HKEY_CURRENT_USER related item. Methods
access to the local group policy in two ways: The first method is a command line mode; The second way is by selecting the GPE plug-in MMC console to achieve.
1, Group Policy Editor command line to start
You simply click to select the "Start" → "Run" command in the "Run" "Open" dialog box, input field "gpedit.msc" and then click the "OK" button to launch the Windows XP Group Policy Editor. (Note: This "Group Policy" program is located in "C:\\WINNT\\SYSTEM32" and the file name is "gpedit.msc".)
In the opened Group Policy window, you can find the left pane The control object is given in the tree structure, and the right pane is the specific strategy that can be set for a configuration on the left. In addition, you may have noticed that the "Local Computer" policy in the left pane is composed of two major subkeys, "Computer Configuration" and "User Configuration", and some of the two items are duplicated, such as two The following contains "software settings", "Windows settings" and so on. So what is the difference between setting the same project under different subkeys? The "computer configuration" here is to set the system configuration in the whole computer, it works for the running environment of all users in the current computer; and "user configuration" is to set the current user's system configuration, it Only works for the current user. For example, both provide settings for the "Disable Autoplay" feature. If this feature is selected in "Computer Configuration", all users' disc autorun function will be invalid; if it is selected in "User Configuration" With this function, only the user's CD autorun function is disabled, and other users are not affected. Pay attention to this when setting up.
2, as a separate Group Policy MMC snap open
To open the Group Policy Editor by selecting GPE plug MMC console, as follows:
(1) Click to select the "Start" → "Run" command, type "mmc" in the pop-up dialog box, and then click the "OK" button. Open the Microsoft Management Console window.
2) Select the "Add/Remove Snap-in" command under the "File" menu.
(3) In the "Independent" tab of the "Add/Remove Snap-in" window, click the "Add" button.
(4) The "Add Standalone Management Unit" dialog box is displayed, and select the "Group Policy" option in the "Available Standalone Management Unit" list, click the "Add" button.
(5) Since the group policy is applied to the local computer, in the "Select Group Policy Object" dialog box, click "Local Computer", edit the local computer object, or click "Browse" "Click to find the desired Group Policy object.
(6) Click the “Finish” → “Close” → “OK” button, the Group Policy Management Unit can open the Group Policy object to be edited.
Special note: If you want to save the Group Policy console and want to be able to choose to open the Group Policy object in the console via the command line, select the Allow in slave command in the Select Group Policy Object dialog box. Change the focus of the Group Policy snap-in when the line starts.
Second, delete and disable
"task bar" and "Start" menu with options in the "Local Computer Policy", the step by step expand "User Configuration" → "Administrative Templates ”→“Taskbar and Start Menu” branch, in the right pane, provide related strategies for “Taskbar” and “Start Menu”.
1. Give the “Start” menu slimming
If you think Windows XP's Start menu is too bloated, you can remove unwanted menu items from the Start menu. In the right pane, you can remove the Start menu. Utility group, My Documents icon, Document menu, Network Connections, Favorites menu, Search menu, Help command, Run menu, Picture Collection icon, The strategy of "My Music" icon and "My Network Places" icon. You can enable the policy corresponding to the menu item you don't need. Now delete the "My Documents" icon as an example. The specific steps are as follows:
(1) In the policy In the list pane, double-click the "Delete 'My Documents' icon" setting option from the "Start" menu.
2) In the "Settings" tab of the pop-up window, select "Enabled" option button and click "OK" button to.
2, protect your privacy
need for some security, for example, do not want to let people know they browse For which pages and which files have been opened, you can enable both the "Do not keep records of recently opened documents" and "Remove records of recently opened documents when exiting" policy in the right pane.
< BR> 3. Protect the settings of the “Taskbar” and “Start” menus
If you don’t want to let others change the settings of the “Taskbar” and “Start” menus, just put them in the right pane. The "Block Changes" taskbar and Start menu 'Settings' and 'Block access to the taskbar's context menu' are both enabled. This way, when you right-click on the taskbar and click on "Properties" When the system will appear a mistake Message, a message is prohibited to set up this operation.
4, prohibits "write-off" and off
When the computer starts, if you do not want the user to shut down again and logout , then you must enable the "Delete" and "Delete and Block Access" Shutdown commands on the "Delete Start" menu in the right pane.
Tip: If you are at " The "Logout" is deleted on the Start menu, and the "Logout <User Name>" item does not appear in the "Start" menu. This setting also deletes the "Show Logout" item from the "Start Menu Option". The result is You cannot restore the "Logout <User Name>" item to the "Start" menu.
Three, Desktop related options are deleted and disabled
Windows XP desktop is like yours Like a desk, sometimes it needs to be organized and cleaned. With the Group Policy Editor, this work will be a breeze. Just in the 'Local Computer' policy, expand User Configuration → Administrative Templates step by step. "Desktop" branch to display the appropriate policy options in the right pane.
1, hide desktop icons
system if the system icon, traditional methods to hide on the desktop is achieved by means of the use to modify the registry, which will inevitably cause a certain degree of risk, the use of The Group Policy Editor makes this easy and fast.
To hide the "My Network Places" and "Internet Explorer" icons on the desktop, just in the right pane, "Hide the 'Network Neighborhood' icon on the desktop" and "Hide the Internet Explorer icon on the desktop" "Two policy options are enabled; if you hide all the icons on the desktop, just enable "Hide and disable all items on the desktop" is enabled; when "Delete the 'My Documents' icon" and "Deleted on the desktop" is enabled After deleting the 'My Computer' icon on the desktop, the "My Computer" and "My Documents" icons will disappear from your desktop; if you don't like the "Recycle Bin" on the desktop This icon can also be deleted by enabling the "Remove Recycle Bin from Desktop" policy item.
2, prohibit certain changes to the desktop
If you do not want other people to randomly change the desktop settings, select it in the right pane "does not save settings on exit" strategy for this The option is enabled. When you enable this setting, other users can make some changes to the desktop, but some changes, such as the location of the icon and open window, the location and size of the taskbar, cannot be saved after the user logs out.
Fourth, prohibit access to "Control Panel"
If you do not want other users to access the computer's "Control Panel", you just run the Group Policy Editor (gpedit.msc), on the left Expand the 'Local Computer' Policy→ User Configuration→Administrative Templates→Control Panel branch in the pane, and then enable the No Access Control Panel policy in the right pane.
This setting prevents the "Control Panel" program file (Control.exe) from starting. As a result, others will not be able to launch the Control Panel (or run any Control Panel items). In addition, this setting will remove the Control Panel from the Start menu. This setting also removes the Control Panel folder from Windows Explorer.
Special Note: If you want to select a "control panel" program, a message appears stating that the setting to prevent this operation from property project context menu.
Fifth, to prevent users from using the "Add or Remove Programs"
"Control