Shulou(Shulou.com)06/01 Report--

What this article shares with you is about the application skills of Windows XP group strategy, which the editor thinks is very practical, so I share it with you to learn. I hope you can get something after reading this article. Let's take a look at it with the editor.

The editor will introduce the application skills of Windows XP group policy.

Make the system more secure

1. Hide the whole desktop

If you don't want others to open the system icons such as "my documents", "my computer" and "Recycle Bin" on your desktop, we can achieve it through group policy or hide the entire desktop. The specific steps are as follows:

In the "Group Policy" window, expand the "user configuration" → administrative template "→" Desktop. If you want to hide "my documents", you can find and enable the "Delete my documents" icon on the desktop in the right window. * click OK. Similarly, we can delete "my computer" or "Recycle Bin" by finding and enabling "Delete the my computer" icon on the desktop or "remove the Recycle Bin from the Desktop" in the right window. Enable "hide and disable all items on the Desktop" to hide the entire desktop.

2. Protect personal document privacy

Windows XP has an advanced intelligent feature that records the files you have accessed. This feature makes it convenient for users to open the file again, and it should be blocked if you want to do so for security and performance reasons. We can meet the requirements through the following settings:

In the "Group Policy" window, expand the "user configuration" → administrative templates "→" task bar and "start" menu, and then in the right window, "do not keep records of recently opened documents" and "clear recently opened documents on exit" can be enabled.

3. Disable access to the Control Panel

If you do not want other users to access the Control Panel on your computer, just run the Group Policy Editor and expand the Local computer Policy user configuration Management template Control Panel branch in the left window. Then set the disable access Control Panel in the right window to enabled.

This setting prevents the startup of the control panel program file, and as a result, others will not be able to start the control panel or run any control panel items. In addition, this setting removes the control panel from the start menu, and it also removes the control panel folder from Windows Explorer.

4. Set user permissions

When multiple people share a computer, you can set user rights in Windows XP by following these steps:

In the "Group Policy" window, expand "computer configuration", "Windows Settings", "Security Settings", "Local Policy" and "user Rights assignment". For example, if we set the user name "GT" to force the remote system shutdown, then we find and double-click "forced shutdown from the remote system" in the right window, which will open the properties window shown in figure 6.

We click the "add user or group" button, click "Advanced" in the pop-up "Select user or Group" window, and then click the "find now" button, at this time we can select the user named "GT" from the user list box below, * Click the "OK" button to exit and set this permission for this user, of course, you can also delete the user's permissions.

5. Password setting

System security has always been the focus of attention, of course, Windows XP is no exception. We can set the minimum length of password (password) through group policy. The specific steps are as follows:

In the Group Policy window, expand computer configuration, →, Windows Settings, →, Security Settings, →, account Policy, → password Policy. Double-click in the right window and enable the "password must meet complexity requirements" setting item (figure 7), double-click the "password length minimum value" setting item, in the pop-up dialog box to set the password length minimum value to 8 or greater, in the future when setting the account password must enter more than 8 digits, the security is much higher. In addition, you can also set the validity period of the password, we can double-click "maximum password retention period" and "password minimum retention period", and then set the maximum and minimum password retention time respectively.

6. Disable access to the Registry Editor

To prevent others from modifying your registry, we can disable access to the Registry Editor in Group Policy. The specific steps are as follows:

Expand user configuration, Administrative templates, system, then locate and double-click the prevent access to the Registry Editor key in the right window, and set it to enabled, so that when the user tries to start the Registry Editor, the system will prompt that registration editing has been disabled by the administrator.

In addition, if your registry editor is locked, you can also double-click this setting and click "not set" in the Settings tab of the pop-up dialog box so that your registry can be unlocked. If you want to prevent users from opening the registry using other registry editing tools, double-click to enable run only licensed Windows applications so that users can only run the programs you specify.

7. Hide or delete items in Explorer

Resource manager has always been the most important tool in Windows system, and how to manage resources efficiently and safely has always been the unremitting pursuit of computer users. Expand the user configuration, Administrative templates, Windows components, Windows Explorer tab, and you can see all the settings under the Windows Explorer node. (figure 8) for example, "folder option" is an important menu item in Explorer. Through it, you can modify the way the file is viewed, edit the way the file type is opened, and delete this menu item in order to prevent others from changing it at will. We can complete this setting by finding and double-clicking to enable the remove folder options menu from the tools menu In addition, double-click to enable "hide Windows Explorer context menu on the 'manage' project" item can mask the "Management" menu in the computer; we can also enable "hide'my computer'in these specified drives" to hide your specified drive; double-click enable "do not move deleted files to the 'Recycle Bin'" then later when deleting files will not enter the Recycle Bin directly deleted. Of course, there are many projects that have not been mentioned here, and you can explore and make appropriate configurations according to your needs.

8. Disable add / remove programs

We can install, uninstall, repair, add and remove Windows features and components and a wide variety of Windows programs from the add or remove programs project in the Control Panel. If you want to prevent other users from installing or uninstalling programs, you can use Group Policy to do so.

Expand user configuration → Administrative templates → Control Panel → add / remove programs, and then enable remove add / remove programs in the right window.

In addition, in the "add / remove programs" branch, you can hide "add new programs", "add programs from CD-ROM or floppy disk", "add programs from Microsoft", "add programs from the network" and other items in the item of "add / remove programs" in Windows. Through the settings of these policy projects, you can protect the system files and applications in the computer.

9. Disable "Internet options" under the IE tools menu

If you don't want others to change the settings of your IE browser at will, you can enable the "tools menu: disable Internet options..." policy. The specific setting steps are as follows:

Expand "user configuration", "Administrative templates", "Windows components", "Internet Explorer", "browser menu", and then enable the "tools menu: disable Internet option..." menu item in the right window (figure 9).

In addition, depending on your needs, you can disable other items in this pane (such as hiding IE favorites, disabling Save as, New, Open, and so on) in the File menu.

Fourth, make the system performance better.

1. Prohibit Windows Messenger from running automatically

For friends who don't surf the Internet or don't use Windows Messenger at all, the Windows Messenger that comes with Windows XP is redundant at all, because it is not only inconvenient to uninstall, but also runs automatically with the system.

By double-clicking the "computer configuration" → "administrative template" → "Windows component" → "Windows Messenger" branch, then find and double-click "do not allow to run Windows Messenger" in the right window, click "enabled" in the pop-up "do not allow to run Windows Messenger properties" dialog box, and then click the "OK" button to exit.

2. Disable the Windows Update function

Using the Windows Update function, you can automatically connect to Microsoft's website and download updated content, which provides convenience for users' software updates, but for computer users who do not need updates or bandwidth constraints, this function seems superfluous. Can the function of "Windows Update" be hidden in the system? The disabling method is as follows:

Expand user configuration → Administrative templates → Windows component → Windows Update, and then find and enable remove access using all Windows Update features in the window on the right.

3. Disable the CD recording function that comes with the system

Windows XP system comes with CD burning feature. If you do not have a CDDVD/index.shtml' target='_blank' class='article' > burner, this feature will be redundant and will affect system performance and the execution speed of resource managers. On the other hand, most users use dedicated CD burning software instead of the system's own recording feature, so we can use group policy to block this feature. The specific steps are as follows:

Expand user configuration → Administrative templates, → Windows components, → Windows Explorer, and then find and enable Delete CD Burning in the right window.

Note: this setting does not prevent users from using third-party applications to use CD recorders to make or modify CD.

4. Speed up the Internet by 200%

By default, the Windows network connection packet scheduler limits the system to 80% of the connection bandwidth, which is undoubtedly a significant expense for networks with smaller bandwidth. We can use the group policy setting to replace the default value and increase our Internet access speed by 20%!

Expand the "computer configuration" → administrative template "→" Network "→" QoS packet Scheduler, find and double-click the "limit and retain bandwidth" item in the right window, select "enabled" in the pop-up properties window, and then use the "bandwidth limit" box below to adjust the bandwidth ratio that can be retained by the system. We can set it to 0%, and * * exit by OK. Then we can use another 20% of the bandwidth.

5. Disable system restore function

System restore is a powerful feature for users whose system is not stable, but if your system is stable all the time, is it necessary to turn on system restore? Because the cost of enabling this feature is quite high, system performance will be significantly degraded and disk space will be taken up a lot. If you want to turn it off, the specific steps are as follows:

Expand computer configuration → Administrative templates → system → system restore, and then enable turn off system restore in the right window.

Description: after you enable this setting, you can turn off the system restore feature, and you cannot access the system restore Wizard and the configuration Interface.

6. Turn off the cache of thumbnails

The Windows XP system has the function of thumbnail view. In order to speed up the display of thumbnails that have been browsed frequently, the system will cache these displayed pictures so that the information in the cache can be read directly the next time it is opened, so as to achieve the purpose of fast display. However, if we do not want the system to buffer (especially for vfb images that are viewed only once), we can use the group policy to turn off the thumbnail cache, which will greatly speed up the number of views.

We just need to expand "user configuration" → "Administrative templates"→" Windows component "→" Windows Explorer, and then find and enable "turn off caching of thumbnails" in the window on the right.

7. Optimize the configuration of Windows Media Player network buffers

When we use Windows Media Player to play streaming media, the player buffers the streaming media before playing so that it can be played smoothly. In practical applications, especially when the network speed is not good, the playback is always not smooth when the playing file is large. We can use the following strategy to solve this problem:

Expand "user configuration" → "administrative template" → "Windows component" → "Windows Media Player" → "Network", then find and enable "configure Network buffer" in the window on the right, in the "buffer time" (seconds) we select "Custom", and then in "configure Network buffer" to customize the buffer time (up to 60 seconds), * * Click "OK" (figure 10).

Tip: if this policy is enabled, the caching options on the Windows Media Player performance tab can no longer be configured.

Windows XP Group Policy application skills bring a lot of convenience to system administrators. Windows XP Group Policy can make our system more secure, more robust, and higher performance.

These are the Windows XP group policy application skills, and the editor believes that there are some knowledge points that we may see or use in our daily work. I hope you can learn more from this article. For more details, please follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.