Shulou(Shulou.com)06/01 Report--

Today, I will talk to you about how to skillfully use group policy to strengthen your windows operating system. Many people may not know much about it. In order to make you understand better, the editor has summarized the following for you. I hope you can get something from this article.

Usually, when we use the computer, we will encounter various situations such as the modification of our favorite wallpaper and the modification of the IE option, which brings us a lot of inconvenience to use the computer. If you want to make these changes back, you need to use other software to do it, is there any way for us to prevent it and ban it before it is modified? It can be achieved by using the group policy that comes with Windows XP, and it is easy not to be modified by setting the relevant options. . S. Y'K'C`6f: e, [1 T4\

How to start Group Policy

When you start group policy, click the start button, select the run command, and enter the gpedit.msc command in the run text box to start the group policy.

Don't change my wallpaper 9m! M9 h; D8 ^ 8 d "Y

We often set our favorite pictures as desktop wallpaper, but sometimes the wallpaper will be modified by others. What do you need to do to prohibit others from modifying your wallpaper? In fact, it can be achieved by using group policy. There are options in Group Policy to prohibit the modification of wallpaper, you only need to set them accordingly.) A) A-B2 U; H6 w

In Group Policy, a "Active Desktop wallpaper" policy is provided that allows users to set wallpaper on the desktop and prevent users from changing the wallpaper and its appearance. % d) y # R'z + S+ p8 P6 c5 A

The setting method is to expand user configuration → Management template → Desktop → Active Desktop in Local computer Policy on the left side of the Group Policy window (figure 1).

Then double-click the "Active Desktop wallpaper" policy item in the right window, a pop-up settings dialog box, first click "enabled" single option, then the following text box has been activated, in the "wallpaper name" item, type the folder and name of the wallpaper image file (figure 2).

And specify whether the wallpaper is centered, tiled or stretched in the "wallpaper style" below, where we can choose as needed, and then click the "OK" button. Others will never change the wallpaper on your desktop in the future. % C & U6 p3 ^ Z S) x6 |; t

S, d* _% M6 v$ M

Figure 1

Figure 2) U; i1 i.e9 U: e $_-L

In this strategy, the system provides a UNC path, through which we can set pictures in the network or pictures in other computers in the LAN to do wallpaper, and if we set pictures on other computers, we can enter / / Server/l.jpg format. After this policy setting is passed, users cannot change the wallpaper through system Properties.

Hide your Internet options

If you share a computer with others, when you have made the necessary settings for IE, such as security level, control-enabled settings, etc. After these settings, you don't want others to modify them, so we can block the items in the Internet options through group policy and enable them later. 8 S / t & n D / b1 i3 v1 1% _

When blocking IE's "Internet options" project, first expand the "user configuration → management template → Windows to build → Internet Explorer → Internet control template", at this time in the right window appears to disable "Internet option" all the label item policy, if you want to block a tag item, such as: general label item. Double-click the "disable General label item" policy here, and then click the "enabled" option in the pop-up dialog box to mask it. Later, when we use the various features, we can click the "unconfigured" item to restore it (figure 3). 9 V0 |, g'h "C: | $Y: B$ T

Figure 3 9 W7] 7 mu "U, _ 8 n! J!\ 5 v4 |

Make the Task Manager disappear

When we press the Ctrl+Alt+Del key combination, we can display user options, including Task Manager, locking the computer, changing the Windows password, logging out of Windows, shutting down and so on. These options are very important, and we can block these buttons in Group Policy to prevent others from manipulating them.

First of all, expand the "user Settings → Management template → system → Ctrl+Alt+Del options" branch, under this branch we can have a total of "Delete Task Manager, delete lock computer, delete change password, delete logout," four policies (figure 4), double-click the items that need to be shielded, pop up a settings dialog box, and select the enable option in this dialog box. ; C-w; Z9 K: r

'YQ +

Figure 41 k6 R / v (v-L, Y / H'Z)

8 |: Z8 [a / C5 ^! P $S0 o

Control illegal downloading of files

Often when we drive IE to browse the web, we always encounter some good movies and software and want to download them, which not only takes up hard disk space, but also brings a lot of problems to our system security. In order to make our system more secure, we need to install a lot of software to block the download function, which is not only troublesome but also annoying. In fact, Windows XP has already taken these into account in the group policy and set the corresponding options. 7 Q $~, S (@ /] 5 j

When you disable the IE download feature, expand computer configuration → Management templates → Windows Components → Security feature → restrict File downloads in the console window, double-click "Internet Explorer" in the right window, and then pop up a settings dialog box and click "enable" here to enable this policy setting, which will prevent non-user initialized file download prompts for the Internet Explorer process. " "OK" will not be able to use IE to download files.

File and folder settings audit

Windows XP can use auditing to track user accounts, login attempts, system shutdowns or restarts, and similar events that are used to access files or other objects. If you use group policy to audit files and folders, you can ensure their security, and others cannot easily destroy them. In the Group Policy window, expand computer configuration → Windows Settings → Security Settings → Local Policy in the right pane step by step, and then select the Audit Policy option under this branch. Double-click the Audit object access option in the right pane, and in the pop-up Local Security Policy Settings window, check both the success and failure check boxes in the Local Policy Settings box (figure 5).

3 u'c X0 X3 a * U

Figure 5

Through the above settings, we can make the Windows XP system more secure. In fact, more security settings are provided for users in the group policy. Here we mainly choose several typical settings, and the setting methods of other security policies will not be detailed here.

After reading the above, do you have any further understanding of how to strengthen your windows operating system with group policy? If you want to know more knowledge or related content, please follow the industry information channel, thank you for your support.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.