Shulou(Shulou.com)06/01 Report--

This article will explain in detail how to use Vista group policy to solve extraordinary tasks. The content of the article is of high quality, so the editor will share it with you for reference. I hope you will have some understanding of the relevant knowledge after reading this article.

Some people vividly refer to group policy as the "inner master" in the Windows system. Compared with XP, the group policy in Vista is more powerful and more closely integrated with the system, and it is more like the "internal manager" in the Vista system. Using Group Policy, you can accomplish some seemingly difficult tasks in Vista. Next, let's dig deeper to uncover the inside story of Vista group policy and achieve extraordinary tasks.

1. Hide and restrict disk partitions and protect data

Some data are kept in both personal and public computers, which sometimes do not have to be known to others. In particular, computers in office places are usually shared by many people because of their open location, and personal computers are sometimes temporarily used by others, all of which pose a serious challenge to the confidentiality and security of the user data stored in them. what should we do?

In fact, we do not need third-party software to easily protect data by hiding or restricting disk partitions in Vista. Let's take the restricted C partition as an example to demonstrate, and the specific steps are as follows:

Step 1: in the "run" dialog box of the start menu, enter "Gpedit.msc" to open the "Group Policy" settings window, in the "Group Policy" settings window, open the "Local computer Policy → user configuration → Management template → Windows components → Windows Explorer" option.

Step 2: in the settings window on the right, select the "prevent access to the drive from my computer" item, right-click this option, and select "Properties". Then the "prevent access to drive properties from my computer" settings window appears. There are three options, which are not configured, enabled, and disabled.

Step 3: after we select "enabled", a sinking list of selected drives will appear below. If you want to limit the use of a drive, just select it. For example, if we want to restrict the use of disk C, select "restrict drive C only" and it will be fine. If you want to turn off all drives, including optical drives, you can select "restrict all drives". (figure 1)

Figure 1 prevents my computer from accessing the drive

Tip: under "Windows Explorer", there is also a "hide these specified drives in my computer" strategy, through which you can specify the drive, but this strategy can be broken through the IE browser, enter C:\ in the address bar, and the hidden C disk partition after entering the enter can also be accessed, compared with our more thorough restrictions. (figure 2)

Figure 2 setting effect

Extension: through the above method, you can choose to hide C partition or all partitions, so how to hide a specific partition such as E disk partition? We can do this by modifying the group policy configuration file of Vista, which is stored in the "% windir%\ PolicyDefinitions\" path. What we need to modify are the "WindowsExplorer.adml" and WindowsExplorer.admx configuration files.

Step 1: open the WindowsExplorer.adml file in notepad and find the section that contains the following code:

Restrict only partitions A, B, C, and D

Restrict only partitions A, B, and C

Restrict only partitions An and B

Restrict all partitions

For example, if you need to hide the E partition, add the following code, and save and exit after modification:

Restrict partition E only (figure 3)

Figure 3 restricted Partition

Step 2: open the WindowsExplorer.admx file with notepad and find the

"

The former is used to restrict access to the zone, and the latter is used to hide the partition. For example, take the E partition as an example, please add the following code in the two locations. The "16" here represents the decimal code of the E partition: (figure 4)

Figure 4 add E disk setting option

Step 3: replace two important files. Due to the permission problem of access control, we first need to modify the access rights of the two files, open the properties dialog box, switch to the "Security" tab, click the "Advanced" button to change the owner and make relevant settings. After obtaining the permission, you can complete the file replacement operation.

We can select "enabled" in the Group Policy "prevent access to drives from my computer" dialog box.

On how to use Vista group policy to solve special tasks to share here, I hope that the above content can be of some help to you, can learn more knowledge. If you think the article is good, you can share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.