Shulou(Shulou.com)06/01 Report--

Today, I will talk to you about how to effectively use group strategy in the Windows system. Many people may not know much about it. In order to make you understand better, the editor has summarized the following content for you. I hope you can get something from this article.

Click the start / run command to open the system's run dialog box, where you execute the group policy editing command "gpedit.msc" to enter the system's group policy editing window. In the left area of the window, find the subdirectory options that contain more configuration items, right-click them, and click View / filter from the pop-up shortcut menu. open the settings interface shown in figure 1:

Figure 1

If you only want the Group Policy Editing window to display configured policy items, you can select the "Show only configured policy settings" option in this interface, so that those unconfigured policy items will be automatically hidden. In the future, when you need to make changes to the configured policy items, you can quickly find the modification target.

In addition, you can also make the group policy editing window display only those policy items that are applicable to the local computer system depending on the operating system you use; to do this, just select the complex option of "filter based on demand information" in the figure 1 interface, select the display items appropriate to the local system from the list box activated below, and * click the "OK" button. For example, if you want the group policy editing window to display only policies that can only be configured by Windows 2000 or above, you need to select "filter based on demand information" in the figure 1 interface, then select "at least Microsoft Windows 2000" in the list, and then click the "OK" button to OK.

View policy information from attributes

In general, the group policy editing window contains two major categories of policies: user configuration and computer configuration. If you want to quickly find out how many policy items have been configured separately in the local computer system, or if you want to hide one of the configuration policies, follow these steps:

First, follow the above method to open the system's group policy editing window, select the Local computer Policy option in the left area of the window, click it with the right mouse button, and execute the Properties command from the right-click menu that opens later. open the local computer policy properties settings box shown in figure 2

From the "create" in the setting box, you can see when the snap-in of the local group policy was created and generated, which is usually the time when the operating system was first installed; from the "modify" in the setting box, you can see when the last time the group policy configuration was modified From the "revisions" in the settings box, you can see how many policy items you have configured so far, and you can also see how many computer configuration policies and user configuration policies are.

If you want to improve the editing efficiency of group policies, you can hide a class of policies that are not needed or temporarily unused here; when you want to hide a certain type of configuration policy, you can select the corresponding check box below figure 2 and click the "OK" button to achieve the purpose of hiding the specified configuration policy.

Figure 2

Remote editing policy from the console

Many people may think that the editing and modification of group policy can only be done on the local computer, but even if you are not next to your own computer, you can modify the group policy on your computer remotely. When editing Group Policy remotely on a computer, you can follow these steps:

First, open the "start" menu of the system and execute the "run" command. In the pop-up system run box, enter the MMC console command "mmc" to enter the MMC console interface of the system.

Then click the File menu item in the menu bar of the interface, execute the add / remove snap-in command from the pop-up drop-down menu, and click the Independent tab in the interface that pops up. and click the add button on the corresponding tab page to open the add standalone snap-in dialog box, and select the Group Policy object Editor option in the dialog box (as shown in figure 3) Click the add button at the same time

Figure 3

Then return to the system MMC console interface, where you can edit the local group policy or the group policy on other computers. By default, the system will give priority to the local group policy for editing. To edit Group Policy remotely on other computers, click "File" / "Open" in the MMC console interface. In the pop-up file selection dialog box, double-click the "Network neighbor" icon to find the system Group Policy file on other computers on the local area network, select the target file and import it. In this way, you can open the group policy on other computers in the console interface, and then edit it remotely according to the local group policy modification configuration. After the remote editing operation is over, you also need to execute the "File" / "Save" command in the menu bar in the console interface to save the currently edited Group Policy into a file in msc format so that you can edit it repeatedly later.

Clear the change configuration from the options

Every time you make some modification and editing operations in the system MMC console, the system will automatically save the information of these changes to the system default configuration file; if you often modify and edit the system MMC console, then the console change information saved in the system default configuration file will be more and more, but in fact these change information will not be of much use over time. If the console change information is deleted in time, the relevant performance of the system can be effectively improved. To do this, you can follow these steps:

First, click the start / run command to open the system's run dialog box, where you execute the group policy editing command "gpedit.msc" to enter the system's group policy editing window.

Secondly, click the "File" option in the menu bar of the window, execute the "options" command from the pop-up drop-down menu, open the option settings interface shown in figure 4, and then click the "Delete" file button in this interface, so that the system can automatically delete the console change information saved in the system configuration file, * * Click the OK button to end the spam removal operation.

Figure 4

Force the policy to take effect from the command

In general, any change or setting operation to the security policy of a Windows domain takes some time to take effect, not as soon as the change or setting operation ends. Is there any way to make the modified system security policy take effect as soon as the modification operation is completed? The answer is yes, and you can do it in the following ways:

If your computer is installed with a Windows 2000 server system, just switch the screen to the Ms-DOS interface first, then enter the "secedit / refreshpolicy machine_policy / enforce" command at the DOS command prompt, and then click enter, you can make the modified computer security policy take effect immediately. If you execute the string command "secedit / refreshpolicy user_policy / enforce" at the DOS command prompt, the modified user security policy will take effect immediately.

If your computer is installed with Windows XP or Windows 2003 system, you need to execute the string command "gpupdate / target:computer" at the DOS command prompt to ensure that the modified computer security policy takes effect immediately, and execute the string command "gpupdate / target:user" to ensure that the modified user security policy takes effect immediately.

After reading the above, do you have any further understanding of how to effectively use group policy in Windows system? If you want to know more knowledge or related content, please follow the industry information channel, thank you for your support.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.