Shulou(Shulou.com)06/01 Report--

Today, I would like to talk to you about the exploration of new things in the Windows Vista group strategy, which may not be well understood by many people. In order to make you understand better, the editor has summarized the following contents for you. I hope you can get something from this article.

We have already experienced the powerful function of group policy in windows XP system, so what are the functions that we don't know about group policy in windows vista system? Let's explore together.

Group Policy is a powerful tool for customizing, controlling, and protecting the Windows operating system. The system policy feature in Windows NT has been replaced, introduced as a part of IntelliMirror technology in Windows 2000, and its application scope and functions have been expanded in each version of the operating system based on NT.

Group policies can be applied at the local computer layer or at sites in an organizational unit, domain, or active directory environment. Group Policy can be supported by Windows XP Professional, but not by the XP Home version. Similarly, Group Policy is supported by Vista Business, Enterprise, and Ultimate versions, while Home Basic and Home Premium versions are not.

Hundreds of new settings have been added to Group Policy in Vista to give administrators more control over users and computers. Some of these are designed to add functionality, while others improve group policy in Windows XP. In this article, we will discuss some interesting new features in group policy that you can use. You can download from Microsoft's website to include a table of group policy settings for computer and user configuration, which is included in the administrator template file released with Vista. Note that the administrator template file in Vista is the new XML-based file format (.ADMX).

Control of movable media

Removable devices include USB drivers, flash memory card readers and external USB hard drives, as well as CD and DVD writers and even traditional floppy disks, all of which can easily transfer data between two computers. Unfortunately, they also come with a big security problem: users can easily download data that could not have left the corporate network to a mobile device and carry it with them. or they can upload data from the device to the company's computer, possibly unknowingly carrying a virus or malware.

In the past, some companies may have physically destroyed the USB interface by filling in some material. It is not so extreme to remove the connection to the USB interface inside the computer and remove the CD drive to remove the CD burning function. You can also purchase third-party software to enable or disable access to USB devices, CD/DVD burners, etc. Or you can create a custom .ADM file to prevent people from using these devices in XP.

Vista makes this easier. Here are the steps that allow you to use group policy to control the access of removable media to local Vista computers:

1. Click "start", enter "gpedit.msc" in the search box and press enter.

2. In the left pane of the Group Policy object Editor, under computer configuration, expand Administrative templates and click system.

3. Scroll with the mouse in the right pane and click removable Storage access, as shown in figure 1.

Figure 1 you can control access to removable storage through the group policy of Vista

You can choose from a wide range of options, depending on the type of removable storage you want to control. For example, you can deny access to all types of removable storage by double-clicking all removable storage classes: deny all permissions in the right pane.

4. In the properties pane, select the enabled option, as shown in figure 2.

Figure 2 enable this policy to deny access to all removable storage

6. Click "apply" or "confirm".

This deny permission for all types of removable storage is better than the group policy that is set for individual storage classes. The types of storage that you can set separately are:

CD and DVD

floppy disk driver

Removable disk

Tape drive

WPD devices (cellular phones, portable media players, auxiliary display devices, CE-based devices such as PDAs)

You can also deny read or write permissions by setting the policy, so you can allow users to read data from the device but cannot save it.

Control power management settings

It has been a long time for enterprises to be able to control power management methods in Windows. There are already some third-party software that allows administrators to centrally control these settings, but must bear additional costs for the software. In Vista, companies can control power management through group policies, which can also save electricity costs.

Power management in the Vista group policy is in the same "administrative templates" folder as the removable storage access mentioned earlier, which contains subfolders that can apply policies to different aspects of power management, as shown in figure 3.

Figure 3 Vista enables administrators to control different aspects of power management

The Button Settings folder contains the following group policy options:

Select the power button operation (power on)

Select hibernation button operation (power on)

Select the start menu power button operation (power on)

Select lid switch operation (power on)

Select the power button operation (use battery)

Select Sleep button operation (use battery)

Select the start menu power button operation (use battery)

Select lid switch operation (using battery)

The options you can set for each button include:

Do not perform the operation

Shutdown

sleep

Dormancy

Double-click the power project you want to configure and select the enabled option. Next, select the appropriate action from the drop-down menu, as shown in figure 4.

Figure 4 you can configure the required actions for powerless power and sleep buttons, start menu buttons, and lid switches

The hard disk Settings folder contains only two policies:

Turn off the hard drive (power on)

Turn off the hard drive (use battery)

You can use them to control the length of time before Windows shuts down the hard drive when the computer is inactive. You must enter the desired value in seconds, ranging from 1 to 999999.

Notification Settin

The Notification Settings folder has the following policies that allow you to configure:

Serious shortage of battery power notification operation

Notification operation of low battery charge

Notification level of serious battery shortage

Turn off the notification to the user that the battery is low

Notification of low battery level

By using these group policies, you can set the extent to which notifications need to be triggered. When a level of policy is enabled, the value you customize represents the percentage of battery capacity, for example, if you want to notify at "10", it means that when the battery capacity is 10% left. These settings are shown in figure 5.

Figure 5 you can set whether you need to notify when there is a shortage of electricity or a severe shortage.

The notification operation policy allows you to set prompts for computers when they are running out of power or severely short of power. When you enable these policies, you can choose from the following actions:

Do not perform the operation

Shutdown

sleep

Dormancy

To "turn off the low battery user notification" is not just what it describes: when it is enabled, a prompt is not displayed to the user when the battery reaches the level of insufficient or severe shortage.

After reading the above, do you have any further understanding of the exploration of new things in the Windows Vista group strategy? If you want to know more knowledge or related content, please follow the industry information channel, thank you for your support.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.