Shulou(Shulou.com)06/01 Report--

This article mainly introduces how to create a new group policy to prevent the installation and operation of the software, the article is very detailed, has a certain reference value, interested friends must read it!

The optimized settings of the group policy can maintain the security of our system, as described below.

Sometimes do not want others on their own computer QQl chat, do not want others to install some unneeded software on their own computer, make their own computer a mess, in fact, in our computer can be set to prevent others in their own computer malicious installation and operation, the following I will tell you how to use group policy to restrict the installation and operation of software.

1. Build your own strategy

After opening the Group Policy Editor, expand computer configuration / Windows Settings / Security Settings / Software restriction policies, and click Action / create New Policy on the menu bar to create a new policy.

2. Block chat QQ

Expand the newly created policy, right-click on "other rules" and select "New Hash Rule", and click "Browse" to select QQ.exe in the pop-up window, which will generate a file hash number, the system will also read the basic information of the file, such as version, company name, etc., and select "not allowed" for "security level" (see figure below).

3. Prevent the download software from running

Local downloads mainly use IE and Flashget, first set the download folder, and then establish a new path rule, so that you can prevent the installation of downloaded software.

(1) IE download is prohibited. Run Registry Editor to expand [HKEY_USERSS-1-5-21-1202660629-854245398-1060284298-500SoftwareMicrosoftWindowsCurrentVersionInternet SettingsZones3], and then change the value of "1803" on the right to "3" (as shown below), so that the file cannot be downloaded using IE.

(2) set the Flashget download location. After running, click "default download Properties of tool →", and set the download saved folder to d:downloads.

(3) to establish restriction rules. As above, right-click on "other rules" and select "New path Rule", select "d:downloads" as prompted, and "Security level" select "not allowed".

4. Prevent modification of the group policy

To prevent others from knowing that the restriction is caused by Group Policy, you can set up a ban on running Group Policy. Same as above, in the group policy editing window, expand Local computer Policy → user configuration → Management template → system, then double-click do not run the specified Windows application in the right settings window, click Settings in the pop-up window, select enabled, and set mmc.exe to a program that is not allowed to run.

Create a new group policy to prevent the installation and operation of the software and make the computer our own real computer.

The above is all the contents of the article "how to create a new group policy to prevent the installation and operation of software". Thank you for reading! Hope to share the content to help you, more related knowledge, welcome to follow the industry information channel!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.