Efficient use of group policies in Windows

Group PolicyHow can we use it efficiently? A detailed description is provided below.

At ordinary times, I learned how to use group policies to manage and optimize the system. Starting from the group policy itself, I used my own advantages to optimize the management group policy's skills, I believe there are not many people I have ever seen. Now, I will offer you a few tips in this article, hoping to help you make good use of system group policies efficiently!

From filtering, hide invalid policies

If you are a new contact group policy user, you will be confused by a wide variety of configuration items. When you need to use a Configuration Policy, the efficiency of using group policies is greatly reduced because you cannot find the specific path or location of the target policy. In order to quickly find a Configuration Policy you need in many configuration items, you can use the "filter" function of the Group Policy to hide invalid policies in the Group Policy Editor, the following are the specific hidden steps:

Click "start"/"run" command in sequence to open the system running dialog box, and execute the Group Policy Edit command "gpedit. msc "to go to the system group policy editing window. In the left-side area of this window, find the sub-directory options that contain more configuration items and right-click them, click "View"/"filter" from the shortcut menu to open the setting interface shown in 1:

Figure 1

If you only want to display configured policy items in the Group Policy editing window, you can select the "show only configured policy settings" option on the page, in this way, policy items that are not configured will be automatically hidden. When you need to modify the configured policy items, you can quickly find the target.

In addition, you can set the Group Policy editing window to display only the policy items applicable to the Local Computer System Based on the operating system you use, you only need to select the option "filter based on requirements" in Figure 1, and select a display item applicable to the local system from the list box activated below, click OK. For example, if you want the Group Policy editing window to display a policy that can be configured only for Windows 2000 or later versions, select "Filter Based on Requirement" in Figure 1, select "at least Microsoft Windows 2000" in the list, and click "OK.

View policy information from attributes

Generally, the Group Policy editing window contains two types of policies: User Configuration and computer configuration. If you want to quickly view the number of policy items configured in the local computer system, or want to hide one of the policy items, follow these steps:

First, follow the above method to open the system group policy editing window, select the "local computer policy" option on the left side of the window, and right-click it, right-click the next menu and run the "properties" command to open the Local Computer policy attribute setting box 2;

From the "Create" area in the setting box, you can see when the management unit of the Local Group Policy was created and generated. Generally, this time is the time when the operating system was initially installed; from the "modify" area in the setting box, you can see when the configuration of the Setting Group Policy was last modified. From the "modify" area in the setting box, you can view the total number of policy items you have configured so far, and you can also view the number of computer configuration policies and user configuration policies.

If you want to improve the editing efficiency of group policies, you can hide a type of policies that are not needed or temporarily unavailable. to hide a type of Configuration Policy, you can select the check box below figure 2 and click "OK" to hide the specified class policy.

Figure 2

Remote Policy editing from the console

Many people may think that the Group Policy must be edited and modified on the local computer. In fact, even if you are not on your computer, you can also modify group policies on your computer by using remote editing. When you remotely edit a group policy on a computer, follow these steps:

First, open the "Start" menu of the system and run the "run" command. In the displayed system run box, enter the MMC console command "mmc" to go To the MMC console interface of the system;

Click the "file" menu item in the menu bar of the interface, and execute the "Add/delete Management Unit" command from the pop-up drop-down menu, click the "independent" tab in the pop-up window, and click the "add" button on the corresponding tab page to open the "add independent management unit" dialog box, select the "Group Policy object Editor" option (3) in the dialog box, and click "add;

Figure 3

Next, return to the system MMC console. on this page, you can edit the Local Group Policy or the Group Policy on other computers, by default, the system selects the Local Group Policy for editing. to remotely Edit Group policies on other computers, you can click the "file"/"open" command in the MMC console. In the displayed file selection dialog box, double-click the "Network Neighbor" icon, to find the system group policy file in other computers in the LAN, select and import the target file, so that you can open the Group Policy in other computers in the console interface, you can modify the configuration according to the Local Group Policy for remote editing. After the remote editing operation is complete, you also need to execute the "file"/"save" command in the console interface in sequence to save the edited group policy as a msc file, this allows you to repeat the edits in the future.

From the options, clear the configuration change

Every time you modify and edit the changes in the system MMC console, the system automatically saves the changed information to the default configuration file of the system; if you often modify and edit on the system MMC console, more and more console changes will be saved in the default system configuration file, in fact, these changes are of little use over time. If you delete the console changes in time, the system performance can be effectively improved. To do this, you can follow the steps below:

First, click the "Start"/"run" command to open the system running dialog box. Execute the Group Policy Editing Command "gpedit. msc" to enter the system group policy editing window;

Click the "file" option in the menu bar of the window, and execute the "options" command from the pop-up drop-down menu to open the option setting interface shown in 4, click the delete file button on the page to automatically delete the console changes saved in the System Configuration File. Then, click OK, stop clearing junk information.

Figure 4

Starting from the command, the force policy takes effect

Generally, any changes or settings to the Windows domain security policy take effect after a period of time, rather than immediately after the change or setup operation ends. Is there a way to make the modified system security policy take effect immediately after the modification operation ends? The answer is yes. You can follow the following method to implement it:

If your computer is installed with a Windows 2000 server, you only need to switch the screen to the Ms-DOS interface, and then enter the "secedit/refreshpolicy machine_policy/enforce" command at the doscommand prompt, click the Enter key to make the modified computer security policy effective immediately. If you run the string command "secedit/refreshpolicy user_policy/enforce" at the doscommand prompt, the modified User security policy will take effect immediately.

If your computer is installed with Windows XP or Windows 2003, You need to execute the string command "gpupdate/target: computer" at the DOS command prompt ", in order to ensure that the modified computer security policy takes effect immediately, execute the string command "gpupdate/target: user" to ensure that the modified user security policy takes effect immediately.

I hope this article will introduce some tips for the efficient use of group policies in Windows to help readers. more knowledge about group policies needs to be learned and consolidated by readers.