Eight tips on Group Policy in Windows Vista

Group PolicyWhat is the function? The eight tips on Group Policy in Windows Vista will show you the specific functions of the Group Policy.

The Registry is a database that stores system and application software configurations in Windows. As Windows systems have more and more functions and more configuration items in the registry, many configurations can be customized, however, these configurations are released in every corner of the Registry. Manual configuration is very difficult and complex.

The "Group Policy" integrates important configuration functions of the system into various configuration modules for management personnel to use directly, so as to facilitate computer management. That is to say, modifying the "Group Policy" is to modify the configuration in the registry. Next we willVista systemTo complete some seemingly difficult tasks.

1. Make "run" appear in the Start Menu

Those who are familiar with DOS often call the command line window with black and white characters to perform DOS operations, but the "run" item is missing from the Vista Start Menu, although the "Search" box in the "Start" menu can be used as the "run" box, or click "Start> All Programs> attachments> Run" to open the "run" window, however, the old bird in Vista is uncomfortable. Click Start> All Programs> attachments> Run. In the displayed run dialog box, enter gpedit. msc and press enter to start the Group Policy Dialog Box. In the left-side pane of the "Group Policy" dialog box, click "user configuration> Manage template> Start Menu and Taskbar ", double-click the "add running command to [start] menu" item in the right pane, in the "add running command to [start] menu properties" dialog box, select "enabled" under the "Settings" tab, and click "OK" to exit, in this way, "Run" will appear in the "Start" menu.

2. Disable the "balloon" Notification

Sometimes, when you are at work, a prompt pops up, forcing you to click it, which is annoying. In fact, in the left-side pane of the "Group Policy" dialog box that appears, click "user configuration> Manage template> Start Menu and Taskbar" in sequence ", in the right pane, double-click "close all balloon notifications" and select "enabled" under the "Settings" tab in the "close all balloon notification attributes" dialog box ", click "OK" to exit, and you will be able to turn off the annoying "balloon notification.

3. Record the last time the Vista system was logged on

The Vista system can record our login information, so that each time you log on to the system, you can compare the two logon times. If the time is found to be inconsistent, it indicates that someone has tried to illegally log on to your account. In fact, in the left-side pane of the "Group Policy" dialog box that appears, click "Computer Configuration> Manage template> Windows Components> logon options ", in the right pane, double-click the "show previous Logon Information During User Logon" item, select "enabled" under the "Settings" tab in the "display previous logon information attributes During User Logon" dialog box, and click "OK" to exit. In this way, the next time you start the computer, the Vista system will prompt you the last logon time before the user enters the system desktop ().

4. Rename the Administrator

We all know that the Administrator account of the system Administrator has the highest permissions, and because such virus and trojan programs always use the account name Administrator that everyone knows to create an event, we can also change the name of the account Administrator, this makes those outsiders unable to start. In the left-side pane of the "Group Policy" dialog box, choose "Computer Configuration> Windows Settings> Security Settings> Local Policies> Security Options", and double-click "account: rename the system Administrator account. In the new "account: Rename System Administrator Account attributes" dialog box, you can rename the Administrator account.

5. Restrict and hide Disk Partitions

For ease of use, we sometimes store personal privacy-level data in public computers shared by multiple people. To ensure the security of such data, you can restrict or hide disk partitions to protect data.

In the left-side pane of the "Group Policy" dialog box that appears, click "Local Computer Policy> User Configuration> management template> Windows Components> Windows Resource Manager ", double-click the "prevent access to the drive from my computer" item in the right pane, then, in the "prevent access to drive properties from my computer" setting window, select "enabled" and select "enabled, the drop-down list for selecting a drive is displayed below. Select the drive we want to restrict and click "OK.

If you want to disable all drives, including optical drives, you can select "restrict all drives ". In "Windows Resource Manager", there is also "hide these specified drives in" My Computer ". This policy can be used to hide the specified drive, but this policy can be broken through the IE browser, enter C: \ in the address bar and press enter to open the hidden C drive partition. Therefore, it is better to use "limit.

6. Add a lock to "shut down the computer"

In the organization, you sometimes need to temporarily leave the computer. To prevent others from spying on the information on the computer, we can use the "WIN + L" shortcut key to lock the computer, however, you can also execute "shut down the computer" on the locked page. Although others cannot tamper with the machine, they can shut down the computer. Therefore, it is necessary to add a "Lock" to "shut down the computer ". In the left-side pane of the "Group Policy" dialog box that appears, click "Computer Configuration> Windows Settings> Security Settings> Local Policies> Security Options ", in the right pane, find and double-click "shutdown: Allow shutdown before Logon". In the displayed Properties dialog box, set the attribute to "disabled, click "OK.

7. Prevent the password from being guessed

When our Vista user password is easy to set, it is easy for illegal users to log on to the system by repeatedly retrying to "Guess" the user password. In fact, we can limit the number of "guesses. When a user attempts to log on to the system and enters an incorrect password, the user is automatically locked when the threshold is reached. The user will not be available until the account has expired, unless the Administrator manually unlocks the account. In the left-side pane of the "Group Policy" dialog box, choose "Computer Settings> Windows Settings> Security Settings> Account Policy> account lock policy ", next, go to the "account lock threshold" item in the right pane. Here, you can set the number of logon attempts failed when the user account is locked. The value ranges from 0 to 999, the default value is 0, indicating that the number of logon attempts is unlimited. We can change it to 3 or 10.

8. Cancel "logout" in the Start Menu"

In the displayed "Group Policy" dialog box, click "user configuration> Manage template> Start Menu and Taskbar" in the left-side pane ", in the right pane, double-click the "delete logout" item in the [start] menu, in the "Delete [start] menu, select" enabled "under the" Settings "tab in the" deregister property "dialog box, and click" OK "to exit. In this way, the "logout" option disappears from the Start Menu. However, this setting only applies to the "Start" menu and does not affect the "logout" project on the "Windows Security" dialog box (which can be opened by pressing the "Ctrl + Alt + Del" combination key.

The eight tips on Group Policy in Windows Vista give you a better understanding of the application of group policy. more knowledge about group policy remains to be learned and explored.