Flexible Use of group policy instances

RelatedGroup PolicyKnowledge can be easily found on the internet, but sometimes we perform corresponding operations based on the information on the Internet, but the opposite results often occur, the following is my situation.

When we see some technical articles, we tend to follow them and sometimes unexpected things happen. Not long ago, I saw an article about how to restrict others to use the application and disable the Registry Editor by using group policies. In this case, I used the method in this article to try it out. However, I was so sad that I accidentally restricted all applications in the PC, including the registry, Group Policy console, and so on. I couldn't even use notepad. Restarting the PC to enter the security mode does not help. After some efforts, I finally found a solution. I think there may be many friends who encounter such problems. So I wrote this article to share my experience with you.

Only by knowing ourselves and ourselves can we be able to defend against attacks. Therefore, we must first understand how to restrict the use of applications and disable registry editors through group policies. Only in this way can we understand how to crack these tactics.

Resolve group policy restrictions

Press F8 to enter the safe mode option, select "safe mode with command line prompt", enter the Command Prompt window, and enter "mmc" Microsoft console ), press Enter to open the program.

Next, click "Add/delete Management Unit" under the "file" menu or press the shortcut key "Ctrl + M"). In the displayed dialog box, click "add". 3 ), many management units that can be added are listed. Select "Group Policy" 4) and click "add". The "Welcome to group policy wizard" window appears, click "Next" until the "finish" button is clicked.

Next, close the list of management units that can be added, and then click "OK" in the "Add/delete Management Unit" dialog box, in the left-side "Console Root Node" project of the "Console Root Node" window, a "Local Computer" is added to expand it, the subsequent operations are the same as when you enable "restrict application" and "Disable Registry Editor. Note: you only need to change "enable" in "run only licensed Windows Applications" and "Disable access to registry editing tools" to "not configured. Finally, close "Microsoft console". A dialog box is displayed, prompting you whether to save it. Click "OK. If you are prompted that the file cannot be saved, click "no" and close it.

Restart the PC to a normal state, and all applications, including the Registry Editor, can be used again.

Disable Registry Editor

To prevent others from modifying the Registry file after entering the system, you can disable access settings for the Registry Editor in the Group Policy. Procedure: Open "Group Policy console" "user configuration" "management template" "system", and enable "Disable registry editing tools.

Restrict the use of applications

Take Windows XP as an example. First, click the start button, enter the gpedit. msc command in the run text box, and then click OK to start the Windows Group Policy. Click "Group Policy console" "user configuration" "management template" "system" Run only licensed Windows Applications "1) and double-click the policy to enable the policy, click the "show" button 2 in the "List of allowed applications" below. A "show content" dialog box is displayed. Click "add" here, then add the application you are allowed to run. In the future, users will be able to run only the programs in the "allowed Application List", and other programs will not be able to run.

Use group policies flexibly to eliminate unnecessary troubles when using group policies. I hope this article will be helpful to readers. More group policy knowledge needs to be learned and mastered by readers.