Windows XP Group Policy Application Tip 2

Follow the procedure described in the previous section for applying group policies to Windows XPWindows XP Group PolicyThis article will continue to introduce the application skills of Windows XP group policies after you have learned how to personalize the system through Windows XP group policies.

3. Making the system safer　

1. Hide the entire Desktop

If you do not want others to open system icons such as "My documents", "my computer", and "recycle bin" on your desktop, we can implement the Group Policy or hide the entire desktop. The procedure is as follows:

Expand "user configuration"> "management template"> "desktop" in the "Group Policy" window. To hide "My documents ", then, you can find and enable the "delete my documents" icon on the desktop in the right window, and click "OK; similarly, you can find and enable the "delete my PC" icon on the desktop "or" delete recycle bin from the desktop "icon in the right window to delete" my computer "or" recycle bin ", enable "hide and disable all projects on the desktop" to hide the entire desktop.

2. protect the privacy of personal documents

Windows XP has an advanced smart function that records files you have accessed. This feature is convenient for users to open the file again. If you consider security and performance, you should block this feature. We can meet the requirements through the following settings:

In the "Group Policy" window, expand "user configuration"> "management template"> "Taskbar and" start "menu ", then, you can enable the "do not keep records of recently opened documents" and "clear recently opened document records at exit" Policies in the right window.

3. Prohibit Access to "Control Panel"

If you do not want other users to access the control panel on your computer, you only need to run the Group Policy Editor, expand the branch "Local Computer Policy> User Configuration> management template> Control Panel" in the left-side window, set "forbidden access control panel" in the right window to "enabled.

This setting prevents the launch of control panel program files. The result is that others cannot start the control panel or run any control panel project. In addition, this setting will delete the control panel from the "Start" menu, and also delete the control panel folder from Windows Resource Manager.

4. Set User Permissions

When multiple users share one computer, you can set user permissions in Windows XP by following these steps:

Expand "Computer Configuration"> "Windows Settings"> "Security Settings"> "Local Policy"> "user permission assignment" in the "Group Policy" window ", for example, if a user with the username "GT" can force the shutdown of the remote system, find and double-click "Force shutdown from the remote system" in the right window ", the Properties window shown in 6 is displayed.

Click "add user or group", click "advanced" in the "select user or group" window, and then click "Search now, in this case, you can select a user whose user name is "GT" from the user list box below, and click "OK" to exit, you can also delete user permissions.

5. password settings

System security has always been the focus of attention, and Windows XP is no exception. You can set the minimum length of the password through the Group Policy. The procedure is as follows:

Expand "Computer Configuration"> "Windows Settings"> "Security Settings"> "Account Policy"> "password policy" in the "Group Policy" window ". Double-click and enable "Password Must Meet Complexity Requirements" in the right window 7), click "Minimum Password Length, in the pop-up dialog box, set the minimum password length to 8 or greater. In the future, you must enter more than 8 characters for setting the account password, which increases security. In addition, you can also set the password's validity period. We can double-click "Maximum Password retention period" and "Minimum Password retention period" respectively, and then set the maximum password retention period and Minimum Password retention period respectively.

6. Forbidden to access Registry Editor

To prevent others from modifying your registry, we can disable access to registry editor in group policy. The procedure is as follows:

Expand "user configuration"> "management template"> "system", and then find and double-click the "Disable Registry Editor" item in the right window, and set it to "enabled". When you try to start the Registry Editor, the system will prompt that the registration editor has been disabled by the Administrator.

In addition, if your registry editor is locked, double-click this setting and click "not set" in the "Settings" tab in the pop-up dialog box, in this way, your registry can be unlocked. To prevent users from using other registry editing tools to open the registry, double-click to enable "run only licensed Windows Applications" so that users can only run the programs you specified.

7. Hide or delete a project in Resource Manager

Resource Manager has always been the most important tool in Windows systems. How to manage resources efficiently and securely has always been the unremitting pursuit of computer users. Expand "user configuration"> "management template"> "Windows Components"> "Windows Resource Manager" to view all settings under the "Windows Resource Manager" node. 8) For example, the "folder option" is an important menu item in the resource manager. It can be used to modify the File Viewing mode and edit the file opening mode. In order to prevent others from making changes at will, you can delete this menu item. You can find and double-click to enable the "delete folder option" menu from the "Tools" menu to complete this setting. In addition, double-click to enable the "hide the" manage "project" option on the Windows Resource Manager context menu to shield the "manage" menu on your computer; you can also hide your specified drive by enabling "hide these specified drives in my PC; double-click to enable "do not move deleted files to the 'recycle bin '". Then, the deleted files will not be deleted from the recycle bin. Of course, there are still many projects that are not mentioned here. You can discuss and configure them as needed.

8. Disable "Add/delete programs"

You can install, uninstall, repair, and add and delete Windows functions and components from the add or delete programs project in the control panel, as well as a wide range of Windows programs. If you want to prevent other users from installing or uninstalling programs, you can use group policies.

Expand "user configuration"> "management template"> "Control Panel"> "Add/delete programs ", then, in the right window, enable the "delete" program.

In addition, in the Add/Remove Programs Branch, you can also add new programs, add programs from CD-ROM or floppy disk, and add programs from Microsoft in the Add/delete programs item for Windows programs, add programs from the network, and so on, through setting these policy items, the system files and applications in the computer are protected.

9. Disable "Internet Options" under the IE "Tools" menu"

If you do not want others to modify the settings of IE, you can enable the "'tool' menu: Disable 'Internet options... '" policy. The procedure is as follows:

Expand "user configuration"> "management template"> "Windows Components"> "Internet Explorer"> "browser menu", and enable the "'tool' menu in the right window: disable the 'Internet option... ).

In addition, you can disable other items in the pane, such as hiding IE favorites, saving as, creating, and opening files, as needed ).

4. Better system performance

1. Disable Windows Messenger from running automatically

For friends who do not access the Internet or simply do not use Windows Messenger, Windows Messenger in Windows XP is redundant because it is not only inconvenient to uninstall but also automatically runs along with the system. Therefore, it is best to shield the automatic running function of the software.

Expand "Computer Configuration"> "management template"> "Windows Components"> "Windows Messenger" branch by double-clicking, in the window on the right, find and double-click "Do Not Allow running Windows Messenger". In the displayed "Do Not Allow running Windows Messenger properties" dialog box, click "enabled ", click OK to exit.

2. Disable Windows Update.

The Windows Update function can automatically connect to the Microsoft website and download the updated content, which provides convenience for updates to your software. However, for computer users who do not need updates or have insufficient bandwidth, this function is redundant. Can you hide the "Windows Update" function in the system? The method to disable the service is as follows:

Expand "user configuration"> "management template"> "Windows Components"> "Windows Update ", in the window on the right, find and enable "delete access using all Windows Update functions.

3. Disable the built-in CD burning function.

Windows XP comes with the CD burning function. If you do not have a CDDVD/index.shtml 'target = '_ blank' class = 'Article'> recorder, this function is redundant, in addition, the system performance and the execution speed of the resource manager will be affected. On the other hand, most users use the dedicated CD recording software instead of using the built-in burning function of the system, therefore, we can use group policies to block this function. The specific steps are as follows:

Expand "user configuration"> "management template"> "Windows Components"> "Windows Resource Manager", and then find and enable "delete CD burning function" in the right window.

Note: This setting does not prevent users from using third-vendor applications to create or modify a CD using a CD burner.

4. 200% faster Internet access

By default, the Windows Network Connection packet scheduler limits the system to 80% of the connection bandwidth, which is undoubtedly a small expense for a network with a small bandwidth. We can use group policy settings to replace the default value and increase the Internet access rate by 20%!

Expand "Computer Configuration"> "management template"> "network"> "QoS packet scheduler", find and double-click "Limit and retain bandwidth" in the right window, select "enabled" in the pop-up attribute window, and then use the following "Bandwidth limit" box to adjust the system's reserved bandwidth ratio. We can set it to 0%, finally, press confirm to exit, and then we can use another 20% of the bandwidth.

5. disable the system restoration function.

The System Restoration function is a powerful function for users who are not very stable in the system. However, if your system remains stable, do you need to enable the System Restoration function? Because the cost of enabling this function is quite high, the system performance will be significantly reduced, and the disk space will also be occupied. If you want to disable this function, take the following steps:

Expand "Computer Configuration"> "management template"> "system"> "System Restore", and enable "Disable System Restore" in the right window.

Note: After Enabling this setting, you can disable the system restoration function and cannot access the "System Restoration wizard" or "configuration interface ".

6. Disable the thumbnail cache.

Windows XP has the thumbnail view function. To speed up the display of frequently browsed thumbnails, the system caches the displayed images so that the information in the cache can be directly read when the system opens them next time, to achieve quick display. However, if you do not want the system to buffer the image, especially for the image that is browsed only once, you can use the Group Policy to disable the thumbnail cache function. This will greatly speed up the first browsing.

Expand "user configuration"> "management template"> "Windows Components"> "Windows Resource Manager" in sequence ", find and enable "Disable thumbnail cache" in the right window.

7. Optimize the configuration of Windows Media Player network Buffer

When we use Windows Media Player to play streaming Media, the Player will buffer the streaming Media before playing, so that it can play smoothly. In practical applications, especially when the network speed is not good and when a large file is played, the stream playback is not smooth. We can enable the following policy to solve this problem:

Expand "user configuration"> "management template"> "Windows Components"> "Windows Media Player"> "network", and then find and enable "configure network buffer" in the window on the right ", in the displayed "buffer time" seconds) We select "Custom" and then customize the buffer time in "configure network buffer" 60 seconds at most ), click "OK". 10 ).

Tip: If this policy is enabled, the cache options on the performance tab of Windows Media Player cannot be configured.

The Windows XP group policy application technique brings a lot of convenience to the system administrator. The Windows XP group policy can make our system safer, stronger, and better performance. The system administrator should also learn more about Windows XP group policies.