Windows XP skills-group policy skills

Group PolicyThe function is very powerful. We can easily modify the Registry by using the Group Policy, without having to manually modify the registry. In addition, group policies play a vital role in maintaining the security of our systems. The following describes the Group Policy techniques.

Windows XP is currently the most widely used operating system. For this reason, the bookworm has summarized his experience in using Windows XP over the past few years into a series of serialization for everyone. Entries strive to be refined and practical. Group Policy tips are provided today.

Shut down to clear open file records

Log on as a system administrator, click Start> run, and enter gpedit. msc, press enter and enter "Group Policy". In the "local computer" policy → user configuration → manage template → "start" menu and taskbar, in the right pane, double-click "Clear history of recently opened documents on exit" and select "enabled ".

Powerful Windows XP Group Policy"

Windows XP is a perfect configuration tool, which is hidden in your system, but many people do not know its existence. It is called the Local Group Policy Editor or Gpedit for short. To call the editor, select "start"> "run" and enter the command: gpedit. msc, you can open the Group Policy Editor. Now you can modify many features in Windows XP without using the registry, so that your system is full of personality.

Better grasp of powerful "group policies"

The group policy feature is really powerful, and many system adjustments can be easily completed without the need to edit the registry, if you want to know what the system tool can do and the current setting status, you can click "start"> "run" and enter: gpedit. msc, press enter and enter the enrollment policy. Right-click each item, select "Export List" from the menu, name it, and save it as TXT.

Use "Group Policy" to personalize the "Start" menu and taskbar

In the "local computer" policy, expand the "user configuration" → "manage template" → "Taskbar and" start "menu" branches step by step. In the right pane, provides related policies for the "Taskbar" and "Start Menu. For example, if the "Start" menu is too bloated, you can delete the "Start" menu item in the right pane.

Delete and disable desktop related options

In "Local Computer Policy", expand "user configuration"> "management template"> "desktop" branch step by step to display corresponding policy options in the right pane. For example, to hide the "Network Neighbor" and Internet Explorer icons on the desktop, you only need to enable the "hide the 'Network neighbor 'icon on the desktop" and "hide the Internet Explorer icon on the desktop" options in the right pane. If you want to hide all the icons on the desktop, you only need to enable "hide and disable all projects on the desktop.

If you do not want others to change the desktop settings at will, enable the "do not save settings when exiting" policy option in the right pane. When this setting is enabled, other users can make some changes to the desktop, but some changes, the positions and sizes of the labels, window opening, and taskbar cannot be saved after the user logs out.

Prevent users from using "add or delete programs"

If you want to prevent other users from installing and uninstalling the program, enable "delete" Add/delete programs "in the right pane of" Local Computer Policy ">" user configuration ">" management template ">" Control Panel "branch" policy options. Enabling this setting will delete "add or delete programs" from "Control Panel" and delete "add or delete programs" from the menu; this setting does not prevent users from using other tools and methods to install or uninstall programs.

Use "Group Policy" To Set User Permissions

When multiple people share a computer, you can use the "Group Policy" to quickly set user permissions, in the left-side pane of the editor window, expand computer configuration → Windows Settings → Security Settings → Local Policies → user permission assignment. Double-click the user permission that needs to be changed. Click Add, and double-click the account you want to grant permissions. Click "OK" twice in a row.

Solution 98 access to the XP shared directory is rejected

In the LAN, you may encounter a shared directory on a computer with Windows 2000 installed, but the computer with Windows 98 could not be accessed. In this case, you only need to enable the Windows 2000 GUEST user. But Windows XP is facing this problem again, and the above method is no longer working. In fact, you still need to enable the Guest user and run the Group Policy Editor Program, choose "Local Computer Policy"> "Computer Configuration"> "Windows Settings"> "Security Settings"> "Local Policy"> "User Rights Assignment"> "Deny access to this computer from the network ". you can see that there are Guest users, if you delete the Guest user here, other computers can view the shared directory of the computer from the network neighbors.

Restrict IE's saving function

When many people share a single computer, to keep the hard disk clean and tidy, We need to restrict the use of the browser storage function. How can we achieve this? The method is as follows: in the "Group Policy" editor, select "user settings"> "management template"> "Windows Components"> Internet Explorer> "browser menu, in the right pane, save the "'file' menu: Disabled"... 'Menu item' and 'file' menu: Disable "Save As webpage menu item" and "'view' menu: enable policy items such as 'source' menu item "and" Disable context menu. In addition, if you do not want others to modify the IE browser settings, you just need to disable the 'tool' menu: 'Internet option... .

It is hoped that this article will be helpful to the readers in introducing Group Policy techniques. more knowledge about group policies remains to be learned and mastered by the readers.