How can I create a new group policy to prevent software installation and running?

Source: Internet
Author: User

Group PolicyTo maintain the security of our system, the specific content is as follows.

Sometimes I don't want anyone to chat on my computer, or install unnecessary software on my computer to make a mess of my computer, in fact, in our computer, we can set up to prevent others from installing and running the software maliciously on our computer. Below I will tell you how to use the group policy to restrict the installation and operation of the software.

1. Create a policy by yourself

Open the Group Policy Editor, expand "Computer Configuration/Windows Settings/Security Settings/Software Restriction Policies", and click "Operation/create new policy" on the menu bar to create a policy.

2. Blocking chat QQ

Then, a file hash number is generated. The system also reads the basic information of the file, such as the version and company name. Select "Not Allowed" for "security level", as shown in ).


 

3. prevent software download from running

The local download mainly uses IE and Flashget. First, you must set the download folder and create a new path rule to prevent installation of the downloaded software.

1) prohibit IE download. Run the Registry Editor to expand [HKEY_USERSS-1-5-21-1202660629-854245398-1060284298-500SoftwareMicrosoftWindowsCurrentVersionInternet SettingsZones3] in turn, and then change the value of "1803" on the right to "3" for example), so that you cannot use IE to download the file.


 

2) set the flash get download location. Click "Tools> default download properties" and set the folder to d: downloads.

3) create a restriction rule. Same as above, right-click "Other Rules" and select "New Path rules", select "d: downloads" as prompted, and select "Not Allowed" as "security level ".

4. Disable Group Policy Modification

To prevent others from knowing that the restriction is caused by a group policy, you can set a disable operation group policy. "Allow" is set to a program that is not allowed to run.

Create a new group policy to prevent software installation and operation and make the computer a real computer. More knowledge about group policies needs to be learned and consolidated by readers.

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.