The magical uses of Windows 7 system Group Policy

The registry is a Windows system to save the system, application software configuration of the database, as the Windows system more and more rich, more and more configuration items in the registry, in fact, many of the configuration can be customized settings, but these configurations are published in every corner of the registry, If the manual configuration is very difficult and complex. "Group Policy" is to integrate the system's important configuration functions into a variety of configuration modules for managers to use directly, so as to facilitate the management of computers. In other words, modifying Group Policy is modifying the configuration in the registry. Let's use Group Policy to accomplish some seemingly difficult tasks under Windows 7 systems.

1. Let "Run" appear in the Start menu

Friends who are familiar with DOS often call a black-white command line window for DOS operations. However, the "Run" item is missing from the Windows 7 Start menu, although the search box on the Start menu can be used as the Run box, or click start → all programs → attachments → run, and you can open the Run window, but even the "veteran" of Windows 7 system is not comfortable. At this time we can click the "start" → all programs → attachment → run, in the Open "Run" dialog box, enter Gpedit.msc back, start the Group Policy dialog box. In the left pane of the Group Policy dialog box, click User Configuration → administrative Templates → start menu and taskbar. Then, in the right pane, double-click the Add Run command to Start menu item, and select Enabled under the Settings tab of the Open Run command Add to Start Menu Properties dialog box. Then click OK to exit, so that "run" will appear in the Start menu.

2. Close "Balloon" notification

Sometimes when you are working, a prompt pops up, forcing you to click on it, which is annoying. In fact, we clicked User Configuration → admin templates → start menu and taskbar in the left pane of the Open Group Policy dialog box. Then, in the right pane, double-click the "Close all balloon Notifications" item, select Enabled under the Settings tab in the Turn off all Balloon Notification Properties dialog box, and then click "OK" to quit, you can put the annoying "balloon notice" turned off.

3. Record the last time you logged on to the Windows 7 system

The Windows 7 system can record our login information so that each time we log on to the system, we can compare the times of two logons, and if the time is not consistent, it means someone has tried to illegally log into your account. In fact, in the left pane of the Open Group Policy dialog box, click Computer Configuration → administrative Templates →windows components → login options. Then, in the right pane, double-click the "Show information about previous logins during user logon" item, and in the open "display information about previous logins during user logon" property dialog box, under the Settings tab, select Enabled, and then click OK to exit. So the next time you start your computer, the Windows 7 system prompts you for your last logon time before the user enters the system table.

4. Renaming the Administrator

We all know that system administrator account administrators have the highest privileges, and because so some viruses and Trojans always use this known account name administrator to create trouble, in fact, we can also change the name of it, so that those outsiders do not know what to do. In the left pane of the Group Policy dialog box, click Computer Configuration →windows settings → security settings → Local policies → security options. Then in the right pane, double-click account: Rename system Administrator account, and in the newly opened account: Rename administrator account properties dialog box, you can change the name of the Administrator account Administrator.

5. Limit, hide disk partitions

In order to be easy to use, we sometimes also in the common public computer to store some personal privacy level of data, in order to ensure that the data security, you can limit or hide the disk partition to achieve the protection of the data.

In the left pane of the Open Group Policy dialog box, click Local Computer policy → user Configuration → Administrative Templates →windows component →windows Explorer. Then, in the right pane, double-click the "Prevent access drive from My Computer" entry, and then open the "Prevent from" My Computer "Access drive Properties" Setting window Select "Enabled", after selecting "Enabled", a drop-down list of selected drives appears below, select the drive we want to restrict and click OK.

If you want to turn off all drives, including the optical drive, you can select Restrict all drives. Under Windows Explorer There is also the "hide these specified drives in My Computer" item, this policy allows you to hide the specified drive, but this policy can be broken through IE, in the Address bar, enter the C: Return to open the hidden C disk partition, for this, we still use The "Limit" is better.

6. To "Shut down the computer" and add a "lock"

In the unit sometimes need to leave the computer temporarily, in order to prevent others peeping computer information, we can use "win+l" shortcut keys to lock the computer, but in the lock page can also perform "Shut down the computer", although others can not tamper with the machine, but it is possible to shut down, it is necessary to "shut down the computer" and add a "Lock". In the left pane of the Open Group Policy dialog box, click Computer Configuration →windows settings → security settings → Local policies → security options. Then go to the right pane and double-click the shutdown: Allow shutdown before logon item, and after setting its property to Disabled in the pop-up Properties dialog box, Click "OK".

7. Prevent passwords from being guessed

When our windows 7 user password setting is simpler, it is easy for illegal users to try to "guess" the user password multiple times and log on to the system, but we can limit the number of "guesses". When a user attempts to log on to the system to enter the wrong password number of times to reach a certain threshold that the account is automatically locked, before the expiration of the account lockout, the user will not be available, unless the administrator manually unlock the lock. In the left pane of the Open Group Policy dialog box, click Computer settings →windows settings → security settings → account policies → account lockout policy. Then go to the Account lockout threshold entry in the right pane, where you can set the number of failed logon attempts for a user account that is between 0 and 999 , the default of 0 means that the number of logons is unrestricted and we can change to 3 or 10.

8. Cancel "Logout" from the Start menu

Click User Configuration → administrative Templates → start menu and taskbar in the left pane of the Open Group Policy dialog box. Then, in the right pane, double-click the ' logout ' item on the Delete Start menu, and in the Logout Properties dialog box on the open Delete Start menu, set tab, select Enabled, and then click OK to exit. This "logout" item disappears in the Start menu. However, this setting only works on the Start menu and does not affect the logout item on the Windows Security dialog box (which you can open by pressing the Ctrl+alt+del key).