Windows Server R2 Group Policy Basic settings

Domain control Group Policy basic settings

Labeling: Group Policy calculation configuration: system requires a reboot to take effect Group Policy User Configuration: System logoff is effective

First, domain users automatically join the local Administrators Admins group after they log on to the desktop

Second, the local guest guest user is automatically disabled when the domain user logs on to the desktop

Third, domain users log on to the desktop after the Control Panel hide user accounts

Iv. automatically create a company share shortcut when a domain user logs on to the desktop

Five, the domain user log on to the desktop automatically create Baidu page shortcut URL

Vi. automatically create drive mappings after domain users log on to the desktop company share

Vii. Local Users and groups that disable compute management after domain users log on to the desktop

Experimental steps:

Callout: explains only the specific options for the domain control Group Policy settings, which you can refer to in the previous lab procedure

Http://www.cnblogs.com/zoulongbin/p/6106044.html

First, Domain users automatically join the local Administrators Administrators group when they log on to the desktop

1. Edit the Group Policy----User Configuration----Preferences----Control Panel settings----Local Users and groups-----Create a new----local group.

2, Local Group----Action Select Update-----Group name Select Administrators (built-in)-----Select Add Current user-----OK.

3, the domain control server runs the input gpupdate/force refreshes the server Group Policy, the client needs to log off the system after logging in with the domain user, the implementation function as shown.

Second, the local guest guest user is automatically disabled when the domain user logs on to the desktop

1. Edit the Group Policy----User Configuration----Preferences----Control Panel settings----Local Users and groups-----Create a new----local user.

2. Local User-----Action Select Update-----user name Select Guest (built-in)-----Select account is disabled-----OK.

3, the domain control server runs the input gpupdate/force refreshes the server Group Policy, the client needs to log off the system after logging in with the domain user, the implementation function as shown.

Third, domain users log on to the desktop after the Control Panel hide user accounts

1. Edit the Group Policy----User Configuration----Administrative Templates----Control Panel----Double-click to open the hidden specified control Panel item.

2. Select enabled----display----input microsoft.useraccounts----determine----OK.

3, the domain control server runs the input gpupdate/force refreshes the server Group Policy, the client needs to log off the system after logging in with the domain user, the implementation function as shown.

Four, automatically create company share shortcuts when domain users log on to the desktop

1. Edit the Group Policy----User Configuration----Windows settings----Shortcut-----Create a new-----shortcut.

2. Create a shared folder in the domain control server 2345, the destination path fills the shared folder of the \\192.168.10.30\2345 domain control server.

3, the domain control server runs the input gpupdate/force refreshes the server Group Policy, the client needs to log off the system after logging in with the domain user, the implementation function as shown.

Five, the domain user log on to the desktop automatically create a Baidu page shortcut URL.

1. Edit the Group Policy----User Configuration----Preferences----Windows settings----Shortcut----Create a new----shortcut.

2. Operation Select Create----name Custom----destination type select URL----location Desktop-----Destination URL input www.baidu.com-----icon file path Custom selection-----OK.

3, the domain control server runs the input gpupdate/force refreshes the server Group Policy, the client needs to log off the system after logging in with the domain user, the implementation function as shown.

Six, automatically create drive mappings after domain users log on to the desktop company share

1. Edit the Group Policy----User Configuration----Preferences----Windows settings----Drive mappings----Create a new----mapped drive.

2. General----Operation Select Create----location Enter company Share server address \\192.168.10.30\2345 drive letter Custom----Hide/show this drive select Show this drive----OK.

3, the domain control server runs the input gpupdate/force refreshes the server Group Policy, the client needs to log off the system after logging in with the domain user, the implementation function as shown.

Seven, Local Users and groups that are disabled for Computer Management after domain users log on to the desktop

1. Edit Group Policy----User Configuration----Policies----Administrative Templates----Windows components----Microsoft Management Console---Restricted/licensed snap-in----local Users and groups.

2. Select disabled----OK.

3, the domain control server runs the input gpupdate/force refreshes the server Group Policy, the client needs to log off the system after logging in with the domain user, the implementation function as shown.

Windows Server R2 Group Policy Basic settings