Windows System Group Policy Application full strategy (I) page 1/2

1. What is group policy?

(1) What are the functions of a group of policies?

When it comes to group policies, you have to raise the registry. The Registry is a database that stores system and application software configurations in windows. As Windows functions become more and more abundant, there are more and more configuration items in the registry. Many configurations can be customized, but these configurations are released in every corner of the Registry. If they are manually configured, you can think about how difficult and complicated it is. The group policy integrates important configuration functions of the system into various configuration modules for management personnel to use directly, so as to facilitate computer management.

To put it simply, the Group Policy is to modify the configuration in the registry. Of course, group policies use a more sophisticated management and organization method to manage and configure the settings of various objects, which is far more convenient and flexible than manual modification of the Registry and has more powerful functions.

(2) version of Group Policy

Most Windows 9x/NT users may have heard of the concept of "System Policy", while most of us now hear the name "group policy. In fact, group policies are more advanced extensions of system policies. They are developed from the "system policies" of Windows 9x/NT, it has more Management Templates, more flexible setting objects, and more functions. Currently, it is mainly used in Windows 2000/XP/2003 systems.

The operating mechanism of early system policies is to define specific. Pol (usually config. pol) files through policy management templates. When a user logs on, it will overwrite the Setting Value in the registry. Of course, the System Policy Editor also supports modification of the current registry, and also supports connection to a network computer and settings of its Registry. The Group Policy and its tool directly modify the current registry. Obviously, the network function of Windows 2000/XP/2003 is its biggest characteristic, and its network function is naturally indispensable, therefore, the group policy tool can enable and configure a computer on the network, or even open an Active Directory object (that is, a site, domain, or organizational unit. This was previously not possible with the "System Policy Editor" tool.

The basic principles of system policies and group policies are to modify the corresponding configuration items in the Registry to achieve the purpose of configuring the computer, but some of their operating mechanisms have changed and expanded.

2. Management Templates in group policies

The Windows 2000/XP/2003 directory contains several. ADM files. These files are text files called "Management Templates", which provide policy information for the group policy management template project.

In Windows 9x, the default admin. ADM management template is saved in the same folder of the Policy Editor. In the Windows 2000/XP/2003 system folder, the INF folder contains four template files installed by default, which are:

1) system. ADM: it is installed in group policy by default for system settings.

2) inetres. ADM: it is installed in "Group Policy" by default and used for setting Internet Explorer policies.

3) wmplayer. ADM: used for Windows Media Player settings.

4) Conf. ADM: Used For netmeeting settings.

In the Group Policy console of Windows 2000/XP/2003, you can add a "Policy template" multiple times. In Windows 9x, only one policy template can be opened currently. The following describes how to use a Policy template. First, use the following in the Windows 2000/XP/2003 Group Policy console:

First Run "Group Policy"ProgramSelect "Computer Configuration" or "user configuration", right click, and select "Add/delete template" in the pop-up menu ", the dialog box shown in 1 is displayed.

Figure 1

Click the Add button and select the. ADM file in the displayed dialog box. Click the OPEN button to open the selected script file in the System Policy Editor and wait for the user to execute.

Return to the main interface of the "Group Policy" editor, open the "Local Computer Policy> User Configuration> management template" directory, and then click the corresponding directory tree, the configuration items generated by the newly added management template are displayed. (to facilitate the operations on the instances later in this article, we recommend that you add other template files except the default template files ).

Let's take a look at the Group Policy Editor in Windows 9X. First, select "close" in the "file" menu in the Group Policy Editor to close the current script, and then select "template" in the "options" menu ", the dialog box 2 is displayed.

Figure 2

Click the open template button. In the displayed dialog box, select the corresponding. ADM file and click the OPEN button. Then, open the selected script file in the editor and wait for the user to execute.

Iii. Running Group Policy

(1) Windows 9x Policy Editor

Policy editing tools are divided into two types by operating system. One is the Windows 2000/XP/2003 Group Policy Management Console, which has been installed by default during system installation; the other is the System Policy Editor of Windows 9x, which is not installed during system installation. The program files are stored in the \ tools \ reskit \ netadmin \ poleditdirectory on the Windows installation disk, and the packages include poledit.exe and Poledit. INF, windows. ADM files.

If the Windows 9x system uses the following method, you can perform a formal installation process.

1. on the control panel, double-click the "Add/delete programs" icon, click the "Install Windows" tab, and then click the "Install from disk" option.

2. In the "Install from disk" dialog box, click the "Browse" button and specify the tools \ reskit \ netadmin \ Poledit directory of the Windows 9x installation disc.

3. Click "OK" and then click "OK" in the dialog box.

4. In the "Install from disk" dialog box, select the "System Policy Editor" and "Group Policy" check boxes, and then click the "Install" button.

After the installation is complete, click the "run" command item, enter Poledit, and then click the "OK" button (as shown in page 3 after running ).

Figure 3