Windows System Group Policy Application full strategy (medium)

Iv. desktop settings

Windows desktops, like our desks, need to be organized and cleaned frequently, and the Group Policy is like our Secretary, making desktop management easy. Let's take a look at several practical configuration instances:

Location: "Group Policy console> User Configuration> management template> desktop"

1. Hide the Desktop System icon (Windows 2000/XP/2003)

Although the system icon function on the desktop can be hidden by modifying the registry, it is troublesome and risky. The group policy configuration method can be used to achieve this goal conveniently and quickly.

For example, to hide the "Network Neighbor" and "Internet Explorer" icons on the desktop, you only need to enable the policy options "hide the 'Network neighbor 'icon on the desktop" and "hide the Internet Explorer icon on the desktop" in the right pane (5). If you want to hide all the icons on the desktop, you only need to enable "hide and disable all projects on the desktop; after the "delete my documents" icon on the desktop "and" delete my computer "icon on the desktop are enabled, the "my computer" and "My Documents" icons will disappear from your desktop. Similarly, if you want to remove the "recycle bin" icon, you only need to enable the "delete recycle bin from desktop" policy item.

Figure 5

2. Do not save the desktop settings when exiting (Windows 2000/XP/2003)

This policy prevents users from saving some changes to the desktop. If you enable this policy, you can still change the desktop, but some changes, including the location of the subject, the location and size of the taskbar, cannot be saved after the user logs out, however, shortcuts on the taskbar can always be saved.

In the right pane, enable the policy option "do not save settings when exiting.

3. Disable the "Clear desktop wizard" function (Windows XP/2003)

The clear desktop wizard automatically runs on your computer every 60 days to clear desktop icons that are not frequently used or never used by users. If this policy is enabled, the "clean up desktop wizard" can be blocked. If you disable or do not configure this setting, the "clean up desktop wizard" runs every 60 days according to the default settings.

Open the delete Desktop Cleanup Wizard in the right pane and set the policy options as needed.

4. enable/disable "Active Desktop" (Windows 2000/XP/2003)

"Active Desktop" is an advanced feature installed on Windows 98 (or later) or IE 4.0. The biggest feature is that you can set wallpaper in various image formats, you can even display webpages as wallpaper. However, for the sake of security and performance, sometimes we need to disable this function (and prohibit users from enabling it), which can be easily achieved through policy settings. To enable this policy, open "Disable Active Desktop" in the right pane.

Tip: If you enable both "enable active desktop" and "Disable Active Desktop", the "Disable Active Desktop" setting will be ignored. If the "Disable Active Desktop and Web View" setting (in "user configuration> management template> Windows Components> Windows Resource Manager") is enabled, Active Desktop is disabled, both policies are ignored.

The above describes several group policy configuration items on the desktop. There are also several other group policy configuration items under "Group Policy console> User Configuration> management template> desktop, you can configure it as needed.

5. Customize the "Taskbar" and "start" menus

On the Right of the window shown in figure 6, items related to group policy configuration in the "Taskbar" and "start" menus are displayed. Let's take a look at the specific example:

Figure 6

Location: "Group Policy console> User Configuration> management template> taskbar and Start Menu"

1. Weight Loss from the "Start" menu (Windows 2000/XP/2003)

If the "Start" menu in Windows is too bloated, you can delete unnecessary menu items from the "Start" menu. In the right pane of the Group Policy, the following options are provided: "delete user folders from the Start Menu", "access and link to" Windows Update ", and" delete public from the Start Menu ".Program"Group", "delete 'my document' icon from the Start Menu", and other group policy configuration items. You only need to enable the policy corresponding to the undesired menu items.

2. Protect the "Taskbar" and "start" menus (Windows 2000/XP/2003)

If you do not want others to change the settings of the "Taskbar" and "start" menus, you only need to enable the policy items "prohibit modification of 'taskbar and start menu settings" and "prevent access to the context menu of the taskbar" in the right pane of the Group Policy console. In this way, when you right-click the task bar and click "properties", an error message (Figure 7) appears. When you right-click the task bar and the project on the task bar, for example, the start button, clock, and taskbar button are hidden in the pop-up menu.

Figure 7

3. Disable "logout" and "shutdown" (Windows 2000/XP/2003)

After the computer is started, if you do not want this user to "Shut Down" or "log out" again, you can enable the two policies, "logout" on the "delete Start Menu" and "Delete and block access to the" shutdown "command in the right pane of the Group Policy console.

This setting deletes the "shutdown" option from the Start menu, and disables the "Windows Task Manager" dialog box by pressing "CTRL + ALT + DEL". The "shutdown" option appears in this dialog box. In addition, although this setting can prevent users from shutting down windows, it cannot prevent users from using other third-party tools to shut down Windows.

Tip: If you enable "delete logout" on the Start menu, the "show logout" project is deleted from "Start Menu Options. You cannot restore the "logout <username>" project to the Start menu (you can only manually modify the registry ). This setting only affects the Start Menu. It does not affect the "logout" project in the "Windows Task Manager" dialog box (you must enable the "Delete and block access to the" shutdown "command at the same time "), it does not prevent users from logging out using other methods.

4. Use group policies to protect the privacy of personal documents (Windows 2000/XP/2003)

Windows has an advanced smart function that records files you have accessed. Although this feature allows you to easily open the file again, for security and performance considerations (for example, you do not want to know which web pages you have browsed and which files you have opened ), you may need to disable this function. With group policies, you only need to enable the policies "do not keep records of recently opened documents" and "clear records of recently opened documents at exit" in the right pane.

In addition, If you enable this policy setting but disable the "delete Document menu from Start Menu" policy setting, the "document" menu will also appear on the "Start" menu, however, this menu is empty. If you enable this policy, disable it and set it to "not configured ", the saved file shortcuts are displayed in the Document menu and file menu of the application on the policy settings page.