The so-called policy (Policy) is a mechanism for Windows to automatically configure desktop settings.
Group Policy (Group Policy), as the name suggests, is a group-based strategy. It exists in the form of an MMC management unit in Windows, which can help system administrators to set a variety of configurations for the entire computer or specific users, including desktop configuration and security configuration.
For example, you can customize the available programs, desktop content, and "Start" menu options for specific users or user groups, or you can create special desktop configurations throughout the computer. In short, Group Policy is a collection of system change and configuration management tools in Windows.
GPO (Group Policy Object)-Group Policy Object is actually a collection of Group Policy settings. The result of the group policy setting is saved in the GPO. And in the system policy editor tool of Windows 98 or Windows NT, it can be regarded as the predecessor of group policy, mainly referring to the policy based on the registry settings.
Group Policy and Registry
The registry is a database that stores the configuration of the system and application software in the Windows system. As Windows functions become more and more abundant, more and more configuration items in the registry. Many configurations can be customized, but these configurations are published in various corners of the registry. If it is manually configured, it can be imagined how complicated. The group policy integrates the important configuration functions of the system into various configuration modules for the management personnel to use directly, so as to achieve the purpose of facilitating computer management.
To put it simply, ** group policy is to modify the configuration in the registry. ** Of course, Group Policy uses its own more complete management organization method, which can manage and configure the settings in various objects, which is far more convenient, flexible, and more powerful than modifying the registry manually.
Command line start of Group Policy Editor
Click to select the "Start" → "Run" command, enter "gpedit.msc" in the "Open" field of the "Run" dialog box, and then click the "OK" button to start the Group Policy Editor.
(Tips: This "Group Policy" program is located in the local path "C: \ WINNT \ SYSTEM32", the file name is "gpedit.msc", all the commands entered in the command line, the essence is to start the local Windows path has been Some command programs.)
In the opened group policy window, you can find the control objects given in a tree structure in the left pane, and the specific policies that can be set for a configuration on the left in the right pane. In addition, the "Local Computer" policy in the left pane is composed of two major subkeys: "Computer Configuration" and "User Configuration", and some items in the two are duplicated. Settings "," Windows Settings ", etc.
So what is the difference between setting the same item under different subkeys? "Computer configuration" here sets the system configuration of the entire computer, and it affects the running environment of all users in the current computer ; while "user configuration" sets the current user's system configuration, it ** Only for the current user. ** For example, both provide the setting of "Disable AutoPlay" function, if this function is selected in "Computer Configuration", then all users' CD auto-run function will be invalid; if it is in "User Configuration" If this function is selected, then only the user's CD auto-run function fails, and other users are not affected. Pay attention to this when setting up.
Open the group policy as an independent MMC snap-in. To open the group policy editor by selecting the GPE plug-in in the MMC console, the specific method is as follows:
Click to select the "Start" → "Run" command in the pop-up dialog box Type "mmc" and click the "OK" button. Open the Microsoft Management Console window.
