Application of Group Policy
1. Basic concepts
Group Policy is a collection of policies
Group Policy (English: Group Policy) is a feature of theMicrosoftWindows NT family of operating systems , which controls the working environment ofuser accountsand computer accounts. Group Policy provides the user Centralized management and configuration of settings. One version of Group Policy is called Local GroupPolicy (abbreviated "LGPO" or "LocalGPO"), which can be on a stand-alone, non-domain computer ManageGroup Policy Objects.
2. Opening method
gpedit.msc3. Refresh group policy
gpupdate /force4. Module
- Computer configuration: takes effect for the local computer
- User configuration: effective for users
2. Case
1. Hide desktop system icons
- Set in group policy
- Based on the user configuration, each user who logs in to the computer will display the system icon or shortcut added to the desktop.
- User Configuration->Administrative Templates->Desktop: Hide and disable all items on the desktop
2. Prevent changes to the taskbar and start menu
- User Configuration->Administrative Templates->Start Menu and Taskbar
- Prevent changes to Taskbar and Start menu settings
- Administrators are unrestricted
3. Protect document privacy and historical usage files
- User Configuration->Administrative Templates->Start Menu and Taskbar->Do not keep the history of recently opened documents
4. Prevent new windows from opening on the browser
- User Settings->Administrative Templates->Windows Menu->Internet Explorer->Security Features->Browser Menu: Disable the Open menu in new window option
- Can block some ads
5. It is forbidden to use the control panel
- User Settings->Control Panel: Deny access to Control Panel
- Command to open control panel
control.exe6. Disable autoplay function
- Computer Configuration->Administrative Templates->Windows Components->Autoplay Policy: Turn off Autoplay
- Selectable All Drives CD-ROM and Removable Media Drives
- When a USB flash drive is plugged into the computer, it will automatically run the USB flash drive. If there is a Trojan in the USB flash drive, it will be infected with a virus soon after plugging it in.
7. Configure automatic updates
8. Find three group policy applications from the network