The desktop of Windows XP, like your desk, sometimes needs to be tidied up and cleaned. With the Group Policy Editor, this work will become a piece of cake. You only need to expand the User Configuration → Management Template → Desktop branch in the local computer policy step by step to display the corresponding policy options in the right pane. As shown in the figure.
1, hide desktop icon
If you hide the system icon on the desktop, the traditional method is to modify the registry, which will inevitably bring certain risks. Using the Group Policy Editor can achieve this goal conveniently and quickly.
To hide the My Network Neighborhood and Internet Explorer icons on the desktop, just enable the two policy options of Hide My Network Neighborhood icon on the desktop and Hide Internet Explorer icon on the desktop in the right pane; If you hide all the icons on the desktop, just enable "Hide and disable all items on the desktop"; When the options of "Delete My Document Icon on Desktop" and "Delete My Computer Icon on Desktop" are enabled, the icons of "My Computer" and "My Document" will disappear from your computer desktop; If you no longer like the icon "Recycle Bin" on the desktop, you can also delete it by enabling the "Delete Recycle Bin from Desktop" policy item.
2. Some changes to the desktop are prohibited.
If you don't want others to change the settings of the computer desktop at will, please enable the "Don't save settings when exiting" policy option in the right pane. When you enable this setting, other users can make some changes to the desktop, but some changes, such as the location of icons and open windows, the location and size of the taskbar, cannot be saved after the user logs off.
Second, set user permissions in Windows Xp.
When many people * * * use a computer, setting user permissions in Windows XP can be done according to the following steps:
1. Run the Group Policy Editor (gpedit.msc).
2. In the left pane of the editor window, gradually expand the branch of Computer Configuration →“Windows Settings → Security Settings → Local Policy → User Rights Assignment.
3. Double-click the user right you want to change. Click Add, and then double-click the user account to which you want to assign permissions. As shown in the figure. Click the OK button twice in a row.
Third, the solution to the problem that Windows 98 was denied access to the Windows XP*** directory.
In the local area network, it is often encountered that the Windows 2000 computer opens the directory, but the Windows 98 computer cannot access it. The answer can be found on the official website of Microsoft, as long as the guest user who opens Windows 2000 is prompted. However, after Windows XP came out, it also faced this problem. As a result, some people find this method ineffective, and online neighbors may not be allowed to access the * * * shared directory of Windows XP. What is the reason? This question puzzled me for several days, and then I found the answer unexpectedly. Maybe this is a BUG in Windows XP?
Open the system guest user and run the Group Policy Editor. You can see that there is a guest user in Local Computer Policy → Computer Configuration → "Windows Settings → Security Settings → Local Policy → User Permission Assignment → Deny Access to this Computer from the Network"! If you delete a guest user here, other computers can view this computer's * * * shared directory from their online neighbors.
Environment: Chinese Windows XP, using traditional login mode, turn off "Enjoy Simple Files * * *" in "Folder Options".
Fourth, MSN Messenger is prohibited from running on its own.
In Windows XP Professional, a lot of software is built into the system without uninstall option, which has caused dissatisfaction among many computer users. Prevent Windows Messenger (version 4.0 or later) from running automatically. You just need to be in the Group Policy Program window. Double-click to expand the branch of Computer Configuration → Management Template → Windows Components →“Windows Messenger, then double-click Windows Messenger not allowed to run from the right window, click Enable in the dialog box of Windows Messenger not allowed to run, and then click OK to exit.
Verb (abbreviation for verb) disables the related settings, menu items and toolbars of IE6 browser.
In the "Internet Options" window of IE browser, comprehensive setting options (such as home page, temporary folder, security level, grading audit, etc.) are provided, which will greatly facilitate us to surf the Internet. In order to prevent others from arbitrarily changing your browser settings and restricting the use of some functions of IE, you need to hide or prohibit the use of your setting options. In the past, in Windows 9x system, it was generally realized by modifying the registry, but this would bring certain risks to the security of the system. When you choose Windows XP, this risk is almost reduced to zero. Now I will show you how to use the group policy provided by Windows XP to set IE6.
In the left pane of the Group Policy Settings window, gradually expand the branch of User Settings → Administrative Templates →“Windows Components →”Internet Explorer, and you will find such policy options as Internet control panel, offline page, browser menu, toolbar, persistent behavior and controls approved by the administrator.
1. Restrict the saving function of IE browser
Many people need to restrict the use of the browser's saving function in order to keep the hard disk clean when using the computer, so how to achieve it? The specific method is as follows: Select User Settings → Manage Templates →“Windows Components →“Internet Explorer”→ Branch of the browser menu, and then open the file menu in the right pane: Disable Save As … menu item, File menu: Disable Save As Web Page menu item, View menu: Disable.
In addition, if you don't want others to change the settings of IE browser at will, you only need to enable the policy of "Tools Menu: Disable Internet Options …". In addition, you can disable other items in this pane according to your personal needs.
Step 2 lose weight for the toolbar
If you want to hide the tool buttons in the toolbar, the specific method is: select User Settings → Administrative Templates →“Windows Components →“Internet Explorer”→ Toolbar Branch, and then double-click Configure Toolbar Button Policy in the right pane to open the Configure Toolbar Button Properties window, and select the enabled radio button in the Settings tab. Then click "OK" button.
3. It is forbidden to modify the home page of IE browser.
If you don't want others to change the home page of IE browser you set at will, you only need to select User Configuration → Administrative Templates →“Windows Components →”Internet Explorer branch, and then in the right pane, enable the policy of "Do not change the home page settings". In addition, in this pane, the disabling functions of changing historical settings, changing color settings and changing settings of temporary Internet files are provided.
If you enable this policy, the settings in the home page area of the General tab in the Internet Options dialog box of IE browser will be grayed out.
Special note: If you set the policy of disabling general pages in User Configuration → Administrative Templates →“Windows Components →“Internet Explorer”→“Internet Control Panel, you don't need to set this policy, because disabling general page policies will delete the general tabs on the interface.
Six, file and folder settings audit
Windows XP Professional can use auditing to track user accounts used to access files or other objects, login attempts, system shutdown or restart, and similar events. Auditing files and folders (NTFS file system only) can ensure the security of files and folders. Before auditing, you must use Group Policy to specify the types of events to be audited. To set up auditing for files and folders, follow these steps.
1. Click to select the Start → Run command, type the gpedit.msc command in the pop-up Run dialog box, and then click OK. Of course, you can also create corresponding shortcuts on the desktop.
2. In the group policy window that pops up, gradually expand the branch of Computer Configuration →“Windows Settings → Security Settings → Local Policy in the right pane, and then select the audit policy option under this branch.
And prevent users from using add or remove programs.
In the Control Panel, adding or removing program items allows you to install, uninstall, repair, add and remove functions and components of Windows XP and various Windows programs. Programs published or assigned to users will appear in Add or Remove Programs. If you prevent other users from installing and uninstalling programs, please enable the "Delete Add/Remove Programs" policy option in the right pane of the local computer policy → user configuration → management templates → control panel branch.
Enabling this setting will remove Add or Remove Programs from the Control Panel and remove the Add or Remove Programs item from the menu; This setting does not prevent users from using other tools and methods to install or uninstall programs.
Eight, prohibit access to the "control panel"
If you don't want other users to access the control panel of your computer, you just need to run the Group Policy Editor (gpedit.msc), expand the branch of local computer policy → user configuration → management template → control panel in the left pane, and then enable the policy of control panel prohibiting access in the right pane. As shown in fig. 7.
This setting can prevent the control panel program file (Control.exe) from starting. Therefore, others will not be able to start the control panel (or run any control panel projects). In addition, this setting will remove the control panel from the start menu. This setting will also delete the Control Panel folder from Windows Explorer.
Nine, "Taskbar" and "Start" menu related options to delete and disable
In the local computer strategy, the branch of user configuration → management template → taskbar and start menu is gradually expanded, and the relevant strategies of taskbar and start menu are provided in the right pane. As shown in figure 4.
1. Streamline the start menu
If you think the start menu of Windows XP is too bloated, you can delete unnecessary menu items from the start menu. In the right pane, you can delete the common tool group, my document icon, document menu, network connection, favorites menu, search menu, help command, run menu, my picture icon, my music icon and my online neighbors from the Start menu. You only need to enable policies corresponding to unnecessary menu items. Now, taking deleting my document icon as an example, the specific operation steps are as follows:
(1) In the Policy List pane, double-click the "Delete my document from the Start menu" setting option.
(2) In the settings tab of the pop-up window, select the enabled radio button (as shown), and then click OK.
2. Protect your privacy.
For some security requirements, such as you don't want others to know which web pages you have visited and which files you have opened, you only need to enable two policies in the right pane: "Do not keep records of recently opened documents" and "Clear records of recently opened documents when exiting".
3. Protect the settings of the taskbar and start menu.
If you don't want others to change the settings of the taskbar and start menu at will, you only need to enable two policy items, namely "Prohibit changing the settings of the taskbar and start menu" and "Prohibit accessing the context menu of the taskbar" in the right pane. In this way, when you right-click the taskbar and click Properties, an error message will appear, prompting that a setting prohibits this operation.
4. "Logout" and shutdown are prohibited.
After the computer is started, if you don't want this user to shut down and log off, you must enable two strategies: Delete Logout from Start Menu and Delete and Block Access to Shutdown Command in the right pane.
Tip: If you delete Logout from the Start menu, the Logout item will not appear in the Start menu. This setting also removes the Show Logout item from the Start menu option. Therefore, you can't log off the project and return to the Start menu.