1. 1 overview 3
1.2 change the visual effect 3
1.3 Close the Windows Module Installer Work Service 5
1.4 Turn off telemetry service7
1.5 Turn off the diagnostic trace service 8
1.6 Close Windows Defender 10.
1.7 Create user (workgroup environment) 1 1
1.8 domain environment 13
1.9 Change power mode 13
1. 10 theme selection 14
1. 1 1 Change login mode 14
Disable ALT+F4 shutdown option 17
1. 13 Move desktop data from drive C to drive D 17.
1. 14 system cannot be shut down or restarted 2 1.
Chapter 2 Optimizing Windows 7 Operating System 2
2. 1 Create user (workgroup environment) 2
2.2 Change the power mode 4
2.3 Change the login mode 4
2.4 Enable Kiosk mode (important) 6
2.5 AppLocker application control strategy 7
2.6 enable Clear Type font 9
2.7 Installation failed. You need administrator rights to install this software. 1 1
The third chapter optimizes Windows 20 12 operating system 13.
3. 1 How to disable screen locking in Windows 20 12 13?
3.2 Delete the n calculation item 16 in the Event Viewer.
3.3 Adding desktop experience and audio-visual experience to server operating system 16
Chapter 1 Optimizing Windows 10 Operating System
1. 1 Overview
Many users tell us that connecting Windows 10 operating system with cloud terminal takes up more CPU and memory resources than other operating systems. To solve this problem, we recommend that you log on to the Windows 10 operating system (you need administrator privileges). Configuring the following five options in turn (1.2/1.31.41.5/1.6) can solve the problem that Windows 10 takes up too much CPU and memory.
1.2 change the visual effect
Windows 10 is a very beautiful operating system, which uses various animation effects. Although these visual effects provide a sense of style, they may also become important objects that occupy the system CPU. Thankfully, they are easy to close. Enter "Advanced System Settings" in the search box on the right side of the Windows start menu, and select View Advanced System Settings, as shown below:
In the window that appears, in the Performance section, click the Settings button indicated by the arrow. Clicking this button will display a list of various visual effects. Select the "Adjust to Best Performance" option and click "OK" to save the changes, as shown in the following figure:
Switch to the Advanced tab. Select "Program" in tuning to optimize performance: when finished, click "Change …" to modify the virtual memory settings, as shown below:
In the virtual memory window, uncheck Automatically manage the paging file size of all drives. Select a custom size, then enter the numbers suggested in the following figure in the initial size and maximum value entries, and then click Set and OK to make it take effect:
1.3 Shut down the Windows module installer service.
The Windows Module Installer Worker (TiWorker.exe) is a Windows Update service that can find new updates and install them on your computer. But sometimes it will lead to high CPU load and slow down the PC. If you have such a problem, don't worry! As long as you use this article, you will know how to fix the problem of high CPU utilization caused by Windows Modules Installer Worker (TiWorker. Exe). The simple solution is to set Windows update to manual mode. Please perform the following steps:
1. Open the Windows service and set it.
A) press Win+R(Windows logo key +R key) on the keyboard at the same time to open the running box.
B) type services.msc in the box.
2. Locate and double-click the Windows module installer on the right.
3. Set its startup type to manual. Then click OK.
1.4 Turn off telemetry service.
1. On the keyboard, press the Windows logo key and r at the same time to call the Run command.
2. Enter gpedit.msc and click OK.
3. In the local group policy editor that pops up, expand Computer Configuration >; Manage Templates > Windows Components > Data Collection and Preview Version, find and double-click "Allow Telemetry" on the right.
4. Select Disable, and then click OK.
1.5 Turn off the diagnostic trace service.
We will disable another user experience DiagTrack service, start the task manager and switch to the Services tab, sort by name, find and right-click DiagTrack. Select Stop, as shown in the following figure:
Open the service window as described in Section 2.3, and find the service named "Connected User Experience and Telemetry".
Double-click the mouse to open it, select "Stop" in the service status, select "Disabled" in the startup type, and click OK to take effect.
1.6 Close Windows Defender.
Finally, we recommend disabling Windows Defender:
Press Windows +R on the keyboard at the same time, type gpedit.msc in the run dialog box, and then click OK.
2. in the local group policy editor, expand computer configuration >; Manage templates > Windows components > Windows Defender antivirus program, find "turn off Windows Defender antivirus program" on the right, and double-click to open it.
3. Select the Enable option to disable Windows Defender. Click Apply and then click OK.
Windows Defender will be disabled immediately. If not, please restart the computer and check whether it is disabled.
1.7 Create user (workgroup environment)
The created user refers to the user of Windows system. Right-click the Windows icon in the lower left corner of the desktop, and then select Computer Management.
Pop up the computer management window, expand local users and groups on the left, and right-click to select a new user; Then enter the user name and password, check the two options in the figure below, and click the Create button to complete the user creation.
After creating the user, click the Group option on the left, and then double-click the Remote Desktop User Group on the right.
Click the Add button to add the previously created user to the group, and then click the OK button.
1.8 domain environment
If your host has joined the domain, please log on to this computer with a local administrator account, and then add the domain users who want to log on to the cloud terminal to the local remote desktop user group.
1.9 change power mode
Windows 10 system will automatically start the sleep mode after being idle for a period of time by default, which is very practical for computers and can achieve the purpose of energy saving. But for the cloud terminal, it can't connect to the host, so we need to change some options in power mode.
Enter power in the search box on the right side of the Start menu, and then select the Edit Power Plan option.
Click Change Advanced Power Settings in the figure below.
Change the two options in the figure below (setting the value to 0 means never), and click OK to take effect.
1. 10 theme selection
For L-series /M300/MX-series users, it is recommended to use Windows classic themes under the operating system of Windows 7/Server2008R2/Server2012/Server2016, or choose your favorite theme and change the background of Windows desktop to solid color, so as to maximize the display effect when the application is maximized/minimized. RX series and vSpace Pro client users can freely choose the theme background, which is not affected by this.
Note: There is no classic theme under Windows 10 operating system, but you can change the desktop background to a solid color.
1. 1 1 Change the login mode.
By default, all users will be listed in the login interface on the left after the users of N-computing cloud computer log in to the Windows 10 system, as shown in the following figure:
The number of users presented in the figure is still relatively small. If there are many users, the user list will occupy the left screen. So how can I set it up to return to the classic login interface? (The figure below shows the classic login interface)
Log in to the vSpace host as an administrator user, right-click the Windows icon in the lower left corner of the desktop, and then select Run.
Enter secpol.msc and click OK, as shown in the following figure:
Expand the local policy >: security option on the left, and set "Interactive Login: Don't Show Last Login" as "Enabled" on the right. Click OK to take effect. Then the cloud terminal logs off and logs on again, which will become a classic login interface.
1. 12 disables the ALT+F4 shutdown option.
Pressing alt+f4 on the terminal will pop up the option to close the window, as shown in the figure below.
Even users belonging to the user group can restart or shut down here, which is obviously not allowed for the vSpace server.
You can set this setting to shield this hidden danger. The user pressing alt+f4 is equivalent to logging off, and there is no option to close windows.
Control Panel-Local Security Policy ... (N words are omitted here) See the figure below. It is recommended to delete only one user administrator and then restart the system to take effect.
Domain users, you should change the domain security policy. Create a new OU, add domain users who log in to NC, and set policies for this OU.
1. 13 moves desktop data from drive c to drive d.
Important tips
Be sure to choose a new folder and follow the tutorial, otherwise it may lead to file confusion.
You can't turn it off or restart it during moving, otherwise you may lose files!
If you want to change it back, in the same way, click Restore Defaults and move the desktop to drive C. ..
Preparation: Before the operation, we must first find out this pc (whether the small partner who uses Win 10 has only one recycle bin at the beginning).
Right-click the desktop, select Personalization-Theme-Desktop Icon Settings, check the computer, and click OK.
Looking back at the desktop, do you have this pc?
After the preparatory work is completed, double-click to open this pc, right-click the desktop and select "Properties".
Switch to the Location tab and click Move.
For example, if you want to move your desktop to drive D, first click drive D, then create a new folder, select the new folder, and then click Select Folder.
Then click OK.
Then wait patiently for the system to process it automatically. After the processing is completed, the files we stored on the desktop, including folders, will be on drive D. After moving the desktop out of drive C, we can save whatever we want, and we are no longer afraid that drive C is full!
1. 14 The system cannot be shut down or restarted.
Question:
Some users reported that vSpace Pro 10 (old version) was installed under the Windows 10 operating system, and then they couldn't find the power-off restart/sleep option in the start menu or other ways, so they could only achieve the above operations through commands, which was too troublesome for users.
Reply:
This problem does exist and is obviously a bug. At present, it can be circumvented in the following ways, but it should be noted that the n-n computing terminal can also be turned off/restarted/slept, so it is recommended to add only administrator users.
Operation method:
Open Control Panel-Administrative Tools-Local Security Policy in turn, or enter secpol.msc during operation.
Expand Local Policies-User Rights Assignment, find the "Shut Down System" option on the right, and double-click to open it.
Add users who need to shut down/restart/sleep, and click OK.
Log off the current user, log in with the user you just added, and then you will see the relevant options.
Chapter 2 Optimizing Windows 7 Operating System
2. 1 Create user (workgroup environment)
The user created here refers to the user of Windows system. Right-click Computer on the desktop and select Manage.
Pop up the computer management window, expand the local users and groups on the left, and right-click the user to select a new user; Then enter the user name and password, and check the two options in the figure below.
After creating the user, click the Group option on the left, and then double-click the Remote Desktop User Group on the right.
Add the previously added user to this group.
2.2 change the power mode
By default, Windows 7 system will automatically turn on the sleep mode after being idle for a period of time, which is very practical for computers and can achieve the purpose of energy saving. But for the cloud terminal, it can't connect to the host, so we need to change some options in power mode. Open the Control Panel-Power Options in turn, select Balance, click Change Plan Settings, and continue to click Change Advanced Power Settings. The change options are shown in the following figure (a setting value of 0 means never change):
2.3 Change the login method
By default, after the cloud terminal logs in to Windows 7 system, the login interface displays all users, as shown in the following figure:
The number of users in the picture is still very small. If there are many users, the user list will fill the whole screen. So how can I set it up to return to the classic login interface? The following figure shows the classic login interface:
1. Log in to the vSpace host as an administrator user, click Start Menu-Run, enter secpol.msc, and click OK, as shown in the following figure:
2. expand computer settings >; Windows Settings > Security Settings > Local Policy > Security Options, set Interactive Login: Don't Display Last Login Name to Enabled, and click OK to take effect. Then the cloud terminal logs off and logs on again, which will become a classic login interface.
2.4 Enable Kiosk mode (important)
The default win 7 system does not support the bootloader. (Note: XP/2003/2008 R2 does not have this problem. )
Win 7 supports Kiosk mode:
Click Start Menu-Run, enter regedit, and expand it in turn.
HKEY _ LOCAL _ MACHINE \ SYSTEM \ current Control set \ Control \ Terminal Server
New DWORD key value HonorLegacySettings
Set the value to 1.
2.5 AppLocker application control strategy
AppLocker, or "application control policy", is a new security function in Windows 7 system.
Convenient and efficient, for example, you can easily configure a program to run above a certain version, which can save a lot of strategy maintenance time for IT personnel. With AppLocker administrator, it is very convenient to configure, so as to realize which programs, files and scripts users can run on the computer. Because AppLocker is managed and configured based on group policy, we can easily deploy it to the whole network environment once and for all. You can also restrict the operation of the company's products through the company name, such as restricting the application of Tencent, so qq, qqgame and so on. Unable to operate.
How to run Applocker
Execute Start → Run, and enter gpedit.msc to open the Group Policy Editor. In the left pane, navigate to Computer Configuration →“Windows Settings → Security Settings → Application Control, and you can see the AppLocker Group Policy Configuration Item.
AppLocker includes three functions:
1, executable program control;
2, installation program control;
3. Script control.
Some friends who have used the software restriction strategy under XP may be afraid, but in fact AppLocker is very easy to use.
Applocker usage method
This first step is very important, which determines whether your AppLocker will take effect. Right-click Computer → Management → Service, find the application identity service, and set it to start automatically.
Execute Start → Run, and enter gpedit.msc to open the Group Policy Editor. In the left pane, navigate to Computer Configuration →“Windows Settings → Security Settings → Application Control, and you can see the AppLocker Group Policy Configuration Item.
Right-click the executable rule, the installer rule and the script rule respectively to create the default rule.
Most people's programs are not installed under C:\ProgramFiles\*. What should I do? Right → Create a new rule in Executable Rule and Script Rule (the installer rule can be kept by default), and select Allow or Reject. Users can keep the default Everyone (that is, any user) → Next, browse to your program or directory (preferably a directory, just need a rule, such as d:\ProgramFiles\*)→ Create.
It's the first time to use AppLocker. After the above settings are completed, the machine must be restarted (logout is not allowed) before the policy can take effect.
The meaning of Applocker default rule
Any user can run all executable files and scripts under c:\windows\* and C:\Program Files\* (including C:\Program Files(86)\* if it is a 64-bit system); Authorized administrators can run programs anywhere.
Note: Under this default rule, if you double-click any program outside c:\windows\* and C:\Program Files\*, the program will not run. You can only right-click the program to run as an administrator.
Most people's programs are not installed under C:\ProgramFiles\*. What should I do? Right → Create a new rule in Executable Rule and Script Rule (the installer rule can be kept by default), and select Allow or Reject. Users can keep the default Everyone (that is, any user) → Next, browse to your program or directory (preferably a directory, just need a rule, such as d:\ProgramFiles\*)→ Create.
It's the first time to use AppLocker. After the above settings are completed, the machine must be restarted (logout is not allowed) before the policy can take effect.
You're finished. Now use any website on IE and double-click any virus, as long as you don't put the virus in the path allowed above.
Question 1: Copy Trojan horse to system directory? It's impossible. When UAC is turned on, the current user and its running program can't read the underlying disk in the so-called ad behavior in HIPS and can't write to the system disk except the user directory, so UAC can be said to be a HIPS with strict rules.
Question 2: I have some uncommon portable applications, such as registration machine and MD5 verification program, which are not put in the program installation directory, and I have not created permission rules in AppLocker, so will it be troublesome to use them? The answer is: it's no trouble at all, just right-click and run as an administrator.
For example, if you need to restrict your child from running a certain game, you can create rules to prevent the game from running through AppLocker. If the game doesn't need to be installed, judging from the "path", moving the game to other directories obviously can't avoid the problem that children can run the game, but it doesn't matter, just create a "file hash" type rule. In this way, no matter where the game goes, as long as the rules find that the file hash is the same value, it will be ruthlessly stopped from running.
2.6 Enable Clear Type Fonts
Description: When logging into Windows 7 or 2008 R2 system, I feel uncomfortable with fonts and have a strong burr feeling.
A: This is because the default vSpace 8 (old version) does not support the Clear Type font. Enable Clear Type font in NComputing cloud terminal. You won't remember this choice after cancellation, and you have to change it again every time. At this point, you need to make the following settings:
1. Open the vSpace management console on the host, expand "nCalculate vSpace" on the left, and then click System Settings. Find "Advanced" on the right and click.
2. Change "font smoothing" to "Yes" in the figure below; Click Create Profile.
3. Take the following figure as an example. Enter a font in the Enter Profile Name: box, and then click Create Profile.
4. Change all three options in the box below to "Font". Log out and log back in on the n computing side. The default is Clear Type font.
2.7 Installation failed. You need administrator rights to install this software.
In some cases, when you try to install vSpace software on Windows 7 or Windows 8, you will receive an error message: "You need administrative rights to install this software. Installation failed. . "This can happen even if you are logged in as a domain administrator. You must be a local system administrator to install vSpace.
The following steps allow you to install from the command line. (Install on Windows 7 or Windows 8:)
You must have administrative rights to install vSpace Server to Windows 7 or Windows 8. However, unlike Windows Server 2008 R2, in Windows 7 and 8, the actual administrator account is not enabled by default. Therefore, even if you have recorded users who are members of the administrators group, you still don't have enough "administrative rights" to install the vSpace server, and the MSI installer will generate an error message: "You need administrative rights to install this software. Installation failed.
To check which user account is the correct user account to install vSpace Server, open a command prompt and call the following command:
Wmic user account gets name, sid, status.
Name SID status
Administrator s-1-5-21-36864651-1345607283-3162306831
Guest s-1-5-21-36864651-1345607283-3162306831
Home group user $ s-1-5-21-36864651-kloc-0/345607283-3162306831-.
John S-1-5-21-36864651-1345607283-3162306831-
Paul s-1-5-21-36864651-1345607283-3162306831
For vSpace Server installation, you must select an account with a security identifier (SID) ending in -500 (the "Admin" account in the above example). The account cannot be locked (downgraded). If necessary, unlock the account and set a password for it. To start an administrative command prompt for the selected administrative user, call the following command (when prompted, you must enter the password of the administrative user):
Operation mode/user: administrator cmd.exe.
To ensure that the administrative command prompt is started for the correct user, call the following command:
Msiexec/i installation -filename.msi
Your installation should be fine now.
Chapter 3 Optimizing Windows 20 12 Operating System
3. 1 How to disable screen locking in Windows 20 12?
When enterprises ask other original engineers to solve system software problems remotely or on site, they may be troubled by the default screen timeout locking setting of Windows. Because engineers will not operate the computer for some reasons when troubleshooting problems, but when they come back, they find it necessary to let it re-enter their user name and password, and it is very troublesome to let it help them enter their user name and password every time they run out of time. However, because the user name and password are used by the company management, they cannot be directly told to the engineer. In this case, the conceivable way is to disable the lock timeout function. So how to set it up?
Take Windows20 12 as an example to introduce the specific setting method:
1) Log in to Windows20 12, click the Start menu, and enter regedit to open the registry;
2) Find the path in the registry:
HKEY _ local _ machine \ system \ current control setting \ control \ power supply \ power supply setting \ 7516b95f-f776-4464-8c53-06167f40cc99 \ 8e4b3a5-6868-48c2
3) Select "Attribute" in the list on the right and right-click to change the value to "2";
4) enter the control panel->; Power options-> Change plan settings-> Change the advanced power settings, select High Performance (Active) in the pop-up power options window, and find the display-> The central lock displays the option of closing timeout, and the option of modifying settings (minutes) is 0. Click Apply, and then click OK to save the settings.
Note: Changing to "0" means that the monitor is set to never turn off when the screen is locked.
5) In addition, it is necessary to pay attention to the screen saver settings of end users, and it is best to turn them off.
Installation completed
3.2 Delete the n calculation item in the Event Viewer.
Answer: Start menu-Run, enter regedit and open the Registry Viewer. Expand the following options HKEY _ local _ machine \ system \ current control set \ service \ event log subitem, find the n calculation item under the event log subitem, and right-click and select Delete. As shown in the figure
3.3 Add desktop experience and audio and video experience to the server operating system.
In the Add Roles and Functions Wizard, you can add a desktop experience and a high-quality Windows audio and video experience to the server 2008R2/server2012/server2016 operating system. The desktop experience function can select themes and settings like the Windows 7 system. Windows audio and video experience is to add Windows Media Player video player to the system.
Please click to enter a picture description.
Original address:? Web page link