A few wonderful uses of Windows 7 system group policy

The registry is a database for saving system and application software in Windows system. With the increasing functionality of Windows system, there are more and more configuration items in the registry. In fact, many configurations can be customized. However, these configurations are published in all corners of the registry, and it is very difficult and complicated to configure manually. And "Group Policy" is to integrate the important configuration functions of the system into various configuration modules for the management personnel to use directly, so as to achieve the purpose of convenient management of the computer. In other words, modifying “group policy" is to modify the configuration in the registry. Below we use the "Group Policy" under Windows 7 system to complete some tasks that seem difficult to complete.

1. Let “Run”Show in the Start Menu

Friends who are familiar with DOS often call the command line window on a black background for dos operation, but the Windows 7 start menu However, there is no trace of the "running" item, although the "Start" menu can be used as "Run" box, or click “ Start → All Programs & Rarr Attachment & rarr; run & rdquo;, can open the "run" window, but even the first test Windows 7 system "old bird" rdquo; also feel uncomfortable. At this time, we can click “Start”→All Programs→Accessories→Run, enter gpedit.msc in the Open “Run” dialog box and press Enter to start the “Group Policy” dialog box. . In the left pane of the "Group Policy" dialog box, click “User Configuration →Administrative Templates →Start Menu and Taskbar", then double-click in the right pane to add the run command to [Start] menu & rdquo; item, in the open "Add the run command to the [Start] menu properties & rdquo; dialog box under the "Settings" tab, select "ld"; Enabled & rdquo;, then click & ldquo; & rdquo; Exit, so "Run" & rdquo; will appear in the "Start" menu.

2. Close “Balloons&##>

Sometimes when you are working, a prompt pops up, forcing you to click, which is very annoying. In fact, in the left pane of the "Group Policy" dialog box that opens, click "User Configuration & Rarr; Administrative Templates & Rarr; Start Menu and Taskbar", and then double-click in the right pane. ; close all balloon notifications, select "“ Enabled" in the "Set all" tab of the "Close all balloon notification properties" dialog box, and then click "OK" to exit. You can turn off the annoying "balloon notification".

3. Record the last time you logged into Windows 7 system

Windows 7 system can record our login information, so you can log in twice and twice before logging in to the system. In contrast, if the time is found to be inconsistent, it means that someone has tried to log in to your account illegally. In fact, in the left pane of the Opened Group Policy dialog box, click “Computer Configuration & Rarr; Administrative Templates & Rarr; Windows Components & Rarr; Login Options & rdquo;, then double-click in the right pane The "Show information about previous logins during user login" item is turned on in the "Show information about previously logged in during user login" dialog box under the "Settings" tab under the "Settings" tab. ”, then click "OK" to exit. This way, the next time you start your computer, Windows 7 will prompt you for the last login time before the user enters the system desktop.

4. Rename Administrator

Everyone knows that the system administrator account Administrator has the highest authority, and because of this, some viruses and Trojans always use this account name that everyone knows. In the case of manufacturing, in fact, we can also change the name of it, so that those outsiders can not start. In the left pane of the Open Groups dialog box, click “Computer Configuration →Windows Settings →Security Settings →Local Policies →Security Options”, then double-click in the right pane “Account: Rename System Administrator Account” item, in the newly opened "Account: Rename System Administrator Account Properties" dialog box, you can change the system administrator account Administrator name.

5. Restricting and hiding disk partitions

In order to make it easy to use, we sometimes store some data belonging to personal privacy levels on public computers shared by multiple people, in order to ensure the security of these data. Data protection can be achieved by limiting or hiding disk partitions.

In the left pane of the Opened "Group Policy" dialog box, click “Local Computer Policy → User Configuration & Rarr; Administrative Templates & Rarr; Windows Components & Rarr; Windows Explorer & rdquo ;, then double-click to the right pane to prevent the item from ‘My Computer & rsquo;Access Drive", then open the “ Prevent from ‘My Computer’Access Drive Properties”Setup Window Select “Enabled”, select “Enabled”, the drop-down list for selecting a drive will appear below, select the drive we wish to limit and click "OK".

If you want to turn off all drives, including CD-ROM drives, you can check "Restrict all drives". Under "Windows Explorer", there are also "Deleted & lsquo; these specified drives in My Computer & rsquo;", this policy can hide the specified drive, but this strategy can be broken through IE browser In the address bar, type C:\\Enter to open the hidden C drive partition. For this reason, we still use “limit"

6. Give “ Turn off the computer & rdquo; add a "lock"

Sometimes you need to temporarily leave the computer in the unit, in order to prevent others from peeking at the information on the computer, we can Use the "WIN+L” shortcut to lock the computer, but on the lock page you can also execute “ turn off the computer", although others can't tamper with the machine, but can shut down, it is necessary to give "close" Computer & rdquo; add a "lock”. In the left pane of the Opened Group Policy dialog box, click “Computer Configuration →Windows Settings →Security Settings →Local Policies →Security Options”, then to the right window Find and double-click "Shutdown: Allow shutdown before login" item, set its property to "ldquo" in the pop-up properties dialog box, and click "“OK".

7. Prevent passwords from being guessed

When our Windows 7 user password settings are relatively simple, it is easy for an illegal user to retry by repeatedly naming "guess" System, in fact, we can limit the number of times "guess". When a user attempts to log in to the system and enters the wrong password for a certain threshold, the account is automatically locked. Before the account lockout period expires, the user will not be available unless the administrator manually unlocks the account. In the left pane of the Opened "Group Policy" dialog box, click <; Computer Settings & Rarr; Windows Settings & Rarr; Security Settings & Rarr; Account Policies & Rarr; Account Lockout Policy & rdquo;, then to the right pane In the "Account Lockout Threshold" item, here you can set the number of failed login attempts for the user account to be locked. The value is between 0 and 999. The default value is 0. The number of logins is unlimited. We can change to 3 or 10.