Windows operating system group policy application Raiders (1)

First, what is group policy

(a) What is the use of group policy?

Speaking of group policy, you have to mention the registry. The registry is a database for saving system and application software in Windows. As Windows functions become more and more abundant, there are more and more configuration items in the registry. Many configurations are customizable, but they are published in every corner of the registry. If it is manually configured, it can be difficult and complicated. The group policy integrates the important configuration functions of the system into various configuration modules for the management personnel to directly use, thereby achieving the purpose of conveniently managing the computer.

To put it simply, group policy is to modify the configuration in the registry. Of course, Group Policy uses its own more complete management organization method, which can manage and configure the settings in various objects, which is far more convenient, flexible, and more powerful than manually modifying the registry.

(2) Version of Group Policy

Most Windows 9X/NT users may have heard of the concept of “system policy”, and most of what we hear now is ““ Group Policy & rdquo; this name. In fact, Group Policy is a more advanced extension of the system strategy. It is developed by Windows 9X/NT's "System Strategy". It has more management templates and more flexible settings and more functions. Currently, it is mainly Used in Windows 2000/XP/2003 systems.

The early system policy was run by defining a specific .POL (usually Config.pol) file through a policy management template. When the user logs in, it overwrites the settings in the registry. Of course, the System Policy Editor also supports modifications to the current registry, as well as connecting to a network computer and setting up its registry. Group Policy and its tools are directly modified from the current registry. Obviously, the network function of Windows 2000/XP/2003 system is its biggest feature, its network function is naturally indispensable, so Group Policy tool can also open the computer on the network for configuration, and even open an Active Directory. The object (that is, the site, domain, or organizational unit) and set it up. This was previously impossible with the "System Policy Editor" tool.

Whether it is system policy or group policy, their basic principle is to modify the corresponding configuration items in the registry, so as to achieve the purpose of configuring the computer, but some of their operating mechanisms have changed and expanded.

II. Administrative Templates in Group Policy

Several .adm files are included in the Windows 2000/XP/2003 directory. These files are text files called “Administrative Templates”, which provide policy information for Group Policy Management Template projects.

In Windows 9X, the default admin.adm administrative template is saved in the same folder as the Policy Editor. In the inf folder of the Windows 2000/XP/2003 system folder, there are four template files under the default installation, which are:

1) System.adm: Installed by default in &ldquo ; group policy & quoquo; in the system settings.

2) Inetres.adm: Installed by default in “Group Policy  for Internet Explorer policy settings.

3) Wmplayer.adm: for Windows Media Player settings.

4) Conf.adm: for NetMeeting settings.

In the Group Policy console of Windows 2000/XP/2003, you can add “policy template" multiple times, while under Windows 9X, only one policy template is currently open. The following describes how to use a policy template. First use the following in the Windows 2000/XP/2003 Group Policy Console:

First run the "Group Policy" program, then select "Computer Configuration" or "User Configuration" under "User Configuration" Manage template & rdquo;, press the right mouse button, select “ Add /Delete Template & rdquo; in the pop-up menu, the dialog box shown in Figure 1 will pop up.

Figure 1

Then click the “Add” button to select the appropriate .adm file in the pop-up dialog box. Click the "open" button to open the selected script file in the System Policy Editor and wait for the user to execute.

After returning to the "Group Policy" editor interface, open the directory "Local Computer Policy → User Configuration & Rarr; Administrative Templates", and then click the corresponding directory tree, you will see The configuration items generated by our newly added management template (in order to facilitate the examples in the later part of this article, we can add other template files except the default template file).

Let's look at the Group Policy Editor under Windows 9X. First select “Close" in the “File" menu in the Group Policy Editor to close the current script, then select “Template” in the “Options menu to pop up as shown in Figure 2. The dialog shown.

Figure 2

Then click the “Open Template” button, select the corresponding .adm file in the pop-up dialog box and click the “Open” button to edit it. Opens the selected script file and waits for the user to execute.