Summary of anti-black experience of Windows system (2)

Third trick, disable the "Start" menu command

In Windows 2000/XP, the group policy function is integrated. Group software can be used to set various software, computer and user policies in some aspects. Enhance the security of the system. Run the "Start → Run" command, enter "gpedit.msc" in the "Open" field of the "Run" dialog box, and then click the "OK" button to start the Windows XP Group Policy Editor.

In the "Local Computer Policy", expand the "User Configuration → Administrative Templates → Taskbar and Start Menu" branch, and provide the "Taskbar" and "Start Menu" in the right window. Strategy.

When the Start menu command is disabled, in the right window, the utility group, the "My Documents" icon, the "Documents" menu, and the "My Network Places" in the "Start" menu are removed. "Icons and other strategies. When cleaning up the "Start" menu, you can enable the policy corresponding to the menu item you don't need. For example, to delete the "My Documents" icon, the specific steps are:

1) In the policy list In the window, double-click the "Delete my document icon from the Start menu" option with the mouse.

2) In the "Settings" tab of the pop-up window, select the "Enabled" radio button and click "OK".

Fourth, User Configuration→Administrative Templates→Desktops branch, you can display the corresponding policy options in the right window.

1) Hide the desktop system icon

If you hide the system icon on the desktop, the traditional method is to achieve the modification by using the registry. This will inevitably cause certain risks. You can use the Group Policy Editor to quickly and easily achieve this goal.

To hide the “My Network Places” and “Internet EXPlorer” icons on the desktop, just enable the “Hide My Network Places icon on the desktop” and “Hide the Internet EXPlorer icon on the desktop” policy in the right window. Yes, if you hide all the icons on the desktop, just enable "Hide and disable all items on the desktop".

When "Delete my document icon on desktop" and "Delete desktop" are enabled After the "My Computer Icon" option, the "My Computer" and "My Documents" icons will disappear from your desktop. If you don't like the "Recycle Bin" on the desktop. Icons, then you can also delete it by enabling the "Remove Recycle Bin from Desktop" policy item.

2) Prohibit some changes to the desktop

If you don't I hope that others can change the settings of the computer desktop at will. Please enable the "Do not save settings when exiting" policy option in the right window. When you enable this setting, other users can make some changes to the desktop, but some changes, Locations such as icons and open windows, the location and size of the taskbar cannot be saved after the user logs out.

Fifth, no access to the Control Panel

If you do not want other users to access The computer's control panel, you just run the Group Policy Editor and expand the "Local Computer Policy → User Configuration → Administrative Templates → Control Panel" branch in the left window, then enable the "No Access Control Panel" policy in the right window OK.

This setting prevents the control panel program file from starting. As a result, others will not be able to launch the control panel or run any controls. Panel project. In addition, this setting will remove the Control Panel from the Start menu, and this setting also removes the Control Panel folder from Windows Explorer.

Tip: If you want properties from the context menu Select a "Control Panel" item in the project, a message will appear stating that this setting prevents this operation.

Sixth, setting user permissions

When multiple people share a computer, To set user rights in Windows XP, you can do the following:

1) Run the Group Policy Editor program.

2) Expand the computer step by step in the left window of the editor window. Configuration → Windows Settings → Security Settings → Local Policies → User Rights Assignment branch.

3) Double-click the user right that needs to be changed, click the "Add User or Group" button, then double-click the user account you want to assign to the permission, and finally click the "OK" button to exit.