7 strokes anti-black tricks to ensure that Windows is not attacked (2)

Third trick: disable the "Start" menu command

In Windows 2000/XP, the group policy function is integrated, through group policy Various software, computer, and user policies can be set to enhance the security of the system in some way. Run the "Start → Run" command, enter "gpedit.msc" in the "Open" field of the "Run" dialog box, and then click the "OK" button to start the Windows XP Group Policy Editor.

In the "Local Computer Policy", expand the "User Configuration → Administrative Templates → Taskbar and Start Menu" branch, and provide the "Taskbar" and "Start Menu" in the right window. Strategy.

When the Start menu command is disabled, in the right window, the utility group, the "My Documents" icon, the "Documents" menu, and the "My Network Places" in the "Start" menu are removed. "Icons and other strategies. When cleaning up the "Start" menu, you can enable the policy corresponding to the menu item you don't need. For example, to delete the "My Documents" icon, the specific steps are:

1) In the policy list In the window, double-click the "Delete my document icon from the Start menu" option with the mouse.

2) In the "Settings" tab of the pop-up window, select the "Enabled" radio button and click "OK".

Fourth trick: Disable desktop-related options

Windows XP's desktop is just like your desk, sometimes it needs to be organized and cleaned. With the Group Policy Editor, this work will be a breeze, as long as you expand the "User Configuration → Administrative Templates → Desktop" branch in the "Local Computer Policy", you can display the corresponding policy options in the right window.

1) Hide the system icon of the desktop

If you hide the system icon on the desktop, the traditional method is to use the method of modifying the registry, which will inevitably cause certain risks. The Group Policy Editor is a quick and easy way to do this.

To hide the "My Network Places" and "Internet EXPlorer" icons on the desktop, just hide the "Network Neighborhood icon on the desktop" and "Hide the Internet EXPlorer icon on the desktop" in the right window. The policy option is enabled. If you hide all the icons on your desktop, just enable "Hide and disable all items on your desktop".

When the "Delete my document icon on desktop" and "Delete my computer icon on desktop" options are enabled, the "My Computer" and "My Documents" icons will be taken from you. The computer desktop disappeared. If you no longer like the "Recycle Bin" icon on your desktop, you can also delete it by enabling the "Remove Recycle Bin from Desktop" policy item.

2) Prohibit some changes to the desktop

If you don't want others to change the settings of your computer's desktop at will, please put the "Do not save settings when exiting" policy option in the right window. Enabled. When you enable this setting, other users can make some changes to the desktop, but some changes, such as the location of the icon and open window, the location and size of the taskbar, cannot be saved after the user logs out.

The fifth trick: prohibit access to the "Control Panel"

If you do not want other users to access the computer's control panel, you just run the Group Policy Editor and expand in the left window. Local Computer Policy → User Configuration → Administrative Templates → Control Panel branch, then enable the No Access Control Panel policy in the right window.

This setting prevents the launch of the Control Panel program files, with the result that others will not be able to launch the Control Panel or run any Control Panel items. In addition, this setting removes the Control Panel from the Start menu, and this setting also removes the Control Panel folder from Windows Explorer.

Tip: If you want to select a "Control Panel" item from the properties menu of the context menu, a message will appear stating that this setting prevents this operation.

Sixth trick: setting user permissions

When multiple users share a computer, set user permissions in Windows XP, you can follow these steps:

1) Run the Group Policy Editor program.

2) Expand the "Computer Configuration → Windows Settings → Security Settings → Local Policies → User Rights Assignment" branch in the left window of the editor window.

3) Double-click the user right that needs to be changed, click the "Add User or Group" button, then double-click the user account you want to assign to the permission, and finally click the "OK" button to exit.