The strategy for preventing hackers from infringing Windows XP (2)

".

When the "Start" menu command is disabled, in the right window, the "Start" menu is removed. Policies such as the utility group, the "My Documents" icon, the "Documents" menu, the "My Network Places" icon, etc. When cleaning up the "Start" menu, simply enable the policy corresponding to the unneeded menu item, for example to delete The "My Documents" icon is an example. The specific steps are:

1) Double-click the "Delete my document icon from the Start menu" option in the Strategy List window.

2 In the "Settings" tab of the pop-up window, select the "Enabled" radio button, and then click "OK".

The fourth trick, disabled desktop related options

The Windows XP desktop is just like your desk, sometimes it needs to be organized and cleaned. With the Group Policy Editor, this work will be a breeze, just expand User Configuration → Administrative Templates in the Local Computer Policy → Face", you can display the corresponding policy options in the right window.

1) Hide the system icon of the desktop

If you hide the system icon on the desktop, the traditional method is to adopt Modify the registry to achieve this, which is bound to cause a certain degree of risk, you can use the Group Policy Editor to quickly and easily achieve this.

To hide the "My Network Places" and InternetEXPlorer icons on the desktop Just enable the "Hide Network Neighborhood Icon on Desktop" and "Hide InternetEXPlorer Icon on Desktop" policy options in the right window. If you hide all the icons on the desktop, just "Hide and disable the desktop." All items are "enabled."

When "Delete My Documents Icon on Desktop" and "Delete My Computer Icons on Desktop" are enabled, "My Computer" and "I" The "document" icon will disappear from your desktop. If you don't like the "Recycle Bin" icon on the desktop, you can also delete it. Enable the "Remove Recycle Bin from Desktop" policy item.

2) Prohibit some changes to the desktop

If you don't want others to change the settings of your computer desktop at will, please in the right window The policy option "I don't save settings when exiting" is enabled. When you enable this setting, other users can make some changes to the desktop, but some changes, such as the location of icons and open windows, the location and size of the taskbar. Cannot save after the user logs out.

The fifth trick, prohibit access to the "Control Panel"

If you do not want other users to access the computer's control panel, you just run the Group Policy Editor, In the left window, expand the "Local Computer Policy → User Configuration → Administrative Templates → Control Panel" branch, and then enable the "No Access Control Panel" policy in the right window.

This setting prevents the launch of the Control Panel program files, with the result that others will not be able to launch the Control Panel or run any Control Panel items. In addition, this setting removes the Control Panel from the Start menu, and this setting also removes the Control Panel folder from Windows Explorer.

Tip: If you want to select a "Control Panel" item from the properties menu of the context menu, a message will appear stating that this setting prevents this operation.

Sixth trick, set user permissions

When multiple users share a computer, set user permissions in WindowsXP, you can follow the steps below:

1) Run Group Policy Editor program.

2) Expand the "Computer Configuration → Windows Settings → Security Settings → Local Policies → User Rights Assignment" branch in the left window of the editor window.

3) Double-click the user right that needs to be changed, click the "Add User or Group" button, then double-click the user account you want to assign to the permission, and finally click the "OK" button to exit.

Seventh, Folder Settings Auditing

Windows XP can use auditing to track user accounts, login attempts, system shutdowns or restarts, and similar events used to access files or other objects. Audit files and folders under the NTFS partition ensure file and folder security. The steps for setting up auditing for files and folders are as follows:

1) In the Group Policy window, expand the "Computer Configuration → Windows Settings → Security Settings → Local Policies" branch in the right window step by step, and then Under the branch, select the Audit Policy option.

2) Double-click the "Audit Object Access" option with the mouse in the right window.

3) Right-click on the file or folder you want to review and select Popup