Flexible application group policy Make your Win XP more secure

        The Group Policy program is located in the C:\\WINNT\\SYSTEM32 folder and is named gpedit.msc. When starting Group Policy, first click the [Start] button, select the "Run" command, enter the "gpedit.msc" command in the "Run" text box, and then click [OK] to start the Windows Group Policy.

Let's take a look at the application example of Windows XP Professional Local Group Policy:

Prohibit changing the display properties

Right click on the blank space of the Windows desktop. Select "Properties" to enter the "Display Settings" dialog box, you can set the desktop theme, desktop background, screen saver, display settings, etc. If you do not want others to change the settings at will, you can use Group Policy to Hidden. To do this, expand the [User Configuration]→[Administrative Templates]→[Control Panel]→[Display] branch in the Group Policy console, enable the Hide Desktop tab, hide the theme tab, hide the Protector tab, and hide the settings options. Cards and other items can also be personalized for desktop themes, screensavers, and more.

Do not change the start menu and taskbar

We can prohibit users from changing the settings of the start menu and taskbar after entering the computer through Group Policy. Expand the [User Configuration]→[Administrative Templates]→[Taskbar and Start Menu] branch, and double-click the “Block Changes” taskbar and Start Menu 'Settings' policy in the right pane, in the pop-up Settings dialog box. Click the "Enabled" option box. Later, when we right-click on the Start menu or the taskbar, an error message will appear stating that a setting has disabled this operation.

Disabling Registry Manager

To prevent others from modifying the registry file after entering the computer, you can disable access settings in the Registry Editor in Group Policy. When setting, expand [User Settings] → [Administrative Templates] → [System] branch, then double-click the "Block Access to Registry Editing Tool" policy in the right window, and then select "Enable" in the pop-up dialog box.

Restricting the use of applications

If you have multiple users on your computer and want to limit the applications that users can run, you can also Set in Group Policy. When setting, expand [User Configuration] → [Administrative Template] → [System], then double-click the "Run only licensed Windows application" policy in the right window, then select the "Enable" option in the pop-up dialog box to activate Below the "Application List" (pictured), click the [Display] button here, a "Show Content" dialog box pops up, click the [Add] button here to add the application that is allowed to run. In the future, general users can only run programs in the Allowed Applications List.

Disabling Add/Remove Programs

Hide the Add/Remove Programs option on your computer to prevent other users from installing them at will. Uninstall the app. In the group policy, expand [User Configuration]→[Administrative Templates]→[Control Panel]→[Add/Remove Programs] in the group policy, double-click the “Delete Add/Remove Programs” policy on the right, and “Delete Add/Remove” pops up. Click the "Enable" option in the Programs dialog box, then click [OK]. In addition, in the "Add/Remove Programs" branch, you can also add "Add New Programs", "Add Programs from CD-ROM or Floppy Disk", "Add Programs from Microsoft", and "From" in the Windows Add/Remove Programs item. The network add program and other items are hidden, and the function of protecting system files and applications in the computer is started.

Prohibit the creation of new dial-ups

If you don't want others to dial up on your computer, Group Policy can do the same. To block "Create a new connection", first expand the [User Configuration]→[Administrative Template]→[Network]→[Network Connection] branch in the group policy; double-click the “No Access to New Connection Wizard” in the right window. A setting dialog box pops up. At this time, in the setting dialog box "Enabled" single option, click [OK]. With this setting, "Create a new connection" does not appear in the "Network Connections" folder and the "Start Menu".

How about the other users through the above settings will no longer be swayed by our computer!