域组策略--+控中组策略基本设置.docVIP

域控中组策略基本设置 计算机配置：要重启生效 用户配置：注销生效 策略配置后要刷新：gpupdate /force 组策略编辑工具！ -----gpmc.msi （工具） 使用：运行---gpmc.msc 如下键面： 文件夹重定向： 1.在域控建立一共享文件夹,权限放到最大（完全控制，无安全隐患！） 2．域账户用户登录任一台机器都能看到我的文档里的自己的东西！ 禁止用户安装软件： 给域用户基本权限（Domain user），但有时基本应用软件也不能运行！ 把域用户加入到本地power user 组可以运行软件！ 域用户添加Power user组 用本地用户登录机器查看！ 禁止卸载： 1.权限domain user + 管理模板（相当于改动注册表！！） 2.再把控制面板里的“添加删除程序”禁用 禁止使用USB: 工具（程序模板usb.adm）,拷到C:\WINDOWS\inf\usb.adm 3. 4. 5. 6. 7.客户端机器重启生效 禁止绿色软件安装，如：迅雷，QQ等--------建立哈希规则： 建立了哈希规则后不论此软件放在机器的任何路径，都将被禁止！ GPO软件分发： 工具：Advanced Installer 制作MSI格式文件 在DC上建立一共享文件夹。把*.MSI格式文件放入，附Authenticated 可读，Admini 完全控制 编辑组策略-(用户配置-(软件安装-右击(\\(DC的IP\共享名) 软件安装 右击(程序包-(*.MSI (已发布\已指派 停止域客户端的防火墙： 右击，域(计算机-(Windows-设置(安全设置-(系统服务(windows firewall 漫游： 1.账号在客户机上登录 2.在server上建议账号空间 3.server在客户机上登 4.server上设主文件 education for all staff involved in the construction, firmly establish the concept of quality finished product protection; According to the construction site, the importance to set a quality finished product protection in the reward and punishment system, to reward the good part (once a month), on the part of financial penalties and rectification; Reasonable arrangements for the construction program, and install cross long items such as running the turbine base level layer to be installed after the end of construction; When the erection of scaffolding, workers must be handled with care, steel pipe, fasteners, tools must be manual transmission prohibited high throw, throw, prevent smashed equipment, insulation materials, etc. 7.3 General protection normal protection apply to all products, and generally include the following related content: keep identity intact, complete; Ensure products are lost, the appearance of damage; Necessary from dust, moisture, rust, seal, cover; Regular inspections, simple test; Climate of temporary protection. In addition to the regular maintenance of some equipment or parts, also accordi