用组策略打造系统铜墙铁壁（国外英文资料）.docVIP

用组策略打造系统铜墙铁壁（国外英文资料） This set of policies can remove ICONS from the my computer and Windows explorer that represent the selected hardware drivers. And all drives represented by the driver number do not appear on the standard open dialog. Open the group policy console to user configuration, management template - Windows components - Windows explorer in the hidden these specified in the my computer drive and enable this strategy, and in the following list box to select a drive or a few drives. Tip: this policy only deletes the drive icon. Users can still access the contents of the drive in other ways. The policy does not prevent users from accessing these drives or content using programs. And it doesnt prevent users from using disk management to view and change drive features. Prevent from my computer access drive (Windows 2000 / XP / 2003) This policy makes it impossible for users to view the contents of the drives selected in my computer or Windows explorer. It also prohibits the use of running dialog boxes, mirror network drive dialogs, or Dir commands to view directories on these drives. Open the group policy console to user configuration, management template - Windows components - Windows explorer in the to prevent from a trip to the my computer drive and enable this strategy, and in the following list box to select a drive or a few drives. Note: these represent the specified drive icon will still appear in the my computer, but if the user double-click the icon, a message will appear to explain Settings prevent this operation. These Settings do not prevent users from accessing local and network drives using other programs. And they dont prevent them from using disk management to view and change drive features in plug and play. Use a command prompt (Windows 2000 / XP / 2003) Under the Windows 2000 / XP / 2003, we can run the CMD. Exe into the command prompt, and can continue to run some DOS command and other command-line program. For security reasons, some sy