Last time I did a friend asked me to publish the specific gpedit.msc settings. I will do a few important settings according to my experience. For reference (must combine my "to" to "to manage system", cut Don't break chapter decision)
First use the administrator login to create an icon on the desktop, then cut the icon to the C: / Documents and Settings / All Users / Desktop (for the user to run the program)
Run gpedit.msc, the contents of the user configuration settings are as follows:
Management Template / Windows Components / Internet Explorer
1. Disable change homepage
Management Template / Windows Component / Internet Explorer / Internet Control Panel
1. Disable regular page
2. Disable security page
3. Disable content page
4. Disable connection page 5. Disabler page
6. Disable advanced page
Management Template / Task Bar and [Start] menu
1. Disable "Logout" Add to [Start] menu
2. Prohibit change the taskbar and [Start] menu settings
3. Recise the recently opened documentation when exiting
Management Template / Control Panel / Display
Hide Background Tab
2. Prohibit change wallpaper
3. Hide Screen Conservation tab
4. Hide Settings tab (this is mainly to prevent user adjustment resolution, can be considered according to actual conditions)
Management Template / System / Login / Logout
1. Disable "Lock Computer"
2. Prohibit change password
3. Prohibit logout
4. Run these programs when the user logs in (put the C language source code in the article "to" "to" "to manage the system" in the EXE file is named config_2000.exe stored below the Winnt folder, and then double click " Run these programs when logging in "-> Enabled -> Display -> Add ->" Enter Config_2000.exe "-> OK)
The above is the configuration of gpedit.msc. According to my 3 months test experience, you should also pay attention to the following questions:
1. Set the folder "C: / Documents and Settings / [Ji Sheng Software] / Desktop" folder to read only
2. In Computer Management -> Services Disable the following services
Automatic Updates
DHCP Client (optional)
DNS Client (optional)
Messenger (required)
Print Spooler
Remote Registry Service
RunaS Service
SMTP
Task Scheduler
TCP / IP NetBIOS Helper Service
The above service is completely unnecessary for Internet cafes users, and according to their own actual situation, the other unnecessary service is closed according to their own actual situation. In the environment I configured, I closed unnecessary service, started to take a good WINDOWS 2000 60 Multi-m memory, huh, huh, the above work is installed in the same way, so that your 2000 runs soon, there is also a note c: / this directory to be read-only, otherwise bad users modify The Boot.ini file is not good! ! !
The system has the following advantages over 98:
Security. If you don't remove your computer, you can do the latest security patches. I am afraid that you can't find a method of cracking. Similarly, all viruses, including CIH, there is no way, don't believe you can try yourself to run Trojan
2. Stability. Don't say it, if users often come to you, and your computer runs stable enough, what do you want, who is willing? Moreover, using this system guarantees all user password security (except for someone else, except for passwords)
Current disadvantages:
1. The law is often wrong. Some users often add to delete input methods, causing some input methods to be added by users, and most users who come online online will not add input methods themselves.
2. Some software that needs to modify the system is unable to run. For example, VB, etc.
