4 Xây dựng chính sách nhóm cho OU Hạn chế một số chức năng của người dùng Để tạo ra các hạn chế của một số thành phần trong windows ta tạo GPO để thiết lập các thành phần
này: B1 Tạo GPO
B2 Xây dựng GPO (Edit)
Để hạn chế cho IE
TƠI Teebe4 C®ee Tane E, Tum off managing Pop-up fitter level Hị : i i i
E) Prevent "Fax settings" functionality
E) Tum off Managing Phishing fiter =| Tum off the Seasrty Settings Check feature
| Tum on Compatbiity Loggng
- Han ché Connection ee
Setting |_ Stas
— Ađvanced Page Deplay Properties Diseasity Page
Disable the Advanced page Not confi Requrements: Atleast Internet Exolorer 5.0 E Desable the Connections page Not conf © eee 2 Removes the Connectons terface n the internet Optorsdaog — ¿ Še#ng | Explain | Comment | tab fromthe = '—- box &
Ifyou potcy, users are ẾẾ Dieable the Connections page
Prevented from seeing and changing proxy settings =O Net Conk
If you disable this pokky or do not “© Enabled configure it, users can see and change Daabksg
these settings When you set Cas poicy, you do not
the following poles
“Disable changing connection settings” “Disable changing proxy settings”
“Disable changing Automatic Configureton settings” ‘Supported on: At least Intemet Explorer 5.0 [ OK | Carcet_| Aanip Xây dựng hạn chế windows
components cho GPO
File Action View Help
â g& Computer Configuration & â Poles đ ccty setiros Ð Group Policy Management Editor @ ®| 2|r2|i2|H mñ| Ÿ |S} GPO_Gioihanchucnang [SERVER.khoacntt.edu.vn] Policy Scripts (Startup/Shutdown) Policy-based Qos Ei a ative Templates: Policy definitions (ADI Để hạn chế cho IE ° Tại màn hình bên sẽ chỉnh sửa tương ứng — Hạn chế Security page Display Properties equirements: Atleast Internet Explorer 5.0 box Description: Removes the Security tab from the
interface in the Internet Options dialog
IF you enable this pokey, itprevents and changing se
@ Internet Control Panel
EIS Disable the Security page Properties
Ju |
=)p1 Setting | Explain | Comment | If you disable this policy or do not
configure it, users can see and EE Disable the Securty page
these settings
When you set this policy, you do not © Not Configured
need to set the foloning internet © Enabled Explorer policies, because this policy
removes the Security tab from the © Disabled
interface: ce
- Han ché Advanced
= Internet Control Panel
Disable the Advanced page Display Properties Requirements: Atleast Internet Explorer 5.0 Description:
Removes the Advanced tab from the
interface in the Internet Options dialog
box
Tf you enable this polcy, us users are prevented from
Samed Nenetaiaegs such as security, multimedia, and printing
Tf you disable this policy or do not
configure it, users can see and these settings When you set this policy, you do not
need to set the "Disable none dao ne ena kn A 2
(i) Disable the Advanced page Notc
isable the Advanced page Properties J
[= Disable the Advanced page
Trang 2
- Hạn chế Content
- Hạn chế Help and Support
Remove Help menu from Start Menu Properties ri
_Bmexsep | MeeSep |
- Hạn chế Add or Remove Program
* Trong Control Panel
LE] Specify default category for Add New Programs
[E) Hide the "Add a program from CD-ROM or floppy disk” option [E] Hide the "Add programs from Microsoft” option
Microsoft Wind , [E) Hide the "Add programs from your network” option Windows XP, and Windows 2000 [E] Hide Add New Programs page
- Han ché Trong Menu Start
) g& User Configuration = © Policies f] (5) Software Settings EI ©) Windows Settings i, Remote Installation Services =} Scripts (Logon/Logoff) ) §& Security Settings (@ Folder Redirection
4) gly Policy-based Qos
m Internet Explorer Maintenance
& 1 Administrative Templates: Policy definitions (ADMX files) re (1 Control Panel - Han ché Search ete eke dace | Exton | Commer | - Han ché Desktop ] g& User Configuration = (5) Policies (5) Software Settings © (5) Windows Settings i Remote Installation Services Ce @, Security Settings (@ Folder Redirection Policy-based QoS Internet Explorer Maintenance
=) (S Administrative Templates: Policy definitions (ADMX files) re
& ( Control P:
Trang 3- Hạn chế Recycle Bin - Hạn chế My network on desktop Properties - Add chính sách vừa tạo với một OU nào đó
* Chon OU can Add rồi
fap SPU ramen sary Baa em eg229 89 ElBiEi 2 Baaaw Han ché Mycomputer Tota Kết quả của triển khai các hạn chế trong GPO Policy