windows組策略

Group Policy is a Windows feature that contains a variety of advanced settings, particularly for network administrators. However, local Group Policy can also be used to adjust settings on a single computer.

組策略是Windows的功能，其中包含各種高級(jí)設(shè)置，尤其是對(duì)于網(wǎng)絡(luò)管理員而言。 但是，本地組策略也可以用于調(diào)整單臺(tái)計(jì)算機(jī)上的設(shè)置。

Group Policy isn’t designed for home users, so it’s only available on Professional, Ultimate, and Enterprise versions of Windows.

組策略不是為家庭用戶設(shè)計(jì)的，因此僅在Windows專(zhuān)業(yè)版，旗艦版和企業(yè)版中可用。

集中組策略 (Centralized Group Policy)

If you’re using a Windows computer in an Active Directory environment, Group Policy settings can be defined on the domain controller. Network administrators have one place where they can configure a variety of Windows settings for every computer on the network. These settings can also be enforced, so users can’t change them.?For example, using group policy, a network administrator can block access to certain sections of the Windows control panel, or set a specific website as the home page for every computer on the network.

如果在Active Directory環(huán)境中使用Windows計(jì)算機(jī)，則可以在域控制器上定義組策略設(shè)置。 網(wǎng)絡(luò)管理員可以在一個(gè)地方為網(wǎng)絡(luò)上的每臺(tái)計(jì)算機(jī)配置各種Windows設(shè)置。 這些設(shè)置也可以強(qiáng)制執(zhí)行，因此用戶無(wú)法更改它們。 例如，使用組策略，網(wǎng)絡(luò)管理員可以阻止對(duì)Windows控制面板某些部分的訪問(wèn)，或者將特定網(wǎng)站設(shè)置為網(wǎng)絡(luò)上每臺(tái)計(jì)算機(jī)的主頁(yè)。

This can be useful for locking down computers, restricting access to specific folders, control panel applets, and applications. It can also be used to change a variety of Windows settings, including ones that can’t be changed from the control panel or require registry tweaks to change.

這對(duì)于鎖定計(jì)算機(jī)，限制對(duì)特定文件夾，控制面板小程序和應(yīng)用程序的訪問(wèn)很有用。 它還可以用于更改各種Windows設(shè)置，包括無(wú)法從控制面板更改或需要更改注冊(cè)表的設(shè)置。

Many Group Policy?settings actually change registry values in the background – in fact, you can see which registry value a group policy setting changes. However, Group Policy provides a more user-friendly interface and the ability to enforce these settings.

許多組策略設(shè)置實(shí)際上都會(huì)在后臺(tái)更改注冊(cè)表值–實(shí)際上，您可以看到組策略設(shè)置更改了哪個(gè)注冊(cè)表值。 但是，組策略提供了更加用戶友好的界面以及強(qiáng)制執(zhí)行這些設(shè)置的能力。

本地組策略 (Local Group Policy)

Group Policy isn’t only useful for networks of computers in businesses or schools, however. If you’re using a Professional version of Windows, you can use the local Group Policy Editor to change Group Policy settings on your computer.

但是，組策略不僅對(duì)企業(yè)或?qū)W校中的計(jì)算機(jī)網(wǎng)絡(luò)有用。 如果您使用的是Windows專(zhuān)業(yè)版，則可以使用本地組策略編輯器來(lái)更改計(jì)算機(jī)上的組策略設(shè)置。

Using Group Policy, you can tweak some Windows settings that aren’t normally available from the graphical interface. For example, if you want to set a custom login screen in Windows 7, you can either use the Registry Editor or the Group Policy Editor – it’s easier to change this setting in the Group Policy Editor. You can also tweak other areas of Windows 7 with the Group Policy Editor — for example, you can hide the notification area (also known as the system tray) entirely.

使用組策略，您可以調(diào)整一些圖形界面通常不可用的Windows設(shè)置。 例如，如果要在Windows 7中設(shè)置自定義登錄屏幕，則可以使用注冊(cè)表編輯器或組策略編輯器-在組策略編輯器中更改此設(shè)置會(huì)更容易。 您還可以使用組策略編輯器調(diào)整Windows 7的其他區(qū)域-例如，您可以完全隱藏通知區(qū)域(也稱為系統(tǒng)托盤(pán)) 。

The local Group Policy Editor can also be used to lock down a computer, just as you’d lock down a computer on an enterprise network. This can be useful if you have children using your computer. For example, you can allow users to run only specific programs, restrict access to specific drives, or enforce user account password requirements, including setting a minimum length for passwords on the computer.

本地組策略編輯器還可以用來(lái)鎖定計(jì)算機(jī)，就像鎖定企業(yè)網(wǎng)絡(luò)上的計(jì)算機(jī)一樣。 如果您有孩子在使用計(jì)算機(jī)，這將很有用。 例如，您可以允許用戶僅運(yùn)行特定程序，限制對(duì)特定驅(qū)動(dòng)器的訪問(wèn)或強(qiáng)制執(zhí)行用戶帳戶密碼要求，包括設(shè)置計(jì)算機(jī)上密碼的最小長(zhǎng)度。

使用本地組策略 (Using Local Group Policy)

To access the local Group Policy Editor on your Windows computer (assuming you’re using a Professional edition of Windows or better, not a Home version), open the Start menu, type gpedit.msc, and press Enter.

要訪問(wèn)Windows計(jì)算機(jī)上的本地組策略編輯器(假設(shè)您使用的是Windows專(zhuān)業(yè)版或更高版本，而不是家庭版)，請(qǐng)打開(kāi)“開(kāi)始”菜單，鍵入gpedit.msc ，然后按Enter。

If you don’t see the gpedit.msc application, you’re using a Home edition of Windows.

如果看不到gpedit.msc應(yīng)用程序，則說(shuō)明您使用的是Windows Home Edition。

You probably shouldn’t dig through the Group Policy Editor and look for settings to change, but if you see an article on the web recommending you change a Group Policy setting to achieve a specific goal, this is where you can do it.

您可能不應(yīng)該瀏覽組策略編輯器并尋找要更改的設(shè)置，但是如果您在網(wǎng)上看到一篇文章建議您更改組策略設(shè)置以實(shí)現(xiàn)特定目標(biāo)，則可以在此處進(jìn)行操作。

Group Policy settings are broken up into two sections – the Computer Configuration section controls computer-specific settings, while the User Configuration section controls user-specific settings.

組策略設(shè)置分為兩個(gè)部分：“計(jì)算機(jī)配置”部分控制特定于計(jì)算機(jī)的設(shè)置，而“用戶配置”部分控制特定于用戶的設(shè)置。

For example, Internet Explorer settings are located under Administrative Templates\Windows Components\Internet Explorer

例如，Internet Explorer設(shè)置位于管理模板\ Windows組件\ Internet Explorer下

You can change a setting by double-clicking it, selecting a new option, and clicking OK.

您可以通過(guò)雙擊設(shè)置，選擇新選項(xiàng)并單擊“確定”來(lái)更改設(shè)置。

---

---

This is just scratching the surface of what you can do with Group Policy – we’ve also covered enabling auditing from the Group Policy editor to see who logged into your computer and when.

這只是您使用組策略可以做的事情的表面-我們還介紹了從組策略編輯器中啟用審核功能，以查看誰(shuí)登錄到您的計(jì)算機(jī)以及何時(shí)登錄。

You should now have a better understanding of Group Policy, what you can do with it, and how it differs from the registry editor, which isn’t designed for easy editing of settings by hand.

現(xiàn)在，您應(yīng)該對(duì)組策略有了更好的了解，可以使用它做什么，以及它與注冊(cè)表編輯器的不同之處，注冊(cè)表編輯器并不是為了方便手動(dòng)編輯設(shè)置而設(shè)計(jì)的。

翻譯自: https://www.howtogeek.com/125171/htg-explains-what-group-policy-is-and-how-you-can-use-it/

windows組策略

總結(jié)

以上是生活随笔為你收集整理的windows组策略_Windows中的“组策略”是什么？的全部?jī)?nèi)容，希望文章能夠幫你解決所遇到的問(wèn)題。

如果覺(jué)得生活随笔網(wǎng)站內(nèi)容還不錯(cuò)，歡迎將生活随笔推薦給好友。