Khi tao use nhớ chọn User
must change password at next logon
Câu 1.a:
RUN > gpmc.msc > Chọn GPO cần chỉnh
sửa > Edit
Cầm Control Panel:
user coniguration/administrative Templates/control
panel/prohibit access to the control panel= enable
Cấm Chức năng trong Ctrl+Alt+Del:
- Cấm Task Manager:
user coniguration/administrative
Templates/system/Ctrl+Alt+Del Option/Remove Task manager => Enable
- Cấm Lock Computer:
user coniguration/administrative
Templates/system/Ctrl+Alt+Del Option/Remove Lock Computer => Enable
- Cấm Change Password:
user coniguration/administrative
Templates/system/Ctrl+Alt+Del Option/Remove Change Password => Enable
Câu 1.b:
RUN > gpmc.msc > Chọn GPO cần chỉnh
sửa > Edit
Cấm them:
Computer Configuration/Administrative Templates/Windows
Components/Windows Installer/Prohibit User Installs
Cấm xóa, sửa:
Computer Configuration/Administrative
Templates/Windows Components/Windows Installer/Prohibit Removal of updates
Câu 1.c:
ẩn Tab Log off
trên Start menu :
user coniguration/administrative Templates/Start menu and
Taskbar/Remove logoff on the Start Menu
Cấu 1.d:
RUN > gpmc.msc > Chọn Domain
Controllers > Default Domain Controllers Policy >
Computer Configuration/Windowns
settings/Security Settings/Account Policies/Password Policy/
Minimum password length: 5 characters
Passeword must meet cpmplexity
requirements: Enabled
Cấm đổi IP:
user coniguration/administrative Templates/Network/Network
Connection/Prohibit TCP/IP advanced configuration = Enabled
Câu 2.a:
Change the system time:
Computer Configuration/Windowns
settings/ Security Settings/Local Policies/User Rights Assignment/Change the
system time
Check vào Define these policy settings
> Add user or group > Browse chọn user GD, Ok 3 lần.
Câu 2.b:
Computer Configuration/Windowns
settings/ Security Settings/Local Policies/User Rights Assignment/Force
Shutdown from a Remote System
Check vào Define these policy settings
> Add user or group > Browse chọn user TPKD, Ok 3 lần.
Câu 2.c:
Computer Configuration/Windowns
settings/ Security Settings/Local Policies/User Rights Assignment/Load
and Unload Device Drivers
Check vào Define these policy settings
> Add user or group > Browse chọn add tất cả các user vào, Ok 3 lần.
Cấm xóa, sửa:
ReplyDeleteComputer Configuration/Administrative Templates/Windows Components/Windows Installer/Prohibit Removal of updates
====> Prohibit Removal of updates khong co thi lam cach nao de co trong win 2k3