windows組策略

Group Policy is a Windows feature that contains a variety of advanced settings, particularly for network administrators. However, local Group Policy can also be used to adjust settings on a single computer.

組策略是Windows的功能，其中包含各種高級設置，尤其是對于網絡管理員而言。 但是，本地組策略也可以用于調整單臺計算機上的設置。

Group Policy isn’t designed for home users, so it’s only available on Professional, Ultimate, and Enterprise versions of Windows.

組策略不是為家庭用戶設計的，因此僅在Windows專業版，旗艦版和企業版中可用。

集中組策略 (Centralized Group Policy)

If you’re using a Windows computer in an Active Directory environment, Group Policy settings can be defined on the domain controller. Network administrators have one place where they can configure a variety of Windows settings for every computer on the network. These settings can also be enforced, so users can’t change them.?For example, using group policy, a network administrator can block access to certain sections of the Windows control panel, or set a specific website as the home page for every computer on the network.

如果在Active Directory環境中使用Windows計算機，則可以在域控制器上定義組策略設置。 網絡管理員可以在一個地方為網絡上的每臺計算機配置各種Windows設置。 這些設置也可以強制執行，因此用戶無法更改它們。 例如，使用組策略，網絡管理員可以阻止對Windows控制面板某些部分的訪問，或者將特定網站設置為網絡上每臺計算機的主頁。

This can be useful for locking down computers, restricting access to specific folders, control panel applets, and applications. It can also be used to change a variety of Windows settings, including ones that can’t be changed from the control panel or require registry tweaks to change.

這對于鎖定計算機，限制對特定文件夾，控制面板小程序和應用程序的訪問很有用。 它還可以用于更改各種Windows設置，包括無法從控制面板更改或需要更改注冊表的設置。

Many Group Policy?settings actually change registry values in the background – in fact, you can see which registry value a group policy setting changes. However, Group Policy provides a more user-friendly interface and the ability to enforce these settings.

許多組策略設置實際上都會在后臺更改注冊表值–實際上，您可以看到組策略設置更改了哪個注冊表值。 但是，組策略提供了更加用戶友好的界面以及強制執行這些設置的能力。

本地組策略 (Local Group Policy)

Group Policy isn’t only useful for networks of computers in businesses or schools, however. If you’re using a Professional version of Windows, you can use the local Group Policy Editor to change Group Policy settings on your computer.

但是，組策略不僅對企業或學校中的計算機網絡有用。 如果您使用的是Windows專業版，則可以使用本地組策略編輯器來更改計算機上的組策略設置。

Using Group Policy, you can tweak some Windows settings that aren’t normally available from the graphical interface. For example, if you want to set a custom login screen in Windows 7, you can either use the Registry Editor or the Group Policy Editor – it’s easier to change this setting in the Group Policy Editor. You can also tweak other areas of Windows 7 with the Group Policy Editor — for example, you can hide the notification area (also known as the system tray) entirely.

使用組策略，您可以調整一些圖形界面通常不可用的Windows設置。 例如，如果要在Windows 7中設置自定義登錄屏幕，則可以使用注冊表編輯器或組策略編輯器-在組策略編輯器中更改此設置會更容易。 您還可以使用組策略編輯器調整Windows 7的其他區域-例如，您可以完全隱藏通知區域(也稱為系統托盤) 。

The local Group Policy Editor can also be used to lock down a computer, just as you’d lock down a computer on an enterprise network. This can be useful if you have children using your computer. For example, you can allow users to run only specific programs, restrict access to specific drives, or enforce user account password requirements, including setting a minimum length for passwords on the computer.

本地組策略編輯器還可以用來鎖定計算機，就像鎖定企業網絡上的計算機一樣。 如果您有孩子在使用計算機，這將很有用。 例如，您可以允許用戶僅運行特定程序，限制對特定驅動器的訪問或強制執行用戶帳戶密碼要求，包括設置計算機上密碼的最小長度。

使用本地組策略 (Using Local Group Policy)

To access the local Group Policy Editor on your Windows computer (assuming you’re using a Professional edition of Windows or better, not a Home version), open the Start menu, type gpedit.msc, and press Enter.

要訪問Windows計算機上的本地組策略編輯器(假設您使用的是Windows專業版或更高版本，而不是家庭版)，請打開“開始”菜單，鍵入gpedit.msc ，然后按Enter。

If you don’t see the gpedit.msc application, you’re using a Home edition of Windows.

如果看不到gpedit.msc應用程序，則說明您使用的是Windows Home Edition。

You probably shouldn’t dig through the Group Policy Editor and look for settings to change, but if you see an article on the web recommending you change a Group Policy setting to achieve a specific goal, this is where you can do it.

您可能不應該瀏覽組策略編輯器并尋找要更改的設置，但是如果您在網上看到一篇文章建議您更改組策略設置以實現特定目標，則可以在此處進行操作。

Group Policy settings are broken up into two sections – the Computer Configuration section controls computer-specific settings, while the User Configuration section controls user-specific settings.

組策略設置分為兩個部分：“計算機配置”部分控制特定于計算機的設置，而“用戶配置”部分控制特定于用戶的設置。

For example, Internet Explorer settings are located under Administrative Templates\Windows Components\Internet Explorer

例如，Internet Explorer設置位于管理模板\ Windows組件\ Internet Explorer下

You can change a setting by double-clicking it, selecting a new option, and clicking OK.

您可以通過雙擊設置，選擇新選項并單擊“確定”來更改設置。

---

---

This is just scratching the surface of what you can do with Group Policy – we’ve also covered enabling auditing from the Group Policy editor to see who logged into your computer and when.

這只是您使用組策略可以做的事情的表面-我們還介紹了從組策略編輯器中啟用審核功能，以查看誰登錄到您的計算機以及何時登錄。

You should now have a better understanding of Group Policy, what you can do with it, and how it differs from the registry editor, which isn’t designed for easy editing of settings by hand.

現在，您應該對組策略有了更好的了解，可以使用它做什么，以及它與注冊表編輯器的不同之處，注冊表編輯器并不是為了方便手動編輯設置而設計的。

翻譯自: https://www.howtogeek.com/125171/htg-explains-what-group-policy-is-and-how-you-can-use-it/

windows組策略

總結

以上是生活随笔為你收集整理的windows组策略_Windows中的“组策略”是什么？的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。