windows组策略_Windows中的“组策略”是什么？

windows组策略

Group Policy is a Windows feature that contains a variety of advanced settings, particularly for network administrators. However, local Group Policy can also be used to adjust settings on a single computer.

组策略是Windows的功能，其中包含各种高级设置，尤其是对于网络管理员而言。 但是，本地组策略也可以用于调整单台计算机上的设置。

Group Policy isn’t designed for home users, so it’s only available on Professional, Ultimate, and Enterprise versions of Windows.

组策略不是为家庭用户设计的，因此仅在Windows专业版，旗舰版和企业版中可用。

集中组策略 (Centralized Group Policy)

If you’re using a Windows computer in an Active Directory environment, Group Policy settings can be defined on the domain controller. Network administrators have one place where they can configure a variety of Windows settings for every computer on the network. These settings can also be enforced, so users can’t change them. For example, using group policy, a network administrator can block access to certain sections of the Windows control panel, or set a specific website as the home page for every computer on the network.

如果在Active Directory环境中使用Windows计算机，则可以在域控制器上定义组策略设置。 网络管理员可以在一个地方为网络上的每台计算机配置各种Windows设置。 这些设置也可以强制执行，因此用户无法更改它们。 例如，使用组策略，网络管理员可以阻止对Windows控制面板某些部分的访问，或者将特定网站设置为网络上每台计算机的主页。

This can be useful for locking down computers, restricting access to specific folders, control panel applets, and applications. It can also be used to change a variety of Windows settings, including ones that can’t be changed from the control panel or require registry tweaks to change.

这对于锁定计算机，限制对特定文件夹，控制面板小程序和应用程序的访问很有用。 它还可以用于更改各种Windows设置，包括无法从控制面板更改或需要更改注册表的设置。

Many Group Policy settings actually change registry values in the background – in fact, you can see which registry value a group policy setting changes. However, Group Policy provides a more user-friendly interface and the ability to enforce these settings.

许多组策略设置实际上都会在后台更改注册表值–实际上，您可以看到组策略设置更改了哪个注册表值。 但是，组策略提供了更加用户友好的界面以及强制执行这些设置的能力。

本地组策略 (Local Group Policy)

Group Policy isn’t only useful for networks of computers in businesses or schools, however. If you’re using a Professional version of Windows, you can use the local Group Policy Editor to change Group Policy settings on your computer.

但是，组策略不仅对企业或学校中的计算机网络有用。 如果您使用的是Windows专业版，则可以使用本地组策略编辑器来更改计算机上的组策略设置。

Using Group Policy, you can tweak some Windows settings that aren’t normally available from the graphical interface. For example, if you want to set a custom login screen in Windows 7, you can either use the Registry Editor or the Group Policy Editor – it’s easier to change this setting in the Group Policy Editor. You can also tweak other areas of Windows 7 with the Group Policy Editor — for example, you can hide the notification area (also known as the system tray) entirely.

使用组策略，您可以调整一些图形界面通常不可用的Windows设置。 例如，如果要在Windows 7中设置自定义登录屏幕，则可以使用注册表编辑器或组策略编辑器-在组策略编辑器中更改此设置会更容易。 您还可以使用组策略编辑器调整Windows 7的其他区域-例如，您可以完全隐藏通知区域(也称为系统托盘) 。

The local Group Policy Editor can also be used to lock down a computer, just as you’d lock down a computer on an enterprise network. This can be useful if you have children using your computer. For example, you can allow users to run only specific programs, restrict access to specific drives, or enforce user account password requirements, including setting a minimum length for passwords on the computer.

本地组策略编辑器还可以用来锁定计算机，就像锁定企业网络上的计算机一样。 如果您有孩子在使用计算机，这将很有用。 例如，您可以允许用户仅运行特定程序，限制对特定驱动器的访问或强制执行用户帐户密码要求，包括设置计算机上密码的最小长度。

使用本地组策略 (Using Local Group Policy)

To access the local Group Policy Editor on your Windows computer (assuming you’re using a Professional edition of Windows or better, not a Home version), open the Start menu, type gpedit.msc, and press Enter.

要访问Windows计算机上的本地组策略编辑器(假设您使用的是Windows专业版或更高版本，而不是家庭版)，请打开“开始”菜单，键入gpedit.msc ，然后按Enter。

If you don’t see the gpedit.msc application, you’re using a Home edition of Windows.

如果看不到gpedit.msc应用程序，则说明您使用的是Windows Home Edition。

You probably shouldn’t dig through the Group Policy Editor and look for settings to change, but if you see an article on the web recommending you change a Group Policy setting to achieve a specific goal, this is where you can do it.

您可能不应该浏览组策略编辑器并寻找要更改的设置，但是如果您在网上看到一篇文章建议您更改组策略设置以实现特定目标，则可以在此处进行操作。

Group Policy settings are broken up into two sections – the Computer Configuration section controls computer-specific settings, while the User Configuration section controls user-specific settings.

组策略设置分为两个部分：“计算机配置”部分控制特定于计算机的设置，而“用户配置”部分控制特定于用户的设置。

For example, Internet Explorer settings are located under Administrative Templates\Windows Components\Internet Explorer

例如，Internet Explorer设置位于管理模板\ Windows组件\ Internet Explorer下

You can change a setting by double-clicking it, selecting a new option, and clicking OK.

您可以通过双击设置，选择新选项并单击“确定”来更改设置。

---

---

This is just scratching the surface of what you can do with Group Policy – we’ve also covered enabling auditing from the Group Policy editor to see who logged into your computer and when.

这只是您使用组策略可以做的事情的表面-我们还介绍了从组策略编辑器中启用审核功能，以查看谁登录到您的计算机以及何时登录。

You should now have a better understanding of Group Policy, what you can do with it, and how it differs from the registry editor, which isn’t designed for easy editing of settings by hand.

现在，您应该对组策略有了更好的了解，可以使用它做什么，以及它与注册表编辑器的不同之处，注册表编辑器并不是为了方便手动编辑设置而设计的。

翻译自: https://www.howtogeek.com/125171/htg-explains-what-group-policy-is-and-how-you-can-use-it/

windows组策略