帮客户查一些组策略的限制记录

 

 

1.隐藏开始菜单---"管理工具",

理论上组策略做不到,只能修改注册表,如下将下面内容写到一个批处理里面,在域上做个策略,登录时执行,即可!  (如果显示,将NO改成YES即可)

reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "StartMenuAdminTools" /t REG_SZ /d "NO" /f

 

 

2.如果想将All Users文件夹由默认的%SystemDrive%移动到D:盘，那么可以先将原All Users文件夹复制到D:\Documents and Settings目录下，然后修改"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList"下的ProfilesDirectory键值，由默认的“%SystemDrive%\Documents and Settings”修改为“D:\Documents and Settings”，建议同时将Default User文件夹复制到D:盘，修改该键值并重新启动后，所有新建用户的配置文件目录都会自动建立在“D:\Documents and Settings\<用户名>”目录下。

 

3.配置终端服务器profiles找的

Using User Profiles in Windows Server 2003<?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" />

http://technet.microsoft.com/en-us/library/cc776120.aspx

 

Change a user's Terminal Services profile path

http://technet.microsoft.com/en-us/library/cc783578.aspx

 

To increase profile time-out values

1. In the Group Policy Object Editor, navigate to the Maximum retries to unload and update user profile policy, which is located in Computer Configuration/Administrative Templates/System/User Profiles.
   
2. Enable this setting and set it to 120.
   
3. In the Run dialog box, type regedit, and then click OK.
   
4. Locate the following subkey in the registry and select it:
   HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Terminal Server
   
5. On the Edit menu, click Add, and then click DWORD Value.
   
6. Add a registry entry named LogoffTimeout with the following settings:
   
   • Base: Decimal
     
   • Value: 120 (4 minutes, time-out expressed in 2-second units)
     Note
     

Do not set this value lower than 3 minutes or higher than 15 minutes.