tailieunhanh - HackNotes Windows Security Portable Reference phần 8

Chúng tôi đã thảo luận một số các thiết lập trong một GPO trong Chương 9. Local Security Settings quản lý giao diện điều khiển ra các thiết lập GPO địa phương dưới Computer Configuration | Windows Settings | Security Settings. Bảng 10-1 cho thấy các loại hàng đầu của đối tượng Group Policy, và các loại thiết lập mà họ cung cấp trong cấu hình máy tính và cây User Configuration. | Chapter 10 Domain Security with Group Policies 159 Figure 10-1. The Local Group Policy Object MMC snap-in or Windows XP Professional SP1 with the .NET Framework. The GPMC and supporting documentation can be obtained from http www . windowsserver2003 gpmc . We will look at the GPMC a little more closely when we discuss applying GPOs to domain objects later in this chapter. For now we ll stick to the default MMC snap-in. Group Policy Overview Group Policy Settings We have already discussed some of the settings available within a GPO in Chapter 9. The Local Security Settings management console exposes settings from the Local GPO under Computer Configuration I Windows Settings I Security Settings. Table 10-1 shows the top categories of the Group Policy object and the types of settings they offer in both the Computer Configuration and User Configuration trees. Group Policy-based Software Settings are typically used to support software deployment services in very large environments and to define installation packages that domain members can obtain directly from 160 Part III Windows Hardening Category Computer Configuration Settings User Configuration Settings Software Settings Empty on Local GPOs Allows definition of software packages and installation settings that are applied at the system level to any computers subject to this policy regardless of logged-in user. Software packages and installation settings that are available based on the logged-in user. Windows Settings Allows definition of system startup and shutdown scripts the computer-level security settings discussed in Chapter 9 and additional local operating system options. Controls user-interface aspects of the operating system such as logon logoff scripts management redirection of system folders and Internet Explorer customizations and controls. Administrative Templates Contains a variety of configuration options that affect core Windows service and utility offerings defined on the .