tailieunhanh - Troubleshooting Aids phần 2

Using Group Policy to Automate the EFS Disable Process If you would like to add the ability to push the disabled setting through Group Policy on a Windows XP systems joined to a Windows 2000 domain | Using Group Policy to Automate the EFS Disable Process If you would like to add the ability to push the disabled setting through Group Policy on a Windows XP systems joined to a Windows 2000 domain you can do so by editing the file. This file resides in the Wzndr inf folder and represents a list of registry settings that are exposed in the Local Policy Security Options section of security templates Fig. . Figure The Local Policy Security Options section of security templates By adding registry information to the file you can expose additional entries. This extends your ability to manage settings through security configuration and analysis or through Group Policy. The file has two sections one lists registry keys Register Registry Values and one details what will appear in the security template Strings . First add the registry information to the file. The following line should be placed within the other registry settings in the Register Registry Values section MACHINE Software Microsoft Windows NT CurrentVersion EFS EfsConfiguration 4 EfsConfiguration 0 The syntax for the entries in the Register Registry Values section is RegistryPath RegistryType DisplayName DisplayType Options The parameters listed above are briefly explained in Table . Table Parameters Used in the Register Registry Values Section of the File Parameter Explanation RegistryPath Defines the full path to the registry key and value entry that you want to expose in the Group Policy Editor user interface UI . Only values that exist under the HKEY_LOCAL_MACHINE root key can be configured. Notice that in the command syntax this root key is referenced by the MACHINE keyword. RegistryType Specifies a number that defines the data type of the registry value to be created. The following values are acceptable 1 - REG_SZ 2 - REG_EXPAND_SZ 3 - REG_BINARY 4 - REG_DWORD 7 - REG_MULTI_SZ DisplayName Specifies the string that appears in the Security Options section of .