How to install Policy for Server

In this port, I will introdue how to install Policy for Server.

1. Mở Group Policy Object Editor.

B1: Mở Group Policy Object Editor: Star/Run/ input MMC

B2: Box Console1 choose menu File/ choose Add/Remove Snap-in

B3: Box Add/Remove Snap-in choose Group Policy Editor / click Add

B4: Click Finish

B5: Box Add/Remove Snap-in click Group Policy Editor / choose Add

B6: Click Browse

B7: Click Tab User choose U2 / click Finish

B8. Execute B5 - B6 with tab User --> click Administrators --> click Finish

B9: Execute B5 - B6 with tab User --> click Non-Administrator --> click Finish --> click OK

Not:  You choose menu File --> and Save in Desktop with name is: Console 1

2. Adjusted policy computer configuration

B1: Log on computer by account Administrator --> choose Shutdown. In box Shutdown Enven tracker click Cancel.

Use USB for computer. It will appear box Autorun

B2: Open Console 1 on Desktop/ choose Local Computer Policy / Click Computer Configuration/ click Administrative Templates/ click right - system of double/ click Display Shutdown Enven Tracker /click  Disable

B3: Column left you open Local Computer Policy / Computer Configuration / Administrative Templates / Windows  Components / Autoplay Policies.

B4: right column choose Turn Off Autoplay

B5: Choose Enabled/ choose all Drives and click OK

B6: Open Start, choose Run and input CMD --> Enter

In box Command line, input GPUPDATE/FORCE click Enter.

Note: Open Start and choose shutdown. Don't appear box Shutdown Enven Tracker. Not Autorun when using USB for computer.

3. Adjusted Policy User Configuration

Adjusted Policy to User can't log on Control Panel.

B1: Log on by Account Administrators. Open Console 1 on Desktop and open with paths below:
Local Computer Policy/ choose User Configuration/ Administrative Templates/ Control panel.

- Right column, double click in policy Prohibit Access to the Control Panel/ choose  Enable.

- Input GPUPDATE/FORCE

B2: Check Log of Administrator and in turn log on with U1, U2 to Start/ Choose Setting. Not see Control Panel.

4. User Configuration-Non-admin Group

Adjusted Policy offline Desktop only applies on System User Non-Group Administrators.

B1: Log on by Account Administrator. Open Console 1 on Desktop and open with paths below:
Local computer/Non-Administrators Policy/ choose User Configuration/ Choose Administrative Templates/ choose Desktop.

- Right column, double click plolicy Hide and disable all items on the Desktop/ choose Enable.

- Input GPUPDATE/FORCE

Note: Log on computer by Account U2, all program will offline

5. User Configuration-Admin Group

Adjusted policy offline Chang Password when Ctrl+Alt+Del only applies for User in Group Administrators.

B1: Log on by account Administrator. Open console 1 on Desktop and open with paths below:

Local Computer/Administrators policy/ choose User Configuration / Administrative Templates/ System/ Ctrl+Alt+ Del options.

- Right Column, double click policy Remove Chang Password/choose Enable.

- Input GPUPDATE/FORCE.

B2: Check:

- Log on computer by account U1. Ctrl+ Alt+ Insert, will not see function Chang password.

- Log on computer by account U2. Ctrl+ Alt+ Insert, will not see function Chang password.

6. Adjusted policy for each User.

B1: Log on by account

Log on by account Administrator, open Console 1 on Desktop and opend paths below:
Local Computer/U2 policy/ choose User Configuration/ Administrative Templates/ Control Panel.

- Right column click policy Prohibit Access to the  Control Panel/ choose Disable

- Input GPUPDATE/FORCE

Note: Check

- Log on U1, U3 can't log on Control Panel

- Log on U2: Log on Control Panle complete.