際際滷

際際滷Share a Scribd company logo
Trung T但m ATHENA SVTT: CHUNGTHANH XUN
Local Policy
Chu畉n b畛:
- M叩y Windows Server 2008 (ch動a n但ng c畉p Domain): Server 1
NIC 1: 192.168.1.1/24
- M叩y Windows XP: PC 1
NIC 1: 192.168.1.2/24
M担 h狸nh:
M畛c ti棚u bi LAB:
- T畉o local policy tr棚n m叩y server1 畛 叩p d畛ng l棚n t畛ng 畛i t動畛ng kh叩c nhau
- M畛c ti棚u cu畛i c湛ng: 叩p d畛ng 動畛c c叩c ch鱈nh s叩ch cho c叩c 畛i t動畛ng kh叩c nhau
L動 箪:
Khi th畛c hi畛n tr棚n m叩y 畉o VM-ware, c叩c card m畉ng s畉 thi畉t l畉p 畛 ch畉 畛 HOST ONLY,
N棚n t畉t t鱈nh nng Windows Firewall tr棚n c叩c m叩y Server v PC.
Th畛c Hi畛n:
Trung T但m ATHENA SVTT: CHUNGTHANH XUN
B動畛c 1(T畉o Group Policy Console cho u2, Administrator, Non-Administrator):
Tr棚n m叩y server1, vo Start ch畛n Run r畛i g探 MMC 畛 vo Console1-[Console Root]:
Trong Console1-[Console Root], ch畛n File -> Add/Remove Snap-ins
Trong Add/Remove Snap-ins, ch畛n Group Policy Object r畛i ch畛n Add:
Trung T但m ATHENA SVTT: CHUNGTHANH XUN
Trong Select Group Policy Object, ch畛n Browse:
Trong Browse for a Group Policy Object r畛i sang tab Users 畛 ch畛n user u2:
Trung T但m ATHENA SVTT: CHUNGTHANH XUN
Tr畛 l畉i Select Group Policy Object, ch畛n Finish:
Th畛c hi畛n t動董ng t畛 畛 cho group Administrators v Non-Administrators.
Sau khi t畉o xong u2, Administrators v Non-Administrators, ta s畉 vo File r畛i ch畛n Save 畛
l動u l畉i Console ny
B動畛c 2(T畉o Group Policy 畛 t畉t Shutdown Event Tracker tr棚n server1 cho
Administrators):
Trung T但m ATHENA SVTT: CHUNGTHANH XUN
Ch畛n Start->Run r畛i g探 gpedit.msc 畛 vo Local Group Policy Editor:
Trong Local Group Policy Editor, ch畛n Computer Comfiguration -> Administrative
Templates->System
r畛i ch畛n Dislay Shutdown Event Tracker:
Trong Dislay Shutdown Event Tracker Properties, check vo Disabled:
Trung T但m ATHENA SVTT: CHUNGTHANH XUN
畛 update group policy v畛a c畉u h狸nh, ta vo Start->Run g探 cmd. Sau 坦 g探 l畛nh gpupdate
/force:
Test thnh c担ng Group Policy v畛a t畉o:
B動畛c 3(T畉o Group Policy kh担ng cho group Non-Administrators truy c畉p Control Panel):
Tr棚n m叩y server1, m畛 l畉i Group Policy Console 達 t畉o khi n達y r畛i ch畛n Non-Administrators
Policy:
Trung T但m ATHENA SVTT: CHUNGTHANH XUN
Trong Non-Administrators Policy, ch畛n User Configuration -> Administrative Templates->
Control Panel
r畛i ch畛n Prohibit access to the Control Panel:
Trung T但m ATHENA SVTT: CHUNGTHANH XUN
Trong Prohibit access to the Control Panel Properties, ch畛n Enabled:
畛 update group policy v畛a c畉u h狸nh, ta vo Start->Run g探 cmd. Sau 坦 g探 l畛nh gpupdate
/force:
Test Group Policy v畛a t畉o b畉ng c叩ch ng nh畉p vo u1 v u3 畛 ki畛m tra s畉 kh担ng th畉y Control
Panel:
Trung T但m ATHENA SVTT: CHUNGTHANH XUN
Trung T但m ATHENA SVTT: CHUNGTHANH XUN
B動畛c 4(c畉u hinh group policy kh担ng hi畛n th畛 Recycle Bin khi user u2 ng nh畉p server1):
Tr棚n m叩y server1, m畛 l畉i Group Policy Console 達 t畉o khi n達y r畛i ch畛n u2 Policy:
Trong u2 Policy, ch畛n User Configuration -> Administrative Templates-> Desktop r畛i ch畛n
Remove
Recycle Bin icon from desktop:
Trong Remove Recycle Bin icon from desktop properties, ch畛n Enabled:
Trung T但m ATHENA SVTT: CHUNGTHANH XUN
畛 update group policy v畛a c畉u h狸nh, ta vo Start->Run g探 cmd. Sau 坦 g探 l畛nh gpupdate
/force:
Test Group Policy v畛a t畉o b畉ng c叩ch ng nh畉p vo u2 畛 ki畛m tra s畉 kh担ng th畉y icon Recycle
Bin:
Trung T但m ATHENA SVTT: CHUNGTHANH XUN
Trung T但m ATHENA SVTT: CHUNGTHANH XUN

More Related Content

Lap2

  • 1. Trung T但m ATHENA SVTT: CHUNGTHANH XUN Local Policy Chu畉n b畛: - M叩y Windows Server 2008 (ch動a n但ng c畉p Domain): Server 1 NIC 1: 192.168.1.1/24 - M叩y Windows XP: PC 1 NIC 1: 192.168.1.2/24 M担 h狸nh: M畛c ti棚u bi LAB: - T畉o local policy tr棚n m叩y server1 畛 叩p d畛ng l棚n t畛ng 畛i t動畛ng kh叩c nhau - M畛c ti棚u cu畛i c湛ng: 叩p d畛ng 動畛c c叩c ch鱈nh s叩ch cho c叩c 畛i t動畛ng kh叩c nhau L動 箪: Khi th畛c hi畛n tr棚n m叩y 畉o VM-ware, c叩c card m畉ng s畉 thi畉t l畉p 畛 ch畉 畛 HOST ONLY, N棚n t畉t t鱈nh nng Windows Firewall tr棚n c叩c m叩y Server v PC. Th畛c Hi畛n:
  • 2. Trung T但m ATHENA SVTT: CHUNGTHANH XUN B動畛c 1(T畉o Group Policy Console cho u2, Administrator, Non-Administrator): Tr棚n m叩y server1, vo Start ch畛n Run r畛i g探 MMC 畛 vo Console1-[Console Root]: Trong Console1-[Console Root], ch畛n File -> Add/Remove Snap-ins Trong Add/Remove Snap-ins, ch畛n Group Policy Object r畛i ch畛n Add:
  • 3. Trung T但m ATHENA SVTT: CHUNGTHANH XUN Trong Select Group Policy Object, ch畛n Browse: Trong Browse for a Group Policy Object r畛i sang tab Users 畛 ch畛n user u2:
  • 4. Trung T但m ATHENA SVTT: CHUNGTHANH XUN Tr畛 l畉i Select Group Policy Object, ch畛n Finish: Th畛c hi畛n t動董ng t畛 畛 cho group Administrators v Non-Administrators. Sau khi t畉o xong u2, Administrators v Non-Administrators, ta s畉 vo File r畛i ch畛n Save 畛 l動u l畉i Console ny B動畛c 2(T畉o Group Policy 畛 t畉t Shutdown Event Tracker tr棚n server1 cho Administrators):
  • 5. Trung T但m ATHENA SVTT: CHUNGTHANH XUN Ch畛n Start->Run r畛i g探 gpedit.msc 畛 vo Local Group Policy Editor: Trong Local Group Policy Editor, ch畛n Computer Comfiguration -> Administrative Templates->System r畛i ch畛n Dislay Shutdown Event Tracker: Trong Dislay Shutdown Event Tracker Properties, check vo Disabled:
  • 6. Trung T但m ATHENA SVTT: CHUNGTHANH XUN 畛 update group policy v畛a c畉u h狸nh, ta vo Start->Run g探 cmd. Sau 坦 g探 l畛nh gpupdate /force: Test thnh c担ng Group Policy v畛a t畉o: B動畛c 3(T畉o Group Policy kh担ng cho group Non-Administrators truy c畉p Control Panel): Tr棚n m叩y server1, m畛 l畉i Group Policy Console 達 t畉o khi n達y r畛i ch畛n Non-Administrators Policy:
  • 7. Trung T但m ATHENA SVTT: CHUNGTHANH XUN Trong Non-Administrators Policy, ch畛n User Configuration -> Administrative Templates-> Control Panel r畛i ch畛n Prohibit access to the Control Panel:
  • 8. Trung T但m ATHENA SVTT: CHUNGTHANH XUN Trong Prohibit access to the Control Panel Properties, ch畛n Enabled: 畛 update group policy v畛a c畉u h狸nh, ta vo Start->Run g探 cmd. Sau 坦 g探 l畛nh gpupdate /force: Test Group Policy v畛a t畉o b畉ng c叩ch ng nh畉p vo u1 v u3 畛 ki畛m tra s畉 kh担ng th畉y Control Panel:
  • 9. Trung T但m ATHENA SVTT: CHUNGTHANH XUN
  • 10. Trung T但m ATHENA SVTT: CHUNGTHANH XUN B動畛c 4(c畉u hinh group policy kh担ng hi畛n th畛 Recycle Bin khi user u2 ng nh畉p server1): Tr棚n m叩y server1, m畛 l畉i Group Policy Console 達 t畉o khi n達y r畛i ch畛n u2 Policy: Trong u2 Policy, ch畛n User Configuration -> Administrative Templates-> Desktop r畛i ch畛n Remove Recycle Bin icon from desktop: Trong Remove Recycle Bin icon from desktop properties, ch畛n Enabled:
  • 11. Trung T但m ATHENA SVTT: CHUNGTHANH XUN 畛 update group policy v畛a c畉u h狸nh, ta vo Start->Run g探 cmd. Sau 坦 g探 l畛nh gpupdate /force: Test Group Policy v畛a t畉o b畉ng c叩ch ng nh畉p vo u2 畛 ki畛m tra s畉 kh担ng th畉y icon Recycle Bin:
  • 12. Trung T但m ATHENA SVTT: CHUNGTHANH XUN
  • 13. Trung T但m ATHENA SVTT: CHUNGTHANH XUN