System Policy Editor (系統(tǒng)原則檔編輯程式)

1、System Policy Editor (系統(tǒng)原則檔編輯程式) - 適用於Win9x 及Windows NT 的系統(tǒng)中。何謂原則？原則只不過是一群相關(guān)的設(shè)定，而你可以指定這些設(shè)定的數(shù)值。每一個原則基本上都有名稱，例如Shell限制，而原則和登錄機(jī)碼或磁碟檔案以及資料夾一樣，都是使用階層式架構(gòu)排列。你可以使用原則管理使用者的存取控制；例如，有些原則允許你限制使用者可執(zhí)行哪些應(yīng)用程式、使用者是否可更改桌面樣式，或者在網(wǎng)絡(luò)上的芳鄰裡有哪些資源出現(xiàn)。在Win9x的安裝方法：1.按 開始 設(shè)定 選擇 控制臺 。2. 按 新增/移除程式 。3. 選擇 Windows 安裝程式 從碟片安裝 。4. 將Wi

2、n98 cdrom 放到光碟機(jī)中，在從碟片安裝的對話盒中，選擇 瀏覽 ” 完成後按 確定 ?！皒” 為你的光碟機(jī)號5. 最後在從碟片安裝的對話盒中的元件部份，在系統(tǒng)原則檔編輯程式加剔，再按 安裝 完成。在WinNT 的安裝方法：1. 從 61/desmond/ 下載 POLEDIT。2. 解壓後，執(zhí)行setup.bat。執(zhí)行Win98WinNTWinNT 範(fàn)本W(wǎng)in98 範(fàn)本(admin.adm)Win98 範(fàn)本 (admin.adm)限制顯示器控制臺- 關(guān)閉顯示器控制臺- 隱藏背景畫面- 隱藏螢?zāi)槐Ｗo(hù)裝置畫面- 隱藏外觀畫面- 隱藏設(shè)定值畫面在這裡輸入特定

3、Wallpaper的路徑，例如：Desktop 底色圖案系統(tǒng)限制只執(zhí)行容許的Windows應(yīng)用程式執(zhí)行已完成的原則檔案將所有選項(xiàng)完成後，將這個policy存檔成。然後選擇 檔案 開啟登錄 雙擊 本機(jī)電腦 網(wǎng)路 更新 設(shè)定後，按 確定 儲存 。在下次使用者登入時，該原則檔便用自動執(zhí)行。WinNT與Win98主要在poledit 中的分別，只在於Win98只可以載入一個範(fàn)本檔案，而WinNT 則可以同時載入多個範(fàn)本檔案。其他詳細(xì)有關(guān)Poledit 在Win98的Supporting DocumentPreparing to Use System Policy EditorIf you want t

4、o use system policies, you must perform the following preliminary steps:On the administrator computer, install System Policy Editor from the TOOLSRESKITNETADMINPOLEDIT directory on the Windows98 compact disc. Decide which users can install and have access to this tool for modifying policies. For mos

5、t client computers, you probably will not install System Policy Editor. See Installing System Policy EditorOn the client computers, enable user profiles to ensure full support for system policies. If user profiles are not enabled, only the computer settings in any system policy will be written to th

6、e Registry. See Enabling User ProfilesInstall support for group policies on the client computers if your site will use these. See Installing Group Policies.The system policy entries you set through System Policy Editor are reflected in the policy file (config.pol), which overwrites default user.dat

7、and system.dat settings in the Registry when the user logs on. Installing System Policy EditorTo install System Policy Editor from the Windows 98 compact disc:1Click Start, point to Settings, and then click Control Panel.2Click the Add/Remove Programs icon.3Click the Windows Setup tab, and then clic

8、k Have Disk.4 Insert the Windows 98 compact disc into your CD-ROM drive. In the Install From Disk dialog box, browse to the TOOLSRESKITNETADMINPOLEDIT directory, select the Poledit.Inf file, and then click OK.5 In the Have Disk dialog box, check the System Policy Editor component, and then click Ins

9、tall.The above installation copies Poledit.Exe to the Windows directory and the .adm files and poledit.inf to the WINDOWSINF directory. It also makes the necessary changes to your Registry and adds a start menu item to your ProgramsAccessoriesSystem Tools folder.Installing Group ProfilesIf you want

10、to use group policies, you must install that capability on each computer running Windows98, either when you install Windows98 using a custom setup script or by using the Add/Remove Programs option in Control Panel.To set up capabilities for group policies using Add/Remove Programs1In the Add/Remove

11、Programs option in Control Panel, click the Windows Setup tab, and then double-click the System Tools item.2In the System Tools dialog box, check the Group Policies item, and then click OK. 3Click OK again to install the necessary files.Windows98 Setup places grouppol.dll in the Windows SYSTEM direc

12、tory on the client computer and makes the required Registry changes.Note For more information about adding the ability to use group policies when installing Windows98 using custom setup scripts, see Chapter 3 Custom Installations, and Chapter 4, Automated Installations, in the Windows 98 Resource Ki

13、t. Enabling User ProfilesYou can enable user profiles after Windows98 has been installed, either locally on a single computer or for multiple computers. To enable user profiles on a local computer after setup1.In the Passwords option in Control Panel, click the User Profiles tab.2. Click Users can c

14、ustomize their preferences and desktop settings.3Select the options you want under User profile settings. These options describe what should be included as part of the user profile.4Shut down and restart the computer. Using System Policies on a NetworkThe System Policy Editor allows you to create po

15、licy (.POL) files, which you can place on a central server location. When a user logs on to the network, the policy file overwrites the current settings in the Registry. You can copy system policies from the network either manually or automatically. About Automatic DownloadingSystem Policy Editor al

16、lows you to create default policy files for automatic downloading. These default policy files are platform-specific. For Windows 98, the default policy file is called CONFIG.POL. For Windows NT Workstation or Server, this file is called NTCONFIG.POL. To create the policy file for a given platform, s

17、imply run System Policy Editor on a computer running that platform.On Windows 98, WINDOWS.ADM provides a template you can use with System Policy Editor for creating a CONFIG.POL file. For automatic downloading, CONFIG.POL must be placed in the NETLOGON directory on a Window NT network or from the PU

18、BLIC directory on a NetWare network.Note To apply system policies to a network that uses both Windows 98 and Windows NT Workstation, run the System Policy Editor once from each platform to produce the two different files.Windows98 currently supports automatic downloading for Windows NT and NetWare n

19、etworks. The 32-bit, protected-mode network clients -subsequently made available for other networks- might also provide support for automatic downloading.Automatic Downloading topicsBy default, Windows 98 downloads system policies automatically. However, if you switch to manual downloading, the foll

20、owing topics describe how to return to automatic downloading.Automatic Downloading on NT NetworksAutomatic Downloading on NetWare NetworksViewing or Editing Default System PoliciesAbout Manual DownloadingIf you want to copy system policies manually, Windows?8 copies the system policy file from a loc

21、ation you specify. Manual downloading overrides automatic downloading and allows you to choose where a user profiles should be stored. You can set up each computer for manual downloading individually, but this can be time-consuming. If possible (that is, when the client computers use 32-bit, protect

22、ed-mode network clients), you should set up each computer for automatic downloading, and then use the Remote Update policy to point specific computers to other servers as appropriate for your environment and users. However, for real-mode network clients, such as Novell NETX or VLM, you must enable m

23、anual downloading on each computer. After you configure the client computer, the system policy file will be downloaded the next time the user logs on.Manual Downloading TopicsConfiguring a Computer for Manual DownloadingDefining the Location of Policies on a NetworkAutomatic Downloading on NT Networ

24、ksTo set up automatic downloading on Windows NT networks1In the Network option in Control Panel, make sure that Client for Microsoft Networks is specified as the Primary Network Logon client, and that the domain is defined. 2Create the policy file to be downloaded and save it in the following locati

25、on:Automatic Downloading on NetWare Networks1.In the Network option in Control Panel, make sure that Microsoft Client for NetWare Networks is specified as the Primary Network Logon client, and that a preferred server is specified in properties for the network client.2Create the policy file to be dow

26、nloaded and save it in the following location:For NetWare networks, the client computers must be running Microsoft Client for NetWare Networks. If the client computers are using NETX or VLM, then policies must be downloaded manually.Important:Make sure you place system policy files on the users pref

27、erred server. Policy files are not available if they are stored on other NetWare servers or on computers running File and Printer Sharing for NetWare Networks.Configuring a Computer for Manual DownloadingTo configure a computer for manual downloading of system policies1In System Policy Editor, on th

28、e File menu, click Open Registry.2Click Local Computer.3Double-click Network, double-click Update, and select Remote Update.-OR-1On the File menu, click Connect.2Type the name of the computer you want to configure remotely, and then click OK.3Double-click the icon for that computer.4Double-click Net

29、work, double-click Update, and select Remote Update.Note: The remote computer must be running the Microsoft Remote Registry service, Remote Administration must be enabled, and user-level security must be enabled.Defining the Location of Policies on a NetworkOn Windows NT or NetWare networks where yo

30、u are using automatic downloading of policies, you can set a system policy to allow manual downloading. This option works only after system policies have been downloaded automatically the first time after Windows98 is installed. The first automatic downloading includes information in the system poli

31、cies that defines the location to be used for manual downloading.To define the location of policies for manual downloading1In System Policy Editor, open config.pol, and then double-click the Default Computer icon.2Double-click Windows98 Network, then double-click Update, and then select the Remote U

32、pdate checkbox.3In the Update Mode box, click Manual.4In the Path for manual update box, type the UNC path and file name for the system policy file you want to download. Make sure this file exists in the location you specify. (Otherwise, an error will result.)Using System Policy EditorRegistry Mode

33、and Policy File ModeYou can use System Policy Editor in two different modes: Registry mode and Policy File mode:l In Registry mode, you can directly edit the Registry of the local or remote computer, and changes are reflected immediately. See Using System Policy Editor in Registry Model In Policy Fi

34、le mode, you can create and modify system policy files (.pol) for use on other computers. In this mode, the Registry is edited indirectly. Changes are reflected only after the policy is downloaded when the user logs on. See Using System Policy Editor in Policy File ModeSystem Policy Editor TasksYou

35、can do the following tasks with System Policy Editor:l Set entries for the default computer and user policy entries. This creates a default policy file for all users and computers, which is downloaded when the user logs on. See Viewing or Editing Default System Policiesl Create entries for individua

36、l users or individual computers. By default, these include the policy entries you defined for Default User and default computer. See Creating Policies for Individual Users or Computersl Create entries for groups of users. By default, these include the policy entries you defined for Default User and

37、default computer. See Creating Policies for Groupsl Specify whether and in what manner you want policies downloaded from a centralized server or specify whether you want to have policies downloaded from other specific locations for all or some users. See Defining the Location of Policies on a Networ

38、kUsing System Policy Editor in Registry Mode To use System Policy Editor in Registry modeIn System Policy Editor, on the File menu, click Open Registry. Then, double-click the appropriate User or Computer icon, depending on what part of the Registry you want to edit. Changes are written directly to

39、the Registry after you choose Save on the File menu. After you make changes, you must shut down and restart the computer for the changes to take effect.You can also use System Policy Editor to edit the Registry of a remote computer. See the topic on Microsoft Remote Registry in this Help file for mo

40、re information.Caution:Use Registry mode only when you want to make direct changes to the Registry. Use extreme care when editing the Registry of a local or remote computer. Do not use these tools unless you understand the changes you are making to the machine configurations. It is also highly recom

41、mended that you always back up the Registry of any machine before making changes to it. You should typically change system settings by using the Control Panel options and other tools provided with Windows98.Use System Policy Editor in Policy File modeTo use System Policy Editor in Policy File modeIn

42、 System Policy Editor, on the File menu, click New or Open to open a policy file.Note: By default, on Windows 98, System Policy Editor uses a default System Policy template file, Windows.ADM, when you create or open a policy file. The Windows.Adm system policy template contains the standard Registry

43、 settings which you can enable or modify for creating Config.Pol and other policy files. If you wish, you can create your own custom Policy File templates for your corporate-specific applications, where you can define a specific set of Registry settings, including settings not definable using the de

44、fault Windows.Adm file. Viewing or Editing Default System PoliciesTo take advantage of automatic downloading, create a policy file that contains user, computer, and group entries to reside in the NETLOGON directory of a Windows NT server or the PUBLIC directory of a NetWare server. Based on the clie

45、nt selected, Windows98 automatically looks in one of these locations to download your newly created system policy.To view or edit default system policies1In System Policy Editor, on the File menu, click New File.2Double-click the Default User icon to define the default settings for user-specific pol

46、icies. -OR-Double-click the Default Computer icon to define the settings for computer-specific policies.3Select the policies you want to put in place.Creating Policies for Individual Users or ComputersTo create system policies for a new user or computer1In System Policy Editor, on the Edit menu, click Add User or Add Computer.2Type the name of the user or computer you want to add.System Policy Editor adds an icon for each user or computer you add.To edit existing system policies1In System Policy Editor, double-click the i