帮客户查一些组策略的限制记录

1.隐藏开始菜单---"管理工具",理论上组策略做不到,只能修改注册表,如下将下面内容写到一个批处理里面,在域上做个策略,登录时执行,即可! (如果显示,将NO改成YES即可)reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "StartMenuAdminTools" /t REG_SZ /d "NO" /f 2.如果想将All Users文件夹由默认的%SystemDrive%移动到D:盘，那么可以先将原All Users文件夹复制到D:\Documents and Settings目录下，然后修改"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList"下的ProfilesDirectory键值，由默认的“%SystemDrive%\Documents and Settings”修改为“D:\Documents and Settings”，建议同时将Default User文件夹复制到D:盘，修改该键值并重新启动后，所有新建用户的配置文件目录都会自动建立在“D:\Documents and Settings\<用户名>”目录下。 3.配置终端服务器profiles找的Using User Profiles in Windows Server 2003http://technet.microsoft.com/en-us/library/cc776120.aspx Change a user's Terminal Services profile pathhttp://technet.microsoft.com/en-us/library/cc783578.aspx To increase profile time-out valuesIn the Group Policy Object Editor, navigate to the Maximum retries to unload and update user profile policy, which is located in Computer Configuration/Administrative Templates/System/User Profiles.
Enable this setting and set it to 120.
In the Run dialog box, type regedit, and then click OK.
Locate the following subkey in the registry and select it:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Terminal Server
On the Edit menu, click Add, and then click DWORD Value.
Add a registry entry named LogoffTimeout with the following settings:
Base: Decimal
Value: 120 (4 minutes, time-out expressed in 2-second units)
Note

Do not set this value lower than 3 minutes or higher than 15 minutes.