Windows2012 R2 Domain Policy set
Windows2012 r2 domain policy collection
At present, many enterprises are very common for domain environment, and it is also the most convenient for domain policy management machines. The following is what I have encountered in practice. I believe it is also very practical for enterprises. So if there are any mistakes and other practical strategies in the records here, please contact me (907832555) for correction and leave a message for guidance. Learning together, making progress together.
1. Prohibiting domain users from modifying ip addresses
Log in to the domain server---Open Server Manager--Find Group Policy Management in Tools--Use Default Domain Policy or Create a New Domain Policy--Edit--User Configuration--Policy--Management Template--Network--Network Connection--Enable (Disable Access to LAN Connection Properties)-----Finally, don't forget to refresh Group Policy gpupdate /force
2. Static domain users use external storage devices (mainly to prevent users from taking company data information through external storage devices)
Login to Domain Server---Open Server Manager--Find Group Policy Management in Tools--Use Default Domain Policy or Create a New Domain Policy--Edit--User Configuration--Policy--Management Template--System--Removable Storage Access--Enable (Removable Disk: Deny Write Permission)
3. Disable domain user automatic updates
Log in to the domain server---Open Server Manager--Find Group Policy Management in Tools--Use default domain policy or create a new domain policy--Edit--
Computer configuration--policies--administrative templates--windows components--windows updates--disable automatic configuration updates.
4. Enable domain policy screensaver
Log in to the domain server---Open Server Manager--Find Group Policy Management in Tools--Use default domain policy or create a new domain policy--Edit--
User Configuration--Policies--Administration Templates--Control Panel--Personalization--(Enable Screen Saver)(Enable Block Change Screen Saver)(Enable Screen Saver Timeout and Set Time)
gpupdate /force
domain problem handling
1. When you join a domain, you'll be prompted,"No network path found
The workaround is as follows: Run ipconfig /registerdns on the domain controller, then run gpupdate /force to force the refresh policy, and basically solve the problem.
Later, it will be updated one after another...
