域详解（Domain specification）.docVIP

域详解（Domain specification） With the domain environment, you can manage and control all users and computers in your domain by using the relevant management tools to set group policies on the domain controller. In actual use, I feel this kind of management and control covering almost all aspects of the use, anyway, now I just move finger on a domain controller, such as for all changes can make the network environment can not use the computer. In theory, this is entirely possible, and you may be interested in doing it yourself after reading this article. Talk less, book the book. As stated above, we already have a domain environment that uses group policies to unify the control of users and computers. Now open the Group Policy Editor on a domain controller, note that you cannot use the gpedit.msc (that is, the strategy of editing the machine) to open the start - - program management tools: Active Directory users and computers. Screenshot as follows: In the open window, select your domain name, right-click on it, select properties, and then select group policy in the pop-up Properties dialog box. Now youll see the default domain policy -- Default Domain Policy, as follows: Click the Edit button to open the group policy editor. Changing the options will affect all users and computers in the domain that are joined. This is because the computer starts and queries the domain controller when the user logs in and uses the group policy settings here. However, it is recommended that you do not change the default domain policy -- Default Domain Policy, so that we can always revert to the default settings of the system. Ha ha, leaving a maze out of the road, is required before all the courses. By default, how do we edit group policies? The answer is through organizational units in the establishment of computer users and the last time we had two new organizational units: all users and all computers, organizational unit will be a we often use the method of group strategy according t