Cch to user cho h iu hnh Windows

Bn khng phi l chuyn gia my tnh, nhng bn c gii thiu rng trong h iu hnh Windows t XP tr ln, mi ngi dng c nhng quyn v mc truy cp h thng rt khc nhau, d vic cu hnh chnh sch cho vic kh phc tp. Chng trnh User Privilege Manager s gip bn thc hin v qun tr nhng quyn ngi dng mt cch kh n gin Khi chng ta m chng trnh User Privilige Manager ln ln u tin, chng trnh s yu cu xc nh th mc cn bo v, lc ny bn c th bt u thit lp nhng th mc cn bo v hoc l bn cng c th tt n i v thit lp n trong tab Private file. Khi bn mun la chn nhng th mc cn bo v ch cn nhn nt Add v chn ng dn ti th mc cn bo v, y bn c th chn bao nhiu th mc ty hoc c th chn c mt a trn my tnh ca bn. Khi chn th mc xong bn nhn OK, mc nh th chng trnh s cm tt c cc ngi dng trong my tnh ca bn. Phn ca s bn phi s hin th nhng ngi dng b cm, bn mun cho php ngi dng no truy cp vo th mc ca bn th bn chn user v nhn nt Permit, danh sch nhng ngi dng tin tng s chuyn sang tri mn hnh,kt thc bng Finish v chn Save. Tab Privilige software: Quy nh khng cho ngi dng ngi trn my tnh ca bn c th t ci t mt chng trnh mi hoc l s dng mt s phn mm c bit trn my tnh m cha c s ng ca bn. Chn Add sau , trong ca s Look in, bn tm n nhng phn mm no m bn mun cm ci t. Trng hp mun bn mun ngn khng cho ngi dng chy nhng phn mm c ci t trn my th bn chn nt Choose from installed software list, ri chn nhng phn mm ng dng mun ngn cm sau chn OK. Sau khi la chn phn mm bn cng phi la chn nhng ngi dng no c php thc thi chng trnh trong Permitted User. Trong Tab Other Privileges bn cng c ba la chn: Only these users are allowed to modify/ delete/ execuable files: La chn nhng ngi dng c php chnh sa, xa v to nhng tp tin thc thi trn my. Only these users are allowed to execute software from network/ cdrom/ usb disk: La chn nhng ngi dng c php thc thi nhng phn mm ng dng t mng, a cdrom v a di ng usb. Only these users can change windows setting: Chn nhng ngi dng c th thay i nhng thng s hot ng ca h thng windows nh l tt m dch v, to ngi dng mi, chnh thi gian Nu bn nh du cho vo nhng ny th mc nh ch cho php ngi c quyn cao nht thc hin nhng hnh ng nh l administrator. Tab Activity Monitor: Nu bn mun gim st hnh ng ca ngi dng, bn c th nh trong thi gian bao lu chng trnh s t ng lu li mn hnh lm vic mt ln di dng hnh nh jpg. Nu bn khng mun s dng chc nng ny th nh du cho vo Capture screen shot and save as jpg file, v nh save li khi cu hnh xong. Mt khi bn cu hnh xong chng trnh, bc cui dng l ht sc quan trng, qua tab Run status, nhn vo nt Start Protection service bt u thc hin nhng chnh sch m bn va khai bo trong chng trnh, nu bn mun dng vic ngn cm, qun l hnh ng ca ngi dng th nhn nt Stop Protection service dng chng trnh li. Pha di l nt Set Manager Password, mt khu bo v trc khi vo chng trnh User Privilege Manager, iu ny l cn thit bo v thng tin m bn va khai bo trong chng trnh, v nu bn mt ai vo c chng trnh ny th bn s chnh l nn nhn ca nhng ngi dng c tnh t m.

Phn quyn s dng my tnh trn Windows XP

Nh bn hay phng lm vic c quan ch c mt my tnh, m li c nhiu ngi. Lm th no s dng chung m mi ngi ch c mt s quyn hn nht nh? C th c nhiu tin ch, chng hn nh nhng phn mm kha th mc. Tuy nhin, vi Windows XP v nht l vic s dng nh dng NTFS cho cc phn vng a cng bn c th c mt cch qun l vic s dng my v cc thit b khc, bo v cu hnh h thng mt cch bi bn, c k hoch v n gin. Vic qun l trn my tnh da vo ti khon (account).Mi account nh vy c tn (user name),m khu (password) v km theo mt s quyn hn (permission) nht nh. Mi khi bt my bn s logon (ng nhp) bng cch chn mt account s dng.Nu account c mt khu, bn phi g ng mt khu.K t , bn s dng my tnh vi nhng quyn hn ca account . Vic qun l vic s dng my tnh, cc thit b trn mt mng my tnh l mt vn phc tp c trao cho ngi qun tr mng. Tuy nhin, nh bn s thy, nu bn c nhu cu th trn mt my n,vi Windows XP, bn s d dng lm cng vic ny s dng my tnh ca gia nh mnh hay phng lm vic tr nn an ton v hiu qu hn.

HAI KIU NG NHP S DNG MY - kiu mc nh sau khi ci Windows XP l mn hnh Welcome ca Windows XP v c danh sch cc acount (mi account c 1 hnh i din ty chn). Ngi dng bm chn account v g mt khu nu c. - kiu th 2 l phi g tn account vo trong hp thoi logon nh Windows 2000. thay i, vo Control Pannel User Account Change the way - b mc Welcome Screen nu mun theo kiu 2000 v chn mc ny nu mun theo kiu XP. Nu chn kiu 2000 buc ngi dng phi g tn v kiu ny an ton hn.

HAI LOI ACCOUNT - Computer Administrator (ngi qun l my): v l ngi qun l nn vi account ny bn c quyn to v quy nh quyn hn cho cc account khc, bn c th ci t chng trnh v g b chng trnh, ci t v g b thit b ngha l lm g cng c. Khi ci Windows XP, mc nh c mt account kiu ny c to ra vi tn Administrator, ti khon ny ch xut hin khi khi ng nu khng c account no khc. - Limited (quyn gii hn): Vik account ny, ngi dng khng th thay i tnh trng ca my. C th l khng th ci t hoc g b chng trnh, khng th thay i cu hnh h thng, khng th nh dng a v ng nhin l khng th to hay xa account khc.

QUN L ACCOUNT Mun qun l account bn phi login vi t cch Administrator. 1. Bt tt account Guest

- l account c sn (built-in), mc nh khng c mt khu. - C quyn hn kiu Account Limited. - Mc nh b off, khng dng c. Cch bt/ tt account guest: Trong User Account, chn Guest v chn Turn on (hay Turn off). 2. Gii hn vic thay i cu hnh h thng gii hn vic thay i cu hnh ca h thng, bn nn to cc account Limited cho nhng ngi khng rnh hoc khng c trch nhim thay i cu hnh h thng. Mt ngi khi s dng my tnh vi t cch l mt account kiu ny th khi ng n nhng thnh phn mang tnh quan trng i vi h thng, h s c thng bo khng c quyn thay i hoc t chi truy nhp (Access denied). Vic s dng my tnh vi Account kiu Limited c thm li im l Windows s khng cho php mt chng trnh virus thc hin nhng thao tc nguy him. Mc khc, ngay c chnh bn, tr trng hp mun vc my tnh cng nn c thi quen logon vo my tnh vi mt ti khon kiu ny khi ch mun lm vic bng cc ng dng thng thng.

3. Gii hn s dng a, th mc, tp tin. n y mi chuyn phc tp hn mt cht v c th s dng tnh nng cp pht quyn s dng a, th mc, tp tin th a phi c nh dng NTFS. Gi s ta mun quy nh vic s dng a hoc th mc, tp tin trn a D: th trc tin phi xem n c phi l nh dng NTFS khng bng cch bm chut phi ln biu tng a Proterties, xem dng File System. Nu khng phi th chuyn thnh nh dng FTFS bng lnh convert ti Command Prompt theo c php: Convert <k hiu a> /fs:NTFS *** Qui nh vic s dng a, th mc, tp tin trn a c nh dng NTFS Bm phi chut ln th mc hay a Properties - th Security, chn ngi s dng trong danh sch, nu khng thy th nhn nt Add v g tn tn Account trong khung Enter Object name, bm Check Names bo m tn thc s tn ti quy nh quyn cho ngi ny trong ct Allow (chophp) hay Denny (cm) bng cch nh du vo tng ng. Cc loi quyn s dng hi phc tp : Full Control : tan quyn ; Modify : sa i ; Read : c ; Read and Execute : c v chy cc chng trnh ; List Folder : xem danh sch th mc con ; Write : ghi. Trong thc t, n gin, bn c th ch cn Denny phn Read v Write i vi nhng ngi m bn cho l khng nn v khng c c m thi. Ghi ch : Nu bn khng thy th Scurity th hy voControl Pannel Foler Options - th View, bm chut b du kim mc cui : Use simple file sharing. *** Gii hn khng gian a c s dng Hn ngch (quota) l phn khng gian a c cp cho mt account. trnh ngi dng to v lu nhng tp tin qu ln ln a x ht phn ca ngi khc, bn s bm chut phi trn mt a m bn mun cung cp hn ngch Properties - th Quota, chn Enable Quote

management (bt ch qun l hn ngch) v Deny disk space to user exceedubg quota limit (t chi cp thm cho ngi dng khi h s dng qu hn ngch Bm vo nt Quota Entries. Trc ht, trong ca s Quota Entries s cho ra cc Quota c cp pht. Mun giao hn ngch cho mt ngi dng th chn menu Quota New Quota Entry g tn (cc) account v bm OK. Trong ca s Add New Quota Entry, bm chn vo Limit disk space to (gii hn khng gian a) v qui nh dung lng m (cc) account ny c php dng (trn a ). *** Qun l s dng my in v fax Trong Control Pannel, chn Printers and Faxes. Bm nt phi ln my in hay fax Proterties v qui nh quyn hn ca my in tng t nh i vi a v th mc. Cn bit l mt ngi b Deny quyn in th khi h ra lnh in, Windows s thng bo vi ni dung l c li in, ch khng thng bo l khng c quyn truy nhp (Access dennied) nh i vi a v th mc, do khng nn vi vng cho l my in c vn . *** Qun l vic s dng Internet Vic s dng Internet s thng qua vic s dng cc kt ni (connections),mi kt ni c th kim sot bng password (d nhin khng chn mc save password lu li mt khu).Tuy nhin, vn l c mt s dch vkt ni s dng mt khu chung, nh dch v vnn1269.Mt khc,trnmy n ci Windows XP khng c chuyn cp pht quyn s dng cc kt ni i vi cc account,do phi dng mo sau y: v kt ni Internet thng qua vic s dng modem, nn bng cch logon vit cch Administrator, bn disble thit b modem i, v th l nhng account Limited khc do khng c quyn thay i cu hnh thit b nn khng Enable c modem, ng ngha vi vic khng truy cp c Internet. tt modem, bn vo Control Pannel System Hardware Device Manager, bm chut phi vo Modem v chn Disable. Lc ny, trc tn modem s c du cho . Mo ny cn c th dng cho mt s thit b khc nh a mm, fax [=========> B sung bi vit <=========] ay xin loi minh suu tam a nha chu ko phai la biet dau [=========> B sung bi vit <=========] neu thay chua du thi co the tham khao them cung duoc minh cung chi tham khao o nhung trang web khac thoi neu co gi sai xot thi minh xin loi vi minh chi muon giup moi nguoi thoi -------------@@@@@@@-------------Group Policy Trong Windows XP c mt cng c kh hay, l Group Policy (GP). Nhiu ngi s dng Windows lu nhng cha h bit c cng c ny v khng tm thy n trong Control Panel, Administrative Tools hay System Tools. GP l mt trong cc thnh phn ca Microsoft Management Console v bn phi l thnh vin ca nhm Adminstrators mi c quyn s dng chng trnh ny. Nu khng, bn s nhn c thng bo li sau: Khi ng chng trnh: C 2 cch khi ng chng trnh. Cch 1: Vo menu Start > Run, ri nhp lnh mmc khi ng Microsoft Management

Console. Sau vo trnh n File, chn Open. Trong ca s Open, nhn nt Browse ri tm n th mc System32. Bn s thy nhiu tp tin xut hin c phn m rng l *.msc. Cc tp tin dng ny l nhng thnh phn c to bi Microsoft Management Console. Nu , bn s thy mt s cng c quen thuc nh: Event Viewer (eventvwr.msc), Services (services.msc) (hai cng c ny nm trong Adminstation Tools)... v cn nhiu na. Trong phm vi ca bi vit ny, bn cn chn gpedit.msc m Group Policy. Cch 2: Nu bn lm vic thng xuyn vi GP th cch ny s nhanh hn. Vo menu Start > chn Run v nhp vo gpedit.msc ri nhn OK khi ng chng trnh. Khi chng trnh khi ng, bn s thy ca s giao din nh hnh bn di: Chng trnh c phn theo dng cy v rt d dng. Nu s dng cc phn mm nh Security Administrator, TuneUp Utilities,... bn s thy hu ht cc ty chn cu hnh h thng u nm trong GP. V bn hon ton c th s dng GP m Windows cung cp sn qun tr h thng, khng cn phi ci thm cc phn mm trn. * Cch s dng chung: tm ti cc nhnh, Chn Not configured nu khng nh cu hnh cho tnh nng , Enable kick hot tnh nng, Disable v hiu ha tnh nng. * Computer Configuration: Cc thay i trong phn ny s p dng cho ton b ngi dng trn my. Trong nhnh ny cha nhiu nhnh con nh: + Windows Settings: bn s cu hnh v vic s dng ti khon, password ti khon, qun l vic khi ng v ng nhp h thng... + Administrative Templates: - Windows Components: bn s cu hnh cc thnh phn ci t trong Windows nh: Internet Explorer, NetMeeting... - System: cu hnh v h thng. Cn lu l trc khi cu hnh cho bt k thnh phn no, bn cng cn phi tm hiu tht k v n. Bn c th chn thnh phn ri nhp chut phi chn Help. Cn mt cch khc l khng chn Help m chn Properties. Khi ca s Properties xut hin, chuyn sang th Explain c gii thch chi tit v thnh phn ny.

Mc nh th tnh trng ban u ca cc thnh phn ny l Not configured. thay i tnh trng cho thnh phn no , bn chn th Setting trong ca s Properties, s c 3 ty chn cho bn chn la l: Enable (c hiu lc), Disable (v hiu lc) v Not configure (khng cu hnh). * User Configuration: gip bn cu hnh cho ti khon ang s dng. Cc thnh phn c khc i cht nhng vic s dng v cu hnh cng tng t nh trn. Phn I: Computer Configuration: Windows Setting: Ti y bn c th tinh chnh, p dng cc chnh sch v vn s dng ti khon, password ti khon, qun l vic khi ng v ng nhp h thng... + Scripts (Startup/Shutdown): Bn c th ch nh cho windows s chy mt on m no khi Windows Startup hoc Shutdown.

+ Security settings: Cc thit lp bo mt cho h thng, cc thit lp ny c p dng cho ton b h thng ch khng ring ngi s dng no. Name Tm tt tnh nng Account Policies Cc chinh sach p dng cho tai khoan cua ngi dng. Local Policies Kim inh nhng chinh sach, nhng tuy chon quyn li va chinh sach an toan cho ngi dung ti ch. Public Key Policies Cc chnh sch kha dng chung Sau y chung ta se ln lt i vao tm hiu chi tit tng phn nho cua no. 1. Account Policies: Thit lp cc chnh sch cho ti khon a> Password Policies: Bao gm cc chinh sach lin quan n mt khu ti khon cua ngi s dung ti khon trn my. Enforce password history: Vi nhng ngi s dng c khng c thi quen ghi nh nhiu mt khu, khi buc phi thay i mt khu th h vn dng chnh mt khu c thay cho mt khu mi, iu ny l mt k h ln ln quan trc tip n vic l mt khu. Thit lp ny bt buc mt mt khu mi khng c ging bt k mt s mt khu no do ta quyt nh. C gi tr t 0 n 24 mt khu. Maximum password age: Thi gian ti a mt khu con hiu lc, sau thi gian ny h thng s yu cu ta thay i mt khu. Vic thy i mt khu nh k nhm nng cao an ton cho ti khon, v mt k xu c th theo di nhng thi quen ca bn, t c th tm ra mt khu mt cch d dng. S gi tr t 1 n 999 ngy. Gi tr mc nh l 42. Minimum password age: Xc nh thi gian ti thiu trc khi c th thay i mt khu. Ht thi gian ny bn mi c th thay i mt khu ca ti khon, hoc bn c th thay i ngay lp tc bng cch thit lp gi tr l 0. Gi tr t 0 n 999 ngy. Bn cn thit lp Minimum password age ln hn khng nu bn mun chnh sch Enforce password history c hiu qu, v ngi s dng c th thit lp li mt khu nhiu ln theo chu k h c th s dng li mt khu c. Minimum password length: dai nho ti thiu cua mt khu tai khoan. (Tinh bng s ky t nhp vao). di ca mt khu c gi tr t 1 n 14 k t. Thit lp gi tr l khng nu bn khng s dng mt khu. Gi tr mc nh l 0. Password must meet complexity requirements: Quyt nh phc tp ca mt khu. Nu tnh nng ny c hiu lc. Mt khu ca ti khon t nht phi t nhng yu cu sau: - Khng cha tt c hoc mt phn tn ti khon ngi dng - di nh nht l 6 k t - Cha t 3 hoc 4 loi k t sau: Cc ch ci thng (a -> Z), cc ch ci hoa (A -> Z), Cc ch s (0 -> 9) v cc k t c bit. phc tp ca mt khu c coi l bt buc khi to mi hoc thay i mt khu. inh : Disable. Store password using reversible encryption for all users in the domain: Lu tr mt khu s dung ma hoa ngc cho tt ca cac ngi s dung domain. Tnh nngcung cp s h tr cho cc ng dng s dng giao thc,n yu cu s am hiu v mt khu ca ngi s dng. Vic lu tr mt khu s dng phng php m ha ngc thc cht ging nh vic lu tr cc vn bn m ha ca thng tin bo v mt khu. Mc inh : Disable. b> Acount lockout Policy: * Account lockout duration: Xc nh s pht cn sau khi ti khon c kha trc khi vic m kha c thc hin. C gi tr t 0 n 99.999 pht. C th thit lp gi tr 0 nu khng mun vic t ng Unlock. Mc nh khng c hiu lc v chnh sch ny ch c khi chnh sch Account lockout threshold c thit lp. * Account lockout threshold: Xc nh s ln c gng ng nhp nhng khng thnh cng.

Trong trng hp ny Acount s b kha. Vic m kha ch c th thc hin bi ngi qun tr hoc phi i n khi thi hn kha ht hiu lc. C th thit lp gi tr cho s ln ng nhp sai t 1 n 999. Trong trng hp thit lp gi tr 0, account s khng b kha. * Reset account lockout counter after: Thit lp li s ln c gng ng nhp v 0 sau mt khong thi gian quy nh. Thit lp ny ch c hiu lc khi Account lockout threshold c thit lp. 2. Local Policies: Cc chinh sach cuc b: User rights Assignment: n inh quyn cho ngi s dung. Quyn ca ngi s dng y bao gm cc quyn truy cp, quyn backup d liu, thay i thi gian ca h thng Trong phn nay, cu hinh cho mt muc nao o ban co th nhay up chut ln muc o va nhn nut Add user or group trao quyn cho user hoc Group nao ban mun. * Access this computer from the network: Vi nhng k t m, tc mch th ti sao chng ta li phi cho php chng truy cp vo my tnh ca mnh. Vi thit lp ny bn c th tuy thm, bt quyn truy cp vo my cho bt c ti khon hoc nhm no. * Act as part of the operating system: Chnh sch ny ch nh ti khon no s c php hot ng nh mt phn ca h thng. Mc nh, ti khon Aministrator c quyn cao nht, c th thay i bt k thit lp no ca h thng, c xc nhn nh bt k mt ngi dng no, v th c th s dng ti nguyn h thng nh bt k ngi dng no. Ch c nhng dch v chng thc mc thp mi yu cu c quyn ny. * Add workstations to domain: Thm mt ti khon hoc nhm vo min. Chnh sch ny ch hot ng trn h thng s dng Domain Controller. Khi c thm vo min, ti khon ny s c thm cc quyn hot ng trn dch v th mc (Active Directory), c th truy cp ti nguyn mng nh mt thnh vin trn Domain. * Adjust memory quotas for a process: Ch nh nhng ai c php iu chnh ch tiu b nh dnh cho mt qu trnh x l. Chnh sch ny tuy c lm tng hiu sut ca h thng nhng n c th b lm dng phc v cho nhng mc ch xu nh tn cng t chi dch v DoS (Dinal of Sevices). * Allow logon through Terminal Services: Terminal Services l mt dch v cho php chng ta ng nhp t xa n my tnh. Chnh sch ny s quyt nh gip chng ta nhng ai c php s dng dch v Terminal ng nhp vo h thng. * Back up files and directories: Tng t nh cc chnh sch trn, y s cp php cho nhng ai s c quyn backup d liu. * Change the system time: Cho phep ngi s dung nao co quyn thay i thi gian cua h thng. * Create global objects: Cp quyn cho nhng ai c th to ra cc i tng dng chung * Force shutdown from a remote system: Cho php nhng ai c quyn tt my qua h thng iu khin t xa. * Shut down the system: Cho php ai c quyn Shutdown my. Link: http://www.ddth.com/showthread.php/160220-Ph%C3%A2n-quy%E1%BB%81n-choUser%21#ixzz1fN1qI7eW