| Osiris as Myth |

Menggunakan “gpedit.msc”…

Expertise: advance (newbies dan intermediate level use with caution!)

Disclaimer: do and use at your own risk. sbb gpedit.msc adalah hardcoded pd registry windows, dan sebarang perubahan pd tetapan setting di gpedit.msc akan terus mengubah tetapan pd registry windows. Analogi registry windows adlah sama seperti sel saraf manusia. Sekiranya korg x pasti nak buat ape dgn gpedit.msc, baca dahulu “description” pada setiap tetapan sebelum mengubah apa2 nilai value pd tetapan tu. OK?

Gpedit.msc adalah build in Windows Microsoft Console “msc – microsoft console”.

Pada gpedit.msc, terbahagi pd dua kelas tetapan:

1. Local computer
2. Local User

Setiap kelas tetapan mempunyai effectiveness dan value bg setiap variable tersendiri (same thing goes in math).

So now. Apa yg boleh buat dengan gpedit ni? Aha. Many things.. For evil people (untuk org ja’at).. you can lockup computer and freez up in old style. Maksudnye? Um. Windows tetap running, dan masuk pd enviroment desktop, tapi user takkan boleh menggunakan apa skali pun application / program (mouse tetap bergerak, but without single point of use). Dont believe me? You can try with your own PC.. Do at your own risk. I’ve done my part to warn you about this. No cover up, no recovery (unless korg ade image utk apply semula pd partition sistem windows). Oh ya, the good way to test this tool is to always do partition image backup pada partition sistem windows. Please do it before its too late. ;-)

For white hat (admin yg baik hati), korg boleh gunakan policy pd gpedit.msc untuk mengawal akses dan restriction pd setiap satu2 pc. Cthnya: prevent access to registry entry, cmd, control panel, display option, IP settings, turn off auto play, disable windows update, remove task manager, remove lock computer, remove change password, remove logoff, run script masa login dan logoff windows, restric access untuk beberapa program sahaja, prohibit TCP / IP configuration, networking options, shared file, bla bla bla bla.. etc. (look at it by your self ya, nk tulis semua nya takkan habis satu page ni..)

Running gpedit.msc : Click “start”.. pergi ke “run”.. pada kotak run, taip “gpedit.msc” .. enter! Viola! Your’ at it now :-)

Korg boleh nmpk setting seperti ni dlm menu startup:

So.. right now, example yg akan di beri utk “prevent access bg mengubah desktop dan TCP/IP @ network” korg… simple and easy ;-)

1. Disable Display setting changes (menyekat perubahan setting display).

1. Run gpedit.msc .. dan click “user configuration” –> “administrative template” –> “Control Panel” –> “Desktop”.
2. Double Click “Remove Display in control panel”.. Set kan “enabled” … Click “apply”
3. Cuba run “Display” dari “Control Panel” sekarang. Korg adakan dapat Windows popup message “Disabled by administrator”. Untuk akses semula, tukarkn value “enabled” tadi kepada “not configured”. Done

2. Disable TCP/IP or Networking Changes (menyekat perubah setting network dan TCP/IP).

1. Run gpedit.msc .. navigate ke: /User configuration/Administrative Templates/Network/Network Connections/
2. Enable: Windows 2000 Network Connections settings for Administrators
   Enable: Prohibit access to properties of components of a LAN connection
3. Done! ;-) Setting ni penting bagi mengelak user mengubah DNS / IP pd pc.

Sebaiknya, create user account yg limited privillage. Jgn beri kuasa admin kepada semua user. Sekian. Gudlak!