在组策略禁止某应用程序运行/指定某程序运行

域控制器在精髓在于灵活的管理我们我们的局域网,哪么是否也可以禁止一些应应用程序的运行呢?

域控制器是Active Directory域的指挥机构,出于安全性考虑,可以编辑组策略使得登录到域控制器(DC)的用户只能运行指定的程序,操作步骤如下所述:

第1步,打开“组策略编辑器”窗口,在左窗格中依次展开“用户配置”→“管理模板”目录,并选中“系统”选项。然后在右窗格中双击“只运行许可的Windows应用程序”选项,(当然在此还有另外一个“不要指定的应该用程序运行”大家在这里可以灵活地选择,具体视你的需要)打开“只运行许可的Windows应用程序 属性”对话框。选中“已启用”单选框,并单击“显示”按钮,如图所示。

PPStream.exe

PPSKernel.exe

组策略禁止程序运行

第2步,在打开的“显示内容”对话框中单击“添加”按钮,打开“添加项目”对话框。然后在“输入要添加的项目”编辑框中输入具体程序的可单击文件名称(如QQ.exe),并依次单击“确定”→“确定”按钮。返回“只运行许可的Windows应用程序 属性”对话框,再次单击“确定”使设置生效,如图所示。

gpedit 禁止程序运行

写到这里可能有朋友就了解,如果我的QQ改命为QQ2不就可以再次运行了嘛?YES SURE!这样就用这一招就不行了,但是有多少朋友知道可以这样搞呢?你不也是知道我是用此方法限制才知道的,不是吗?当然我们还可以用组策略把它哈希掉

 

 

 


( ! ) Warning: count(): Parameter must be an array or an object that implements Countable in /var/www/vhosts/shan.info/httpdocs/templates/gk_publisher/html/com_k2/templates/default/item.php on line 169
Call Stack
#TimeMemoryFunctionLocation
10.0003397688{main}( ).../index.php:0
20.03511348048Joomla\CMS\Application\SiteApplication->execute( ).../index.php:49
30.03511348048Joomla\CMS\Application\SiteApplication->doExecute( ).../CMSApplication.php:196
40.12992791272Joomla\CMS\Application\SiteApplication->dispatch( $component = ??? ).../SiteApplication.php:233
50.13032815672Joomla\CMS\Component\ComponentHelper::renderComponent( $option = 'com_k2', $params = ??? ).../SiteApplication.php:194
60.13072871024Joomla\CMS\Component\ComponentHelper::executeComponent( $path = '/var/www/vhosts/shan.info/httpdocs/components/com_k2/k2.php' ).../ComponentHelper.php:377
70.13082888080require_once( '/var/www/vhosts/shan.info/httpdocs/components/com_k2/k2.php ).../ComponentHelper.php:402
80.13453022752K2ControllerItem->execute( $task = '' ).../k2.php:64
90.13453022752K2ControllerItem->display( $cachable = ???, $urlparams = ??? ).../BaseController.php:710
100.13693046000K2ControllerItem->display( $cachable = TRUE, $urlparams = ['id' => 'INT', 'print' => 'INT', 'lang' => 'CMD', 'Itemid' => 'INT', 'm' => 'INT', 'amp' => 'INT', 'tmpl' => 'CMD', 'template' => 'CMD'] ).../item.php:78
110.13693046000K2ControllerItem->display( $cachable = TRUE, $urlparams = ['id' => 'INT', 'print' => 'INT', 'lang' => 'CMD', 'Itemid' => 'INT', 'm' => 'INT', 'amp' => 'INT', 'tmpl' => 'CMD', 'template' => 'CMD'] ).../controller.php:19
120.13753053136Joomla\CMS\Cache\Controller\ViewController->get( $view = class K2ViewItem { public $document = class Joomla\CMS\Document\HtmlDocument { public $_links = [...]; public $_custom = [...]; public $template = NULL; public $baseurl = NULL; public $params = NULL; public $_file = NULL; protected $_template = ''; protected $_template_tags = [...]; protected $_caching = NULL; private $_html5 = NULL; public $title = '在组策略禁止某应用程序运行/指定某程序运行'; public $description = '域控制器在精髓在于灵活的管理我们我们的局域网,哪么是否也可以禁止一些应应用程序的运行呢? 域控制器是Active Directory域的指挥机构,出于安全性考虑,可以编辑组策略使得登录到域控制器(DC)的用户只能运行指定的程序,操作步骤如下所述: 第1步,打开“组策略编辑器”窗口,在左窗格中依次展开...'; public $link = ''; public $base = 'https://www.shan.info/item/456-2013-05-17-14-49-12.html'; public $language = 'en-gb'; public $direction = 'ltr'; public $_generator = 'Joomla! - Open Source Content Management'; public $_mdate = ''; public $_tab = '\t'; public $_lineEnd = '\n'; public $_charset = 'utf-8'; public $_mime = 'text/html'; public $_namespace = ''; public $_profile = ''; public $_scripts = [...]; public $_script = [...]; protected $scriptOptions = [...]; public $_styleSheets = [...]; public $_style = [...]; public $_metaTags = [...]; public $_engine = NULL; public $_type = 'html'; protected $mediaVersion = '15dbf078d61dbbf76811992dd0143dd9' }; protected $_name = 'item'; protected $_models = ['itemlist' => class K2ModelItemlist { ... }, 'item' => class K2ModelItem { ... }]; protected $_basePath = '/var/www/vhosts/shan.info/httpdocs/components/com_k2'; protected $_defaultModel = 'item'; protected $_layout = 'item'; protected $_layoutExt = 'php'; protected $_layoutTemplate = '_'; protected $_path = ['template' => [...], 'helper' => [...]]; protected $_template = '/var/www/vhosts/shan.info/httpdocs/templates/gk_publisher/html/com_k2/templates/default/item.php'; protected $_output = NULL; protected $_escape = 'htmlspecialchars'; protected $_charset = 'UTF-8'; protected $_errors = []; public $baseurl = ''; public $addLink = NULL; public $inlineCommentsModeration = FALSE; public $item = class stdClass { public $id = '456'; public $title = '在组策略禁止某应用程序运行/指定某程序运行'; public $alias = '2013-05-17-14-49-12'; public $catid = '39'; public $published = '1'; public $introtext = '<p style="outline: none; border: 0px none; margin: 15px 0px 0px; padding: 0px;">域控制器在精髓在于灵活的管理我们我们的局域网,哪么是否也可以禁止一些应应用程序的运行呢?<span id="more-3543" style="outline: none;"></span></p>\r\n<p style="outline: none; border: 0px none; margin: 15px 0px 0px; padding: 0px;">域控制器是Active Directory域的指挥机构,出于安全性考虑,可以编辑组策略使得登录到域控制器(DC)的用户只能运行指定'; public $fulltext = ''; public $video = NULL; public $gallery = NULL; public $extra_fields = NULL; public $extra_fields_search = ''; public $created = '2013-05-17 14:47:51'; public $created_by = '63'; public $created_by_alias = ''; public $checked_out = '0'; public $checked_out_time = '0000-00-00 00:00:00'; public $modified = '0000-00-00 00:00:00'; public $modified_by = '0'; public $publish_up = '2013-05-17 14:47:51'; public $publish_down = '0000-00-00 00:00:00'; public $trash = '0'; public $access = '1'; public $ordering = '21'; public $featured = '0'; public $featured_ordering = '0'; public $image_caption = ''; public $image_credits = ''; public $video_caption = ''; public $video_credits = ''; public $hits = '1105'; public $params = class Joomla\Registry\Registry { ... }; public $metadesc = ''; public $metadata = 'robots=\nauthor='; public $metakey = ''; public $plugins = ''; public $language = '*'; public $category = class TableK2Category { ... }; public $link = '/item/456-2013-05-17-14-49-12.html'; public $printLink = '/item/456-2013-05-17-14-49-12.html?tmpl=component&amp;print=1'; public $tags = [...]; public $imageXSmall = ''; public $imageSmall = ''; public $imageMedium = ''; public $imageLarge = ''; public $imageXLarge = ''; public $attachments = [...]; public $rawTitle = '在组策略禁止某应用程序运行/指定某程序运行'; public $author = class Joomla\CMS\User\User { ... }; public $videoType = 'allvideos'; public $text = '<p style="outline: none; border: 0px none; margin: 15px 0px 0px; padding: 0px;">域控制器在精髓在于灵活的管理我们我们的局域网,哪么是否也可以禁止一些应应用程序的运行呢?<span id="more-3543" style="outline: none;"></span></p>\r\n<p style="outline: none; border: 0px none; margin: 15px 0px 0px; padding: 0px;">域控制器是Active Directory域的指挥机构,出于安全性考虑,可以编辑组策略使得登录到域控制器(DC)的用户只能运行指定'; public $event = class stdClass { ... }; public $jcfields = [...]; public $image = ''; public $imageWidth = '600'; public $comments = [...]; public $numOfComments = 0; public $nextLink = '/item/457-2013-05-17-14-50-02.html'; public $nextTitle = '巧用组策略限制访问网站'; public $nextImageXSmall = ''; public $nextImageSmall = ''; public $nextImageMedium = ''; public $nextImageLarge = ''; public $nextImageXLarge = ''; public $previousLink = '/item/98-mldonkey-设置.html'; public $previousTitle = 'mldonkey 设置'; public $previousImageXSmall = ''; public $previousImageSmall = ''; public $previousImageMedium = ''; public $previousImageLarge = ''; public $previousImageXLarge = ''; public $absoluteURL = 'https://www.shan.info/item/456-2013-05-17-14-49-12.html'; public $langTagForFB = 'en_GB'; public $langTagForTW = 'en-gb'; public $langTagForLI = 'en_GB'; public $sharinglink = 'https://www.shan.info/item/456-2013-05-17-14-49-12.html'; public $socialLink = 'https%3A%2F%2Fwww.shan.info%2Fitem%2F456-2013-05-17-14-49-12.html'; public $twitterURL = 'https://twitter.com/intent/tweet?text=%E5%9C%A8%E7%BB%84%E7%AD%96%E7%95%A5%E7%A6%81%E6%AD%A2%E6%9F%90%E5%BA%94%E7%94%A8%E7%A8%8B%E5%BA%8F%E8%BF%90%E8%A1%8C%2F%E6%8C%87%E5%AE%9A%E6%9F%90%E7%A8%8B%E5%BA%8F%E8%BF%90%E8%A1%8C&amp;url=https%3A%2F%2Fwww.shan.info%2Fitem%2F456-2013-05-17-14-49-12.html'; public $langTagForGP = ''; public $emailLink = '/component/mailto/?tmpl=component&amp;template=gk_publisher&amp;link=542cebb4a9f61ba609b5547d8404f63b8b6a7941' }; public $user = class Joomla\CMS\User\User { protected $isRoot = FALSE; public $id = 0; public $name = NULL; public $username = NULL; public $email = NULL; public $password = NULL; public $password_clear = ''; public $block = NULL; public $sendEmail = 0; public $registerDate = NULL; public $lastvisitDate = NULL; public $activation = NULL; public $params = NULL; public $groups = [...]; public $guest = 1; public $lastResetTime = NULL; public $resetCount = NULL; public $requireReset = NULL; protected $_params = class Joomla\Registry\Registry { ... }; protected $_authGroups = NULL; protected $_authLevels = [...]; protected $_authActions = NULL; protected $_errorMsg = NULL; protected $userHelper = class Joomla\CMS\User\UserWrapper { ... }; protected $_errors = [...]; public $aid = 0; public $gid = 1 }; public $params = class Joomla\Registry\Registry { protected $data = class stdClass { ... }; protected $initialized = TRUE; public $separator = '.' }; public $pagination = class Joomla\CMS\Pagination\Pagination { public $limitstart = 0; public $limit = 10; public $total = 0; public $prefix = ''; public $pagesStart = 1; public $pagesStop = 0; public $pagesCurrent = 1; public $pagesTotal = 0; public $hideEmptyLimitstart = FALSE; protected $viewall = FALSE; protected $additionalUrlParams = [...]; protected $app = class Joomla\CMS\Application\SiteApplication { ... }; protected $data = NULL } }, $method = 'display', $id = ???, $wrkarounds = ??? ).../BaseController.php:663
130.13813073504K2ViewItem->display( $tpl = ??? ).../ViewController.php:102
140.17696066968K2ViewItem->display( $tpl = NULL ).../view.html.php:742
150.17696066968K2ViewItem->loadTemplate( $tpl = NULL ).../HtmlView.php:230
160.17806270320include( '/var/www/vhosts/shan.info/httpdocs/templates/gk_publisher/html/com_k2/templates/default/item.php ).../HtmlView.php:701

( ! ) Notice: Only variables should be assigned by reference in /var/www/vhosts/shan.info/httpdocs/templates/gk_publisher/html/com_k2/templates/default/item.php on line 478
Call Stack
#TimeMemoryFunctionLocation
10.0003397688{main}( ).../index.php:0
20.03511348048Joomla\CMS\Application\SiteApplication->execute( ).../index.php:49
30.03511348048Joomla\CMS\Application\SiteApplication->doExecute( ).../CMSApplication.php:196
40.12992791272Joomla\CMS\Application\SiteApplication->dispatch( $component = ??? ).../SiteApplication.php:233
50.13032815672Joomla\CMS\Component\ComponentHelper::renderComponent( $option = 'com_k2', $params = ??? ).../SiteApplication.php:194
60.13072871024Joomla\CMS\Component\ComponentHelper::executeComponent( $path = '/var/www/vhosts/shan.info/httpdocs/components/com_k2/k2.php' ).../ComponentHelper.php:377
70.13082888080require_once( '/var/www/vhosts/shan.info/httpdocs/components/com_k2/k2.php ).../ComponentHelper.php:402
80.13453022752K2ControllerItem->execute( $task = '' ).../k2.php:64
90.13453022752K2ControllerItem->display( $cachable = ???, $urlparams = ??? ).../BaseController.php:710
100.13693046000K2ControllerItem->display( $cachable = TRUE, $urlparams = ['id' => 'INT', 'print' => 'INT', 'lang' => 'CMD', 'Itemid' => 'INT', 'm' => 'INT', 'amp' => 'INT', 'tmpl' => 'CMD', 'template' => 'CMD'] ).../item.php:78
110.13693046000K2ControllerItem->display( $cachable = TRUE, $urlparams = ['id' => 'INT', 'print' => 'INT', 'lang' => 'CMD', 'Itemid' => 'INT', 'm' => 'INT', 'amp' => 'INT', 'tmpl' => 'CMD', 'template' => 'CMD'] ).../controller.php:19
120.13753053136Joomla\CMS\Cache\Controller\ViewController->get( $view = class K2ViewItem { public $document = class Joomla\CMS\Document\HtmlDocument { public $_links = [...]; public $_custom = [...]; public $template = NULL; public $baseurl = NULL; public $params = NULL; public $_file = NULL; protected $_template = ''; protected $_template_tags = [...]; protected $_caching = NULL; private $_html5 = NULL; public $title = '在组策略禁止某应用程序运行/指定某程序运行'; public $description = '域控制器在精髓在于灵活的管理我们我们的局域网,哪么是否也可以禁止一些应应用程序的运行呢? 域控制器是Active Directory域的指挥机构,出于安全性考虑,可以编辑组策略使得登录到域控制器(DC)的用户只能运行指定的程序,操作步骤如下所述: 第1步,打开“组策略编辑器”窗口,在左窗格中依次展开...'; public $link = ''; public $base = 'https://www.shan.info/item/456-2013-05-17-14-49-12.html'; public $language = 'en-gb'; public $direction = 'ltr'; public $_generator = 'Joomla! - Open Source Content Management'; public $_mdate = ''; public $_tab = '\t'; public $_lineEnd = '\n'; public $_charset = 'utf-8'; public $_mime = 'text/html'; public $_namespace = ''; public $_profile = ''; public $_scripts = [...]; public $_script = [...]; protected $scriptOptions = [...]; public $_styleSheets = [...]; public $_style = [...]; public $_metaTags = [...]; public $_engine = NULL; public $_type = 'html'; protected $mediaVersion = '15dbf078d61dbbf76811992dd0143dd9' }; protected $_name = 'item'; protected $_models = ['itemlist' => class K2ModelItemlist { ... }, 'item' => class K2ModelItem { ... }]; protected $_basePath = '/var/www/vhosts/shan.info/httpdocs/components/com_k2'; protected $_defaultModel = 'item'; protected $_layout = 'item'; protected $_layoutExt = 'php'; protected $_layoutTemplate = '_'; protected $_path = ['template' => [...], 'helper' => [...]]; protected $_template = '/var/www/vhosts/shan.info/httpdocs/templates/gk_publisher/html/com_k2/templates/default/item.php'; protected $_output = NULL; protected $_escape = 'htmlspecialchars'; protected $_charset = 'UTF-8'; protected $_errors = []; public $baseurl = ''; public $addLink = NULL; public $inlineCommentsModeration = FALSE; public $item = class stdClass { public $id = '456'; public $title = '在组策略禁止某应用程序运行/指定某程序运行'; public $alias = '2013-05-17-14-49-12'; public $catid = '39'; public $published = '1'; public $introtext = '<p style="outline: none; border: 0px none; margin: 15px 0px 0px; padding: 0px;">域控制器在精髓在于灵活的管理我们我们的局域网,哪么是否也可以禁止一些应应用程序的运行呢?<span id="more-3543" style="outline: none;"></span></p>\r\n<p style="outline: none; border: 0px none; margin: 15px 0px 0px; padding: 0px;">域控制器是Active Directory域的指挥机构,出于安全性考虑,可以编辑组策略使得登录到域控制器(DC)的用户只能运行指定'; public $fulltext = ''; public $video = NULL; public $gallery = NULL; public $extra_fields = NULL; public $extra_fields_search = ''; public $created = '2013-05-17 14:47:51'; public $created_by = '63'; public $created_by_alias = ''; public $checked_out = '0'; public $checked_out_time = '0000-00-00 00:00:00'; public $modified = '0000-00-00 00:00:00'; public $modified_by = '0'; public $publish_up = '2013-05-17 14:47:51'; public $publish_down = '0000-00-00 00:00:00'; public $trash = '0'; public $access = '1'; public $ordering = '21'; public $featured = '0'; public $featured_ordering = '0'; public $image_caption = ''; public $image_credits = ''; public $video_caption = ''; public $video_credits = ''; public $hits = '1105'; public $params = class Joomla\Registry\Registry { ... }; public $metadesc = ''; public $metadata = 'robots=\nauthor='; public $metakey = ''; public $plugins = ''; public $language = '*'; public $category = class TableK2Category { ... }; public $link = '/item/456-2013-05-17-14-49-12.html'; public $printLink = '/item/456-2013-05-17-14-49-12.html?tmpl=component&amp;print=1'; public $tags = [...]; public $imageXSmall = ''; public $imageSmall = ''; public $imageMedium = ''; public $imageLarge = ''; public $imageXLarge = ''; public $attachments = [...]; public $rawTitle = '在组策略禁止某应用程序运行/指定某程序运行'; public $author = class Joomla\CMS\User\User { ... }; public $videoType = 'allvideos'; public $text = '<p style="outline: none; border: 0px none; margin: 15px 0px 0px; padding: 0px;">域控制器在精髓在于灵活的管理我们我们的局域网,哪么是否也可以禁止一些应应用程序的运行呢?<span id="more-3543" style="outline: none;"></span></p>\r\n<p style="outline: none; border: 0px none; margin: 15px 0px 0px; padding: 0px;">域控制器是Active Directory域的指挥机构,出于安全性考虑,可以编辑组策略使得登录到域控制器(DC)的用户只能运行指定'; public $event = class stdClass { ... }; public $jcfields = [...]; public $image = ''; public $imageWidth = '600'; public $comments = [...]; public $numOfComments = 0; public $nextLink = '/item/457-2013-05-17-14-50-02.html'; public $nextTitle = '巧用组策略限制访问网站'; public $nextImageXSmall = ''; public $nextImageSmall = ''; public $nextImageMedium = ''; public $nextImageLarge = ''; public $nextImageXLarge = ''; public $previousLink = '/item/98-mldonkey-设置.html'; public $previousTitle = 'mldonkey 设置'; public $previousImageXSmall = ''; public $previousImageSmall = ''; public $previousImageMedium = ''; public $previousImageLarge = ''; public $previousImageXLarge = ''; public $absoluteURL = 'https://www.shan.info/item/456-2013-05-17-14-49-12.html'; public $langTagForFB = 'en_GB'; public $langTagForTW = 'en-gb'; public $langTagForLI = 'en_GB'; public $sharinglink = 'https://www.shan.info/item/456-2013-05-17-14-49-12.html'; public $socialLink = 'https%3A%2F%2Fwww.shan.info%2Fitem%2F456-2013-05-17-14-49-12.html'; public $twitterURL = 'https://twitter.com/intent/tweet?text=%E5%9C%A8%E7%BB%84%E7%AD%96%E7%95%A5%E7%A6%81%E6%AD%A2%E6%9F%90%E5%BA%94%E7%94%A8%E7%A8%8B%E5%BA%8F%E8%BF%90%E8%A1%8C%2F%E6%8C%87%E5%AE%9A%E6%9F%90%E7%A8%8B%E5%BA%8F%E8%BF%90%E8%A1%8C&amp;url=https%3A%2F%2Fwww.shan.info%2Fitem%2F456-2013-05-17-14-49-12.html'; public $langTagForGP = ''; public $emailLink = '/component/mailto/?tmpl=component&amp;template=gk_publisher&amp;link=542cebb4a9f61ba609b5547d8404f63b8b6a7941' }; public $user = class Joomla\CMS\User\User { protected $isRoot = FALSE; public $id = 0; public $name = NULL; public $username = NULL; public $email = NULL; public $password = NULL; public $password_clear = ''; public $block = NULL; public $sendEmail = 0; public $registerDate = NULL; public $lastvisitDate = NULL; public $activation = NULL; public $params = NULL; public $groups = [...]; public $guest = 1; public $lastResetTime = NULL; public $resetCount = NULL; public $requireReset = NULL; protected $_params = class Joomla\Registry\Registry { ... }; protected $_authGroups = NULL; protected $_authLevels = [...]; protected $_authActions = NULL; protected $_errorMsg = NULL; protected $userHelper = class Joomla\CMS\User\UserWrapper { ... }; protected $_errors = [...]; public $aid = 0; public $gid = 1 }; public $params = class Joomla\Registry\Registry { protected $data = class stdClass { ... }; protected $initialized = TRUE; public $separator = '.' }; public $pagination = class Joomla\CMS\Pagination\Pagination { public $limitstart = 0; public $limit = 10; public $total = 0; public $prefix = ''; public $pagesStart = 1; public $pagesStop = 0; public $pagesCurrent = 1; public $pagesTotal = 0; public $hideEmptyLimitstart = FALSE; protected $viewall = FALSE; protected $additionalUrlParams = [...]; protected $app = class Joomla\CMS\Application\SiteApplication { ... }; protected $data = NULL } }, $method = 'display', $id = ???, $wrkarounds = ??? ).../BaseController.php:663
130.13813073504K2ViewItem->display( $tpl = ??? ).../ViewController.php:102
140.17696066968K2ViewItem->display( $tpl = NULL ).../view.html.php:742
150.17696066968K2ViewItem->loadTemplate( $tpl = NULL ).../HtmlView.php:230
160.17806270320include( '/var/www/vhosts/shan.info/httpdocs/templates/gk_publisher/html/com_k2/templates/default/item.php ).../HtmlView.php:701
back to top