AD 常用策略 1 修改本地管理员administraotr，让公司所有都使用都须使用域用户登入，可以使用以下脚本，保存为VBS，新建一策略，计算机配置-windows 设置-脚本-启动/关机添加脚本本 strComputer="." strComputer = "." Set objUser = GetObject("WinNT://" & strComputer & "/Administrator, user") objUser.SetPassword "nd110.com" objUser.SetInfo Set objDomain = GetObject("WinNT://" & strComputer) objDomain.Filter = Array("User") For Each objUser in objDomain strUser = objUser.Name If strUser <> "Administrator" Then Set objUser = GetObject("WinNT://" & strComputer & "/guest") objUser.AccountDisabled = True objUser.SetInfo End If Next ======================================================================== 桌面重定向 桌面资料及我的文档重定档到 D 盘，保障万一电脑系统崩溃，资料不会丢失，另一个也为维护方便，新建策略用户配置-windows 设置-脚本-注销，添加下面的脚本的 重定向了桌面收藏夹我的文档 Const HKEY_CLASSES_ROOT = &H80000000 Const HKEY_CURRENT_USER = &H80000001 Const HKEY_LOCAL_MACHINE = &H80000002 Const HKEY_USERS = &H80000003 Const HKEY_CURRENT_CONFIG = &H80000005 strComputer = "." Set StdOut = WScript.StdOut Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" &_ strComputer & "\root\default:StdRegProv") strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders" strValueName = "Desktop" strValue = "d:\Documents and Settings\Administrator\桌面" oReg.SetExpandedStringValue HKEY_CURRENT_USER,strKeyPath,strValueName,strValue strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders" strValueName = "Personal" strValue = "D:\我的文档" oReg.SetExpandedStringValue HKEY_CURRENT_USER,strKeyPath,strValueName,strValue strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders" strValueName = "Favorites" strValue = "D:\Favorites" oReg.SetExpandedStringValue HKEY_CURRENT_USE...
