windows7桌面安全-展示頁
2025-03-18 19:36本頁面
【正文】 文件夾給某條規(guī)則 ? 你可以創(chuàng)建某個 .exe文件的例外規(guī)則 ? 你可以創(chuàng)建基于數(shù)字簽名的應(yīng)用程序規(guī)則 ? 你可以手工創(chuàng)建一個自定義特殊執(zhí)行規(guī)則 ? AppLocker規(guī)則 Demo: 配置 AppLocker規(guī)則 In this demonstration, you will see how to: ? Create new executable rule ? Create new Windows Installer rule ? Automatically generate Script rules 10 min Demo: 強制 AppLocker規(guī)則 In this demonstration, you will see how to: ? Enforce AppLocker Rules ? Confirm the executable rule enforcement ? Confirm the Windows Installer rule enforcement 10 min 什么是軟件限制策略 ? 軟件限制策略 (SRP)可以明確用戶可以允許執(zhí)行那些軟件 ?SRP是 Windows XP 和 Windows Server 2023支持的策略 ?SRP是設(shè)計用來幫助組織控制一些不允許執(zhí)行的未知代碼和惡意的程序 ?SRP包含默認安全級別，所有的規(guī)則都在組策略應(yīng)用時被執(zhí)行 How does SRP pare to Windows AppLocker? AppLocker是用來替換軟件限制策略的 ? SRP控制臺和 SRP規(guī)則在 Windows7 同樣也支持，主要用來實現(xiàn)向下兼容性 ? AppLocker規(guī)則完全獨立于 SRP規(guī)則 ? AppLocker組策略獨立于 SRP組策略 ? If AppLocker規(guī)則定義于一個 GPO中，只有指定規(guī)則被應(yīng)用 ? 根據(jù)企業(yè)客戶端版本分別定義 AppLocker和 SRP規(guī)則 ? SRP和 AppLocker比較 Lesson 5:配置用戶賬戶控制 ?什么 UAC? ? UAC如何工作 ? Demo: 配置 UAC的組策略設(shè)置 ?配置 UAC提示設(shè)置 什么 UAC? 用戶賬戶控制 (UAC)是一項安全功能，使得用戶在標準用戶模式下執(zhí)行必須的日常任務(wù) ?UAC必要時會要求用戶提升到管理員模式下執(zhí)行相應(yīng)的操作 ?Windows 7增強了用戶控制的提升體驗 UAC如何工作 在 Windows 7中，當用戶執(zhí)行一項需要管理員特權(quán)的任務(wù)時，會出現(xiàn)什么提示 ? Administrative Users UAC prompts the user for permission to plete the task Standard Users UAC prompts the user for the credentials of a user with administrative privileges Demo: 配置 UAC的組策略設(shè)置 In this demonstration, you will see how to: ? Open the User Accounts window ? Review user groups ? View the Credential Prompt ? Change User Account Settings and View the Consent Prompt 10 min 配置 UAC提示設(shè)置 UAC的用戶體驗級別有： ? Always notify me ? Notify me only when programs try to make changes to my puter ? Notify me only when programs try to make changes to my puter (do not dim my desktop) ? Never notify Lab A: Configuring UAC, Local Security Policies, EFS, and AppLocker ? Exercise 1: Configuring virus protection and User Account Control (UAC) notification settings in Action Center ? Exercise 2: Configuring Multiple Local Group Policies to manage the appearance of selected program icons ? Exercise 3: Configuring and testing encryption of files and folders ? Exercise 4: Configuring and testing AppLocker rules to control what programs can be executed Logon information Estimated time: 50 minutes Virtual machine 6292ALONDC1 6292ALONCL1 User name Contoso\Administrator Password Pa$$w0rd Lab A Scenario Your pany is implementing Windows 7 puters for all corporate users. As an administrator at your anization, you are responsible for configuring the new Windows 7 puters to support various corporate requirements. You have been asked to: ? Turn off virus protection notifications ? Verify the User Account Control (UAC) settings are set to “Always notify but not dim the desktop” ? Configure multiple local group policies to control which of the default program icons appear on users’ and administrators’ puters ? Encrypt all sensitive data on puters using EFS ? Use AppLocker rules to prevent corporate users from running Windows Media Player and installing unauthorized applications Lab A Review ? Where can you turn on and off security messages related to virus protection? What are some of the other security messages that can be configured in Windows 7? ? How can the notifications about changes to the puter be suppressed? ? Can multiple local group policies be created and applied to different users? ? What are some of the ways of protecting sensitive data in Windows 7? ? How can Windows 7 users be prevented from running
教學課件相關(guān)推薦
鄂ICP備17016276號-1