By Carl Siechert, Co-Author, Microsoft Windows XP Inside Out
One of the fun things about Windows XP and Windows 2000 is that there is so much tweaking you can do if you want to. You don't need to do any of the things that I described at a recent Pasadena IBM User Group presentation, but if you like peeking under the hood and making a few adjustments so things run just the way you like, you can. Here's a little more information about some of the topics I discussed:
Group Policy lets you make all manner of settings--everything from configuring the desktop to hiding certain drives to preventing the creation of scheduled tasks. These settings (and hundreds more) are stored in the registry, which you can edit directly.
But Group Policy is much easier to use than a registry editor. A few notes before you dive in:
Ready, Set Go…
Start Group Policy by choosing Start, Run and typing " gpedit.msc" . (If you end up using Group Policy very much, you'll want to make a shortcut to gpedit.msc.) The next two folders and their subfolders house the most interesting policies, although you might want to check out the others as well.
Then, in the left pane, select a subfolder of Computer Configuration\Administrative Templates or User Configuration\Administrative Templates. Select a useful sounding policy in the right pane, and an explanation of the policy appears. Keep poking around until you find something that interests you. To make a setting, double-click the policy name and then choose an option in the dialog box that appears.
Pretty easy stuff, but you're exploring where few Windows users dare to tread. Unless you work hard to enable policies that, for example, prevent you from logging on, the settings under Administrative Templates are pretty safe. Nonetheless, you should read the explanation carefully before you make a policy setting.
Want more information? For a complete reference to Group Policy in Windows 2000, visit
Look for Windows 2000 Group Policy Reference in the contents pane. Nearly all the information in this reference applies to Windows XP Professional as well, although it doesn't include the policies that are available only in Windows XP. Another good resource is the Group Policy Object Settings spreadsheet, which you can download from
Although the spreadsheet doesn't explain the settings, it lists all Administrative Templates policies and shows which ones apply to each operating system it also provides a convenient way to record your own settings. You'll also find more information in " Microsoft Windows XP Inside Out" (Chapter 34) and in our new book, " Microsoft Windows Security Inside Out for Windows XP and Windows 2000" (Chapter 19). The latter book, which should be in stores in August, includes a number of specific recommendations about policies you can set to better secure your system.
It’s At Your Service
I also mentioned the Services snap-in, which is included in the Computer Management console. To open Computer Management, right-click My Computer (on the Start menu or in an Explorer window) and choose Manage. In the left pane of Computer Management, select Computer Management (Local)\Services and Applications\Services. (Tip of the day: You can open the Services snap-in within its own console. You can find a shortcut to Services in the Administrative Tools folder, or you can simply choose Start, Run and type " services.msc" .)
So which services should you turn off by changing their startup type to Manual or Disable? This Web site offers some good advice: http://www.blkviper.com/WinXP/servicecfg.htm
And (time for another plug) " Microsoft Windows Security Inside Out for Windows XP and Windows 2000" provides a brief description of every service included with Windows XP and Windows 2000 and offers recommended settings.
Copyright © 2002 by Carl Siechert. Reproduced with permission. Article reproduction coordinated by Steve Bass, Pasadena IBM Users Group. Reaching Carl Siechert is easy—his company site is http://www.swdocs.com Discussions, links, tips, and other good things are at http://communities.msn.com/WindowsXPInsideOut and, as you'd expect, you'll find links for ordering the book online.
Winners is a member of the Association of Personal Computer User Groups (APCUG) is an international, platform-independent, nonprofit corporation (incorporated in Washington, DC) devoted to helping user groups throughout the world. Almost 400 user groups are members of APCUG. http://www.apcug.net/