2008年10月1日

Software Restriction Policy

Begin by logging on as the Administrator and opening the Control Panel. Next, click the Performance and Maintenance link followed by the Administrative Tools link. When the Administrative Tools window opens, double click on the Local Security Policy icon. Now navigate through the console tree to Security Settings | Software Restriction Policies. There are two nodes beneath the Software Restriction Policies container; Security Levels and Additional Rules.





You can choose the following rules:
Certificate Rules
Hash Rules
Internet Zone Rules
Path Rules

ref: Using Software Restriction Policies To Keep Games Off Of Your Network

VPN server in Windows XP Professional

How to create the VPN server interface, step-by-step

1. Click Start | Control Panel.
2. In the Control Panel, open the Network Connections applet.
3. In the Network Connections window (see Figure A), open the New Connection Wizard.
4. On the Welcome To The New Connection Wizard page, click Next.
5. On the Network Connection Type page (see Figure B), select the Set Up An Advanced Connection option.
6. On the Advanced Connection Options page (see Figure C), select the Accept Incoming Connections option and click Next.
7. On the Devices For Incoming Connections page (see Figure D), you can select optional devices on which you want to accept incoming connections.
8. On the Incoming Virtual Private Network (VPN) Connection page (see Figure E), select the Allow Virtual Private Connections option and click Next.
9. On the User Permissions page (see Figure F), select the users that are allowed to make incoming VPN connections. Click Next.
10. On the Networking Software page (see Figure G), click on the Internet Protocol (TCP/IP) entry and click the Properties button.
11. In the Incoming TCP/IP Properties dialog box (see Figure H), place a check mark in the Allow Callers To Access My Local Area Network check box. This will allow VPN callers to connect to other computers on the LAN. If this check box isn’t selected, VPN callers will only be able to connect to resources on the Windows XP VPN server itself. Click OK to return to the Networking Software page and then click Next.
12. On the Completing The New Connection Wizard page, click Finish to create the connection.
After the Incoming Connection is complete, right-click on the connection in the Network Connections window and select the Properties command (see Figure I).

ref: Configure Windows XP Professional to be a VPN server