1、点击“开始－运行”，输入 gpedit.msc

2、打开“组策略”窗口，在左侧窗口依次展开“计算机配置－windows设置－安全设置－IP安全策略，在本地机器”。

3、右击右侧窗口，选择“所有任务－导入策略”，然后选择借压缩后的firewall.ipsec

4、如果右侧窗口出现了“常用安全策略禁用不必要的端口”项，则表示导入成功。

5、在已经导入的策略上单击右键指派该策略，确定 OK基本上可以预防常见的木马了。

采取这种方法可以避免打开防火墙而造成的系统资源打量占用的弊端

-1, click on " Start- Run" , type gpedit.msc 2, open the " Group Policy"　window, in the left window, expand " Computer Configuration-windows settings- security settings-IP Security Policies on Local Machine."　3, right-click the right window, select " All Tasks- Import Policy"　and then select by the compressed firewall.ipsec 4, if the right side of the window to a " common security policy to disable unnecessary ports"　entry, then import the success of . 5, the strategy has already been imported, right-click to assign the policy to determine a common preventive OK basically a Trojan horse. This method avoids the firewall to open the system resources caused by the drawbacks of size up occupation