Windows 2003 服务器安全设置-批处理 (附参考链接)

2022-12-06 07:41:25

长期维护windows服务器终结出来的安全设置批处理与大家分享，复制以下全部内容用记事本另存为bat或者cmd执行

===================分隔符号======================

echo. echo ------------------------------------------------------ echo. echo ........... echo. net share c$ /delete net share d$ /delete net share e$ /delete net share f$ /delete net share admin$ /delete net share ipc$ /delete net stop server net stop lanmanworkstation regsvr32/u C:\WINDOWS\System32\wshom.ocx regsvr32/u C:\WINDOWS\system32\shell32.dll regsvr32/u C:\WINdows\SYSTEM32\scrrun.DLL cacls c:\WINDOWS\system32\shell32.dll /g administrators:f system:f cacls c:\WINDOWS\system32\shell.dll /g administrators:f system:f cacls c:\ /g administrators:f system:f cacls d:\ /g administrators:f system:f cacls e:\ /g administrators:f system:f cacls f:\ /g administrators:f system:f echo. echo .......... echo. echo ------------------------------------------------------ echo. echo ................. echo. echo .. delshare.reg ....... echo Windows Registry Editor Version 5.00> c:\delshare.reg echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters]>> c:\delshare.reg echo "AutoShareWks"=dword:00000000>> c:\delshare.reg echo "AutoShareServer"=dword:00000000>> c:\delshare.reg echo .. delshare.reg ..... regedit /s c:\delshare.reg echo .. delshare.reg .... del c:\delshare.reg echo . echo ........ echo . echo ========================================================= echo . echo .....................dos.... echo . echo ......... echo Windows Registry Editor Version 5.00> c:\dosforwin.reg echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]>> c:\dosforwin.reg echo "EnableICMPRedirect"=dword:00000000>> c:\dosforwin.reg echo "DeadGWDetectDefault"=dword:00000001>> c:\dosforwin.reg echo "DontAddDefaultGatewayDefault"=dword:00000000>> c:\dosforwin.reg echo "EnableSecurityFilters"=dword:00000000">> c:\dosforwin.reg echo "AllowUnqualifiedQuery"=dword:00000000>> c:\dosforwin.reg echo "PrioritizeRecordData"=dword:00000001>> c:\dosforwin.reg echo "ReservedPorts"=hex(7):31,00,34,00,33,00,33,00,2d,00,31,00,34,00,33,00,34,00,\>> c:\dosforwin.reg echo 00,00,00,00>> c:\dosforwin.reg echo "SynAttackProtect"=dword:00000002>> c:\dosforwin.reg echo "EnablePMTUDiscovery"=dword:00000000>> c:\dosforwin.reg echo "NoNameReleaseOnDemand"=dword:00000001>> c:\dosforwin.reg echo "EnableDeadGWDetect"=dword:00000000>> c:\dosforwin.reg echo "KeepAliveTime"=dword:00300000>> c:\dosforwin.reg echo "PerformRouterDiscovery"=dword:00000000>> c:\dosforwin.reg echo "EnableICMPRedirects"=dword:00000000>> c:\dosforwin.reg echo . echo ========================================================== echo .. dosforwin.reg ..... regedit /s c:\dosforwin.reg echo .. dosforwin.reg .... del c:\dosforwin.reg echo ==============================================================

echo .
echo ..........(......................).
echo .
echo ..telnet,......telnet.
echo ..........
echo Windows Registry Editor Version 5.00>
c:\telnet.reg
echo
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr]>>
c:\telnet.reg
echo "Start"=dword:00000004>>
c:\telnet.reg
echo .
echo .. telnet.reg .....
regedit /s c:\telnet.reg
echo .
echo .. telnet.reg ....
del c:\telnet.reg
echo .
echo
===============================================================

echo ..Remote Registry Service...........
echo .........
echo .
echo Windows Registry Editor Version 5.00>
c:\regedit.reg
echo
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry]>>
c:\regedit.reg
echo "Start"=dword:00000004>>
c:\regedit.reg
echo .
echo .. regedit.reg .....
regedit /s c:\regedit.reg
echo .
echo ......
del c:\regedit.reg
echo
===============================================================

echo ..Messenger.......
echo .........
echo Windows Registry Editor Version 5.00>
c:\message.reg
echo
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Messenger]>>
c:\message.reg
echo "Start"=dword:00000004>>
c:\message.reg
echo .
echo .. message.reg .....
regedit /s c:\message.reg
echo .
echo .. message.reg
del c:\message.reg
echo
===============================================================

echo ..lanmanworkstation.......
echo .........
echo Windows Registry Editor Version 5.00>
c:\lanmanworkstation.reg
echo
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation]>>
c:\lanmanworkstation.reg
echo "Start"=dword:00000004>>
c:\lanmanworkstation.reg
echo .
echo .. lanmanworkstation.reg .....
regedit /s c:\lanmanworkstation.reg
echo .
echo .. lanmanworkstation.reg
del c:\lanmanworkstation.reg
echo
===============================================================

echo ..lanmanserver.......
echo .........
echo Windows Registry Editor Version 5.00>
c:\lanmanserver.reg
echo
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver]>>
c:\lanmanserver.reg
echo "Start"=dword:00000004>>
c:\lanmanserver.reg
echo .
echo .. lanmanserver.reg .....
regedit /s c:\lanmanserver.reg
echo .
echo .. lanmanserver.reg
del c:\lanmanserver.reg
echo
===============================================================

echo ..Alerter.......
echo .........
echo Windows Registry Editor Version 5.00>
c:\Alerter.reg
echo
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Alerter]>>
c:\Alerter.reg
echo "Start"=dword:00000004>>
c:\Alerter.reg
echo .
echo .. Alerter.reg .....
regedit /s c:\Alerter.reg
echo .
echo .. Alerter.reg
del c:\Alerter.reg
echo
===============================================================

echo ..Browser.......
echo .........
echo Windows Registry Editor Version 5.00>
c:\Browser.reg
echo
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser]>>
c:\Browser.reg
echo "Start"=dword:00000004>>
c:\Browser.reg
echo .
echo .. Browser.reg .....
regedit /s c:\Browser.reg
echo .
echo .. Browser.reg
del c:\Browser.reg
echo
===============================================================

echo ..Dfs.......
echo .........
echo Windows Registry Editor Version 5.00>
c:\Dfs.reg
echo
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dfs]>>
c:\Dfs.reg
echo "Start"=dword:00000004>>
c:\Dfs.reg
echo .
echo .. Dfs.reg .....
regedit /s c:\Dfs.reg
echo .
echo .. Dfs.reg
del c:\Dfs.reg
echo
===============================================================

echo ..Spooler.......
echo .........
echo Windows Registry Editor Version 5.00>
c:\Spooler.reg
echo
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler]>>
c:\Spooler.reg
echo "Start"=dword:00000004>>
c:\Spooler.reg
echo .
echo .. Spooler.reg .....
regedit /s c:\Spooler.reg
echo .
echo .. Spooler.reg
del c:\Spooler.reg
echo
==============================================================

echo ...TCP/IP NetBIOS Helper Service
echo .........
echo Windows Registry Editor Version 5.00>
c:\netbios.reg
echo
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LmHosts]>>
c:\netbios.reg
echo "Start"=dword:00000004>>
c:\netbios.reg
echo .
echo .. netbios.reg .....
regedit /s c:\netbios.reg
echo .
echo .. netbios.reg
del c:\netbios.reg
echo
===============================================================

echo
===============================================================

goto :END

===================分隔符号======================

参考链接
http://support.microsoft.com/kb/324270
http://blog.csdn.net/buleideli/article/details/3268413
http://msdn.microsoft.com/zh-cn/library/ff648853.aspx
http://blog.csdn.net/luojunjing/article/details/286333
http://tech.163.com/06/0624/17/2KD9S74U00091VCV.html
http://social.technet.microsoft.com/Forums/en-US/ce23c17a-d7a8-418e-969c-b7790b9dde64/windows2003tcpipdos

http://blog.csdn.net/tuwen/article/details/2191742
http://hi.baidu.com/sei_zhouyu/item/210d8cde48019911d68ed045

码农公寓

相关文章