Windows 2003 服务器安全设置-批处理 (附参考链接)

长期维护windows服务器终结出来的安全设置批处理与大家分享，复制以下全部内容用记事本另存为bat或者cmd执行

===================分隔符号======================

echo. echo ------------------------------------------------------ echo. echo ........... echo. net share c$ /delete net share d$ /delete net share e$ /delete net share f$ /delete net share admin$ /delete net share ipc$ /delete net stop server net stop lanmanworkstation regsvr32/u C:\WINDOWS\System32\wshom.ocx regsvr32/u C:\WINDOWS\system32\shell32.dll regsvr32/u C:\WINdows\SYSTEM32\scrrun.DLL cacls c:\WINDOWS\system32\shell32.dll /g administrators:f system:f cacls c:\WINDOWS\system32\shell.dll /g administrators:f system:f cacls c:\ /g administrators:f system:f cacls d:\ /g administrators:f system:f cacls e:\ /g administrators:f system:f cacls f:\ /g administrators:f system:f echo. echo .......... echo. echo ------------------------------------------------------ echo. echo ................. echo. echo .. delshare.reg ....... echo Windows Registry Editor Version 5.00> c:\delshare.reg echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters]>> c:\delshare.reg echo "AutoShareWks"=dword:00000000>> c:\delshare.reg echo "AutoShareServer"=dword:00000000>> c:\delshare.reg echo .. delshare.reg ..... regedit /s c:\delshare.reg echo .. delshare.reg .... del c:\delshare.reg echo . echo ........ echo . echo ========================================================= echo . echo .....................dos.... echo . echo ......... echo Windows Registry Editor Version 5.00> c:\dosforwin.reg echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]>> c:\dosforwin.reg echo "EnableICMPRedirect"=dword:00000000>> c:\dosforwin.reg echo "DeadGWDetectDefault"=dword:00000001>> c:\dosforwin.reg echo "DontAddDefaultGatewayDefault"=dword:00000000>> c:\dosforwin.reg echo "EnableSecurityFilters"=dword:00000000">> c:\dosforwin.reg echo "AllowUnqualifiedQuery"=dword:00000000>> c:\dosforwin.reg echo "PrioritizeRecordData"=dword:00000001>> c:\dosforwin.reg echo "ReservedPorts"=hex(7):31,00,34,00,33,00,33,00,2d,00,31,00,34,00,33,00,34,00,\>> c:\dosforwin.reg echo 00,00,00,00>> c:\dosforwin.reg echo "SynAttackProtect"=dword:00000002>> c:\dosforwin.reg echo "EnablePMTUDiscovery"=dword:00000000>> c:\dosforwin.reg echo "NoNameReleaseOnDemand"=dword:00000001>> c:\dosforwin.reg echo "EnableDeadGWDetect"=dword:00000000>> c:\dosforwin.reg echo "KeepAliveTime"=dword:00300000>> c:\dosforwin.reg echo "PerformRouterDiscovery"=dword:00000000>> c:\dosforwin.reg echo "EnableICMPRedirects"=dword:00000000>> c:\dosforwin.reg echo . echo ========================================================== echo .. dosforwin.reg ..... regedit /s c:\dosforwin.reg echo .. dosforwin.reg .... del c:\dosforwin.reg echo ============================================================== echo . echo ..........(......................). echo . echo ..telnet,......telnet. echo .......... echo Windows Registry Editor Version 5.00> c:\telnet.reg echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr]>> c:\telnet.reg echo "Start"=dword:00000004>> c:\telnet.reg echo . echo .. telnet.reg ..... regedit /s c:\telnet.reg echo . echo .. telnet.reg .... del c:\telnet.reg echo . echo =============================================================== echo ..Remote Registry Service........... echo ......... echo . echo Windows Registry Editor Version 5.00> c:\regedit.reg echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry]>> c:\regedit.reg echo "Start"=dword:00000004>> c:\regedit.reg echo . echo .. regedit.reg ..... regedit /s c:\regedit.reg echo . echo ...... del c:\regedit.reg echo =============================================================== echo ..Messenger....... echo ......... echo Windows Registry Editor Version 5.00> c:\message.reg echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Messenger]>> c:\message.reg echo "Start"=dword:00000004>> c:\message.reg echo . echo .. message.reg ..... regedit /s c:\message.reg echo . echo .. message.reg del c:\message.reg echo =============================================================== echo ..lanmanworkstation....... echo ......... echo Windows Registry Editor Version 5.00> c:\lanmanworkstation.reg echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation]>> c:\lanmanworkstation.reg echo "Start"=dword:00000004>> c:\lanmanworkstation.reg echo . echo .. lanmanworkstation.reg ..... regedit /s c:\lanmanworkstation.reg echo . echo .. lanmanworkstation.reg del c:\lanmanworkstation.reg echo =============================================================== echo ..lanmanserver....... echo ......... echo Windows Registry Editor Version 5.00> c:\lanmanserver.reg echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver]>> c:\lanmanserver.reg echo "Start"=dword:00000004>> c:\lanmanserver.reg echo . echo .. lanmanserver.reg ..... regedit /s c:\lanmanserver.reg echo . echo .. lanmanserver.reg del c:\lanmanserver.reg echo =============================================================== echo ..lanmanserver....... echo ......... echo Windows Registry Editor Version 5.00> c:\lanmanserver.reg echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver]>> c:\lanmanserver.reg echo "Start"=dword:00000004>> c:\lanmanserver.reg echo . echo .. lanmanserver.reg ..... regedit /s c:\lanmanserver.reg echo . echo .. lanmanserver.reg del c:\lanmanserver.reg echo =============================================================== echo ..Alerter....... echo ......... echo Windows Registry Editor Version 5.00> c:\Alerter.reg echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Alerter]>> c:\Alerter.reg echo "Start"=dword:00000004>> c:\Alerter.reg echo . echo .. Alerter.reg ..... regedit /s c:\Alerter.reg echo . echo .. Alerter.reg del c:\Alerter.reg echo =============================================================== echo ..Browser....... echo ......... echo Windows Registry Editor Version 5.00> c:\Browser.reg echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser]>> c:\Browser.reg echo "Start"=dword:00000004>> c:\Browser.reg echo . echo .. Browser.reg ..... regedit /s c:\Browser.reg echo . echo .. Browser.reg del c:\Browser.reg echo =============================================================== echo ..Dfs....... echo ......... echo Windows Registry Editor Version 5.00> c:\Dfs.reg echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dfs]>> c:\Dfs.reg echo "Start"=dword:00000004>> c:\Dfs.reg echo . echo .. Dfs.reg ..... regedit /s c:\Dfs.reg echo . echo .. Dfs.reg del c:\Dfs.reg echo =============================================================== echo ..Spooler....... echo ......... echo Windows Registry Editor Version 5.00> c:\Spooler.reg echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler]>> c:\Spooler.reg echo "Start"=dword:00000004>> c:\Spooler.reg echo . echo .. Spooler.reg ..... regedit /s c:\Spooler.reg echo . echo .. Spooler.reg del c:\Spooler.reg echo ============================================================== echo ...TCP/IP NetBIOS Helper Service echo ......... echo Windows Registry Editor Version 5.00> c:\netbios.reg echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LmHosts]>> c:\netbios.reg echo "Start"=dword:00000004>> c:\netbios.reg echo . echo .. netbios.reg ..... regedit /s c:\netbios.reg echo . echo .. netbios.reg del c:\netbios.reg echo =============================================================== echo =============================================================== goto :END

===================分隔符号======================

参考链接
http://support.microsoft.com/kb/324270
http://blog.csdn.net/buleideli/article/details/3268413
http://msdn.microsoft.com/zh-cn/library/ff648853.aspx
http://blog.csdn.net/luojunjing/article/details/286333
http://tech.163.com/06/0624/17/2KD9S74U00091VCV.html
http://social.technet.microsoft.com/Forums/en-US/ce23c17a-d7a8-418e-969c-b7790b9dde64/windows2003tcpipdos
http://blog.csdn.net/tuwen/article/details/2191742
http://hi.baidu.com/sei_zhouyu/item/210d8cde48019911d68ed045

转载于:https://www.cnblogs.com/airoot/p/4131931.html

Windows 2003 服务器安全设置-批处理 (附参考链接)相关推荐

Windows 2003服务器维护的几个技巧
Windows 2003服务器维护的几个技巧 WINdows 2003普遍应用于各企业,网吧服务器.关于服务器软件日常维护,注意以下方面的技巧. 在Windows 2003 Server系统中安装完补 ...
配置windows 2003 ×××服务器
配置windows 2003 ×××服务器服务器是Windows 2003系统,2003中×××服务叫做"路由和远程访问",系统默认就安装了这个服务,但是没有启用. 在管理工具中 ...
win2003服务器维护,Windows 2003服务器维护技巧
WINdows 2003普遍应用于各企业,网吧服务器.关于服务器软件日常维护,注意以下方面的技巧. 在Windows 2003 Server系统中安装完补丁程序后,系统总会提示要重新启动一下服务器.可 ...
Windows 2003 服务器目录安全权限设置
一. 系统的安装 1.按照Windows2003安装光盘的提示安装,默认情况下2003没有把IIS6.0安装在系统里面. 2.IIS6.0的安装开始菜单->控制面板->添加或删除程序-& ...
图文详解 Windows 2003服务器集群安装(1)
群集安装安装概述在安装过程中,安装某些节点时将关闭其它节点.这个步骤有助于保证附加到共享总线的磁盘上的数据不会丢失或遭到破坏.当多个节点同时尝试写入一个未受到群集软件保护的磁盘时,可以出现数据丢失 ...
Windows 2003服务器集群安装图解
安装概述在安装过程中,安装某些节点时将关闭其它节点.这个步骤有助于保证附加到共享总线的磁盘上的数据不会丢失或遭到破坏.当多个节点同时尝试写入一个未受到群集软件保护的磁盘时,可以出现数据丢失或遭到破坏 ...
Windows 2003 服务器播放FLV的问题解决
http://vir.jxstnu.edu.cn/xieyunc/tb.php?t=185&extra=1c9eb 引用人家的文章 Win2003主机下无法播放FLV视频的设置方法: 原因: ...
转Windows 2003服务器安全配置终极技巧
我们配置的服务器需要提供支持的组件如下:(ASP.ASPX.CGI.PHP.FSO.JMAIL.MySql.SMTP.POP3.FTP. 3389终端服务.远程桌面Web连接管理服务等),这里前提是已 ...
Windows 2003 安全优化设置大全
1.启动.关闭系统高级设置 ★加快开机及关机速度HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory M ...

Windows 2003 服务器安全设置-批处理 (附参考链接)

Windows 2003 服务器安全设置-批处理 (附参考链接)相关推荐

最新文章

热门文章