当前位置 主页 > 服务器问题 > win服务器问题汇总 >

    WIN服务器安全批处理文件

    栏目:win服务器问题汇总 时间:2019-10-10 08:17

    WIN服务器安全批处理文件 
    这个的确不错,指量设置,免去手动设置的繁琐/uploadfiles/okay_77574.rar
    复制代码 代码如下:
    echo.
    echo ------------------------------------------------------
    echo.
    echo  ...........
    echo.
    net share c$ /delete
    net share d$ /delete
    net share e$ /delete
    net share f$ /delete
    net share admin$ /delete
    net share ipc$ /delete
    net stop server
    net stop lanmanworkstation



    regsvr32/u C:\WINNT\System32\wshom.ocx
    regsvr32/u C:\WINNT\system32\shell32.dll
    regsvr32/u C:\WINNT\system32\shell.dll
    cacls c:\WINNT\system32\shell32.dll   /g administrators:f system:f
    cacls c:\WINNT\system32\shell.dll /g administrators:f system:f
    cacls c:\    /g administrators:f system:f
    cacls d:\    /g administrators:f system:f
    echo.
    echo  ..........
    echo.
    echo ------------------------------------------------------
    echo.
    echo  .................
    echo.
    echo  .. delshare.reg .......
    echo Windows Registry Editor Version 5.00> c:\delshare.reg
    echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters]>> c:\delshare.reg
    echo "AutoShareWks"=dword:00000000>> c:\delshare.reg
    echo "AutoShareServer"=dword:00000000>> c:\delshare.reg
    echo  .. delshare.reg .....
    regedit /s c:\delshare.reg
    echo  .. delshare.reg ....
    del c:\delshare.reg
    echo .
    echo ........
    echo .
    echo =========================================================
    echo .
    echo .....................dos....
    echo .
    echo .........
    echo Windows Registry Editor Version 5.00> c:\dosforwin.reg
    echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]>> c:\dosforwin.reg
    echo "EnableICMPRedirect"=dword:00000000>> c:\dosforwin.reg
    echo "DeadGWDetectDefault"=dword:00000001>> c:\dosforwin.reg
    echo "DontAddDefaultGatewayDefault"=dword:00000000>> c:\dosforwin.reg
    echo "EnableSecurityFilters"=dword:00000000">> c:\dosforwin.reg
    echo "AllowUnqualifiedQuery"=dword:00000000>> c:\dosforwin.reg
    echo "PrioritizeRecordData"=dword:00000001>> c:\dosforwin.reg
    echo "ReservedPorts"=hex(7):31,00,34,00,33,00,33,00,2d,00,31,00,34,00,33,00,34,00,\>> c:\dosforwin.reg
    echo 00,00,00,00>> c:\dosforwin.reg
    echo "SynAttackProtect"=dword:00000002>> c:\dosforwin.reg
    echo "EnablePMTUDiscovery"=dword:00000000>> c:\dosforwin.reg