Win2003環(huán)境下的一鍵系統(tǒng)安全批處理
更新時間：2011年06月15日 22:58:30 作者：
只要將下面的代碼保存為1.bat運行一下即可自動設(shè)置win2003的安全，完成后自動重啟，需要的朋友可以參考下。
復(fù)制代碼 代碼如下:
@echo off
echo ----------------------------------
echo ----正在備份注冊表 請稍后....----
echo ----------------------------------
reg export "HKEY_LOCAL_MACHINE" C:/reg_backup.reg
echo ----------------------
echo ----注冊表備份完成----
echo ----------------------
ping 127.0.0.1 -n 3 >nul
echo -----------------------------------
echo ----安全配置正在改寫 請稍候...----
echo -----------------------------------
@ping 127.0.0.1 -n 3 >nul
echo ----------------------
echo ----正在禁用空連接----
echo ----------------------
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa /v restrictanonymous /t reg_dword /d 1 /f
echo --------------------------
echo ----禁用空連接設(shè)置完畢----
echo --------------------------
@ping 127.0.0.1 -n 3 >nul
echo ------------------------
echo ----正在刪除默認(rèn)共享----
echo ------------------------
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /v AutoShareServer /t reg_dword /d 0 /f
echo ----------------------------
echo ----刪除默認(rèn)共享設(shè)置完畢----
echo ----------------------------
@ping 127.0.0.1 -n 3 >nul
echo ------------------------------
echo ----正在修改TTL值請稍后...----
echo ------------------------------
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v DefaultTTL /t reg_dword /d 53 /f
echo -------------------
echo ----TTL修改完畢----
echo -------------------
@ping 127.0.0.1 -n 3 >nul
echo -----------------------
echo ----防止syn洪水攻擊----
echo -----------------------
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v SynAttackProtect /t reg_dword /d 2 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v EnablePMTUDiscovery /t reg_dword /d 0 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v NoNameReleaseOnDemand /t reg_dword /d 1 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v EnableDeadGWDetect /t reg_dword /d 0 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v KeepAliveTime /t reg_dword /d 300000 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v PerformRouterDiscovery /t reg_dword /d 0 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v EnableICMPRedirects /t reg_dword /d 0 /f
echo -------------------------------
echo ----防止syn洪水攻擊設(shè)置完畢----
echo -------------------------------
@ping 127.0.0.1 -n 3 >nul
echo ------------------------------
echo ------------------------------
echo ---- 系統(tǒng)服務(wù)修改 ----
echo ------------------------------
echo ------------------------------
@ping 127.0.0.1 -n 3 >nul
echo --------------------
echo ----修改3389端口----
echo --------------------
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds dpwd\Tds\tcp" /v PortNumber /t reg_dword /d 44454 /f
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentContro1Set\Control\Tenninal Server\WinStations\RDP\Tcp" /v PortNumber /t reg_dword /d 44454 /f
echo --------------------
echo ----修改PORT完畢----
echo --------------------
@ping 127.0.0.1 -n 3 >nul
echo -------------------------------------
echo ----正在開啟系統(tǒng)防火墻 請稍后....----
echo -------------------------------------
sc config sharedaccess start= auto & net start sharedaccess
echo ------------------------
echo ----系統(tǒng)防火墻已開啟----
echo ------------------------
@ping 127.0.0.1 -n 3 >nul
echo ----------------------------
echo ----正在關(guān)閉共享打印服務(wù)----
echo ----------------------------
@sc config Spooler start= disabled
sc config LanmanServer start= disabled
sc config LmHosts start= disabled
echo --------------------------
echo ----已關(guān)閉共享打印服務(wù)----
echo --------------------------
@ping 127.0.0.1 -n 3 >nul
echo ----------------------------
echo ----正在關(guān)閉遠(yuǎn)程協(xié)助服務(wù)----
echo ----------------------------
@sc config RDSessMgr start= disabled
echo --------------------------
echo ----已關(guān)閉遠(yuǎn)程協(xié)助服務(wù)----
echo --------------------------
@ping 127.0.0.1 -n 3 >nul
echo ------------------------------
echo ----正在關(guān)閉遠(yuǎn)程注冊表服務(wù)----
echo ------------------------------
@sc config RemoteRegistry start= disabled
echo ----------------------------
echo ----已關(guān)閉遠(yuǎn)程注冊表服務(wù)----
echo ----------------------------
@ping 127.0.0.1 -n 3 >nul
echo ----------------------------
echo ----關(guān)閉自動硬件播放通知----
echo ----------------------------
sc config ShellHWDetection start= disabled
echo -----------------------
echo ----自動播放通知關(guān)閉---
echo -----------------------
@ping 127.0.0.1 -n 3 >nul
echo ----------------------------------------
echo ----正在關(guān)閉替換憑據(jù)下的啟動進程服務(wù)----
echo ----------------------------------------
sc config seclogon start= disabled
echo --------------------------
echo ----已關(guān)閉啟動進程服務(wù)----
echo --------------------------
@ping 127.0.0.1 -n 3 >nul
echo ------------------------------------
echo ----IEEE 802.11 適配器的自動配置----
echo ------------------------------------
sc config WZCSVC start= disabled
echo ------------------
echo ----已關(guān)閉IEEE----
echo ------------------
@ping 127.0.0.1 -n 3 >nul
echo --------------------------
echo ----客戶端跟蹤服務(wù)關(guān)閉----
echo --------------------------
sc config TrkSvr start= disabled
sc config MSDTC start= disabled
echo ----------------------------
echo ----已關(guān)閉客戶端跟蹤服務(wù)----
echo ----------------------------
@ping 127.0.0.1 -n 3 >nul
echo --------------------
echo ----幫助中心關(guān)閉----
echo --------------------
sc config helpsvc start= disabled
echo --------------------------
echo ----已關(guān)閉幫助中心服務(wù)----
echo --------------------------
@ping 127.0.0.1 -n 3 >nul
echo --------------------------------
echo --------------------------------
echo ---- 系統(tǒng)權(quán)限加固 ----
echo --------------------------------
echo --------------------------------
echo -------------------------------------------------------
echo ----C盤(系統(tǒng)盤) (administrators,system完全控制權(quán)限)----
echo -------------------------------------------------------
cacls C:\ /t /c /g administrators:F system:F
echo -------------------------------------------
echo ----Common Files (everyone用戶只讀權(quán)限)----
echo -------------------------------------------
Cacls "C:\Program Files\Common Files" /t /e /c /g everyone:R
echo -------------------------------------------------------------
echo ----IIS Temporary Compressed Files (everyone用戶更改權(quán)限)----
echo -------------------------------------------------------------
Cacls "C:\WINDOWS\IIS Temporary Compressed Files" /t /e /c /g everyone:C
echo --------------------------------------------
echo ----Microsoft.Net (everyone用戶只讀權(quán)限)----
echo --------------------------------------------
Cacls C:\WINDOWS\Microsoft.Net /t /e /c /g everyone:R
echo ------------------------------------------------------
echo ----Temporary ASP.NET Files (everyone用戶更改權(quán)限)----
echo ------------------------------------------------------
Cacls "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files" /t /e /c /g everyone:C
echo ------------------------------------------------------
echo ----Temporary ASP.NET Files (everyone用戶更改權(quán)限)----
echo ------------------------------------------------------
Cacls "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files" /t /e /c /g everyone:C
echo -------------------------------------------
echo ----Registration (everyone用戶讀取權(quán)限)----
echo -------------------------------------------
Cacls C:\WINDOWS\Registration /t /e /c /g everyone:R
echo -----------------------------------
echo ----Temp (everyone用戶更改權(quán)限)----
echo -----------------------------------
Cacls C:\WINDOWS\Temp /t /e /c /g everyone:C
echo -------------------
@echo off
echo ----------------------------------
echo ----正在備份注冊表 請稍后....----
echo ----------------------------------
reg export "HKEY_LOCAL_MACHINE" C:/reg_backup.reg
echo ----------------------
echo ----注冊表備份完成----
echo ----------------------
ping 127.0.0.1 -n 3 >nul
echo -----------------------------------
echo ----安全配置正在改寫 請稍候...----
echo -----------------------------------
@ping 127.0.0.1 -n 3 >nul
echo ----------------------
echo ----正在禁用空連接----
echo ----------------------
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa /v restrictanonymous /t reg_dword /d 1 /f
echo --------------------------
echo ----禁用空連接設(shè)置完畢----
echo --------------------------
@ping 127.0.0.1 -n 3 >nul
echo ------------------------
echo ----正在刪除默認(rèn)共享----
echo ------------------------
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /v AutoShareServer /t reg_dword /d 0 /f
echo ----------------------------
echo ----刪除默認(rèn)共享設(shè)置完畢----
echo ----------------------------
@ping 127.0.0.1 -n 3 >nul
echo ------------------------------
echo ----正在修改TTL值請稍后...----
echo ------------------------------
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v DefaultTTL /t reg_dword /d 53 /f
echo -------------------
echo ----TTL修改完畢----
echo -------------------
@ping 127.0.0.1 -n 3 >nul
echo -----------------------
echo ----防止syn洪水攻擊----
echo -----------------------
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v SynAttackProtect /t reg_dword /d 2 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v EnablePMTUDiscovery /t reg_dword /d 0 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v NoNameReleaseOnDemand /t reg_dword /d 1 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v EnableDeadGWDetect /t reg_dword /d 0 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v KeepAliveTime /t reg_dword /d 300000 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v PerformRouterDiscovery /t reg_dword /d 0 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v EnableICMPRedirects /t reg_dword /d 0 /f
echo -------------------------------
echo ----防止syn洪水攻擊設(shè)置完畢----
echo -------------------------------
@ping 127.0.0.1 -n 3 >nul
echo ------------------------------
echo ------------------------------
echo ---- 系統(tǒng)服務(wù)修改 ----
echo ------------------------------
echo ------------------------------
@ping 127.0.0.1 -n 3 >nul
echo --------------------
echo ----修改3389端口----
echo --------------------
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds dpwd\Tds\tcp" /v PortNumber /t reg_dword /d 44454 /f
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentContro1Set\Control\Tenninal Server\WinStations\RDP\Tcp" /v PortNumber /t reg_dword /d 44454 /f
echo --------------------
echo ----修改PORT完畢----
echo --------------------
@ping 127.0.0.1 -n 3 >nul
echo -------------------------------------
echo ----正在開啟系統(tǒng)防火墻 請稍后....----
echo -------------------------------------
sc config sharedaccess start= auto & net start sharedaccess
echo ------------------------
echo ----系統(tǒng)防火墻已開啟----
echo ------------------------
@ping 127.0.0.1 -n 3 >nul
echo ----------------------------
echo ----正在關(guān)閉共享打印服務(wù)----
echo ----------------------------
@sc config Spooler start= disabled
sc config LanmanServer start= disabled
sc config LmHosts start= disabled
echo --------------------------
echo ----已關(guān)閉共享打印服務(wù)----
echo --------------------------
@ping 127.0.0.1 -n 3 >nul
echo ----------------------------
echo ----正在關(guān)閉遠(yuǎn)程協(xié)助服務(wù)----
echo ----------------------------
@sc config RDSessMgr start= disabled
echo --------------------------
echo ----已關(guān)閉遠(yuǎn)程協(xié)助服務(wù)----
echo --------------------------
@ping 127.0.0.1 -n 3 >nul
echo ------------------------------
echo ----正在關(guān)閉遠(yuǎn)程注冊表服務(wù)----
echo ------------------------------
@sc config RemoteRegistry start= disabled
echo ----------------------------
echo ----已關(guān)閉遠(yuǎn)程注冊表服務(wù)----
echo ----------------------------
@ping 127.0.0.1 -n 3 >nul
echo ----------------------------
echo ----關(guān)閉自動硬件播放通知----
echo ----------------------------
sc config ShellHWDetection start= disabled
echo -----------------------
echo ----自動播放通知關(guān)閉---
echo -----------------------
@ping 127.0.0.1 -n 3 >nul
echo ----------------------------------------
echo ----正在關(guān)閉替換憑據(jù)下的啟動進程服務(wù)----
echo ----------------------------------------
sc config seclogon start= disabled
echo --------------------------
echo ----已關(guān)閉啟動進程服務(wù)----
echo --------------------------
@ping 127.0.0.1 -n 3 >nul
echo ------------------------------------
echo ----IEEE 802.11 適配器的自動配置----
echo ------------------------------------
sc config WZCSVC start= disabled
echo ------------------
echo ----已關(guān)閉IEEE----
echo ------------------
@ping 127.0.0.1 -n 3 >nul
echo --------------------------
echo ----客戶端跟蹤服務(wù)關(guān)閉----
echo --------------------------
sc config TrkSvr start= disabled
sc config MSDTC start= disabled
echo ----------------------------
echo ----已關(guān)閉客戶端跟蹤服務(wù)----
echo ----------------------------
@ping 127.0.0.1 -n 3 >nul
echo --------------------
echo ----幫助中心關(guān)閉----
echo --------------------
sc config helpsvc start= disabled
echo --------------------------
echo ----已關(guān)閉幫助中心服務(wù)----
echo --------------------------
@ping 127.0.0.1 -n 3 >nul
echo --------------------------------
echo --------------------------------
echo ---- 系統(tǒng)權(quán)限加固 ----
echo --------------------------------
echo --------------------------------
echo -------------------------------------------------------
echo ----C盤(系統(tǒng)盤) (administrators,system完全控制權(quán)限)----
echo -------------------------------------------------------
cacls C:\ /t /c /g administrators:F system:F
echo -------------------------------------------
echo ----Common Files (everyone用戶只讀權(quán)限)----
echo -------------------------------------------
Cacls "C:\Program Files\Common Files" /t /e /c /g everyone:R
echo -------------------------------------------------------------
echo ----IIS Temporary Compressed Files (everyone用戶更改權(quán)限)----
echo -------------------------------------------------------------
Cacls "C:\WINDOWS\IIS Temporary Compressed Files" /t /e /c /g everyone:C
echo --------------------------------------------
echo ----Microsoft.Net (everyone用戶只讀權(quán)限)----
echo --------------------------------------------
Cacls C:\WINDOWS\Microsoft.Net /t /e /c /g everyone:R
echo ------------------------------------------------------
echo ----Temporary ASP.NET Files (everyone用戶更改權(quán)限)----
echo ------------------------------------------------------
Cacls "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files" /t /e /c /g everyone:C
echo ------------------------------------------------------
echo ----Temporary ASP.NET Files (everyone用戶更改權(quán)限)----
echo ------------------------------------------------------
Cacls "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files" /t /e /c /g everyone:C
echo -------------------------------------------
echo ----Registration (everyone用戶讀取權(quán)限)----
echo -------------------------------------------
Cacls C:\WINDOWS\Registration /t /e /c /g everyone:R
echo -----------------------------------
echo ----Temp (everyone用戶更改權(quán)限)----
echo -----------------------------------
Cacls C:\WINDOWS\Temp /t /e /c /g everyone:C
echo -------------------
echo ----assembly (everyone用戶讀取權(quán)限)----
echo ---------------------------------------
Cacls C:\WINDOWS\assembly /t /e /c /g everyone:R
echo -------------------------------------
echo ----WinSxS (everyone用戶讀取權(quán)限)----
echo -------------------------------------
Cacls C:\WINDOWS\WinSxS /t /e /c /g everyone:R
echo ------------------------------------
echo ----Fonts (everyone用戶讀取權(quán)限)----
echo ------------------------------------
Cacls C:\WINDOWS\Fonts /t /e /c /g everyone:R
echo ---------------------------------------
echo ----System32 (everyone用戶讀取權(quán)限)----
echo ---------------------------------------
Cacls C:\WINDOWS\System32 /t /e /c /g everyone:R
echo ------------------------------------------
echo ----msdtc (networkservice用戶更改權(quán)限)----
echo ------------------------------------------
Cacls C:\windows\system32\msdtc /t /e /c /g networkservice:C
echo -----------------------------------------------------
echo ----ASP Compiled Templates (everyone用戶更改權(quán)限)----
echo -----------------------------------------------------
Cacls "C:\WINDOWS\system32\inetsrv\ASP Compiled Templates" /t /e /c /g everyone:C
echo ------------------------------------
echo ----*.exe (去除everyone用戶權(quán)限)----
echo ------------------------------------
Cacls C:\WINDOWS\System32\*.exe /e /c /r everyone
echo ------------------------------------
echo ----cmd.exe (去除system用戶權(quán)限)----
echo ------------------------------------
Cacls C:\WINDOWS\System32\cmd.exe /e /c /r system
echo ------------------------------------
echo ----net.exe (去除system用戶權(quán)限)----
echo ------------------------------------
Cacls C:\WINDOWS\System32 et.exe /e /c /r system
echo -------------------------------------
echo ----net1.exe (去除system用戶權(quán)限)----
echo -------------------------------------
Cacls C:\WINDOWS\System32 et1.exe /e /c /r system
echo ----------------------------------------
echo ----msdtc.exe (everyone用戶讀取權(quán)限)----
echo ----------------------------------------
Cacls C:\WINDOWS\System32\msdtc.exe /e /c /g everyone:R
echo ------------------------------------------
echo ----dllhost.exe (everyone用戶讀取權(quán)限)----
echo ------------------------------------------
Cacls C:\WINDOWS\System32\dllhost.exe /e /c /g everyone:R
echo ------------------------------------------
echo ----svchost.exe (everyone用戶讀取權(quán)限)----
echo ------------------------------------------
Cacls C:\WINDOWS\System32\svchost.exe /e /c /g everyone:R
echo --------------------
echo --------------------
echo ----系統(tǒng)加固完畢----
echo --------------------
echo --------------------
@ping 127.0.0.1 -n 3 >nul
echo -----------------------------
echo ----安全設(shè)置完畢 歡迎使用----
echo -----------------------------
echo ------------------
echo ----重啟服務(wù)器----
echo ------------------
@ping 127.0.0.1
shutdown -r
@pause
將上面的代碼保存為1.cmd或1.bat，雙擊運行下即可。
相關(guān)文章
本文介紹windows IIS中運行php5的簡單方法。2009-06-06
如果你在 IIS 7 中只看到諸如 HTTP Error 500 - Internal Server Error (500 - 內(nèi)部服務(wù)器錯誤) 的簡單錯誤信息，那么可以通過如下步驟配置 IIS7 以輸出詳細(xì)錯誤信息。2010-01-01
ASP.NET Process Model之一 IIS 和 ASP.NET ISAPI
我覺得這個問題涉及到IIS和ASP.NETASP.NET Runtime的處理模型的問題，并不是三言兩語就能說清楚的，所以決定寫這樣一篇介紹IIS和ASP.NET Runtime Process Model的文章，談?wù)勎覍Υ说囊粋€粗淺的認(rèn)識，如果有什么不對的地方，希望大家及時指正。2008-08-08
Windows 系統(tǒng)下安裝 IntelliJ IDEA 的方法（圖解）
本文通過圖文并茂的形式給大家介紹了Windows 系統(tǒng)下安裝 IntelliJ IDEA 的方法，文中還給大家提到了IntelliJ IDEA 注冊碼，非常不錯，具有參考借鑒價值，需要的朋友參考下2018-01-01
對于win2003服務(wù)器的安全設(shè)置，對于新手一般是個問題，但下面的這篇文章對于服務(wù)器的設(shè)置的一些常見技巧處理的比較好。2009-02-02
Windows Server 2019和Windows Server, Vers
這篇文章主要介紹了Windows Server 2019和Windows Server, Version 1909的區(qū)別是什么,需要的朋友可以參考下2022-10-10
Win2003 IIS6 使用.net framework 4.0 后默認(rèn)文檔失效解決方案
這篇文章主要介紹了Win2003 IIS6 使用.net framework 4.0 后默認(rèn)文檔失效解決方案,需要的朋友可以參考下2017-03-03
一直以為windows下用nginx來配置反向代理，沒想到微軟官方也出了這個東西，特分享下， 方便需要的朋友2015-11-11
今天突然發(fā)現(xiàn)訪問網(wǎng)站比較卡，經(jīng)過排查發(fā)現(xiàn)由于gzip緩存目錄過大引起的，通過文件夾屬性查看到到11g，經(jīng)過命令行刪除了2017-03-03
Dell?R630服務(wù)器安裝windows?server?2019服務(wù)器系統(tǒng)+制作U盤啟動+服務(wù)器配置
這里為大家分享的是在一臺Dell R630型號的服務(wù)器上安裝一個windows server 2019系統(tǒng)的操作系統(tǒng)，包括制作U盤啟動與服務(wù)器配置,需要的朋友可以參考下2024-03-03