Win2003環(huán)境下的一鍵系統(tǒng)安全批處理
更新時間：2011年06月15日 22:58:30 作者：
只要將下面的代碼保存為1.bat運行一下即可自動設(shè)置win2003的安全，完成后自動重啟，需要的朋友可以參考下。
復(fù)制代碼 代碼如下:
@echo off
echo ----------------------------------
echo ----正在備份注冊表 請稍后....----
echo ----------------------------------
reg export "HKEY_LOCAL_MACHINE" C:/reg_backup.reg
echo ----------------------
echo ----注冊表備份完成----
echo ----------------------
ping 127.0.0.1 -n 3 >nul
echo -----------------------------------
echo ----安全配置正在改寫 請稍候...----
echo -----------------------------------
@ping 127.0.0.1 -n 3 >nul
echo ----------------------
echo ----正在禁用空連接----
echo ----------------------
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa /v restrictanonymous /t reg_dword /d 1 /f
echo --------------------------
echo ----禁用空連接設(shè)置完畢----
echo --------------------------
@ping 127.0.0.1 -n 3 >nul
echo ------------------------
echo ----正在刪除默認(rèn)共享----
echo ------------------------
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /v AutoShareServer /t reg_dword /d 0 /f
echo ----------------------------
echo ----刪除默認(rèn)共享設(shè)置完畢----
echo ----------------------------
@ping 127.0.0.1 -n 3 >nul
echo ------------------------------
echo ----正在修改TTL值請稍后...----
echo ------------------------------
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v DefaultTTL /t reg_dword /d 53 /f
echo -------------------
echo ----TTL修改完畢----
echo -------------------
@ping 127.0.0.1 -n 3 >nul
echo -----------------------
echo ----防止syn洪水攻擊----
echo -----------------------
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v SynAttackProtect /t reg_dword /d 2 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v EnablePMTUDiscovery /t reg_dword /d 0 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v NoNameReleaseOnDemand /t reg_dword /d 1 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v EnableDeadGWDetect /t reg_dword /d 0 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v KeepAliveTime /t reg_dword /d 300000 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v PerformRouterDiscovery /t reg_dword /d 0 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v EnableICMPRedirects /t reg_dword /d 0 /f
echo -------------------------------
echo ----防止syn洪水攻擊設(shè)置完畢----
echo -------------------------------
@ping 127.0.0.1 -n 3 >nul
echo ------------------------------
echo ------------------------------
echo ---- 系統(tǒng)服務(wù)修改 ----
echo ------------------------------
echo ------------------------------
@ping 127.0.0.1 -n 3 >nul
echo --------------------
echo ----修改3389端口----
echo --------------------
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds dpwd\Tds\tcp" /v PortNumber /t reg_dword /d 44454 /f
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentContro1Set\Control\Tenninal Server\WinStations\RDP\Tcp" /v PortNumber /t reg_dword /d 44454 /f
echo --------------------
echo ----修改PORT完畢----
echo --------------------
@ping 127.0.0.1 -n 3 >nul
echo -------------------------------------
echo ----正在開啟系統(tǒng)防火墻 請稍后....----
echo -------------------------------------
sc config sharedaccess start= auto & net start sharedaccess
echo ------------------------
echo ----系統(tǒng)防火墻已開啟----
echo ------------------------
@ping 127.0.0.1 -n 3 >nul
echo ----------------------------
echo ----正在關(guān)閉共享打印服務(wù)----
echo ----------------------------
@sc config Spooler start= disabled
sc config LanmanServer start= disabled
sc config LmHosts start= disabled
echo --------------------------
echo ----已關(guān)閉共享打印服務(wù)----
echo --------------------------
@ping 127.0.0.1 -n 3 >nul
echo ----------------------------
echo ----正在關(guān)閉遠(yuǎn)程協(xié)助服務(wù)----
echo ----------------------------
@sc config RDSessMgr start= disabled
echo --------------------------
echo ----已關(guān)閉遠(yuǎn)程協(xié)助服務(wù)----
echo --------------------------
@ping 127.0.0.1 -n 3 >nul
echo ------------------------------
echo ----正在關(guān)閉遠(yuǎn)程注冊表服務(wù)----
echo ------------------------------
@sc config RemoteRegistry start= disabled
echo ----------------------------
echo ----已關(guān)閉遠(yuǎn)程注冊表服務(wù)----
echo ----------------------------
@ping 127.0.0.1 -n 3 >nul
echo ----------------------------
echo ----關(guān)閉自動硬件播放通知----
echo ----------------------------
sc config ShellHWDetection start= disabled
echo -----------------------
echo ----自動播放通知關(guān)閉---
echo -----------------------
@ping 127.0.0.1 -n 3 >nul
echo ----------------------------------------
echo ----正在關(guān)閉替換憑據(jù)下的啟動進程服務(wù)----
echo ----------------------------------------
sc config seclogon start= disabled
echo --------------------------
echo ----已關(guān)閉啟動進程服務(wù)----
echo --------------------------
@ping 127.0.0.1 -n 3 >nul
echo ------------------------------------
echo ----IEEE 802.11 適配器的自動配置----
echo ------------------------------------
sc config WZCSVC start= disabled
echo ------------------
echo ----已關(guān)閉IEEE----
echo ------------------
@ping 127.0.0.1 -n 3 >nul
echo --------------------------
echo ----客戶端跟蹤服務(wù)關(guān)閉----
echo --------------------------
sc config TrkSvr start= disabled
sc config MSDTC start= disabled
echo ----------------------------
echo ----已關(guān)閉客戶端跟蹤服務(wù)----
echo ----------------------------
@ping 127.0.0.1 -n 3 >nul
echo --------------------
echo ----幫助中心關(guān)閉----
echo --------------------
sc config helpsvc start= disabled
echo --------------------------
echo ----已關(guān)閉幫助中心服務(wù)----
echo --------------------------
@ping 127.0.0.1 -n 3 >nul
echo --------------------------------
echo --------------------------------
echo ---- 系統(tǒng)權(quán)限加固 ----
echo --------------------------------
echo --------------------------------
echo -------------------------------------------------------
echo ----C盤(系統(tǒng)盤) (administrators,system完全控制權(quán)限)----
echo -------------------------------------------------------
cacls C:\ /t /c /g administrators:F system:F
echo -------------------------------------------
echo ----Common Files (everyone用戶只讀權(quán)限)----
echo -------------------------------------------
Cacls "C:\Program Files\Common Files" /t /e /c /g everyone:R
echo -------------------------------------------------------------
echo ----IIS Temporary Compressed Files (everyone用戶更改權(quán)限)----
echo -------------------------------------------------------------
Cacls "C:\WINDOWS\IIS Temporary Compressed Files" /t /e /c /g everyone:C
echo --------------------------------------------
echo ----Microsoft.Net (everyone用戶只讀權(quán)限)----
echo --------------------------------------------
Cacls C:\WINDOWS\Microsoft.Net /t /e /c /g everyone:R
echo ------------------------------------------------------
echo ----Temporary ASP.NET Files (everyone用戶更改權(quán)限)----
echo ------------------------------------------------------
Cacls "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files" /t /e /c /g everyone:C
echo ------------------------------------------------------
echo ----Temporary ASP.NET Files (everyone用戶更改權(quán)限)----
echo ------------------------------------------------------
Cacls "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files" /t /e /c /g everyone:C
echo -------------------------------------------
echo ----Registration (everyone用戶讀取權(quán)限)----
echo -------------------------------------------
Cacls C:\WINDOWS\Registration /t /e /c /g everyone:R
echo -----------------------------------
echo ----Temp (everyone用戶更改權(quán)限)----
echo -----------------------------------
Cacls C:\WINDOWS\Temp /t /e /c /g everyone:C
echo -------------------
@echo off
echo ----------------------------------
echo ----正在備份注冊表 請稍后....----
echo ----------------------------------
reg export "HKEY_LOCAL_MACHINE" C:/reg_backup.reg
echo ----------------------
echo ----注冊表備份完成----
echo ----------------------
ping 127.0.0.1 -n 3 >nul
echo -----------------------------------
echo ----安全配置正在改寫 請稍候...----
echo -----------------------------------
@ping 127.0.0.1 -n 3 >nul
echo ----------------------
echo ----正在禁用空連接----
echo ----------------------
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa /v restrictanonymous /t reg_dword /d 1 /f
echo --------------------------
echo ----禁用空連接設(shè)置完畢----
echo --------------------------
@ping 127.0.0.1 -n 3 >nul
echo ------------------------
echo ----正在刪除默認(rèn)共享----
echo ------------------------
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /v AutoShareServer /t reg_dword /d 0 /f
echo ----------------------------
echo ----刪除默認(rèn)共享設(shè)置完畢----
echo ----------------------------
@ping 127.0.0.1 -n 3 >nul
echo ------------------------------
echo ----正在修改TTL值請稍后...----
echo ------------------------------
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v DefaultTTL /t reg_dword /d 53 /f
echo -------------------
echo ----TTL修改完畢----
echo -------------------
@ping 127.0.0.1 -n 3 >nul
echo -----------------------
echo ----防止syn洪水攻擊----
echo -----------------------
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v SynAttackProtect /t reg_dword /d 2 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v EnablePMTUDiscovery /t reg_dword /d 0 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v NoNameReleaseOnDemand /t reg_dword /d 1 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v EnableDeadGWDetect /t reg_dword /d 0 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v KeepAliveTime /t reg_dword /d 300000 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v PerformRouterDiscovery /t reg_dword /d 0 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v EnableICMPRedirects /t reg_dword /d 0 /f
echo -------------------------------
echo ----防止syn洪水攻擊設(shè)置完畢----
echo -------------------------------
@ping 127.0.0.1 -n 3 >nul
echo ------------------------------
echo ------------------------------
echo ---- 系統(tǒng)服務(wù)修改 ----
echo ------------------------------
echo ------------------------------
@ping 127.0.0.1 -n 3 >nul
echo --------------------
echo ----修改3389端口----
echo --------------------
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds dpwd\Tds\tcp" /v PortNumber /t reg_dword /d 44454 /f
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentContro1Set\Control\Tenninal Server\WinStations\RDP\Tcp" /v PortNumber /t reg_dword /d 44454 /f
echo --------------------
echo ----修改PORT完畢----
echo --------------------
@ping 127.0.0.1 -n 3 >nul
echo -------------------------------------
echo ----正在開啟系統(tǒng)防火墻 請稍后....----
echo -------------------------------------
sc config sharedaccess start= auto & net start sharedaccess
echo ------------------------
echo ----系統(tǒng)防火墻已開啟----
echo ------------------------
@ping 127.0.0.1 -n 3 >nul
echo ----------------------------
echo ----正在關(guān)閉共享打印服務(wù)----
echo ----------------------------
@sc config Spooler start= disabled
sc config LanmanServer start= disabled
sc config LmHosts start= disabled
echo --------------------------
echo ----已關(guān)閉共享打印服務(wù)----
echo --------------------------
@ping 127.0.0.1 -n 3 >nul
echo ----------------------------
echo ----正在關(guān)閉遠(yuǎn)程協(xié)助服務(wù)----
echo ----------------------------
@sc config RDSessMgr start= disabled
echo --------------------------
echo ----已關(guān)閉遠(yuǎn)程協(xié)助服務(wù)----
echo --------------------------
@ping 127.0.0.1 -n 3 >nul
echo ------------------------------
echo ----正在關(guān)閉遠(yuǎn)程注冊表服務(wù)----
echo ------------------------------
@sc config RemoteRegistry start= disabled
echo ----------------------------
echo ----已關(guān)閉遠(yuǎn)程注冊表服務(wù)----
echo ----------------------------
@ping 127.0.0.1 -n 3 >nul
echo ----------------------------
echo ----關(guān)閉自動硬件播放通知----
echo ----------------------------
sc config ShellHWDetection start= disabled
echo -----------------------
echo ----自動播放通知關(guān)閉---
echo -----------------------
@ping 127.0.0.1 -n 3 >nul
echo ----------------------------------------
echo ----正在關(guān)閉替換憑據(jù)下的啟動進程服務(wù)----
echo ----------------------------------------
sc config seclogon start= disabled
echo --------------------------
echo ----已關(guān)閉啟動進程服務(wù)----
echo --------------------------
@ping 127.0.0.1 -n 3 >nul
echo ------------------------------------
echo ----IEEE 802.11 適配器的自動配置----
echo ------------------------------------
sc config WZCSVC start= disabled
echo ------------------
echo ----已關(guān)閉IEEE----
echo ------------------
@ping 127.0.0.1 -n 3 >nul
echo --------------------------
echo ----客戶端跟蹤服務(wù)關(guān)閉----
echo --------------------------
sc config TrkSvr start= disabled
sc config MSDTC start= disabled
echo ----------------------------
echo ----已關(guān)閉客戶端跟蹤服務(wù)----
echo ----------------------------
@ping 127.0.0.1 -n 3 >nul
echo --------------------
echo ----幫助中心關(guān)閉----
echo --------------------
sc config helpsvc start= disabled
echo --------------------------
echo ----已關(guān)閉幫助中心服務(wù)----
echo --------------------------
@ping 127.0.0.1 -n 3 >nul
echo --------------------------------
echo --------------------------------
echo ---- 系統(tǒng)權(quán)限加固 ----
echo --------------------------------
echo --------------------------------
echo -------------------------------------------------------
echo ----C盤(系統(tǒng)盤) (administrators,system完全控制權(quán)限)----
echo -------------------------------------------------------
cacls C:\ /t /c /g administrators:F system:F
echo -------------------------------------------
echo ----Common Files (everyone用戶只讀權(quán)限)----
echo -------------------------------------------
Cacls "C:\Program Files\Common Files" /t /e /c /g everyone:R
echo -------------------------------------------------------------
echo ----IIS Temporary Compressed Files (everyone用戶更改權(quán)限)----
echo -------------------------------------------------------------
Cacls "C:\WINDOWS\IIS Temporary Compressed Files" /t /e /c /g everyone:C
echo --------------------------------------------
echo ----Microsoft.Net (everyone用戶只讀權(quán)限)----
echo --------------------------------------------
Cacls C:\WINDOWS\Microsoft.Net /t /e /c /g everyone:R
echo ------------------------------------------------------
echo ----Temporary ASP.NET Files (everyone用戶更改權(quán)限)----
echo ------------------------------------------------------
Cacls "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files" /t /e /c /g everyone:C
echo ------------------------------------------------------
echo ----Temporary ASP.NET Files (everyone用戶更改權(quán)限)----
echo ------------------------------------------------------
Cacls "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files" /t /e /c /g everyone:C
echo -------------------------------------------
echo ----Registration (everyone用戶讀取權(quán)限)----
echo -------------------------------------------
Cacls C:\WINDOWS\Registration /t /e /c /g everyone:R
echo -----------------------------------
echo ----Temp (everyone用戶更改權(quán)限)----
echo -----------------------------------
Cacls C:\WINDOWS\Temp /t /e /c /g everyone:C
echo -------------------
echo ----assembly (everyone用戶讀取權(quán)限)----
echo ---------------------------------------
Cacls C:\WINDOWS\assembly /t /e /c /g everyone:R
echo -------------------------------------
echo ----WinSxS (everyone用戶讀取權(quán)限)----
echo -------------------------------------
Cacls C:\WINDOWS\WinSxS /t /e /c /g everyone:R
echo ------------------------------------
echo ----Fonts (everyone用戶讀取權(quán)限)----
echo ------------------------------------
Cacls C:\WINDOWS\Fonts /t /e /c /g everyone:R
echo ---------------------------------------
echo ----System32 (everyone用戶讀取權(quán)限)----
echo ---------------------------------------
Cacls C:\WINDOWS\System32 /t /e /c /g everyone:R
echo ------------------------------------------
echo ----msdtc (networkservice用戶更改權(quán)限)----
echo ------------------------------------------
Cacls C:\windows\system32\msdtc /t /e /c /g networkservice:C
echo -----------------------------------------------------
echo ----ASP Compiled Templates (everyone用戶更改權(quán)限)----
echo -----------------------------------------------------
Cacls "C:\WINDOWS\system32\inetsrv\ASP Compiled Templates" /t /e /c /g everyone:C
echo ------------------------------------
echo ----*.exe (去除everyone用戶權(quán)限)----
echo ------------------------------------
Cacls C:\WINDOWS\System32\*.exe /e /c /r everyone
echo ------------------------------------
echo ----cmd.exe (去除system用戶權(quán)限)----
echo ------------------------------------
Cacls C:\WINDOWS\System32\cmd.exe /e /c /r system
echo ------------------------------------
echo ----net.exe (去除system用戶權(quán)限)----
echo ------------------------------------
Cacls C:\WINDOWS\System32 et.exe /e /c /r system
echo -------------------------------------
echo ----net1.exe (去除system用戶權(quán)限)----
echo -------------------------------------
Cacls C:\WINDOWS\System32 et1.exe /e /c /r system
echo ----------------------------------------
echo ----msdtc.exe (everyone用戶讀取權(quán)限)----
echo ----------------------------------------
Cacls C:\WINDOWS\System32\msdtc.exe /e /c /g everyone:R
echo ------------------------------------------
echo ----dllhost.exe (everyone用戶讀取權(quán)限)----
echo ------------------------------------------
Cacls C:\WINDOWS\System32\dllhost.exe /e /c /g everyone:R
echo ------------------------------------------
echo ----svchost.exe (everyone用戶讀取權(quán)限)----
echo ------------------------------------------
Cacls C:\WINDOWS\System32\svchost.exe /e /c /g everyone:R
echo --------------------
echo --------------------
echo ----系統(tǒng)加固完畢----
echo --------------------
echo --------------------
@ping 127.0.0.1 -n 3 >nul
echo -----------------------------
echo ----安全設(shè)置完畢 歡迎使用----
echo -----------------------------
echo ------------------
echo ----重啟服務(wù)器----
echo ------------------
@ping 127.0.0.1
shutdown -r
@pause
將上面的代碼保存為1.cmd或1.bat，雙擊運行下即可。
相關(guān)文章
win2003 補丁 iis 應(yīng)用程序池 無法啟動 進程退出代碼是 0xffffffff
IIS里面所有的網(wǎng)站訪問都是500 錯誤。進程池啟動后，訪問服務(wù)器的網(wǎng)站，進程池馬上自動關(guān)閉。2011-05-05
window系統(tǒng)的Rsync同步實戰(zhàn)分析
Rsync是一個遠(yuǎn)程數(shù)據(jù)同步工具，可通過LAN/WAN快速同步多臺主機間的文件。Rsync本來是用以取代rcp的一個工具，它當(dāng)前由 rsync.samba.org維護。2008-09-09
IIS 6.0 應(yīng)用程序池回收和工作進程使用介紹
這篇文章主要介紹了IIS 6.0 應(yīng)用程序池回收和工作進程介紹,需要的朋友可以參考下2014-08-08
Win2003 IIS6.0性能優(yōu)化篇，從網(wǎng)站找一些常見的優(yōu)化方法，大家可以參考下。2009-12-12
開放windows服務(wù)器端口(以打開端口8080為例)
我們平時所說的端口其實不是指物理意義上的端口，而是特指TCP/IP協(xié)議中的端口，是邏輯意義上的端口。這篇文章主要介紹了開放windows服務(wù)器端口(以打開端口8080為例),需要的朋友可以參考下2019-10-10
Windows Server 2008(R2) 一鍵安裝PHP環(huán)境（PHP5.3+FastCGI模式）
本文通過最簡單快捷的方式，講述從嶄新的Windows Server 2008(R2)，通過護衛(wèi)神·PHP套件一鍵部署PHP運行環(huán)境的過程，十分簡單2015-01-01
如果Asp.Net在IIS上運行不了，就試下下面兩種方法應(yīng)該可以你的問題2010-12-12
iis Service Unavailable解決方法(權(quán)限問題)
今天朋友的win2003系統(tǒng)出現(xiàn)了這個錯誤提示，很多地方的權(quán)限設(shè)置都是正確的，但還是出現(xiàn)了這個Service Unavailable的錯誤。2011-08-08
Windows下搭建apache、php、mysql過程分享
這篇文章主要介紹了Windows下搭建apache、php、mysql過程分享,本文側(cè)重從apache和php版本選擇，php線程安全，apache和mysql安裝啟動服務(wù)，工作環(huán)境配置這幾個方面來闡述windows下搭建apache+php+mysql過程,需要的朋友可以參考下2015-01-01
IIS+FastCGI+PHP5.3+MySQL5.1+Gzip配置圖文詳細(xì)教程
本 帖旨在幫助新手快速配置出IIS + FastCGI + PHP5.3 + MySQL5.1 + Gzip環(huán)境，高手可以飄過，本文里面圖片較多，每步操作均有詳細(xì)的圖片說明，只要照做，均可一次配置成功2012-06-06