注册
登录
| 关键词： nbsp echo everyone 权限 SYSTEM WINDOWS 用户 cacls CurrentControlSe 127.0 |
@echo offecho ----------------------------------echo ----正在备份注册表 请稍后....----echo ----------------------------------reg export "HKEY_LOCAL_MACHINE" C:/reg_backup.regecho ----------------------echo ----注册表备份完成----echo ----------------------ping 127.0.0.1 -n 3 >nulecho -----------------------------------echo ----安全配置正在改写 请稍候...----echo -----------------------------------@ping 127.0.0.1 -n 3 >nul echo ----------------------echo ----正在禁用空连接----echo ----------------------reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa /v restrictanonymous /t reg_dword /d 1 /fecho --------------------------echo ----禁用空连接设置完毕----echo --------------------------@ping 127.0.0.1 -n 3 >nul echo ------------------------echo ----正在删除默认共享----echo ------------------------reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /v AutoShareServer /t reg_dword /d 0 /fecho ----------------------------echo ----删除默认共享设置完毕----echo ----------------------------@ping 127.0.0.1 -n 3 >nulecho ------------------------------echo ----正在修改TTL值请稍后...----echo ------------------------------reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v DefaultTTL /t reg_dword /d 56 /fecho -------------------echo ----TTL修改完毕----echo -------------------@ping 127.0.0.1 -n 3 >nulecho -----------------------echo ----防止syn洪水攻击----echo -----------------------reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v SynAttackProtect /t reg_dword /d 2 /freg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v EnablePMTUDiscovery /t reg_dword /d 0 /freg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v NoNameReleaseOnDemand /t reg_dword /d 1 /freg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v EnableDeadGWDetect /t reg_dword /d 0 /freg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v KeepAliveTime /t reg_dword /d 300000 /freg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v PerformRouterDiscovery /t reg_dword /d 0 /freg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v EnableICMPRedirects /t reg_dword /d 0 /fecho -------------------------------echo ----防止syn洪水攻击设置完毕----echo -------------------------------@ping 127.0.0.1 -n 3 >nulecho ------------------------------echo ------------------------------echo ---- 系统服务修改 ----echo ------------------------------echo ------------------------------@ping 127.0.0.1 -n 3 >nulecho -------------------------------------echo ----正在开启系统防火墙 请稍后....----echo -------------------------------------sc config sharedaccess start= auto & net start sharedaccessecho ------------------------echo ----系统防火墙已开启----echo ------------------------@ping 127.0.0.1 -n 3 >nulecho ----------------------------echo ----正在关闭共享打印服务----echo ----------------------------@sc config Spooler start= disabledsc config LanmanServer start= disabledsc config LmHosts start= disabledecho --------------------------echo ----已关闭共享打印服务----echo --------------------------@ping 127.0.0.1 -n 3 >nulecho ----------------------------echo ----正在关闭远程协助服务----echo ----------------------------@sc config RDSessMgr start= disabledecho --------------------------echo ----已关闭远程协助服务----echo --------------------------@ping 127.0.0.1 -n 3 >nulecho ------------------------------echo ----正在关闭远程注册表服务----echo ------------------------------@sc config RemoteRegistry start= disabledecho ----------------------------echo ----已关闭远程注册表服务----echo ----------------------------@ping 127.0.0.1 -n 3 >nulecho ----------------------------echo ----关闭自动硬件播放通知----echo ----------------------------sc config ShellHWDetection start= disabledecho -----------------------echo ----自动播放通知关闭---echo -----------------------@ping 127.0.0.1 -n 3 >nulecho ----------------------------------------echo ----正在关闭替换凭据下的启动进程服务----echo ----------------------------------------sc config seclogon start= disabledecho --------------------------echo ----已关闭启动进程服务----echo --------------------------@ping 127.0.0.1 -n 3 >nulecho --------------------------echo ----客户端跟踪服务关闭----echo --------------------------sc config TrkSvr start= disabledsc config MSDTC start= disabled echo ----------------------------echo ----已关闭客户端跟踪服务----echo ----------------------------@ping 127.0.0.1 -n 3 >nulecho --------------------echo ----帮助中心关闭----echo --------------------sc config helpsvc start= disabled echo --------------------------echo ----已关闭帮助中心服务----echo --------------------------@ping 127.0.0.1 -n 3 >nulecho --------------------------------echo --------------------------------echo ---- 系统权限加固 ----echo --------------------------------echo --------------------------------echo -------------------------------------------------------echo ----C盘(系统盘) (administrators,system完全控制权限)----echo -------------------------------------------------------cacls C:\ /t /c /g administrators:F system:F echo -------------------------------------------echo ----Common Files (everyone用户只读权限)----echo -------------------------------------------Cacls "C:\Program Files\Common Files" /t /e /c /g everyone:Recho -------------------------------------------------------------echo ----IIS Temporary Compressed Files (everyone用户更改权限)----echo -------------------------------------------------------------Cacls "C:\WINDOWS\IIS Temporary Compressed Files" /t /e /c /g everyone:C echo --------------------------------------------echo ----Microsoft.Net (everyone用户只读权限)----echo --------------------------------------------Cacls C:\WINDOWS\Microsoft.Net /t /e /c /g everyone:R echo ------------------------------------------------------echo ----Temporary ASP.NET Files (everyone用户更改权限)----echo ------------------------------------------------------Cacls "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files" /t /e /c /g everyone:C echo ------------------------------------------------------echo ----Temporary ASP.NET Files (everyone用户更改权限)----echo ------------------------------------------------------Cacls "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files" /t /e /c /g everyone:C echo -------------------------------------------echo ----Registration (everyone用户读取权限)----echo -------------------------------------------Cacls C:\WINDOWS\Registration /t /e /c /g everyone:Recho -----------------------------------echo ----Temp (everyone用户更改权限)----echo -----------------------------------Cacls C:\WINDOWS\Temp /t /e /c /g everyone:C echo ---------------------------------------echo ----assembly (everyone用户读取权限)----echo ---------------------------------------Cacls C:\WINDOWS\assembly /t /e /c /g everyone:Recho -------------------------------------echo ----WinSxS (everyone用户读取权限)----echo -------------------------------------Cacls C:\WINDOWS\WinSxS /t /e /c /g everyone:Recho ------------------------------------echo ----Fonts (everyone用户读取权限)----echo ------------------------------------Cacls C:\WINDOWS\Fonts /t /e /c /g everyone:Recho ---------------------------------------echo ----System32 (everyone用户读取权限)----echo ---------------------------------------Cacls C:\WINDOWS\System32 /t /e /c /g everyone:Recho ----------------------------------------------------------echo ----System32 ALG.EXE (NETWORK SERVICE权限用户读取权限)----echo ----------------------------------------------------------Cacls C:\WINDOWS\System32\alg.exe /t /e /c /g "NETWORK SERVICE":Recho ------------------------------------------echo ----msdtc (networkservice用户更改权限)----echo ------------------------------------------Cacls C:\windows\system32\msdtc /t /e /c /g networkservice:C echo -----------------------------------------------------echo ----ASP Compiled Templates (everyone用户更改权限)----echo -----------------------------------------------------Cacls "C:\WINDOWS\system32\inetsrv\ASP Compiled Templates" /t /e /c /g everyone:Cecho ------------------------------------echo ----*.exe (去除everyone用户权限)----echo ------------------------------------Cacls C:\WINDOWS\System32\*.exe /e /c /r everyone echo ------------------------------------echo ----cmd.exe (去除system用户权限)----echo ------------------------------------Cacls C:\WINDOWS\System32\cmd.exe /e /c /r system echo ------------------------------------echo ----net.exe (去除system用户权限)----echo ------------------------------------Cacls C:\WINDOWS\System32 et.exe /e /c /r systemecho -------------------------------------echo ----net1.exe (去除system用户权限)----echo -------------------------------------Cacls C:\WINDOWS\System32 et1.exe /e /c /r systemecho ----------------------------------------echo ----msdtc.exe (everyone用户读取权限)----echo ----------------------------------------Cacls C:\WINDOWS\System32\msdtc.exe /e /c /g everyone:Recho ------------------------------------------echo ----dllhost.exe (everyone用户读取权限)----echo ------------------------------------------Cacls C:\WINDOWS\System32\dllhost.exe /e /c /g everyone:Recho ------------------------------------------echo ----svchost.exe (everyone用户读取权限)----echo ------------------------------------------Cacls C:\WINDOWS\System32\svchost.exe /e /c /g everyone:Recho ------------------------------------------echo ----Documents and Settings (NETWORK SERVICE用户读取权限)----echo ------------------------------------------Cacls "C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto" /t /e /c /g "NETWORK SERVICE":Recho ----------------------------------------echo ----temp (everyone 用户读写修改权限)----echo ----------------------------------------Cacls C:\WINDOWS\temp /t /e /c /g everyone:Cecho ----------------------------------------------echo ----Microsoft.NET (users用户读取权限)----echo ----------------------------------------------Cacls C:\WINDOWS\Microsoft.NET\Framework /t /e /c /g Users:Recho --------------------------------------------------echo ----Framework\v2.0.50727 (IIS_WPG、LOCAL SERVICE用户读取权限)----echo --------------------------------------------------Cacls C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727 /t /e /c /g IIS_WPG:RCacls C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727 /t /e /c /g "LOCAL SERVICE":RCacls C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727 /t /e /c /g "NETWORK SERVICE":Recho ----------------------------------------------------echo ----Microsoft.NET 需要手动添加IWAM只读权限----echo ----Framework\v2.0.50727 (asp.net用户读取权限)----echo ----------------------------------------------------@pauseecho --------------------echo ----系统加固完成----echo --------------------echo -----------------------------echo ----安全设置完毕 欢迎使用----echo -----------------------------echo ------------------echo ----重启服务器----echo ------------------@ping 127.0.0.1shutdown -r@pause 本文出自 “21世纪游戏运维” 博客，请务必保留此出处http://3sbin.blog.51cto.com/3098975/639304 |
|
声明：文章版权归原作者所有 部分文章转自互联网 如有侵权请联系
[邮箱地址] 删除
|
