《WIN7与P互访优化批处理服务安全策略批量修改bat.docx》由会员分享，可在线阅读，更多相关《WIN7与P互访优化批处理服务安全策略批量修改bat.docx（14页珍藏版）》请在三一办公上搜索。
1、WIN7与P互访优化批处理服务安全策略批量修改batechOoffsc config AeLookupSvc start= DEMANDsc config ALG start= DEMANDsc config AppIDSvc start= DEMANDsc config AppinfOstart= DEMANDsc config AppMgmt start= DEMANDsc config AudioEndpointBuilder start= AUTOrem AudioSrv=Windows Audiosc config AudioSrv start= AUTOsc config AxIn
2、stSV start= DEMANDsc config BDESVC start= DEMANDsc config BFE start= AUTOsc config BITS start= DEMANDrem Browser=Computer Browsersc config Browser start= AUTOsc config bthserv start= DEMANDsc config CertPropSvc start= DEMANDsc config clr_optimization_v2.0.50727_32 start= DEMANDsc config clr_optimiza
3、tion_v2.0.50727_64 start= DEMANDrem COMSysApp=COM+ System Applicationsc config COMSysApp start= AUTOrem CryptSvc=Cryptographic Servicessc config CryptSvc start= AUTOsc config CscService start= DEMANDrem DcomLaunch=DCOM Server Process Launchersc config DcomLaunch start= AUTOsc config defragsvc start=
4、 DEMANDrem Dhcp=DHCP Clientsc config Dhcp start= AUTOrem Dnscache=DNS Clientsc config Dnscache start= AUTOsc config dot3svc start= DEMANDsc config DPS start= DEMANDrem EapHost=Extensible Authentication Protocolsc config EapHost start= AUTOsc config EFS start= DEMANDsc config ehRecvr start= DEMANDsc
5、config ehScheDstart= DEMANDsc config eventlog start= AUTOsc config EventSystem start= AUTOsc config Fax start= DEMANDrem fdPHost=Function Discovery Provider Hostsc config fdPHost start= AUTOrem FDResPub=Function Discovery Resource Publicationsc config FDResPub start= AUTOsc config FontCache start= D
6、EMANDsc config FontCache3.0.0.0 start= DEMANDsc config gpsvc start= AUTOsc config hidserv start= DEMANDrem hkmsvc=Health Key and Certificate Managementsc config hkmsvc start= AUTOrem HomeGroupListener=HomeGroup Listenersc config HomeGroupListener start= AUTOrem HomeGroupProvider=HomeGroup Providersc
7、 config HomeGroupProvider start= AUTOsc config idsvc start= DEMANDrem IKEEXT=IKE and AuthIP IPsec Keying Moudlessc config IKEEXT start= AUTOrem IPBusEnum=PnP-X IP Bus Enumeratorsc config IPBusEnum start= AUTOrem iphlpsvc=IP Helpersc config iphlpsvc start= AUTOsc config KeyIsOstart= DEMANDrem KtmRm=K
8、tmRm for Distributed Transaction Coordinatorsc config KtmRm start= AUTOrem LanmanServer=Serversc config LanmanServer start= AUTOrem LanmanWorkstation=Workstationsc config LanmanWorkstation start= AUTOrem lltdsvc=Link-Layer Topology Discovery Mappersc config lltdsvc start= AUTOrem lmhosts=TCP/IP NetB
9、IOS Helpersc config lmhosts start= AUTOsc config Mcx2Svc start= DISABLEDsc config MMCSS start= AUTOsc config MpsSvc start= AUTOrem MSDTC=Distributed Transaction Coordinatorsc config MSDTC start= AUTOsc config MSiSCSI start= DEMANDsc config msiserver start= DEMANDrem napagent=Network Access Protectio
10、n Agentsc config napagent start= AUTOrem Netlogon=Netlogonsc config Netlogon start= AUTOrem Netman=Network Connectionssc config Netman start= AUTOrem netprofm=network list servicesc config netprofm start= AUTOrem NetTcpPortSharing=Net.Tcp Port Sharing Servicesc config NetTcpPortSharing start= AUTOre
11、m NlaSvc=Network Location Awarenesssc config NlaSvc start= AUTOrem nsi=Network Store Interface Servicesc config nsi start= AUTOrem p2pimsvc=Peer Networking Identity Managersc config p2pimsvc start= AUTOrem p2psvc=Peer Networking Groupingsc config p2psvc start= AUTOsc config PcaSvc start= DEMANDrem P
12、eerDistSvc=BranchCachesc config PeerDistSvc start= AUTOsc config PerfHost start= DEMANDsc config pla start= DEMANDrem PlugPlay=Plug and Playsc config PlugPlay start= AUTOrem PNRPAutoReg=PNRP Machine Name Publication Servicesc config PNRPAutoReg start= AUTOrem PNRPsvc=Peer Name Resolution Protocolsc
13、config PNRPsvc start= AUTOrem IPsec Policy Agent=PolicyAgentsc config PolicyAgent start= AUTOsc config Power start= AUTOrem ProfSvc=User Profile Servicesc config ProfSvc start= AUTOrem ProtectedStorage=Protected Storagesc config ProtectedStorage start= AUTOsc config QWAVE start= DEMANDrem RasAuto=Re
14、mote Access Auto Connection Managersc config RasAuto start= AUTOrem RasMan=Remote Access Connection Managersc config RasMan start= AUTOsc config RemoteAccess start= DISABLEDrem RemoteRegistry=Remote Registrysc config RemoteRegistry start= AUTOrem RpcEptMapper=RPC Endpoint Mappersc config RpcEptMappe
15、r start= AUTOrem RpcLocator=Remote Procedure Call (RPC) Locatorsc config RpcLocator start= AUTOrem RpcSs=Remote Procedure Call (RPC)sc config RpcSs start= AUTOrem SamSs=Security Accounts Managersc config SamSs start= AUTOsc config SCardSvr start= DEMANDrem Schedule=Task Schedulesc config Schedule st
16、art= AUTOsc config SCPolicySvc start= DEMANDsc config SDRSVC start= DEMANDsc config seclogon start= DEMANDrem SENS=System Event Notification Servicesc config SENS start= DEMANDsc config SensrSvc start= DEMANDrem SessionEnv=Remote Desktop Configurationsc config SessionEnv start= AUTOsc config SharedA
17、ccess start= DISABLEDrem ShellHWDetection=Shell Hardware Detectionsc config ShellHWDetection start= AUTOrem SNMPTRAP=SNMP Trapsc config SNMPTRAP start= AUTOrem Print Spooler=Spoolersc config Spooler start= AUTOsc config sppsvc start= AUTOsc config sppuinotify start= AUTOrem SSDPSRV=SSDP Discoverysc
18、config SSDPSRV start= AUTOrem SstpSvc=Secure Socket Tunneling Protocol Servicesc config SstpSvc start= AUTOsc config stisvc start= DEMANDsc config swprv start= DEMANDsc config SysMain start= AUTOsc config TabletInputService start= DEMANDrem TapiSrv=Telephonysc config TapiSrv start= AUTOrem TBS=TPM B
19、ase Servicessc config TBS start= AUTOrem TermService=Remote Desktop Services (WIN7)rem TermService=Terminal Services (XP)sc config TermService start= AUTOsc config Themes start= AUTOsc config THREADORDER start= DEMANDrem TrkWks=Distributed Link Tracking Clientsc config TrkWks start= AUTOsc config Tr
20、ustedInstaller start= DEMANDrem UI0Detect=Interactive Services Detectionsc config UI0Detect start= AUTOrem UmRdpService=Remote Desktop Services UserMode Port Redirectorsc config UmRdpService start= AUTOrem upnphost=UPnP Device Hostsc config upnphost start= AUTOsc config UxSms start= AUTOrem VaultSvc
21、=Credential Managersc config VaultSvc start= AUTOsc config vds start= AUTOsc config VSS start= AUTOrem W32Time=Windows Timesc config W32Time start= DEMANDsc config wbengine start= DEMANDsc config WbioSrvc start= DEMANDrem wcncsvc=Windows Connect Now - Config Registrarsc config wcncsvc start= AUTOsc
22、config WcsPlugInService start= DEMANDsc config WdiServiceHost start= DEMANDsc config WdiSystemHost start= DEMANDsc config WebClient start= DEMANDsc config Wecsvc start= DEMANDsc config wercplsupport start= DEMANDsc config WerSvc start= DEMANDrem WinHttpAutoProxySvc=WinHTTP Web Proxy Auto-Discovery S
23、ervicesc config WinHttpAutoProxySvc start= AUTOrem Winmgmt=Windows Management Instrumentationsc config Winmgmt start= AUTOsc config WinRM start= DEMANDsc config Wlansvc start= AUTOsc config wmiApSrv start= DEMANDsc config WMPNetworkSvc start= DEMANDsc config WPCSvc start= DEMANDsc config WPDBusEnum
24、start= DEMANDsc config wscsvc start= DEMANDsc config WSearch start= DISABLEDsc config wuauserv start= DEMANDrem wudfsvc=Windows Driver Foundation - User-mode Driver Frameworksc config wudfsvc start= AUTOsc config WwanSvc start= DEMANDrem 以下为XP的服务pauserem NLA=Network Location Awareness(NLA)sc config
25、Nla start= AUTOrem NtLmSsp=NTLM Security Support Providersc config NtLmSsp start= AUTOrem RDSessMgr=Remote Desktop Help Session Managersc config RDSessMgr start= AUTOrem TlntSvr=Telnetsc config TlntSvr start= AUTOrem RemoteAccess=Remote Access Connection Managersc config RemoteAccess start= AUTOrem
26、NetDDE=Network DDEsc config NetDDE start= DISABLEDrem NetDDEdsdm=Network DDE DSDMsc config NetDDEdsdm start= DISABLEDrem FastUserSwitchingCompatibility=Fast User Switching Compatibilitysc config FastUserSwitchingCompatibility start= AUTOrem dmserver=Logical Disk Managersc config dmserver start= AUTO
27、rem WZCSVC=Wireless Zero Configurationsc config WZCSVC start= AUTOrem 以下为修改本地安全策略pauserem 将本地账户的共享和安全模式修改成“仅来宾”reg add HKLMSYSTEMCurrentControlSetControlLsa /v forceguest /t reg_dword /d 1 /frem 网络访问：不允许SAM帐户的枚举：已禁用reg add HKLMSYSTEMCurrentControlSetControlLsa /v restrictanonymoussam /t reg_dword /d
28、 0 /frem 帐户：使用空密码的本地帐户只允许进行控制台登录：已停用reg add HKLMSYSTEMCurrentControlSetControlLsa /v limitblankpassworduse /t reg_dword /d 0 /frem 网络安全：LAN Manager 身身验证级别：发送LM&NTLM响应reg add HKLMSYSTEMCurrentControlSetControlLsa /v lmcompatibilitylevel /t reg_dword /d 0 /frem 让“每个人”权限应用于匿名用户：已启用reg add HKLMSYSTEMCur
29、rentControlSetControlLsa /v everyoneincludesanonymous /t reg_dword /d 1 /fpauserem 以下让用户选择是否马上重启set choice=set /p choice=需要重新启动计算机，是否马上重启？if /i %choice%=y goto yesif /i %choice%=n goto no :yesrem 执行强制重启命令shutdown -f -r -t 10:nomshta vbscript:CreateObject(Wscript.Shell).popup(请尽快重新启动计算机！,7,系统提示,64)(window.close)pauseexit
