echo y|cacls.exe C:WINDOWSsystem32TAPI32.dll /e /g everyone:r
echo y|cacls.exe C:WINDOWSsystem32WININET.dll /e /g everyone:r
cacls c:windowsassembly /e /t /p "network service":r
cacls c:windowsMicrosoft.NET /e /t /p "network service":r
cacls "C:WINDOWSMicrosoft.NETFrameworkv1.1.4322Temporary ASP.NET Files" /e /t /p "network service":f
cacls C:WINDOWSsystem32mscoree.dll /e /g everyone:r
cacls C:WINDOWSsystem32ws03res.dll /e /g everyone:r
cacls c:WINDOWS /e /g "network service":r
if exist c:windows cacls c:windows /e /g "network service":r
cacls c:windowsMicrosoft.NET /e /t /p "network service":r
cacls "C:WINDOWSMicrosoft.NETFrameworkv1.1.4322Temporary ASP.NET Files" /e /t /p "network service":f
cacls "C:WINDOWSMicrosoft.NETFrameworkv2.0.50727Temporary ASP.NET Files" /e /t /p "network service":f
cacls c:windowssystem32 /e /g "network service":r
cacls c:windowssystem32rasapi32.dll /e /g "network service":r
echo y|cacls.exe C:WINDOWSsystem32inetsrvadsiis.dll /p Administrators:f autosystem:f
echo y|cacls.exe C:WINDOWSsystem32inetsrviisadmpwd /p Administrators:f autosystem:f
echo y|cacls.exe C:WINDOWSsystem32inetsrvMetaBack /p Administrators:f autosystem:f
cacls C":Program FilesServ-U" /e /g "servu":f
cacls d:wwwroot /e /g servU:f
echo 以上设置服务器目录权限
net stop Browser
sc config Browser start= disabled
net stop lanmanserver
sc config lanmanserver start= disabled
net share c$ /delete
net share d$ /delete
net share e$ /delete
net share f$ /delete
net share admin$ /delete
net share ipc$ /delete
echo 以上删除默认共享，设置服务项
echo .. delshare.reg .......
echo Windows Registry Editor Version 5.00> c:delshare.reg
echo [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServiceslanmanserverparameters]>> c:delshare.reg
echo "AutoShareWks"=dword:00000000>> c:delshare.reg
echo "AutoShareServer"=dword:00000000>> c:delshare.reg
echo .. delshare.reg .....
regedit /s c:delshare.reg
echo .. delshare.reg ....
del c:delshare.reg
echo .
echo ........
echo .
echo =========================================================
echo .
echo .....................dos....
echo .
echo .........
echo Windows Registry Editor Version 5.00> c:dosforwin.reg
echo [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParameters]>> c:dosforwin.reg
echo "EnableICMPRedirect"=dword:00000000>> c:dosforwin.reg
echo "DeadGWDetectDefault"=dword:00000001>> c:dosforwin.reg
echo "DontAddDefaultGatewayDefault"=dword:00000000>> c:dosforwin.reg
echo "EnableSecurityFilters"=dword:00000000">> c:dosforwin.reg
echo "AllowUnqualifiedQuery"=dword:00000000>> c:dosforwin.reg
echo "PrioritizeRecordData"=dword:00000001>> c:dosforwin.reg
echo "ReservedPorts"=hex(7):31,00,34,00,33,00,33,00,2d,00,31,00,34,00,33,00,34,00,>> c:dosforwin.reg
