8．批处理：接下来的是一些特殊文件夹、文件的权限，一些服务的修改，危险组件的删除。
批处理的部分最后附上下面的保存为*.bat或者直接从我提供的下载的地方下载即可。
@echo off
ECHO.
ECHO.
ECHO. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ECHo.
ECHo "windows2003NTFS加固脚本"
ECHo.
ECHO. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ECHO.
ECHO.
ECHO. -------------------------------------------------------------------------
ECHo 请按提示操作备份好注册表,否则修改后无法还原,本人不负责.
ECHO.
ECHO YES=next set NO=exit (this time 30 Second default for n)
ECHO. -------------------------------------------------------------------------
CHOICE /T 30 /C yn /D n
if errorlevel 2 goto end
if errorlevel 1 goto next
:next
if EXIST backup (echo.)else md backup
if EXIST temp (rmdir /s/q temp|md temp) else md temp
if EXIST backupbackupkey.reg (move backupbackupkey.reg backupbackupkey_old.reg ) else goto run
:run
regedit /e tempbackup-reg1.key1 "HKEY_LOCAL_MACHINESYSTEMCurrentControlSet"
regedit /e tempbackup-reg2.key2 "HKEY_CLASSES_ROOT"
copy /b /y /v tempbackup-reg1.key1+tempbackup-reg2.key2 backupbackupkey.reg
if exist backupwshom.ocx (echo 备份已存在) else copy /v/y %SystemRoot%System32wshom.ocx backupwshom.ocx
if exist backupshell32.dll (echo 备份已存在) else copy /v/y %SystemRoot%system32shell32.dll backupshell32.dll
ECHO 备份已经完成
ECHO.
goto next2
:next2
ECHO.
ECHO. -------------------------------------------------------------------
ECHo 修改权限system32目录中不安全的几个exe文件,改为只有Administrators才有权限运行
ECHO YES=next set NO=this set ignore (this time 30 Second default for y)
ECHO. -------------------------------------------------------------------
CHOICE /T 30 /C yn /D y
if errorlevel 2 goto next3
if errorlevel 1 goto next21
:next21
echo y|cacls.exe %SystemRoot%system32net.exe /g Administrators:F
echo y|cacls.exe %SystemRoot%system32net1.exe /g Administrators:F
echo y|cacls.exe %SystemRoot%system32cmd.exe /g Administrators:F
echo y|cacls.exe %SystemRoot%system32tftp.exe /g Administrators:F
echo y|cacls.exe %SystemRoot%system32netstat.exe /g Administrators:F
echo y|cacls.exe %SystemRoot%system32regedit.exe /g Administrators:F
echo y|cacls.exe %SystemRoot%system32at.exe /g Administrators:F
echo y|cacls.exe %SystemRoot%system32attrib.exe /g Administrators:F
echo y|cacls.exe %SystemRoot%system32cacls.exe /g Administrators:F
echo y|cacls.exe %SystemRoot%system32fortmat.com /g Administrators:F
echo y|cacls.exe %SystemDrive%boot.ini /g Administrators:F
echo y|cacls.exe %SystemDrive%AUTOEXEC.BAT /g Administrators:F
echo y|cacls.exe %SystemRoot%/system32ftp.exe /g Administrators:F
