Windows2003系统安全完美设置脚本一、系统权限的设置系统盘加固脚本：@echooffecho本程序是源自tamenglang.blog.51cto.com，tamenglang亲手创作，此程序会自动加固您的系统…………………caclsC:\/t/c/gadministrators:Fsystem:FCacls"C:\ProgramFiles\CommonFiles"/t/e/c/geveryone:RCacls"C:\WINDOWS\IISTemporaryCompressedFiles"/t/e/c/geveryone:CCaclsC:\WINDOWS\Microsoft.Net/t/e/c/geveryone:RCacls"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\TemporaryASP.NETFiles"/t/e/c/geveryone:CCacls"C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\TemporaryASP.NETFiles"/t/e/c/geveryone:CCaclsC:\WINDOWS\Registration/t/e/c/geveryone:RCaclsC:\WINDOWS\Temp/t/e/c/geveryone:CCaclsC:\WINDOWS\assembly/t/e/c/geveryone:RCaclsC:\WINDOWS\WinSxS/t/e/c/geveryone:RCaclsC:\WINDOWS\Fonts/t/e/c/geveryone:RCaclsC:\WINDOWS\System32/t/e/c/geveryone:RCaclsC:\windows\system32\msdtc/t/e/c/gnetworkservice:CCacls"C:\WINDOWS\system32\inetsrv\ASPCompiledTemplates"/t/e/c/geveryone:CCaclsC:\WINDOWS\System32\*.exe/e/c/reveryoneCaclsC:\WINDOWS\System32\cmd.exe/e/c/rsystemCaclsC:\WINDOWS\System32\net.exe/e/c/rsystemCaclsC:\WINDOWS\System32\net1.exe/e/c/rsystemCaclsC:\WINDOWS\System32\msdtc.exe/e/c/geveryone:RCaclsC:\WINDOWS\System32\dllhost.exe/e/c/geveryone:RCaclsC:\WINDOWS\System32\svchost.exe/e/c/geveryone:R此程序实现的功能如下：C:\administrators,system完全控制C:\ProgramFiles\CommonFileseveryone读取C:\WINDOWS\IISTemporaryCompressedFileseveryone更改C:\Windows\Microsoft.Neteveryone读取C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\TemporaryASP.NETFileseveryone更改C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\TemporaryASP.NETFileseveryone更改C:\Windows\Registrationeveryone读取C:\Windows\Tempeveryone更改C:\Windows\assemblyeveryone读取C:\Windows\WinSxSeveryone读取C:\Windows\Fontseveryone读取C:\Windows\System32everyone读取C:\windows\system32\msdtcNETWORKSERVICE更改C:\WINDOWS\system32\inetsrv\ASPCompiledTemplatesEveryone更改C:\Windows\System32\*.exe去除everyone权限C:\windows\system32\msdtc.exeeveryone读取C:\Windows\System32\dllhost.exeeveryone读取C:\Windows\System32\svchost.exeeveryone读取二、服务启动类型的设置remserverrem微软：支持此计算机通过网络的文件、打印、和命名管