@echo off
echo  ----------------------------------
echo  ----正在备份注册表  请稍后....----
echo  ----------------------------------
reg export "HKEY_LOCAL_MACHINE" C:/reg_backup.reg
echo  ----------------------
echo  ----注册表备份完成----
echo  ----------------------
ping 127.0.0.1 -n 3 >nul
echo  -----------------------------------
echo  ----安全配置正在改写  请稍候...----
echo  -----------------------------------
@ping 127.0.0.1 -n 3 >nul
echo  ----------------------
echo  ----正在禁用空连接----
echo  ----------------------
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa /v restrictanonymous /t reg_dword /d 1  /f
echo  --------------------------
echo  ----禁用空连接设置完毕----
echo  --------------------------
@ping 127.0.0.1 -n 3 >nul
echo  ------------------------
echo  ----正在删除默认共享----
echo  ------------------------
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /v AutoShareServer /t reg_dword /d 0  /f
echo  ----------------------------
echo  ----删除默认共享设置完毕----
echo  ----------------------------
@ping 127.0.0.1 -n 3 >nul
echo  ------------------------------
echo  ----正在修改TTL值请稍后...----
echo  ------------------------------
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v DefaultTTL /t reg_dword /d 53 /f
echo  -------------------
echo  ----TTL修改完毕----
echo  -------------------
@ping 127.0.0.1 -n 3 >nul
echo  -----------------------
echo  ----防止syn洪水***----
echo  -----------------------
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v SynAttackProtect /t reg_dword /d 2 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v EnablePMTUDiscovery /t reg_dword /d 0 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v NoNameReleaseOnDemand /t reg_dword /d 1 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v EnableDeadGWDetect /t reg_dword /d 0 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v KeepAliveTime  /t reg_dword /d 300000 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v PerformRouterDiscovery /t reg_dword /d 0 /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters /v EnableICMPRedirects /t reg_dword /d 0 /f
echo  -------------------------------
echo  ----防止syn洪水***设置完毕----
echo  -------------------------------
@ping 127.0.0.1 -n 3 >nul
echo  --------------------
echo  ----修改3389端口----
echo  --------------------
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\Tds\tcp" /v PortNumber /t reg_dword /d 44454 /f
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentContro1Set\Control\Tenninal Server\WinStations\RDP\Tcp" /v PortNumber /t reg_dword /d 44454 /f
echo  --------------------
echo  ----修改PORT完毕----
echo  --------------------
@ping 127.0.0.1 -n 3 >nul
echo  -------------------------------------
echo  ----正在开启系统防火墙 请稍后....----
echo  -------------------------------------
sc config sharedaccess start= auto & net start sharedaccess

echo  ------------------------
echo  ----系统防火墙已开启----
echo  ------------------------
@ping 127.0.0.1 -n 3 >nul
echo  ----------------------------
echo  ----正在关闭共享打印服务----
echo  ----------------------------
@sc config Spooler start= disabled
echo  --------------------------
echo  ----已关闭共享打印服务----
echo  --------------------------
@ping 127.0.0.1 -n 3 >nul
echo  ----------------------------
echo  ----正在关闭远程协助服务----
echo  ----------------------------
@sc config RDSessMgr start= disabled
echo  --------------------------
echo  ----已关闭远程协助服务----
echo  --------------------------
@ping 127.0.0.1 -n 3 >nul
echo  ------------------------------
echo  ----正在关闭远程注册表服务----
echo  ------------------------------
@sc config RemoteRegistry start= disabled
echo  ----------------------------
echo  ----已关闭远程注册表服务----
echo  ----------------------------
@ping 127.0.0.1 -n 3 >nul
echo  ----------------------------------
echo  ----正在安装urlscan 请稍后....----
echo  ----------------------------------
start "" "urlscan.exe"
echo  -----------------------
echo  ----安装urlscan完成----
echo  -----------------------
@ping 127.0.0.1 -n 3 >nul
echo  -----------------------------
echo  ----安全设置完毕 欢迎使用----
echo  -----------------------------
@pause