加固NT和IIS的安全(5)

5．注册表的值

KEY Type Value
MACHINE\SOFTWARE\Microsoft\DataFactory\HandlerInfo\
HandlerRequired REG_Dword 1

MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem\
NtfsDisable8dot3NameCreation REG_Dword 1

MACHINE\Software\Microsoft\WindowsNT\Version\WinLOGOn\AllocateCDRoms REG_SZ 1

MACHINE\System\CurrentControlSet\Control\Lsa\AuditBaseObjects
REG_Dword 1

MACHINE\System\CurrentControlSet\Control\Lsa\Su

MACHINE\System\CurrentControlSet\Control\Print\Providers\LanMan
PrintServices\AddPrintDrivers REG_Dword 1

MACHINE\System\CurrentControlSet\Services\Rdr\
Parameters\EnablePlainTextPassword REG_DWORD 0

MACHINE\System\CurrentControlSet\Services\LanManServer\
Parameters\AutoDisconnect REG_Dword 15

MACHINE\System\CurrentControlSet\Services\LanManServer\
Parameters\AutoShareWks REG_Dword 0

MACHINE\System\CurrentControlSet\Services\LanManServer\
Parameters\AutoShareServer REG_Dword 0

MACHINE\System\CurrentControlSet\Services\LanManServer\
Parameters\EnableForcedLOGOff REG_Dword 1

MACHINE\System\CurrentControlSet\Services\LanManServer\
Parameters\RequireSecuritySignature REG_Dword 1

MACHINE\System\CurrentControlSet\Services\LanManServer\
Parameters\EnableSecuritySignature REG_Dword 1

MACHINE\System\CurrentControlSet\Services\Rdr\Parameters\
RequireSecuritySignature REG_Dword 1

MACHINE\System\CurrentControlSet\Services\Rdr\Parameters\
EnableSecuritySignature REG_Dword 1

MACHINE\System\CurrentControlSet\Services\NetLOGOn\
Parameters\RequireSignOrSeal REG_Dword 1

MACHINE\System\CurrentControlSet\Services\NetLOGOn\Parameters\
SealSecureChannel REG_Dword 1

MACHINE\System\CurrentControlSet\Services\NetLOGOn\Parameters\
SignSecureChannel REG_Dword 1

MACHINE\System\CurrentControlSet\Control\Lsa\ RestrictAnonymous
REG_Dword 1

MACHINE\System\CurrentControlSet\Control\Session Manager\
ProtectionMode REG_Dword 1

MACHINE\System\CurrentControlSet\Control\Lsa\ LmCompatibilityLevel
REG_Dword 2

MACHINE\Software\Microsoft\Windows
NT\CurrentVersion\WinLOGOn\LegalNoticeText REG_SZ This is a

private system. Unauthorized use is prohibited.

MACHINE\Software\Microsoft\Windows NT\CurrentVersion\
WinLOGOn\LegalNoticeCaption REG_SZ CISD

MACHINE\Software\Microsoft\Windows
NT\CurrentVersion\WinLOGOn\DontDisplayLastUserName REG_SZ 1

MACHINE\System\CurrentControlSet\Control\Lsa\CrashOnAuditFail
REG_Dword 1

MACHINE\System\CurrentControlSet\Control\Session Manager\Memory
Management\ClearPageFileAtShutdown REG_Dword 1

MACHINE\Software\Microsoft\Windows NT\CurrentVersion\
WinLOGOn\CachedLogonsCount REG_SZ 0

MACHINE\Software\Microsoft\Windows NT\CurrentVersion\
WinLOGOn\AllocateFloppies REG_SZ 1

MACHINE\Software\Microsoft\Windows NT\Current bmitControl
REG_Dword 0

MACHINE\System\CurrentControlSet\Control\Lsa\
FullPrivilegeAuditing REG_BINARY 1

MACHINE\Software\Microsoft\Windows NT\CurrentVersion\
WinLOGOn\ShutdownWithoutLogon REG_SZ 1