PKS301_Win2003安全设置(最新整理)

1、一 创建批处理文件：sleep 30 clsstart station.exe -sfxsc其中 sleep 30 根据系统启动时间可调整，采用 default.stn 连接属性save the file as c:windowssystem32replimportscriptsstart_station.bat二 把批处理文件设置为登陆脚本：1. select start settings control panel administrative tools computer management.2. select local users and groups.3. select user

2、s.set up a new user ,and named yl.select the password never expires and the user cannot change passwords.4. open the member of propertyclick add advanced find now, then in the search results, double-click the honeywell administrators and user，then click ok.5. click profile, and in logon script name

3、type start_station.bat .6. click apply, then close the properties dialog box.7. close computer management.三 设置自动登陆：1. start regedit.2. locate the key: hkey_local_machinesoftwaremicrosoftwindowsntcurrentversionwinlogon.double-click defaultusername and type yl in thevalue date.3. right-click and selec

4、t new string value, and type defaultpassword.type defaultpassword in the value date if you want.4. right-click and select new string value, and type autoadminlogon. type 1 in the value date .5. close the registry editor.四 设置禁止锁定计算机：1. select start run, type mmc and click ok.2. select file add/remove

5、 snap-in, the add/remove snap-in dialog box opens.3. click add, the add standalone snap-in dialog box opens. select group policy object editor from the list and click add.4. accept the defaults and click finish.6. click close to close the add standalone snap-in dialog box.7. click ok to close the ad

6、d/remove snap-in dialog box.8. in the console window, navigate to console root local computer policy user configuration administrative templates system logon/logoff.9. in right-hand pane double -click disable lock computer. the disable lock computer properties dialog box opens.10. select enabled and

7、 click apply.11. press ctrl + alt + del to verify that lock computer option is disabled. click cancel.12. click ok to close the disable lock computer properties dialog box.13. close mmc, you do not need to save the save console settings.五 阻止操作员关机：to change the local policies to prevent shut down:1.

8、select start settings control panel administrative tools local security policy2. select local policies user rights assignment.3. double-click shutdown the system.the local security policy setting dialog box opens.4. deselect local policy setting for the users group and the honeywell group that you a

9、re modifying and click ok. this modifies all users that belong to this group.to edit the registry to prevent operator shut down:1. select start run, type regedit and click ok.2. locate the key: hkey_local_machinesoftwaremicrosoftwindowsntcurrentversionwinlogon double-click shutdownwithoutlogon and t

10、ype 0 in the value date.3. exit regedit.六 阻止操作员使用 task manager and windows explorer1. right -click the file c:windowssystem32taskmgr.exe.2. select properties security.3. click add.4. select the user you want to modify, click add and ok.5. select the user you added, click deny for full control.6. cli

11、ck ok.7. select yes in response to the do you wish to continue? prompt.8. repeat steps 1 through 7 of this task for the file c:windowsexplorer.exe.9. repeat steps 1 through 7 of this task for the file c:program filesinternet explorer“”“”at the end, xiao bian gives you a passage. minand once said, pe

12、ople who learn to learn are very happy people. in every wonderful life, learning is an eternal theme. as a professional clerical and teaching position, i understand the importance of continuous learning, life is diligent, nothing can be gained, only continuous learning can achieve better self. only by constantly learning and mastering the latest relevant knowledge, can employees from all walks of life keep up with the pace of enterprise de