:WindowsServer命令行配置系统策略
:如果感觉使用图形界面进行系统策略配置比较繁琐,可以通过命令行方式批量配置系统策略。
:先编制如下内容的SetSysPolicies.cmd文件(其中“@echo”引导的为文字回显行),然后以管理员方式打开CMD,
:直接运行SetSysPolicies.cmd便可以快速完成系统策略配置,注意,下面有些修改需重启计算机才能生效。
:有关内容可参见https://github.com/m2nlight/WindowsServerToWindowsDesktop 。
@echo (1).关闭系统的用户账户控制 (Disable UAC),需重启计算机才能生效,已测试成功
reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t REG_DWORD /d 0x0 /f>nul
@echo (2).关闭IE的增强安全配置 (IE Security Policy),已测试成功
reg add "HKLM\Software\Microsoft\Active Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}" /v IsInstalled /t REG_DWORD /d 0 /f>nul
reg add "HKLM\Software\Microsoft\Active Setup\Installed Components\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}" /v IsInstalled /t REG_DWORD /d 0 /f>nul
reg add "HKCU\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /t reg_sz /d "about:blank" /f
Rundll32 iesetup.dll, IEHardenLMSettings
Rundll32 iesetup.dll, IEHardenUser
Rundll32 iesetup.dll, IEHardenAdmin
@echo (3).取消开机按Ctrl+Alt+Del组合键登录 (Disable Ctrl+Alt+Del login),已测试成功
reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "DisableCAD" /t REG_DWORD /d 1 /f>nul
@echo (4).禁用“以管理员批准模式运行所有管理员” (Disable “Run all administrators in Admin Approval Mode”),已测试成功
reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t REG_DWORD /d 0 /f>nul
@echo (5).禁用“关闭事件跟踪程序” (Disable Shutdown reason On),已测试成功
reg delete "HKLM\Software\Policies\Microsoft\Windows NT\Reliability" /v "ShutdownReasonOn" /f
reg add "HKLM\Software\Policies\Microsoft\Windows NT\Reliability" /v "ShutdownReasonOn" /t REG_DWORD /d 0 /f>nul
@echo (6).关闭所有驱动器的自动播放 (Enable Turn off Autoplay),已测试成功
reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoDriveTypeAutoRun" /f
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoDriveTypeAutoRun" /t REG_DWORD /d 255 /f
@echo (7).禁用Win11不显示更多选项,/ve 为注册表项添加空白值名 无名称
reg add "HKCU\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32" /ve /f
@echo (8).强制更新组策略
gpupdate /force
标签:reg,20xx,Windows,Server,add,echo,Microsoft,Software From: https://www.cnblogs.com/ybmj/p/18005351