禁止Dr. Watson创建DUMPS文件: HKLM\Software\Microsoft\DrWatson\CreateCrashDump (REG_DWORD) 0
禁止系统的自动诊断自动运行: HKLM\ Software\Microsoft\Windows NT\CurrentVersion\
AEDebug\Auto (REG_DWORD) 0
禁止从任何驱动器上自动运行任何应用程序:HKLM\Software\Microsoft\Windows\CurrentVersion\
Policies\Explorer\NoDriveTypeAutoRun (REG_DWORD) 255
禁止现在的用户自动运行:HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\
NoDriveTypeAutoRun (REG_DWORD) 255
禁止任何新用户自动运行HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\
Policies\Explorer\NoDriveTypeAutoRun (REG_DWORD) Not Defined
禁止自动登录:HKLM\ Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AutoAdminLogon
(REG_SZ) 0
隐藏键盘输入星号实际字符:HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Network\
HideSharePwds (REG_DWORD) 1
禁止拨号访问:HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Network\
NoDialIn (REG_DWORD) 1
禁止在蓝屏死机后自动重启:HKLM\System\CurrentControlSet\Control\
CrashControl\AutoReboot (REG_DWORD) 0
禁止CD自动播放:HKLM\System\CurrentControlSet\Services\CDrom\Autorun (REG_DWORD) 0
在服务器上清除管理共享:HKLM\System\CurrentControlSet\Services\
LanmanServer\Parameters\AutoShareServer (REG_DWORD) 0
保护阻止Computer Browser Spoofing攻击:HKLM\System\CurrentControlSet\Services\MrxSmb\
Parameters\RefuseReset (REG_DWORD)
保护阻止source-routing spoofing攻击:HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\
DisableIPSourceRouting (REG_DWORD) 2
保护默认网关网络设置:HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\
EnableDeadGWDetect (REG_DWORD) 0
Ensure ICMP Routing via shortest path first: HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\
EnableICMPRedirect (REG_DWORD)
... ...