電信局網(wǎng)管的服務(wù)器安全配置-免費(fèi)閱讀
【正文】 我們要卸載并刪除該組件，來(lái)防止此類木馬的危害。 如果是mysql的話，用一個(gè)獨(dú)立用戶運(yùn)行MYSQL會(huì)更安全，下面會(huì)有介紹。 最好在C盤(pán)以外(如D,E,F.....)的根目錄建立到三級(jí)目錄,一級(jí)目錄只給Administrator權(quán)限，二級(jí)目錄給Administrator完全控制權(quán)限和Everyone除了完全控制，更改，取得，其它全部打勾的權(quán)限和IUSR只有該文件夾的完全拒絕權(quán)限，三級(jí)目錄是每個(gè)客戶的虛擬主機(jī)網(wǎng)站，給Administrator完全控制權(quán)限和Everyone除了完全控制，更改，取得，其它全部打勾的權(quán)限即可.C盤(pán)的目錄權(quán)限以表格的方式來(lái)說(shuō)明,簡(jiǎn)單明了。 EXEC sp_dropextendedproc 39。 EXEC sp_dropextendedproc 39。 EXEC sp_dropextendedproc 39。 EXEC sp_dropextendedproc 39。 echo Server服務(wù)已啟動(dòng).echo. echo echo. echo 修改注冊(cè)表以更改系統(tǒng)默認(rèn)設(shè)置. echo. echo 正在創(chuàng)建注冊(cè)表文件. echo Windows Registry Editor Version c:\ :: 通過(guò)注冊(cè)表禁止Admin$共享，以防重啟后再次加載echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters] c:\echo AutoShareWks=dword:00000000 c:\ echo AutoShareServer=dword:00000000 c:\ :: 刪除IPC$共享，本功能需要administritor權(quán)限才能成功刪除echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa] c:\echo restrictanonymous=dword:00000001 c:\echo 正在導(dǎo)入注冊(cè)表文件以更改系統(tǒng)默認(rèn)設(shè)置. regedit /s c:\ del c:\ amp。將以上四項(xiàng)通通設(shè)為“已啟用” 計(jì)算機(jī)管理的本地用戶和組禁用終端服務(wù)(TsInternetUser), SQL服務(wù)(SQLDebugger), SUPPORT_388945a0 禁用不必要的服務(wù)sc config AeLookupSvc start= AUTO sc config Alerter start= DISABLED sc config ALG start= DISABLED sc config AppMgmt start= DEMAND sc config aspnet_state start= DEMAND sc config AudioSrv start= DISABLED sc config BITS start= DEMAND sc config Browser start= DEMAND sc config CiSvc start= DISABLED sc config ClipSrv start= DISABLED sc config start= DEMAND sc config COMSysApp start= DEMAND sc config CryptSvc start= AUTO sc config DLaunch start= AUTO sc config Dfs start= DEMAND sc config Dhcp start= AUTO sc config dmadmin start= DEMAND sc config dmserver start= AUTO sc config Dnscache start= AUTO sc config ERSvc start= DISABLED sc config Eventlog start= AUTO sc config EventSystem start= AUTO sc config helpsvc start= DISABLED sc config HidServ start= AUTO sc config HTTPFilter start= DEMAND sc config IISADMIN start= AUTO sc config ImapiService start= DISABLED sc config IsmServ start= DISABLED sc config kdc start= DISABLED sc config lanmanworkstation start= DISABLED sc config LicenseService start= DISABLED sc config LmHosts start= DISABLED sc config Messenger start= DISABLED sc config mnmsrvc start= DISABLED sc config MSDTC start= AUTO sc config MSIServer start= DEMAND sc config MSSEARCH start= AUTO sc config MSSQLSERVER start= AUTO sc config MSSQLServerADHelper start= DEMAND sc config NetDDE start= DISABLED sc config NetDDEdsdm start= DISABLED sc config Netlogon start= DEMAND sc config Netman start= DEMAND sc config Nla start= DEMAND sc config NtFrs start= DEMAND sc config NtLmSsp start= DEMAND sc config NtmsSvc start= DEMAND sc config PlugPlay start= AUTO sc config PolicyAgent start= AUTO sc config ProtectedStorage start= AUTO sc config RasAuto start= DEMAND sc config RasMan start= DEMAND sc config RDSessMgr start= DEMAND sc config RemoteAccess start= DISABLED sc config RemoteRegistry start= DISABLED sc config RpcLocator start= DEMAND sc config RpcSs start= AUTO sc config RSoPProv start= DEMAND sc config sacsvr start= DEMAND sc config SamSs start= AUTO sc config SCardSvr start= DEMAND sc config Schedule start= AUTO sc config seclogon start= AUTO sc config SENS start= AUTO sc config SharedAccess start= DISABLED sc config ShellHWDetection start= AUTO sc config SMTPSVC start= AUTO sc config Spooler start= DISABLED sc config SQLSERVERAGENT start= AUTO sc config stisvc start= DISABLED sc config swprv start= DEMAND sc config SysmonLog start= AUTO sc config TapiSrv start= DEMAND sc config TermService start= AUTO sc config Themes start= DISABLED sc config TlntSvr start= DISABLED sc config TrkSvr start= DISABLED sc config TrkWks start= AUTO sc config Tssdis start= DISABLED sc config UMWdf start= DEMAND sc config UPS start= DEMAND sc config vds start= DEMAND sc config VSS start= DEMAND sc config W32Time start=
公司管理相關(guān)推薦
鄂ICP備17016276號(hào)-1