服务器安全设置之 服务器安全和性能配置

把下面文本保存为: windows2000-2003服务器安全和性能注册表自动配置文件.reg 运行即可

windows registry editor version 5.00

[hkey_current_user/software/microsoft/windows/currentversion/policies/explorer]
"norecentdocsmenu"=hex:01,00,00,00
"norecentdocshistory"=hex:01,00,00,00
[hkey_local_machine/software/microsoft/windows nt/currentversion/winlogon]
"dontdisplaylastusername"="1"
[hkey_local_machine/system/currentcontrolset/control/lsa]
"restrictanonymous"=dword:00000001
[hkey_local_machine/system/currentcontrolset/services/lanmanserver/parameters]
"autoshareserver"=dword:00000000
"autosharewks"=dword:00000000
[hkey_local_machine/system/currentcontrolset/services/tcpip/parameters]
"enableicmpredirect"=dword:00000000
"keepalivetime"=dword:000927c0
"synattackprotect"=dword:00000002
"tcpmaxhalfopen"=dword:000001f4
"tcpmaxhalfopenretried"=dword:00000190
"tcpmaxconnectresponseretransmissions"=dword:00000001
"tcpmaxdataretransmissions"=dword:00000003
"tcpmaxportsexhausted"=dword:00000005
"disableipsourcerouting"=dword:00000002
"tcptimedwaitdelay"=dword:0000001e
"tcpnumconnections"=dword:00004e20
"enablepmtudiscovery"=dword:00000000
"nonamereleaseondemand"=dword:00000001
"enabledeadgwdetect"=dword:00000000
"performrouterdiscovery"=dword:00000000
"enableicmpredirects"=dword:00000000

[hkey_local_machine/system/currentcontrolset/services/netbt/parameters]
"backlogincrement"=dword:00000005
"maxconnbacklog"=dword:000007d0
[hkey_local_machine/system/currentcontrolset/services/afd/parameters]
"enabledynamicbacklog"=dword:00000001
"minimumdynamicbacklog"=dword:00000014
"maximumdynamicbacklog"=dword:00007530
"dynamicbackloggrowthdelta"=dword:0000000a

功能：可抵御ddos攻击2-3万包，提高服务器tcp-ip整体安全性能（效果等于软件防火墙，节约了系统资源）