windows安全檢查列表

1、Windows安全檢查列表基本信息基本信息調(diào)查調(diào)查：節(jié)點名稱點名稱業(yè)務(wù)業(yè)務(wù)系統(tǒng)名稱名稱服務(wù)器名稱器名稱服務(wù)器型號器型號IP地址地址操作系操作系統(tǒng)服務(wù)器用途（器用途（簡單簡單描述）描述）使用使用維護維護人員物理位置物理位置主要主要應(yīng)用歷史安全事件史安全事件HKLMSoftwareMicrosoftWindowsCurrentVersionPoliciesExplerNoDriveTypeAutunHKLMSoftwareMicrosoft

2、WindowsNTCurrentVersionAEDebugAutoHKLMSoftwareMicrosoftWindowsNTCurrentVersionWinlogonAutoAdminLogonHKLMSystemCurrentControlSetServicesTcpipParametersDisableIPSourceRoutingHKLMSYSTEMCurrentControlSetServicesTcpipParamete

3、rsEnableICMPRedirectHKLMSystemCurrentControlSetServicesTcpipParametersSynAttackProtectHKLMSystemCurrentControlSetServicesAFDParameters下DynamicBacklogGrowthDeltaEnableDynamicBacklogMinimumDynamicBacklogMaximumDynamicBackl

4、ogHKLMSystemCurrentControlSetServicesTcpipParametersKeepAliveTimeHKLMSystemCurrentControlSetServicesbtParametersNoNameReleaseOnDemHKLMSYSTEMCurrentControlSetControlGraphicsDriversDCITimeoutHKLMSystemCurrentControlSetCont

5、rolFileSystemNtfsDisable8dot3NameCreationHKLMSYSTEMCurrentControlSetControlLsaMSV1_0NtlmMinServerSecHKLMSYSTEMCurrentControlSetControlLsaNoLMHashHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventlogApplicationRestric

6、tGuestAccessHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventlogSystemRestrictGuestAccessHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventlogSecurityRestrictGuestAccessHKLMSOFTWAREMicrosoftWindowsCurrentVersion

7、RunHKLMSOFTWAREMicrosoftWindowsCurrentVersionRunOnce對于服務(wù)器：HKLMSYSTEMCurrentControlSetServiceslanmanserverparametersAutoShareServer對于工作站：HKLMSYSTEMCurrentControlSetServiceslanmanserverparametersAutoShareWks20.檢查注冊表以下位置的權(quán)限

8、設(shè)置情況（運行regedt32.exe）HKEY_LOCAL_MACHINESoftwareClassesregfileshellopencommHKEY_LOCAL_MACHINESoftwareMicrosoftWindowsNTCurrentVersionWinlogonHKEY_LOCAL_MACHINESoftwareMicrosoftWindowsNTCurrentVersionPerflibHKEY_LOCAL_MACHI