windows安全檢查列表

1、Windows安全檢查列表基本信息基本信息調(diào)查調(diào)查：節(jié)點(diǎn)名稱點(diǎn)名稱業(yè)務(wù)業(yè)務(wù)系統(tǒng)名稱名稱服務(wù)器名稱器名稱服務(wù)器型號(hào)器型號(hào)IP地址地址操作系操作系統(tǒng)服務(wù)器用途（器用途（簡(jiǎn)單簡(jiǎn)單描述）描述）使用使用維護(hù)維護(hù)人員物理位置物理位置主要主要應(yīng)用歷史安全事件史安全事件HKLMSoftwareMicrosoftWindowsCurrentVersionPoliciesExplerNoDriveTypeAutunHKLMSoftwareMicrosoft

2、WindowsNTCurrentVersionAEDebugAutoHKLMSoftwareMicrosoftWindowsNTCurrentVersionWinlogonAutoAdminLogonHKLMSystemCurrentControlSetServicesTcpipParametersDisableIPSourceRoutingHKLMSYSTEMCurrentControlSetServicesTcpipParamete

3、rsEnableICMPRedirectHKLMSystemCurrentControlSetServicesTcpipParametersSynAttackProtectHKLMSystemCurrentControlSetServicesAFDParameters下DynamicBacklogGrowthDeltaEnableDynamicBacklogMinimumDynamicBacklogMaximumDynamicBackl

4、ogHKLMSystemCurrentControlSetServicesTcpipParametersKeepAliveTimeHKLMSystemCurrentControlSetServicesbtParametersNoNameReleaseOnDemHKLMSYSTEMCurrentControlSetControlGraphicsDriversDCITimeoutHKLMSystemCurrentControlSetCont

5、rolFileSystemNtfsDisable8dot3NameCreationHKLMSYSTEMCurrentControlSetControlLsaMSV1_0NtlmMinServerSecHKLMSYSTEMCurrentControlSetControlLsaNoLMHashHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventlogApplicationRestric

6、tGuestAccessHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventlogSystemRestrictGuestAccessHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventlogSecurityRestrictGuestAccessHKLMSOFTWAREMicrosoftWindowsCurrentVersion

7、RunHKLMSOFTWAREMicrosoftWindowsCurrentVersionRunOnce對(duì)于服務(wù)器：HKLMSYSTEMCurrentControlSetServiceslanmanserverparametersAutoShareServer對(duì)于工作站：HKLMSYSTEMCurrentControlSetServiceslanmanserverparametersAutoShareWks20.檢查注冊(cè)表以下位置的權(quán)限

8、設(shè)置情況（運(yùn)行regedt32.exe）HKEY_LOCAL_MACHINESoftwareClassesregfileshellopencommHKEY_LOCAL_MACHINESoftwareMicrosoftWindowsNTCurrentVersionWinlogonHKEY_LOCAL_MACHINESoftwareMicrosoftWindowsNTCurrentVersionPerflibHKEY_LOCAL_MACHI