[小白技巧]windows家庭版开启本地组策略及密码策略和关闭高危端口
@echo offpushd "%~dp0"dir /b C:\Windows\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientExtensions-Package~3*.mum >List.txtdir /b C:\Windows\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientTools-Package~3*.mum >>List.txtfor /f %%i in ('findstr /i . List.txt 2^>nul') do dism /online /norestart /add-package:"C:\Windows\servicing\Packages\%%i"pause
echo 1. 密码最小长度：9位echo 2. 密码复杂度：必须包含大小写字母+数字+特殊字符echo 3. 密码有效期：90天（强制更换）echo 4. 密码过期提醒：14天echo 5. 禁止密码永不过期echo 6. 密码历史：禁止重用最近24个密码echo - 启用密码复杂度规则secedit /export /cfg "%temp%\secpol.cfg" >nul 2>&1powershell -Command "(Get-Content '%temp%\secpol.cfg') -replace 'PasswordComplexity\s*=\s*0', 'PasswordComplexity = 1' | Set-Content '%temp%\secpol.cfg' -Encoding ASCII" >nul 2>&1secedit /configure /db "%windir%\security\local.sdb" /cfg "%temp%\secpol.cfg" /areas SECURITYPOLICY >nul 2>&1:: 2. 设置密码最小长度为9位echo - 设置密码最小长度为9位net accounts /minpwlen:9 >nul 2>&1:: 3. 设置密码有效期90天（强制90天更换）echo - 设置密码有效期90天net accounts /maxpwage:90 >nul 2>&1:: 4. 设置密码过期前14天提醒echo - 设置密码过期提醒时间：14天net accounts /warnpwage:14 >nul 2>&1:: 5. 禁止密码永不过期（强制所有账户密码过期）echo - 禁用"密码永不过期"属性wmic useraccount set PasswordExpires=TRUE >nul 2>&1:: 6. 禁止重用最近24个密码（密码历史）echo - 设置密码历史：禁止重用最近24个密码net accounts /uniquepw:24 >nul 2>&1:: 清理临时文件del /f /q "%temp%\secpol.cfg" >nul 2>&1
:: 定义需要关闭的端口列表set "ports=135 137 138 139 445 3389":: 循环创建入站/出站阻止规则for %%p in (%ports%) do (echo 处理端口 %%p...:: 删除已存在的同名规则（避免重复）netsh advfirewall firewall delete rule name="Block Port %%p" >nul 2>&1:: 创建入站阻止规则netsh advfirewall firewall add rule name="Block Port %%p" dir=in action=block protocol=TCP localport=%%p >nul 2>&1netsh advfirewall firewall add rule name="Block Port %%p" dir=in action=block protocol=UDP localport=%%p >nul 2>&1:: 创建出站阻止规则netsh advfirewall firewall add rule name="Block Port %%p" dir=out action=block protocol=TCP localport=%%p >nul 2>&1netsh advfirewall firewall add rule name="Block Port %%p" dir=out action=block protocol=UDP localport=%%p >nul 2>&1)echo.echo 端口关闭操作完成！echo 已通过Windows防火墙阻止以下端口的TCP/UDP入站/出站流量：echo %ports%echo.echo 如需恢复端口，可在【控制面板-防火墙-高级设置】中删除对应规则。pause >nul
评论