[Registry] 透過登錄檔維護Windows系統

透過登錄檔維護Windows系統

1. 自訂Windows自動更新方案

  • 測試成功環境: Windows 2003, Windows XP
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000003
"DetectionFrequencyEnabled"=dword:00000001
"DelectionFrequency"=dword:00000010

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"ElevateNonAdmins"=dword:00000001
  • NoAutoUpdate: 0 啟用自動更新
  • AUOptions: 1-4, 1:保持電腦在停用「自動更新」的最新狀態; 2:通知下載及安裝; 3:自動下載並通知安裝; 4:自動下載並排程安裝
  • DelectionFrequencyEnabled: 1 打開自動檢查功能, 自動檢查是否有新的更新程式
  • DelectionFrequency: 00000010 表示每 16 小時檢查一次, 以便查看是否有新的更新可用
  • ElevateNonAdmins: 1 表示不用有管理員權限的普通用戶也可以接收到更新通知

參考資料

2. 保護windows已制定的工作執行

  • 測試成功環境: Windows 2003, Windows XP
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Task Scheduler5.0]
"Property Pages"=dword:00000001
"Execution"=dword:00000001
"DragAndDrop"=dword:00000001
"Task Creation"=dword:00000001
"Task Deletion"=dword:00000001
"Allow Browse"=dword:00000001
  • Property Pages: 禁止修改工作屬性。
  • Execution: 刪除右鍵及計畫工作時快捷選單中的”執行與結束工作”命令,從而禁止用戶手動啟動或停止工作。
  • DragAndDrop: 禁止用戶在工作計畫資料夾中透過移動或複製操作,從而避免新增或刪除計畫。
  • Task Creation: 禁止用戶新建工作。
  • Task Deletion: 禁止用戶從工作計畫資料夾中刪除任務。
  • Allow Browse: 禁止用戶為現有工作更改計畫程序。

參考資料

3. 禁止Windows相關歷史紀錄

  • 測試成功環境: Windows 2003, Windows XP
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Policies\Explorer]
"NoRecentDocsNetHood"=dword:00000001
"NoRecentDocsHistory"=dword:00000001
"NoInstrumentation"=dword:00000001
"NoStartMenuMFUprogramsList"=dword:00000001
  • NoRecentDocsNetHood: 禁止網路上的芳鄰紀錄存取過的分享資料夾
  • NoRecentDocsHistory: 禁止紀錄最近存取取過的檔案
  • NoInstrumentation: 禁止對用戶操作進行記錄
  • NoStartMenuMFUprogramsList: 禁止開始功能表顯示常用的程式

4. 解決IE視窗或檔案總管同時關閉問題

  • 測試成功環境: Windows 2003, Windows XP
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer]
"DesktopProcess"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"SeparateProcess"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\BrowserNewProcess]
"BrowseNewProcess"="yes"
  • DesktopProcess: 1 表示檔案總管使用一個進程,桌面與工具欄使用另一個。這樣當檔案總管異常結束就不會影響桌面與工具列了。
  • SeparateProcess: 1 表示每開一個檔案總管都會使用一個新的進程。
  • BrowseNewProcess: yes 表示每開一個 IE 都會使用一個新的進程。

419 comments

  1. Excellent goods from you, man. I have consider your stuff previous to and you’re just extremely wonderful.

    I really like what you have got here, really like what you’re saying and
    the way in which you assert it. You make it enjoyable and you continue to take care of to keep it sensible.
    I can’t wait to learn far more from you. This is actually a terrific web
    site.

  2. When I initially commented I clicked the “Notify me when new comments are added” checkbox and now each time
    a comment is added I get several e-mails with the same comment.
    Is there any way you can remove people from that service?

    Thanks a lot!

  3. Good post. I learn something new and challenging on blogs I stumbleupon every day.
    It will always be helpful to read articles from other writers and use
    something from their web sites.

  4. Please let me know if you’re looking for a article writer for your weblog.
    You have some really good posts and I think I would
    be a good asset. If you ever want to take some
    of the load off, I’d really like to write some material
    for your blog in exchange for a link back to mine.
    Please blast me an email if interested. Kudos!

  5. I’m really impressed with your writing talents and also with the layout in your weblog.
    Is this a paid theme or did you customize it yourself?
    Anyway stay up the excellent high quality writing, it is uncommon to look a nice weblog like this one
    nowadays..

  6. This is the right site for anybody who wishes to understand this
    topic. You understand a whole lot its almost hard to argue with
    you (not that I really will need to…HaHa). You definitely put a new spin on a topic which has been written about for decades.
    Wonderful stuff, just wonderful!

  7. Spot on with this write-up, I seriously feel this web site needs a great deal more attention. I’ll probably
    be returning to see more, thanks for the advice!

  8. Howdy would you mind sharing which blog platform you’re using?
    I’m looking to start my own blog in the near future but
    I’m having a hard time making a decision between BlogEngine/Wordpress/B2evolution and Drupal.

    The reason I ask is because your design seems different
    then most blogs and I’m looking for something completely unique.
    P.S Sorry for getting off-topic but I had to ask!

  9. obviously like your web site but you need to check the spelling
    on quite a few of your posts. Several of them are rife with spelling issues and I in finding it very troublesome to inform
    the reality then again I’ll surely come again again.

  10. Admiring the dedication you put into your blog and detailed information you provide.
    It’s great to come across a blog every once in a while that isn’t the same unwanted rehashed material.
    Fantastic read! I’ve saved your site and I’m including your
    RSS feeds to my Google account.

發表迴響

你的電子郵件位址並不會被公開。 必要欄位標記為 *

*