Reg's Windows

Bueno para los que preguntan aveces cosas acerca de esto aqui les traigo esto.
1. Disable DCOM completey so you are not vulnerable to many exploits, such as RPC and BlasterWorm.
2. Disable port 445 so people can not do enumeration against your PC even if you have netbios disabled.
3. Stops Administrative shares from starting on reboot. (example: C$, D$ etc.)
4. RestrictAnonymous WinXP
5. RestrictAnonymous Win2k

1. Disable DCOM completey so you are not vulnerable to many exploits, such as RPC and BlasterWorm.

Código:

REGEDIT4

Disable DCOM completey so you are not vulnerable to many exploits, such as RPC and BlasterWorm.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole]
"EnableDCOM"="N"

2. Disable port 445 so people can not do enumeration against your PC even if you have netbios disabled.

Código:

REGEDIT4

Disable port 445 so people can not do enumeration against your PC even if you have netbios disabled.

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetBT\Parameters]
"TransportBindName"=""

3. Stops Administrative shares from starting on reboot. (example: C$, D$ etc.)

Código:

REGEDIT4

Stops Administrative shares from starting on reboot. (example: C$, D$ etc.)

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters]
"AutoShareServer"=dword:0000000
"AutoShareWks"=dword:0000000

4. RestrictAnonymous WinXP

Código:

REGEDIT4

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"restrictanonymous"=dword:0000001

5. RestrictAnonymous Win2k

Código:

REGEDIT4

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"restrictanonymous"=dword:0000001

Nota es para Windows se supone y se guarda con extenxion *.reg

Salu2!!