윈도우11 시작05

[동우]

REM "윈도우 로그인시 ctrl alt del 누르기 https://forbes.tistory.com/784"
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "DisableCAD" /t REG_DWORD /d "1" /f

REM "디펜스 알림 영역 숨기기 https://www.tenforums.com/tutorials/105476-hide-account-protection-windows-security-windows-10-a.html"
REM "Windows 보안에서 계정 보호 영역을 숨깁니다. 보호해준다고 한다.. 모르겠음 ㅎㅎ"
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Account protection" /v "UILockdown" /t REG_DWORD /d "1" /f

REM "보안 알림 숨기기 반대로 하기 https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.WindowsDefenderSecurityCenter::Notifications_DisableNotifications "
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Notifications" /v "DisableEnhancedNotifications" /t REG_DWORD /d "0" /f
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Notifications" /v "DisableNotifications" /t REG_DWORD /d "0" /f

REM "로그인 할때 메시지 출력 하게 하기 https://www.itprotoday.com/programming-languages/how-do-i-add-warning-logon-message"
REM reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "LegalNoticeCaption" /t REG_SZ /d "로그인하는할때제목" /f
REM "\0로 칸을 구분 한다 REG_MULTI_SZ 란걸 주의 해야 한다"

REM 잘 안된다 sz로 해야 하네요 아쉬움 reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "LegalNoticeText" /t REG_MULTI_SZ /d "1메시지\0 2메시지\0 3메시지" /f

REM reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "LegalNoticeText" /t REG_SZ /d "1메시지\0 2메시지\0 3메시지" /f

REM SafeVisit 이놈을 설치 하면서 딸려 오는 애들 같아요.
REM 그리고 검색을 해보니 SwiftDataInfo 이 프로세스가 작업 관리자에 뜨길래 보니깐 swiftdatas.exe 이놈이 켜져서 계속 괴롭피고 있네요 ㅋㅋㅋㅋ
REM 해결 방법은 간단 한대.. 프로그램 설치 제거에서.. 해당 프로그램을 삭제 하시면 되요. 윈도우 모양 우클릭 프로그램 설치에서 저 위의 영문 프로그램이 보이면 삭제 하시면 되네요.
REM https://computerword.tistory.com/12
REM https://pcwindows.tistory.com/172

REM "ms에 피드백 항상 보내기 https://cafe.daum.net/candan/GGFN/388 https://www.tenforums.com/tutorials/7032-change-diagnostic-data-settings-windows-10-a.html"

REG ADD "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack" /v "ShowedToastAtLevel" /t REG_DWORD /d 3 /f

REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection" /v "AllowTelemetry" /t REG_DWORD /d 3 /f
REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection" /v "MaxTelemetryAllowed" /t REG_DWORD /d 3 /f

REM "https://cafe.daum.net/candan/GGFN/414 Guest 사용자 해킹 최소화 해보기 explorer.exe 켜는 문제 차단"
REM "윈도우 10 home에는 이렇게 해야 한다 [Get-AppLockerFileInformation]를 사용 할수 없다."
sc config "AppIDSvc" start=auto & net start "AppIDSvc"

REM "명령 프롬프트에서 다음 명령을 사용하여 AppLocker를 활성화할 수 있습니다. 이 명령은 SrpV2 키 아래에 EnforcementMode 라는 새 값을 만들고 데이터를 1로 설정하여 AppLocker를 활성화합니다." 
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SrpV2" /v "EnforcementMode" /t REG_DWORD /d 1 /f

REM "게스트 비활성 레지스트"
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList" /v "Guest" /t REG_DWORD /d 0 /f

REM "첫번째 explorer.exe 보안"
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SrpV2\Rules" /v "Rule1" /t REG_SZ /d "C:\Windows\explorer.exe" /f
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SrpV2\Rules\Rule1" /v "Hash" /t REG_BINARY /d "0123456789abcdef0123456789abcdef01234567" /f
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SrpV2\Rules\Rule1" /v "SecurityLevel" /t REG_DWORD /d 0x00030000 /f

REM "게스트 AppLocker 에서 explorer.exe 사용 못하기 하기"
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SrpV2\Rules" /v "BlockGuestExplorer" /t REG_SZ /d "C:\Windows\explorer.exe" /f
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SrpV2\Rules\BlockGuestExplorer" /v "Users" /t REG_MULTI_SZ /d "Guest\0Guests\0IIS_IUSRS" /f
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SrpV2\Rules\BlockGuestExplorer" /v "SecurityLevel" /t REG_DWORD /d 0x00030000 /f

REM "이번에는 게스트 사용자가 svchost.exe를 작동 하는 것을 방지 하는 명령어 입니다"
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SrpV2" /v "EnforcementMode" /t REG_DWORD /d 1 /f
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SrpV2\Rules" /v "BlockGuestSvchost" /t REG_SZ /d "C:\Windows\System32\svchost.exe" /f
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SrpV2\Rules\BlockGuestSvchost" /v "Users" /t REG_MULTI_SZ /d "Guest\0Guests\0IIS_IUSRS" /f
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SrpV2\Rules\BlockGuestSvchost" /v "SecurityLevel" /t REG_DWORD /d 0x00030000 /f

[동우]

REM "사용자 워크 허용 특정 https://m.blog.naver.com/newyks/150183566371"
net user
net user 사용자이름 /workstation:홍길동컴퓨터