<p>REM "수상한 레지스트 기본값 mnmsrvc 차단 하기 난 원격 연결 안하니깐 <a href="https://cafe.daum.net/candan/GGFN/444" target="_blank" class="ke-link">https://cafe.daum.net/candan/GGFN/444</a>" <br>reg add "HKLM\Software\Policies\Microsoft\Conferencing" /v DisableIPAutoConfiguration /t REG_DWORD /d 1 /f</p><p> </p><p>REM "(기본값) mnmsrvc 제거"</p><p>reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems" /ve /d "" /f</p><p> </p><p>REM "삭제 하는 것이 좋다고 한다" </p><p>reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Ole\NONREDIST" /f</p><p> </p><p>REM "https://admx.help/?Category=security-compliance-toolkit&Policy=Microsoft.Policies.MSS::Pol_MSS_DisableIPSourceRoutingIPv6 "</p><p>REM "<a href="https://www.stigviewer.com/stig/windows_server_2016/2019-07-09/finding/V-73501" target="_blank" class="ke-link">https://www.stigviewer.com/stig/windows_server_2016/2019-07-09/finding/V-73501</a> "</p><p>REM "스푸핑 보호 MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)" <br>reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters" /v "DisableIPSourceRouting" /t REG_DWORD /d 2 /f <br>reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" /v "DisableIPSourceRouting" /t REG_DWORD /d 2 /f</p><p> </p><p>REM "확인 안된 데이터 전송 기본값 5 권장3 How many times unacknowledged data is retransmitted" <br>REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" /v "TcpMaxDataRetransmissions" /t REG_DWORD /d 3 /f <br>REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters" /v "TcpMaxDataRetransmissions" /t REG_DWORD /d 3 /f</p><p> </p><p>REM "안전한 dll 사용 모드 Enable Safe DLL search mode" <br>REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" /v "SafeDllSearchMode" /t REG_DWORD /d 1 /f</p><p> </p><p>REM "WMIS(Windows Management Instrumentation Service) 관련 하여 보안 강화 <a href="https://cafe.daum.net/candan/BLQD/99" target="_blank" class="ke-link">https://cafe.daum.net/candan/BLQD/99</a>"</p><p>REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM" /v "Autorecover MOFs" /t REG_DWORD /d 0 /f <br>REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Winmgmt\Parameters" /v "DisableScriptEventConsumer" /t REG_DWORD /d 1 /f</p><p> </p><p>REM ""CIMOM"이라는 WMIS 구성 요소에서 기본 서비스 호스트를 사용하지 않도록 설정 외부에서 WMIS를 통한 원격 액세스 차단"</p><p>REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM" /v "EnableDefaultSvchost" /t REG_DWORD /d 0 /f</p><p> </p><p>REM "모바일 광대역 서비스 사용안함 Mobile broadband" 기능 비활성화" <br>REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Ndu\Start" /t REG_DWORD /d 4 /f <br><br>REM "모바일 광대역 서비스 차단 Mobile broadband" 기능 차단" <br>REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WwanSvc\Provisioning" /v "ProvisioningMode" /t REG_DWORD /d 0 /f <br>REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WwanSvc\Usage" /v "Enabled" /t REG_DWORD /d 0 /f</p><p> </p>
<!-- -->
