??開(kāi)啟3389常用終端命令

1.查詢(xún)終端端口

xp&2003：REG query HKLM\SYSTEM\CurrentControlSet\Control\Terminal" "Server\WinStations\RDP-Tcp/v PortNumber通用：regedit/e tsp.reg"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal server\Wds\rdpwd\Tds\tcp"typetsp.reg

2.開(kāi)啟XP&2003終端服務(wù)

REG ADD HKLM\SYSTEM\CurrentControlSet\Control\Terminal" "Server /v fDenyTSConnections /t REG_DWORD /d 0 /fREG ADD HKLM\SYSTEM\CurrentControlSet\Control\Terminal" "Server /v fDenyTSConnections /t REG_DWORD /d 00000000 /f

3.更改終端端口為20008(0x4E28)

REG ADD HKLM\SYSTEM\CurrentControlSet\Control\Terminal" "Server\Wds\rdpwd\Tds\tcp /v PortNumber /t REG_DWORD /d 0x4E28 /fREG ADD HKLM\SYSTEM\CurrentControlSet\Control\Terminal" "Server\WinStations\RDP-Tcp /v PortNumber /t REG_DWORD /d 0x4E28 /f

4.取消xp&2003系統(tǒng)防火墻對(duì)終端服務(wù)3389端口的限制及IP連接的限制

REGADDHKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List/v3389:TCP/tREG_SZ/d3389:TCP:*:Enabled:@xpsp2res.dll,-22009/f

5.開(kāi)啟Win2000的終端，端口為3389(需重啟)

echoWindows Registry Editor Version5.00>2000.regecho.>>2000.regecho[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\netcache]>>2000.regecho"Enabled"="0">>2000.regecho[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon]>>2000.regecho"ShutdownWithoutLogon"="0">>2000.regecho[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer]>>2000.regecho"EnableAdminTSRemote"=dword:00000001>>2000.regecho[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\TerminalServer]>>2000.regecho"TSEnabled"=dword:00000001>>2000.regecho[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermDD]>>2000.regecho"Start"=dword:00000002>>2000.regecho[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermService]>>2000.regecho"Start"=dword:00000002>>2000.regecho[HKEY_USERS\.DEFAULT\KeyboardLayout\Toggle]>>2000.regecho"Hotkey"="1">>2000.regecho[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\TerminalServer\Wds\rdpwd\Tds\tcp]>>2000.regecho"PortNumber"=dword:00000D3D>>2000.regecho[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\TerminalServer\WinStations\RDP-Tcp]>>2000.regecho"PortNumber"=dword:00000D3D>>2000.reg

6.強(qiáng)行重啟Win2000&Win2003系統(tǒng)(執(zhí)行完最后一條一句后自動(dòng)重啟)

@ECHO OFF & cd/d %temp% & echo [version] > restart.inf(set inf=InstallHinfSection DefaultInstall)echo signature=$chicago$ >> restart.infecho [defaultinstall] >> restart.infrundll32 setupapi,%inf% 1 %temp%\restart.inf

7.禁用TCP/IP端口篩選 (需重啟)

REG ADD HKLM\SYSTEM\ControlSet001\Services\Tcpip\parameters /v EnableSecurityFilters /t REG_DWORD /d 0 /f

8.終端超出最大連接數(shù)時(shí)可用下面的命令來(lái)連接

mstsc/v:ip:3389/console

9.調(diào)整NTFS分區(qū)權(quán)限

cacls c:/e/t/g everyone:F(所有人對(duì)c盤(pán)都有一切權(quán)利)cacls%systemroot%\system32\*.exe/d everyone(拒絕所有人訪(fǎng)問(wèn)system32中exe文件)

??3389.vbs cscript.exe

On Error Resume NextconstHKEY_LOCAL_MACHINE=&H80000002strComputer="."Set StdOut=WScript.StdOutSet oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\"&_strComputer&"\root\default:StdRegProv")strKeyPath="SYSTEM\CurrentControlSet\Control\Terminal Server"oReg.CreateKeyHKEY_LOCAL_MACHINE,strKeyPathstrKeyPath="SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\Tds\tcp"oReg.CreateKeyHKEY_LOCAL_MACHINE,strKeyPathstrKeyPath="SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp"strKeyPath="SYSTEM\CurrentControlSet\Control\Terminal Server"strValueName="fDenyTSConnections"dwValue=0oReg.SetDWORDValueHKEY_LOCAL_MACHINE,strKeyPath,strValueName,dwValuestrKeyPath="SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\Tds\tcp"strValueName="PortNumber"dwValue=3389oReg.SetDWORDValueHKEY_LOCAL_MACHINE,strKeyPath,strValueName,dwValuestrKeyPath="SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp"strValueName="PortNumber"dwValue=3389oReg.SetDWORDValueHKEY_LOCAL_MACHINE,strKeyPath,strValueName,dwValueSetR=CreateObject("WScript.Shell")R.run("Shutdown.exe -r -t 0")

??3389注冊(cè)表開(kāi)啟完整流程

echo Windows Registry Editor Version 5.00>>3389.reg

echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server]>>3389.reg

echo "fDenyTSConnections"=dword:00000000>>3389.reg

echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\Tds\tcp]>>3389.reg

echo "PortNumber"=dword:00000d3d>>3389.reg

echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp]>>3389.reg

echo "PortNumber"=dword:00000d3d>>3389.reg

regedit /s 3389.reg

del 3389.reg

轉(zhuǎn)自作者：蓋世船長(zhǎng)_段公子

來(lái)源：簡(jiǎn)書(shū)

著作權(quán)歸作者所有。商業(yè)轉(zhuǎn)載請(qǐng)聯(lián)系作者獲得授權(quán)，非商業(yè)轉(zhuǎn)載請(qǐng)注明出處。