BAT修改3389端口，防止忘记添加端口导致无法远程

以下是bat全文，保存为bat运行即可，十分方便

我喜欢在windows2003开防火墙，但是修改远程端口后经常忘记在防火墙添加相应的端口，有了这个代码之后就不怕了。

1. @echo off
   
2. 
   
3. rem 查找端口号
   
4. for /f "skip=4 tokens=3 delims= " %%i in ('reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" /v PortNumber') do (set value16=%%i)
   
5. set value=%value16:~2%
   
6. rem echo %value%
   
7. setlocal EnableDelayedExpansion
   
8. set "str=0123456789ABCDEF"
   
9. for /l %%a in (0 1 15) do (
   
10.    set -%%a=!str:~%%a,1!
    
11.    set -!str:~%%a,1!=%%a
    
12. )
    
13. 
    
14. for /l %%a in (0 1 100) do (
    
15. if not "!value:~%%a,1!"=="" (
    
16. call set sun=%%-!value:~%%a,1!%% !sun!
    
17. ))
    
18. rem echo !sun!
    
19. set /a nnn=1,num=0
    
20. for %%a in (!sun!) do (
    
21. rem set num0=!num!
    
22. set /a num=%%a*nnn+num
    
23. rem echo num = %%a*!nnn! + !num0! = !num!
    
24. set /a nnn*=16
    
25. )
    
26. rem echo 当前远程桌面端口号为十六进制: %value16% 即 %value%
    
27. echo 当前远程桌面端口号为十进制: !num!
    
28. rem setlocal DisableDelayedExpansion
    
29. 
    
30. 
    
31. rem 以下是系统默认
    
32. goto xiugai
    
33. @reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 /f
    
34. @reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List" /v 3389:TCP /t REG_SZ /d 3389:TCP:*:Enabled:@xpsp2res.dll,-22009 /f
    
35. 
    
36. :xiugai
    
37. set PortNumber=
    
38. set /p PortNumber=输入即将修改的十进制端口号(1024-65535):
    
39. rem if "%PortNumber%"=="" exit
    
40. if not defined PortNumber (set /a PortNumber=3389 & echo 未输入端口号，即将修改为默认值!PortNumber! & pause)
    
41. echo %PortNumber%|findstr "^[0-9]*$" >nul || (echo 必须纯数字! & goto xiugai)
    
42. if %PortNumber% lss 1024 (echo 端口号不能小于1024 & goto xiugai)
    
43. if %PortNumber% gtr 65535 (echo 端口号不能大于65535 & goto xiugai)
    
44. echo %PortNumber%
    
45. 
    
46. rem 修改端口后开启
    
47. rem 总开关
    
48. @reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 /f
    
49. rem 修改端口号,默认会直接修改十进制值,注意：范围在1024到65535，而且不能冲突，事实上，只修改第二处WinStations那一个也是可以的。
    
50. 
    
51. @reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\Tds\tcp" /v PortNumber /t REG_DWORD /d %PortNumber% /f
    
52. @reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" /v PortNumber /t REG_DWORD /d %PortNumber% /f
    
53. @reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List /v !num!:TCP /f
    
54. @reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List" /v %PortNumber%:TCP /t REG_SZ /d %PortNumber%:TCP:*:Enabled:@xpsp2res.dll,-22009 /f

复制代码