Windows Server 2003 权限最小化－测试中

为了在2003中实现权限最小化，参考了好多文章，
为使各个机子都能通用，所以做成一个批处理文件，请把以下代码保存成bat文件，执行，一步搞定！
欢迎纠错，谢谢！

1. @echo off
   
2. echo "虚拟主机C盘权限设定"
   
3. echo "www.chenyu.me"
   
4. 
   
5. echo "删除系统盘的Everyone的权限"
   
6. cd/
   
7. cacls "%SystemDrive%" /r "Everyone" /e
   
8. cacls "%SystemRoot%" /r "Everyone" /e
   
9. cacls "%SystemRoot%/Registration" /r "Everyone" /e
   
10. cacls "%SystemDrive%/Documents and Settings" /r "Everyone" /e
    
11. 
    
12. echo "删除系统盘的所有的Users的访问权限"
    
13. cd/
    
14. cacls "%SystemDrive%" /r "Users" /e
    
15. cacls "%SystemDrive%/Program Files" /r "Users" /e
    
16. cacls "%SystemDrive%/Documents and Settings" /r "Users" /e
    
17. 
    
18. cacls "%SystemRoot%" /r "Users" /e
    
19. cacls "%SystemRoot%/addins" /r "Users" /e
    
20. cacls "%SystemRoot%/AppPatch" /r "Users" /e
    
21. cacls "%SystemRoot%/Connection Wizard" /r "Users" /e
    
22. cacls "%SystemRoot%/Debug" /r "Users" /e
    
23. cacls "%SystemRoot%/Driver Cache" /r "Users" /e
    
24. cacls "%SystemRoot%/Help" /r "Users" /e
    
25. cacls "%SystemRoot%/IIS Temporary Compressed Files" /r "Users" /e
    
26. cacls "%SystemRoot%/java" /r "Users" /e
    
27. cacls "%SystemRoot%/msagent" /r "Users" /e
    
28. cacls "%SystemRoot%/mui" /r "Users" /e
    
29. cacls "%SystemRoot%/repair" /r "Users" /e
    
30. cacls "%SystemRoot%/Resources" /r "Users" /e
    
31. cacls "%SystemRoot%/security" /r "Users" /e
    
32. cacls "%SystemRoot%/system" /r "Users" /e
    
33. cacls "%SystemRoot%/TAPI" /r "Users" /e
    
34. cacls "%SystemRoot%/Temp" /r "Users" /e
    
35. cacls "%SystemRoot%/twain_32" /r "Users" /e
    
36. cacls "%SystemRoot%/Web" /r "Users" /e
    
37. cacls "%SystemRoot%/WinSxS" /r "Users" /e
    
38. 
    
39. cacls "%SystemRoot%/system32/3com_dmi" /r "Users" /e
    
40. cacls "%SystemRoot%/system32/administration" /r "Users" /e
    
41. cacls "%SystemRoot%/system32/Cache" /r "Users" /e
    
42. cacls "%SystemRoot%/system32/CatRoot2" /r "Users" /e
    
43. cacls "%SystemRoot%/system32/Com" /r "Users" /e
    
44. cacls "%SystemRoot%/system32/config" /r "Users" /e
    
45. cacls "%SystemRoot%/system32/dhcp" /r "Users" /e
    
46. cacls "%SystemRoot%/system32/drivers" /r "Users" /e
    
47. cacls "%SystemRoot%/system32/export" /r "Users" /e
    
48. cacls "%SystemRoot%/system32/icsxml" /r "Users" /e
    
49. cacls "%SystemRoot%/system32/lls" /r "Users" /e
    
50. cacls "%SystemRoot%/system32/LogFiles" /r "Users" /e
    
51. cacls "%SystemRoot%/system32/MicrosoftPassport" /r "Users" /e
    
52. cacls "%SystemRoot%/system32/mui" /r "Users" /e
    
53. cacls "%SystemRoot%/system32/oobe" /r "Users" /e
    
54. cacls "%SystemRoot%/system32/ShellExt" /r "Users" /e
    
55. cacls "%SystemRoot%/system32/wbem" /r "Users" /e
    
56. 
    
57. echo "添加IIS_WPG的访问权限"
    
58. cacls "%SystemRoot%" /g IIS_WPG:r /e
    
59. cacls "%SystemDrive%/Program Files/Common Files" /g IIS_WPG:r /e
    
60. 
    
61. cacls "%SystemRoot%/Downloaded Program Files" /g IIS_WPG:c /e
    
62. cacls "%SystemRoot%/Help" /g IIS_WPG:c /e
    
63. cacls "%SystemRoot%/IIS Temporary Compressed Files" /g IIS_WPG:c /e
    
64. cacls "%SystemRoot%/Offline Web Pages" /g IIS_WPG:c /e
    
65. cacls "%SystemRoot%/System32" /g IIS_WPG:c /e
    
66. cacls "%SystemRoot%/Tasks" /g IIS_WPG:c /e
    
67. cacls "%SystemRoot%/Temp" /g IIS_WPG:c /e
    
68. cacls "%SystemRoot%/Web" /g IIS_WPG:c /e
    
69. 
    
70. echo "添加IIS_WPG的访问权限[.Net专用]"
    
71. cacls "%SystemRoot%/Assembly" /g IIS_WPG:c /e
    
72. cacls "%SystemRoot%/Microsoft.NET" /g IIS_WPG:c /e
    
73. 
    
74. echo "添加IIS_WPG的访问权限[安装Macfee软件专用]"
    
75. cacls "%SystemDrive%/Program Files/Network Associates" /g IIS_WPG:r /e
    
76. 
    
77. echo "添加Users的访问权限"
    
78. cacls "%SystemRoot%/temp" /g Users:c /e

复制代码