Windows2003 Server Settings Encyclopedia _ servers

Check if there is no activation: Start--> run--> oobe/msoobe/a--> Enter, wait a moment,
You'll see a hint. If there is no activation, you install the system is not cracked, grasp to find a way to it!
such as using Reset5.02 to activate the patch into Safe mode activation.




Windows Server 2003 3790 version identification
Rtm=release to manufacture (mass production) is a version to the hardware manufacturer! is to send to the plate, not to sell.
Oem=original equipment manufacturer can only be installed completely, and RTM is similar, just call different.
Rtl=retail (Retail) official Retail edition, can be upgraded or new installation.
Vlk=volume License a large number of authorized editions, also known as Enterprise Edition. No activation required. (The so-called Simplified Chinese VLK version of the Internet is actually the ordinary Simplified Chinese version of the VLK version of the 8 documents)
Two, different versions of Windows Server 2003
Windows Server 2003 Web Edition: Provides a web hosting and service platform for rapid development, deployment of Web services, and applications. Support 2-way SMP (symmetric multi-processing) system, 2GB memory.
Windows Server 2003 Standard Edition: for small and medium business and departmental applications. Supports 4-way SMP, 4GB RAM.
Windows Server 2003 Enterprise Edition: For centers and large organizations, with 32-bit and 64-bit two versions. Support for 8 node clusters, NUMA, 8-way SMP, where 32-bit version supports 32GB memory, and 64-Bit Edition supports 64GB memory.
Windows Server 2003 Datacenter Edition: for enterprises that require strong scalability and high availability, there are 32-bit and 64-bit two versions. 32-bit version supports 32-channel SMP, 64GB memory, 64-bit version supports 64-way SMP, 512GB memory, two versions support 8 node cluster, NUMA

Four, Win 2003 server some of the optimization settings

1. Disable the Configure Server Wizard:
Prohibit the presence of the Configure Your Server Wizard (Manage Your server):-> Administrator tool (Administrative Tools)-> manage Your server in Control Panel (Manage Your Server), and then in the lower-left corner of the window, check "Do not show this page when you log on" (Don t display this page at logon).
2. Enabling hardware and DirectX acceleration
★ Hardware Acceleration: Desktop Right-click-Property (properties)-> settings (Settings)-Advanced (Advanced)-Troubleshooting (Troubleshoot). Pull the hardware acceleration scroll bar of the page to full, preferably click OK to save the exit. This may be a moment of black screen is completely normal.
★directx acceleration: Open start-> Run, type "DxDiag" and enter the "DirectX Diagnostics Tool" (DirectX tools), on the display page, Click DirectDraw, Direct3D and AGP texture accelerate three buttons to enable acceleration. Pull the "Hardware acceleration level for sound" (Hardware Sound acceleration levels) scroll bar to full acceleration.
3. Enable sound card:
After the system is installed, the sound card is prohibited, so you want to enable it in the Control Panel-> sound->, reboot and then set it in the taskbar display. If you are using the Windows Server 2003 Standard version, make it from step two, because the standard version has allowed sound services.
★ Open "Start" (start)-> "Run", type "services.msc", locate "Windows Audio" in the window that appears and double-click it, and then select Auto in the Drop-down menu in startup mode (startup type) (Automatic) and click "Apply" (apply)-> "Start" (start)-> "OK" (OK)
★ Open "Start" (start)-> "Run", type "services.msc" and enter "DirectX Diagnostics Tool" (DirectX tools), on the "Sound" (Display) page, put "Hardware acceleration level of sound" The scroll bar (Hardware Sound acceleration level) is pulled to full speed acceleration.
4. How to enable ASP support:
Windows Server 2003 is installed by default and is not installed with IIS 6 and requires additional installation. After you install IIS 6, you also need to turn on standalone support for ASP. The Control Panel-> Administrative Tools-> Web service Extensions-> Active Server Pages-> allowed.
5. How to enable XP Desktop themes:
★ Open "Start" (start)-> "Run", type "Services.msc", select Themes "Subject" (the default is prohibited), then change to "automatic", press "Apply", select "Open".
★ Click on the "desktop" attribute, select "Windows XP" in "Subject"
★ My Computer----Properties----Advanced----performance-----use shading for icon labels on the desktop
6. Shutdown reasons for the shutdown is prohibited to choose:
Shutdown Event Tracking (Shutdown event Tracker) is also a setting that differs from other workstation systems in Windows Server 2003.
This is a necessary choice for the server, but it doesn't work for the workstation system, and we can also ban it.
Open "Start" Start-> "Running" Run-> enter "Gpedit.msc", in the left part of the window that appears,
Select Computer Configuration (Computer Configuration)-> Administrative Template (Administrative Templates)
-> "System", click "Shutdown Event Tracker" in the right window to select "Prohibit" in the dialog box that appears
(Disabled), click then OK to save and exit, so that you will see a shutdown window similar to Windows 2000
7. How to use USB hard drive, u disk, add already partition hard disk
My Computer (right-click)----Manage----Disk Management-----Perform import and assignment letter operations on the appropriate hard disk
8. Display all components in Control Panel:
Replace the "Hide" in the Sysoc.inf file in the Windows\Inf directory.
9. Disable Internet Explorer enhanced security and the appearance of the Stop-safe query box
Customize the security level for IE in the IE tools option. Pull the scroll bar on the Security tab to set Internet zone security to Medium (Medium) or medium low. Modify the selection "prompt" in the Customization settings to select "Prohibit" or "enable".
10. Disable boot Ctrl+alt+del and implement automatic login
★ Method 1: Open the registry (run-> "Regedit"), and then open:
hkey_local_machin| software| Microsoft| Windows nt| CurrentVersion | Winlogon segment, right-click in this paragraph, create a new two string segment, autoadminlogon= "1", defaultpassword= "password set for Superuser administrator". Note that you must set a password for the administrator, or you will not be able to implement self booting. You can then restart Windows to enable automatic logon.
★ Method 2: Administrative Tools-> Local security Settings (local safety policy)-> native policy-> security options-> Interactive Logon:do not require , enable it.
★ Method 3 (Automatic login): Use the Windows XP tweak UI to automate Server 2003 login.
Download: Tweak UI Http://www.ssite.org/uppic/sun_pic/...003/tweakui.exe
Execute TweakUI.exe directly on the left panel select logon-> autologon-> on the right tick log on automatically in system startup enter your username and domain (if not), Click the set Password below, enter the username password, and then click OK.
11. Hide Files
Windows Server 2003 displays all folders by default, and if you don't want to, you can hide it by doing it: Open any folder, select Tools-> Folder Options-> View, adjust the contents of the Display system folder, hide protected operating system files, hidden files and folders three items
12. Allow built-in IMAPI cd-burning services and support for Windows Imaging Device services
. Allow built-in IMAPI cd-burning services and support for Windows Imaging Device services
★ If you want to enable Windows built-in IMAPI cd-burning service. Do the following XX:
Open start-> Run, type "services.msc", locate "IMAPI cd-burning COM Service" in the window that appears, and double-click it, and then in startup mode (Startup type "Automatic" and click "Apply"-> "Start"-> "OK" (OK) by clicking on the dropdown menu
★ If you are like digital cameras and scanners, you should open the Windows Image Acquisition service. Open start-> Run, type "services.msc", locate "Windows Image Acquisition (WIA)" In the window that appears, and double-click it, and then in startup mode (Startup type ) of the dropdown
Menu select "Auto" (Automatic) and click "Apply" (apply)-> "Start"-> "OK" (OK)
13. Advanced Settings
★ We can modify some of the advanced settings of Windows Server 2003 to fit the workstation's application environment.
Right-click on "My Computer" (my Computer)--Attributes (properties)--Advanced (Advanced)--Performance (performance)--Settings (Setting)--Advanced (Advanced), "Processor planning" (Processor scheduling) and memory usage (Memory usage) are assigned to Programs (PROGRAMS) for use. Then click "OK" (OK.)
★ Disable Error Reporting
Right-click on "My Computer" (my Computer)--Attributes (properties)--Advanced (Advanced)--click on the "Error Report" (Reporting) button, in the window that appears to "Disable error Reporting" (Disable error Reporting) Select and check "but notify me when serious errors occur" (But, notify me when critical errors occur.)
★ Adjust Virtual memory
Some friends often feel overwhelmed with shutting down and logging off, and the solution is to disable virtual memory so that your logoff and shutdown times may be much faster. Right-click "My Computer" (my Computer)--Attributes (properties)--Advanced (Advanced)--Performance (performance)--Settings (Setting)--Advanced (Advanced), click "Virtual Memory" (Virtual memory) section of change, and then select No paging file in the window that appears. Reboot the system.
14. Speed up start-up and operation
★ Modify the registry, reduce the pre read, reduce the progress bar wait time:
Start → Run →regedit start Registry Editor, HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\ Prefetchparameters, there is a key value named Enableprefetcher, its value is 3, change it to "1" or "5". Locate the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control and set the WaitToKillServiceTimeout to: 1000 or less. (Original Set Value: 20000) Find HKEY_CURRENT_USER\Control Panel\Desktop key, the right window waittokillapptimeout to 1000, (the original Set value: 20000) that is, close the program only wait 1 seconds 。
Change the Hungapptimeout value to: 200 (original Set Value: 5000), which indicates that the program waits 0.5 seconds for errors.
★ Allow the system to automatically shut down programs that stop responding.
Open the registry HKEY_CURRENT_USER\Control Panel\Desktop key and set the Autoendtasks value to 1. (Original Set Value: 0)
★ Disable System Service QoS
Start menu → run → type gpedit.msc, and the Group Policy window appears. Expand Administrative Templates → network, expand QoS Packet Scheduler, right-click restrict reserved bandwidth in Settings in properties, select Disabled, and make sure that you have restricted retention of bandwidth in the setting in the property, and that Can When the above modifications are completed and applied, the user can see the QoS Packet Scheduler (QoS Packet Scheduler) in the General Properties tab bar of the Properties dialog box for the network connection. Description The modification was successful or the modification failed.
★ Change the speed of window popup:
Locate the HKEY_CURRENT_USER\Control Panel\desktop\windowmetrics branch, locate the MinAnimate key value in the window on the right, the type is REG_SZ, and by default the value of this health value is 1, Represents an animation that opens a window display, changes it to 0, suppresses animation, and then selects the logout command from the Start menu to activate the modification you just made.
★ Disable compression for Windows XP:
Click "Run" under "Start", enter "regsvr32/u Zipfldr.dll" in the "Run" input box, and then press ENTER.
★ Set the starting information or warning message of personality:
Personalized Windows XP Startup: Open Registry Editor, find HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Branch, Double-click the LegalNoticeCaption health value to open the Edit String dialog box and enter the information you want in the text box under Value data, such as "Buddy, Hello!" , and then click OK to reboot. If you want to change the warning message, double-click the LegalNoticeText health Value name, enter the warning message you want to display in the Edit String window that appears, and then click OK to reboot.
15. Install Java VM
Windows Server 2003 does not have an integrated MS Java VM or a Sun Java VM, and you can download and install it yourself.
16. Install DirectX 9a
Installing DirectX 9a on Windows Server 2003 and installing DirectX 9a on other versions of Windows is the same. You must first enable DirectX and Graphics acceleration before you install.
17. Available antivirus software and firewalls:
Symantec Norton Antivirus Corporate 8.01
Zone Alarm 3.7.159
Norton Personal Firewall 2003
V. How to prevent the invasion of ipc$
1, prohibit the null connection enumeration (this * * does not prevent the establishment of NULL connection)
First run regedit, find the following build [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
RestrictAnonymous = DWORD key value is changed to: 00000001.
RestrictAnonymous REG_DWORD
0x0 Default
0x1 Anonymous users cannot enumerate the list of native users
0x2 Anonymous users cannot connect to the native ipc$ share
Description: It is not recommended to use 2, or it may cause some of your services to fail to start, such as SQL Server
2. Prohibit default sharing
1 View local shared resources
Run-cmd-input net share
2 Delete Share (one at a time)
NET share ipc$/delete
NET share admin$/delete
NET share C $/delete
NET share d$/delete (if there is a e,f,...... can continue to delete)
3) Modify registry Delete share
Run-regedit
Locate the following primary key [Hkey_local_machine\system\currentcontrolset\services\lanmanserver\parameters] Change the key value of AutoShareServer (DWORD) to: 00000000.
If the primary key mentioned above does not exist, create a new (right-click-New-Double-byte value) and change the key value.
3. Stop Server service
1) Temporarily Stop Server service
net stop server/y (Server service will reopen after reboot)
2 permanently turn off ipc$ and default shared-dependent services: LanManServer, Server services
Control Panel-Administrative Tools-services-Locate the Server service (right-click)-Properties-general-Startup type-disabled
4, install the firewall (check the relevant settings), or port filtering (filter out 139,445, etc.)
1. Unlocking file and Printer sharing bindings
Right-click on the desktop [Network Neighborhood]→[Properties]→[local connection]→[properties], remove the "File and Printer sharing from Microsoft Network" check box, and unlock file and printer sharing bindings. This will prohibit all requests from 139 and 445 ports, and others will not be able to see the shared computer.
2). Using TCP/IP filtering
Right-click on the desktop [Network Neighborhood]→[Properties]→[local connection]→[properties] to open the Local Area Connection Properties dialog box. Select the Internet Protocol (TCP/IP)]→[Properties]→[advanced]→[Options], click to select the TCP/IP filter option in the list. Click the Properties button, select Allow only, and then click the Add button (Figure 2) to fill in the port that you want to use except for 139 and 445. This will not respond if someone scans the 139 and 4,452 ports using the scanner.
3. Use IPSec security policy to block access to ports 139 and 445
Select [My Computer]→[Control Panel]→[Management tool]→[Local Security policy]→[IP security policy, in the local machine], where you define an IPSec security policy rule that prevents any IP addresses from accessing IP addresses from the TCP139 and TCP445 ports, so that when someone uses a scanner scan, The 139 and 4,452 ports on this machine do not give any response.
4). Use firewall to protect against attack
You can also set the firewall to prevent other machines from using native sharing. As in "Skynet Personal Firewall," Select an empty rule, set packet direction to "receive", the other IP address selected "Any address", the protocol is set to "TCP", the local port is set to "139 to 139", the other port set to "0 to 0", set the flag bit is "SYN", the action is set to "intercept" , and then click the OK button and select this rule in the custom IP Rules list to start intercepting the 139 port attack (Figure 3).
5, to all accounts to set up a complex password to prevent through ipc$ poor lift password




O.K optimization Start

First, to lose weight for this behemoth (KAO, this guy is much bigger than XP) Make sure you have the hardware and software installed!
1, delete the system backup file: Start → run →sfc.exe/purgecache can subtract a few m space, add up.
2, delete drive backup:%windows%\driver cache\i386 directory of Driver.cab files, usually this file is 70.3M.
3, delete the \windows\ime without the input method, 8xM
4, if you do not see the help of the system ... Delete the file in the%windows%\help directory, 36M.
5. Turn off System Restore, right-click My Computer, select Properties, locate System Restore, and select Turn off System Restore on all drives.
6, if your system space is really tense, you can consider the temporary folder of IE browser to move to other partitions, methods: Click IE, tools Internet Options Internet temporary files settings "move the folder O.K."
7, if the space again tense, enable the NTFS compression function, recommended not to use!
8, uninstall the less commonly used components, WIN2K3 and previous versions of Windows, the installation of all the system itself is responsible for the user can not choose the installation required components. Run add-Remove Programs, delete games, wallpapers, and other unused attachments. Also remember to remove Internet Explorer enhanced Security configuration, or always pop up a warning when browsing the web! You can also modify \%windows%\inf\sysoc.inf with Notepad, with the Find/Replace function, enter in the lookup box, hide, replace all empty (note, in this line, hide cannot be replaced by "Netfx=netfxocm.dll,urtocmproc , netfxocm.inf,hide,7 "). So, just put all of that, hide all removed, save, run "Add-Remove Program", you will see "Add/Remove Windows components" more than a few options, but unlike XP, after the change, although the hidden are out, but only Windows Automatic Updates can be deleted, The other is not allowed to delete drops ~ ~

O.K Thin body End!

Second, for the win2k3 speed up, although he has faster than XP, but who would feel that they have more money huh?
1, modify the registry of the run key, remove redundant programs. Enable Registry manager: Start → run →regedit→ find "hkey_current_user\software\microsoft\windows\currentversion\run\" right button → Delete If you do not install the software, so the contents of the catalog can be deleted! (Note that some drivers are here to add their own key values, to look good, you can do backup, as long as not with kernel32/system or anything can be deleted:)

2, reduce the pre-read, reduce the progress bar waiting time, the effect is a progress bar run into the login screen, start → Run →regedit
Start Registry Editor, HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session
Manager\Memory Management\prefetchparameters, there is a key value named Enableprefetcher, its value is 2 (may not be the same, but it doesn't matter), change it to "1".
Find HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control,
Set the WaitToKillServiceTimeout to: 1000 or less. (Original Set Value: 20000)
Locate the HKEY_CURRENT_USER\Control Panel\Desktop key and change the waittokillapptimeout of the right window to 1000 (the original Set value: 20000) that is, just wait 1 seconds to close the program.
Change the Hungapptimeout value to: 200 (original Set Value: 5000), which indicates that the program waits 0.5 seconds for errors.

3, let the system automatically shut down the program to stop responding.
Open the registry HKEY_CURRENT_USER\Control Panel\Desktop key,
Set the Autoendtasks value to 1. (Original Set Value: 0)

4. Disable Error Reporting
Right-click on "My Computer"-Properties-Advanced-click the "Error Report" button, in the window that appears, "Disable error Reporting" and select and check "but in the event of a serious error notify me"

5, prohibit the compression function of Windows XP:
Click "Run" under "Start", enter "regsvr32/u Zipfldr.dll" in the "Run" input box, and then press ENTER to appear the DLL Unrgisterserver dialog box in Zipfldr.dll to indicate success

6. Disable System service QoS
Start menu → run → type gpedit.msc, and the Group Policy window appears. Expand Administrative Templates → network, expand QoS Packet Scheduler, right-click restrict reserved bandwidth in Settings in properties, select Disabled, and make sure that you have restricted retention of bandwidth in the setting in the property, and that Can When the above modifications are completed and applied, the user can see the QoS Packet Scheduler (QoS Packet Scheduler) in the General Properties tab bar of the Properties dialog box for the network connection. Description The modification was successful or the modification failed.

7. Enable Hardware and DirectX acceleration
Hardware acceleration: Right-click the desktop-Properties-Settings-advanced-troubleshooting. Pull the hardware acceleration scroll bar of the page to "full", preferably click "OK" to save the exit. This may be a moment of black screen is completely normal.

DirectX acceleration: Open "Start"-> "Run", type "DxDiag" and enter "DirectX Diagnostics Tool", on the "Show" page, click DirectDraw, Direct3D and AGP texture accelerate three buttons to enable acceleration. Pull the "Hardware acceleration level of sound" scroll bar to "full acceleration"

8. Start Sound
2003 the default is to prohibit the sound, click on the-> Control Panel-> Sound Open on the line!

9. Disable Shutdown Event tracking
Start-> run-> gpedit.msc-> Computer Configuration-> Administrative Templates-> system-> display shutdown event tracking-> disabled.

10. Disable the Configure Server Wizard
Disable the "Configure Your Server" wizard on every boot: In Control Panel-> Administrator tool-> Manage Your server run it, and then in the lower left corner of the window check "Do not show this page when you log on" the first item in the default Start menu is "Configure Your server."

11, reduce the boot disk scan wait time, start → run, type "chkntfs/t:0"

12, turn off Automatic Updates: Right click on "My Computer", click on the properties, click "Automatic Updates", in the "Notification Settings" column Select "Turn off Automatic Updates." I will manually update the computer.

13, performance optimization
Right-click on My Computer,-> properties-> Happy-> Performance tab Settings-> advanced-> then the ' processor plan ' and ' memory usage ' are tuned to the program options.

14, to the right mouse button to add a copy to .../move to ... Function
Open Windows Notepad, the following copy to Notepad, save as Mouse.reg, and then execute Mouse.reg, then casually find a file, and then click the right button to see:

========================================================

Windows Registry Editor Version 5.00

[Hkey_local_machine\software\classes\allfilesystemobjects\shellex]

[Hkey_local_machine\software\classes\allfilesystemobjects\shellex\contextmenuhandlers]

[Hkey_local_machine\software\classes\allfilesystemobjects\shellex\contextmenuhandlers\copy to]
@= "{C2FBB630-2971-11D1-A18C-00C04FD75D13}"

[Hkey_local_machine\software\classes\allfilesystemobjects\shellex\contextmenuhandlers\move to]
@= "{C2FBB631-2971-11D1-A18C-00C04FD75D13}"


=======================================================

Third, shut down the unused system services (these s services, take up my valuable system resources AH ~ ~ a minute of silence ... ）

Services run by default I can't remember, I've banned the service on my machine, let's go ahead and change it:
Some remember that should be by default is prohibited or manual service I do not list out ~ ~ Too much.

1/alerter Management Alerts prohibit
2/automatic updates Windows Automatic Update manual
3/background Intelligent Transfer Service uses idle network bandwidth to transfer data to manual
4/clipbook and remote computer to share the contents of the Clipboard, it must be shut hehe
5/computer Browser Maintain updated list of computers on the network!
6/DHCP Client registers and updates the IP address for the computer it's useless for me to shut
7/DISTRIBUTED Link Tracking Client to maintain LAN connection updates and other information, I do not use the LAN, this thing occupies about 4M of memory.
8/distributed Transaction Coordinator coordinates transactions across multiple databases, message queues, file systems, and more like the above, off!
9/dns Client DNS? You can't use it, turn it off.
10/error Reporting Service error report, off!
11/fast User Switching compatibility switch, off!
The Help center of the 12/help and Support system, just cut out the help, why are you driving it?
13/logical Disk Manager Administrative Service configuration disks off
14/ms software shadow copy provider volume replication backup
15/net Logon off!
16/netmeeting Remote Desktop Sharing Netmeeting, off
17/network DDE Dynamic Data exchange transmission
18/network DDE DSDM is similar to the above
19/network Location Awareness Guan
20/nt LM Security Support Provider off
21/NTLM Security Support Provider-telnet Guan
22/performance logs and alert write the System state log or send a warning
23/portable Media serial number off!
24/print Spooler printer? I'm not, shut up!
25/qos RSVP off!
26/remote Desktop helps Session manager remote Help service and does not require
27/remote Procedure call LOCATOR admin RPC
28/remote Registry Remote Admin registry, off
29/removable Storage
30/routing and Remote access I simply disable it.
31/server off, so that the province's manual deletion is shared, and so on when needed to open:
32/security Accounts Manager My system is just a client system, not IIS.
33/smart card should be off by default
34/SSDP Discovery Service I can't use this.
35/system Event Notification If the server is sure to record the
36/system Restore Service System Restore services
37/task Scheduler Windows Planning Service
38/telephony dial-up Service
39/telnet remote login, the default should be closed
40/terminal Service Terminal Services
41/uninterruptible power supply UPS, I don't have it!
42/upload manager shuts down and can transfer files.
43/volume shadow copy what backup? Off
44/webclient off.
45/windows Installer MSI Service
46/windows Image Acquisition (WIA) Digital equipment, I am poor ~ ~ ~ ~
47/windows Management Instrumentation Driver Extensions Guan
48/windows Time service, close it, sometimes not even, and there is no need to be so accurate
49/wireless Zero Configuration wireless network, off
50/WMI Perfromance Adapter Guan
51/winhttp Web Proxy auto-discovery Service It's not a big use.
52/workstation hey, shut up, when you need to open

If anything is missing ... See for yourself, do not know do not blind, in fact, are Chinese, if the system, shut down will affect the normal operation of the system do not turn off:


Hehe finally optimized, the inadequacy of the place also asked you master pointers, this article refers to the killer "My WinXP Optimization Road"

All that's left is to back up this new optimized system: If you're going to use backup only on your own, you don't have to ghost it directly.

Find Deploy.cab on the 2003 installation plate (mentioned above, forget?) :) in the Sysprep.exe file.
Run Sysprep.exe, select "Re-encapsulation", the following tag can be selected "activated early", you can also choose whether the encapsulation is complete shutdown or reboot. After the encapsulation is complete, we start with the system disk with Ghost, use Ghost to generate the backup *.gho mirror file, the backup completes!

Complete the full text!




1. Activate common service
Windows 2003 masks Many services that are not useful to the server under the default settings, in addition to the sound card-related "Windows Audio" service and desktop theme "Themes" Services:
① Image Capture Service
If you need to use camera, digital cameras, scanners and other imaging devices, you must enable the Image capture service. Go to start → admin tools → services, locate the Windows Image acquisition item in the Services window, double-click it to enter the setup form, change the startup type to Automatic, and click the "Start" button.
②CD Burn Service
You cannot burn CDs under Windows 2003 defaults by entering the Services window, finding the IMAPI cd-burning COM Service item, double-clicking it into the setup form, changing the startup type to Automatic, and clicking the "Start" button.
2. Do not press "Ctrl+alt+del" key combination before login
Windows 2003 each time you start, you need to press the "Ctrl+alt+del" key combination, and then type the password to log in, it is very troublesome. The cancellation method is: Go to "start → admin tools → local Security Policy", find "local policy → security options" on the left side of the window, and find "interactive login on the right": Do not need to press the "Ctrl+alt+del" option, double-click it, and set to Enabled.
3. Move "My Documents"
Enter Explorer, right-click My Documents, select Properties, click the Move button in the Target Folder tab, and then press OK when you select the target disk. In Windows 2003, "My Documents" have been difficult to find, the desktop, start and other places can not see, the proposed frequent use of friends to make a shortcut to the desktop.
4, mobile IE temporary files
Go to "Start → Control Panel →internet Options", on the General tab, in the Internet files bar, click the "Set" button, the "Move Folder" button in the pop-up form, select the destination folder, click OK, and then select "Yes" in the pop-up dialog box, and the system will automatically log on again.
5. Mobile Virtual Memory
Go to "Start → control Panel → system" and select the "Advanced" tab in the System Properties window. Click the "Settings" button in the "Performance" bar, select the "Advanced" tab, click the "Change" button in the "Virtual Memory" bar, select the system partition, and then select the "No paging File" item, click "Set" button, select "Yes" in the pop-up window, then select a non-system partition, select "Custom Size", enter the data point "Settings", then click "OK" and restart the computer.
6. Mobile System environment variable
Enter "start → control Panel → system", select "Advanced", click "Environment Variables" button, in the "User variables of the Administrator" column, select the Temp item, click "Edit" button, change the measure value, such as "D\temp", point "OK" ; then change the second TMP to the same address in the same way. Next, find the TEMP and TMP entries in the System Variables column, and change to the same address.
7. Remove Hardware-driven backup
Windows 2003 Hardware driver backup files Driver.cab stored in the system partition "Windows\driver cache\i386\" directory, the hardware installation is complete, the file can be deleted or transferred, this can release about 70MB space.



Four strokes to enhance Windows 2003 security


Author: Admin Source: Sky Technology Institute Add Time: 2004-4-22

Windows 2003 is increasingly favored by users for its steady performance, but you still need to tighten Windows 2003 security in the face of new viruses.

1. User password settings

Set a key password to a large extent to avoid password attacks. Password set character length should be more than 8, preferably letters, numbers, special characters of the combination, such as "psp53, @pq", "skdfksadf10@" and so on, can effectively prevent violent cracking. It's best not to use your own birthday, cell phone number, phone number, etc. to make a password.

2. Delete Default Share

Click start → run, enter gpedit.msc, and then return to open the Group Policy Editor. Expand User Configuration →windows settings → scripts (logon/Logoff), double-click the login entry, and then add "Delshare.bat" (parameters do not need to be added) to remove the Windows 2003 default share.

Next, disable the IPC connection: Open Registry Editor, expand in sequence [HKEY_

LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\CONTROL\LSA] Branch, locate the "RestrictAnonymous" subkey in the right window, and change its value to "1".

3. Turn off the AutoPlay feature

The AutoPlay function not only plays a role in light drive, but also works on other drives, so it is easy for hackers to use to execute hacker programs.

Open the Group Policy Editor, expand Computer configuration → administrative Templates → system in turn, in the right window, locate the Turn off AutoPlay option and double-click, select Enabled in the Open dialog box, and select all drives in the Drop-down menu after turn off AutoPlay, and press OK to take effect.

4. Empty the remote accessible registry path

Set the remote accessible registry path to NULL, which effectively prevents hackers from using the scanner to read computer system information and other information through the remote registry.



Open the Group Policy Editor, expand Computer Configuration →windows settings → security settings → security options, and in the right window, locate the network access: Remotely accessible registry path, and then delete the remotely accessible registry path and subpath contents in the open window as shown. Four strokes to strengthen Windows 2003 security (Source: www.viphot.com)