Windows安全策略 批量脚本

@echo off

TITLE "windows_checklist"

REM 本代码测试于Windows10

REM utf-8
chcp 65001
REM 中文编码
REM chcp 936

echo ##############################################################################
echo #                                                                            # 
echo #                         Checklist Viewer                                   # 
echo #                                      Create By Stev3n                      # 
echo #                                                                            # 
echo #                            #############                                   # 
echo #                                         only for test                      # 
echo #                                                                            # 
echo #                   Test result offensive reference                          # 
echo ############################################################################## 

echo ---------------------------------user‘s password policy-----------------------
net accounts

echo ---------------------------------computer share-------------------------------
net share

REM XP系统不支持
echo ---------------------------------hotfix InstalledOn---------------------------
wmic qfe get hotfixid,InstalledOn,InstalledBy

REM REM XP系统使用
REM echo ---------------------------------hotfix InstalledOn---------------------------
REM wmic qfe 

echo ---------------------------------user list------------------------------------
net user

echo ---------------------------------port LISTEN----------------------------------
netstat -ano | find "LISTEN"

echo ---------------------------------system policy--------------------------------
Auditpol.exe /get /category:*

REM 英文版本
echo ---------------------------------user,password Expired------------------------
echo administrator‘s user,password
net user administrator|find "expires" 
echo guest‘s user,password
net user guest|find "expires"
REM 英文版本
echo ---------------------------------user active----------------------------------
echo administrator‘s status
net user administrator|find "active"
echo guest‘s status
net user guest|find "active"

REM REM 中文版本
REM echo ---------------------------------user,password Expired------------------------
REM echo administrator‘s user,password
REM net user administrator|find "到期" 
REM echo guest‘s user,password
REM net user guest|find "到期"
REM REM 中文版本
REM echo ---------------------------------user active----------------------------------
REM echo administrator‘s status
REM net user administrator|find "启用"
REM echo guest‘s status
REM net user guest|find "启用"

echo ---------------------------------system install-------------------------------
systeminfo|find "OS"

echo ---------------------------------service--------------------------------------
net start

echo ---------------------------------screen_Saver---------------------------------
echo if screensaveractive == 1,screen_Saver is active
reg query "hkcucontrol paneldesktop" /v screensaveactive

echo ---------------------------------user,password--------------------------------
control userpasswords2

PAUSE