2010年12月28日火曜日

Windows 7 & Windows Server 2008 R2 快速設定流程

[2011/03/15 Update]
Windows 7:
control userpasswords2
Desktop(Right Click) -> View -> Small icons
                        Auto arrange icons -> Selected
Recycle Bin(Right Click) -> Properties -> Don't move files to the Recycle Bin. Remove files immediately when deleted.
Control Panel -> View by: Small icons
                 AutoPlay -> Use AutoPlay for all mdeia and devices -> Not selected
                 Notification Area Icons -> Turn system icons on or off -> Action Center -> Off
                 Power Options -> Balanced(recommended) -> Change plan settings -> Change advanced power settings -> Display -> Turn off display after -> Setting: Nerver(0)
                                                                                                                     Hard disk -> Turn off hard disk after -> Setting: Nerver(0) // WS2008R2 Default
                                                                                                                     Sleep -> Sleep after -> Setting: Nerver(0) // WS2008R2 Default
                                                                                                                     POWERCFG -H OFF
                 System -> Advanced system settings -> System Protection -> Configure -> Turn off system protection // WS2008R2 n/a
                                                       Remote -> Allow Remote Assistance connections to this computer -> Not selected // WS2008R2 n/a
                 User Accounts -> Change User Account Control settings -> Never notify
Folder Options -> View -> Advanced settings -> Hidden files and folders -> Show hidden files, folders, and drives
                                               Hide extensions for known file types -> Not selected
                                               Hide protected operating system files (Recommended) -> Not selected
                                               Launch folder windows in a separate process -> Selected
                                               Show encrypted or compressed NTFS files in color -> Not selected
                                               Use Sharing Wizard (Recommended) -> Not selected
Internet Options -> Home page -> Use blank
                    Browsing history -> Delete browsing history on exit -> Selected
                                        Delete... -> Form data -> Selected
                                                     Passwords -> Selected
                                                     InPrivate Filtering data -> Selected
Taskbar and Start Menu -> Lock the taskbar -> Selected // WIN7 Default
                          Auto-hide the taskbar -> Selected
                          Use small icons -> Selected
services.msc -> Security Center -> Disabled // WS2008R2 n/a
                Windows Defender -> Disabled
                Windows Firewall -> Disabled
taskschd.msc -> Task Scheduler (Local) -> Task Scheduler Library -> Microsoft -> Windows -> Defrag -> ScheduledDefrag -> Disabled
                                                                                            Maintenance -> WinSAT -> Disabled // WS2008R2 n/a
Computer Name & Workgroup
HKEY_LOCAL_MACHINE -> SOFTWARE -> Microsoft -> Windows NT -> CurrentVersion -> RegisteredOwner
                                                                               RegisteredOrganization
Windows Server 2008 R2:
control userpasswords2
Administrative Tools -> Local Security Policy -> Account Policies -> Password Policy -> Maximum password age -> 0
                                                 Local Policies -> Security Options -> Interactive logon : Do not require CTRL+ALT+DEL -> Enabled
                        Server Manager -> Server Summary -> Computer information -> Do not show me this console at logon -> Selected
                                                            Security Information -> Configure IE ESC -> Administrators: -> Off
                                                                                                        Users: -> Off
                                          Features Summary -> Add Roles -> File Services -> Windows Search Service -> Selected
                                                              Add Features -> Desktop Experience -> Selected
                                                                              Wireless LAN Service -> Selected
Control Panel -> System -> Advanced system settings -> Advanced -> Performance Settings -> Visual Effects -> Adjust for best appearance
                                                                                           Advanced -> Processor scheduling -> Programs
                                                                                           Date Execution Prevention -> Turn on DEP for essential Windows programs and services only
gpedit.msc -> Computer Configuration -> Administrative Templates -> System -> Display Shutdown Event Tracker -> Disabled
services.msc -> Themes -> Automatic
                Windows Audio -> Automatic
其它設定:
regedit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache


Administrative Tools -> Local Security Policy -> Network List Manager Policies -> Unidentified Networks -> Location type -> Private
                                                                                                           User permissions -> User cannot change location
                                                 Software Restriction Policies -> Additional Rules -> New Path Rule (Action -> New Software Restriction Policies)
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Windows Media Player\wmplayer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Windows\System32\WinSAT.exe // WS2008R2 n/a


Network and Sharing Center -> Change advanced sharing settings -> Home or Work -> HomeGroup connections -> Use user accounts and passwords to connect to other computers -> Selected // WS2008R2 n/a


C:\WINDOWS\system32\drivers\etc\hosts


cmd
set devmgr_show_nonpresent_devices=1
start devmgmt.msc

BOOTSECT.EXE /NT60 C:
BCDBOOT C:\WINDOWS /L JA-JP /S C:

0 件のコメント: