規則優化:

 

開放必要的port ( 443、3389)

 

SMB 安全增強:

啟用SMB 3.1.1強制加密: reg [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters] "SmbServerEncryptData"=dword:00000001

安全的Guest, reg [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters] "AllowInsecureGuestAuth"=dword:00000000