每一台WinSer都需要进行通用配置,实在太繁琐。(* ̄︶ ̄)

以下通过Powershell配置:

关闭IE增强安全配置、关闭防火墙、开启远程桌面、关闭单用户单回话远程登录(单用户多个远程桌面登录);

Sysprep 创建通用VHD。

# Machine IE Enhanced Security Configuration Path
$MachineKey = "HKLM:\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}"
# User IE Enhanced Security Configuration Path
$UserKey = "HKLM:\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}"

# Turn Off IE Enhanced Security Configuration
Set-ItemProperty -Path $MachineKey -Name "IsInstalled" -Value 0
Set-ItemProperty -Path $UserKey -Name "IsInstalled" -Value 0

# Turn Off Local Computer Firewall
Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled $false

# Enable Remote Desktop
Set-ItemProperty -Path 'HKLM:\System\CurrentControlSet\Control\Terminal Server' -name "fDenyTSConnections" -value 0

# Disable Single-User Remote Desktop Session
Set-ItemProperty -path "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server" -Name fSingleSessionPerUser -Value 0 -Force

PowerShell 基础配置通用VHD_sysprep

PowerShell 基础配置通用VHD_远程桌面_02

PowerShell 基础配置通用VHD_sysprep_03

PowerShell 基础配置通用VHD_windows防火墙_04



Quoting:​​https://stackoverflow.com/questions/9368305/disable-ie-security-on-windows-server-via-powershell​