Protect Against SYN Flood Attacks (Windows NT/2000/XP)

Windows includes protection that allows it to detect and adjust when the system is being targeted with a SYN flood attack (a type of denial of service attack). When enabled the connection responses time out more quickly in the event of an attack.

Create a new DWORD value called "SynAttackProtect" and set it to either 0, 1 or 2 based on the table below.

This value causes Transmission Control Protocol (TCP) to adjust retransmission of SYN-ACKS. When you configure this value, the connection responses time out more quickly in the event of a SYN attack (a type of denial of service attack).

0 (default) - typical protection against SYN attacks
1 - better protection against SYN attacks that uses the advanced values below.
2 (recommended) - best protection against SYN attacks. This value adds additional delays to connection indications, and TCP connection requests quickly timeout when a SYN attack is in progress.

Optional Advanced Values

For extra control you can create these additional DWORD values in the same key for each of the items below. They are not required for SynAttackProtect to be effective.

TcpMaxHalfOpen - default value is "100"
TcpMaxHalfOpenRetried - default value is "80"
TcpMaxPortsExhausted - default value is "5"
TcpMaxConnectResponseRetransmissions - default value is "3"

Note: When SynAttackProtect is using the best protection option then Scalable windows and TCP parameters that are configured on each adapter (including Initial RTT and window size) are no longer available.

System Key: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]
Value Name: SynAttackProtect,
Data Type: REG_DWORD (DWORD Value)

瀏覽 -> http://www.winguides.com/registry/display.php/1236/

贊助商連結

Clear Past Icons from the Tray Notification Area (Windows XP)

This tweak allows you to clear the Past Items list in the customized notifications area of the systray.

To clear the notification history delete the values called "IconStreams" and "PastIconsStream".

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\TrayNotify]
Value Name: IconStreams, PastIconsStream
Data Type: REG_BINARY (Binary Value)

瀏覽 -> http://www.winguides.com/registry/display.php/1238/

Configure Windows Software Update Services (Windows 2000/XP)

These settings allow you to configure Windows client machines to use custom Microsoft Software Update Services (SUS) located on an internal corporate network instead of the Windows Update Internet site.

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU]

Create a new DWORD value called "UseWUServer" and set it to "1" to use custom update servers or delete the value to use the default Internet site.

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate]

and create two new string values called "WUServer" and "WUStatusServer", set these values to the names of the custom update servers (e.g. "http://intranetupdate").

Note: Information in Microsoft Software Update Services (SUS) can be found online at http://www.microsoft.com/windows2000/windowsupdate/sus/

瀏覽 -> http://www.winguides.com/registry/display.php/1241/

Use Auto-Complete in Word File Dialog Boxes

When you type a file name in the Open, Save, or Save As dialog box, Word may automatically try to complete the file name for you. This tweak can be used to enable or disable this behaviour.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Office\[version]\Common\General]
Value Name: Use AutoComplete
Data Type: REG_SZ (String Value)
Value Data: "Yes" or "No"

Note: If you are using Microsoft Office 2000 you should install the Office 2000 SR-1/SR-1a Update before this tweak will take effect.

瀏覽 -> http://www.winguides.com/registry/display.php/1243/

Change the Library Search Order (Windows 2000/XP)

This setting controls the order in which directories are searched for DLL (Dynamic Link Library) files. This may be useful to ensure that a local DLL is used when a program is being run over a network or to resolve issues where incompatible system DLL files are being loaded first.

System Key: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager]
Value Name: SafeDllSearchMode
Data Type: REG_DWORD (DWORD Value)
Value Data: (1 = search System and Windows directories first, 0 = search current directory first)

Note: Service pack 3 (SP3) or greater should be installed when using with Windows 2000.

瀏覽 -> http://www.winguides.com/registry/display.php/1244/

Manage Network Bridge Feature (Windows XP)

Windows XP includes a new feature called Network Bridge, which lets you connect disparate media types into one seamless network. This tweak allows you to control forwarding and settings associated with this feature.

System Key: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BridgeMP]
Value Name: DisableForwarding, DisableSTA
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = default, 1 = disable features)

DisableForwarding - disable forwarding
DisableSTA - disable spanning tree algorithm

Note: This Microsoft article provides further information on the Windows XP Network Bridging feature: http://www.microsoft.com/WindowsXP/pro/techinfo/administration/homenetbridge/default.asp

瀏覽 -> http://www.winguides.com/registry/display.php/1245/

Allow UNC Paths at the Command Prompt (Windows NT/2000/XP)

The Command Processor normally checks and disallows UNC names from being used for the current directory in the Command Prompt as they may cause problems with launched child processes. This tweak can be used to allow UNC paths and remove the warning message.

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Command Processor]
Value Name: DisableUNCCheck
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = default, 1 = allow UNC)

Note: If you enable this feature and start a Console that has a current directory of an UNC name, start applications from that Console, and then close the Console, it could cause problems in the applications started from that Console.

瀏覽 -> http://www.winguides.com/registry/display.php/1247/

Limit the Number of Automatic Logins (Windows NT/2000/XP)

This setting is used to limit the number of automatic logins, once the limit has been reached the auto logon feature will be disabled and the system will display the standard authentication box.

System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
Value Name: AutoLogonCount
Data Type: REG_DWORD (DWORD Value)
Value Data: Number of Automatic Logins

Note: This value is a DWORD when using Windows XP

Note: Each time the system is rebooted, the value of AutoLogonCount will be decremented by one, until it reaches zero. When AutoLogonCount reaches zero, no account will be logged on automatically, the AutoLogonCount and DefaultPassword key values will be deleted from the registry, and AutoAdminLogon will be set to zero.

參照 -> http://www.winguides.com/registry/display.php/947/

Search for All File Types (Windows XP)

Windows normally only includes registered file types when searching for files and folders. This tweak can be used to enable searching of all file types.

System Key: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ContentIndex]
Value Name: FilterFilesWithUnknownExtensions
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = default, 1 = all file types)

瀏覽 -> http://www.winguides.com/registry/display.php/1250/

Restrict Import and Export of Internet Explorer Settings

This restriction can be used to disable the import and export of Internet Explorer cookies and favorites. When users utilize the "Import and Export" wizard on the File menu they will be shown a message when clicking "Finish".

User Key: [HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer]
Value Name: DisableImportExportFavorites
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = default, 1 = restrict import and export)

瀏覽 -> http://www.winguides.com/registry/display.php/1251/