mirror of
https://github.com/bin456789/reinstall.git
synced 2025-01-18 20:39:14 +08:00
48 lines
2.1 KiB
Batchfile
48 lines
2.1 KiB
Batchfile
|
@echo off
|
|||
|
|
mode con cp select=437 >nul
|
|||
|
|
|
|||
|
|
rem set RdpPort=3333
|
|||
|
|
|
|||
|
|
rem https://learn.microsoft.com/windows-server/remote/remote-desktop-services/clients/change-listening-port
|
|||
|
|
rem HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules
|
|||
|
|
|
|||
|
|
rem RemoteDesktop-Shadow-In-TCP
|
|||
|
|
rem v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=6|App=%SystemRoot%\system32\RdpSa.exe|Name=@FirewallAPI.dll,-28778|Desc=@FirewallAPI.dll,-28779|EmbedCtxt=@FirewallAPI.dll,-28752|Edge=TRUE|Defer=App|
|
|||
|
|
|
|||
|
|
rem RemoteDesktop-UserMode-In-TCP
|
|||
|
|
rem v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=6|LPort=3389|App=%SystemRoot%\system32\svchost.exe|Svc=termservice|Name=@FirewallAPI.dll,-28775|Desc=@FirewallAPI.dll,-28756|EmbedCtxt=@FirewallAPI.dll,-28752|
|
|||
|
|
|
|||
|
|
rem RemoteDesktop-UserMode-In-UDP
|
|||
|
|
rem v2.33|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=3389|App=%SystemRoot%\system32\svchost.exe|Svc=termservice|Name=@FirewallAPI.dll,-28776|Desc=@FirewallAPI.dll,-28777|EmbedCtxt=@FirewallAPI.dll,-28752|
|
|||
|
|
|
|||
|
|
rem 设置端口
|
|||
|
|
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" /v PortNumber /t REG_DWORD /d %RdpPort% /f
|
|||
|
|
|
|||
|
|
rem 重启服务
|
|||
|
|
rem 可以用 sc 或者 net
|
|||
|
|
rem UmRdpService 依赖 TermService
|
|||
|
|
rem sc stop 不能处理依赖关系，因此 sc stop TermService 前需要 sc stop UmRdpService
|
|||
|
|
rem net stop 可以处理依赖关系
|
|||
|
|
rem sc stop 是异步的，rem net stop 不是异步，但有 timeout 时间
|
|||
|
|
rem TermService 运行后，UmRdpService 会自动运行
|
|||
|
|
net stop TermService /y
|
|||
|
|
net start TermService
|
|||
|
|
|
|||
|
|
rem 设置防火墙
|
|||
|
|
rem 各个版本的防火墙自带的 rdp 规则略有不同
|
|||
|
|
rem 全部版本都有: program=%SystemRoot%\system32\svchost.exe service=TermService
|
|||
|
|
rem win7 还有: program=System service=
|
|||
|
|
rem 以下为并集
|
|||
|
|
for %%a in (TCP, UDP) do (
|
|||
|
|
netsh advfirewall firewall add rule ^
|
|||
|
|
name="Remote Desktop - Custom Port (%%a-In)" ^
|
|||
|
|
dir=in ^
|
|||
|
|
action=allow ^
|
|||
|
|
service=any ^
|
|||
|
|
protocol=%%a ^
|
|||
|
|
localport=%RdpPort%
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
rem 删除此脚本
|
|||
|
|
del "%~f0"
|