mirror of
https://github.com/Dichgrem/Blog.git
synced 2025-07-31 00:59:31 -04:00
remove:win-set
This commit is contained in:
@ -243,89 +243,5 @@ Windows Registry Editor Version 5.00
|
||||
"SoftwareOnly"=dword:00000001
|
||||
```
|
||||
|
||||
## 关闭安全中心
|
||||
|
||||
> 保存为.ps1格式
|
||||
|
||||
```
|
||||
# -----------------------------------------------------------------------------
|
||||
# 文件名: Disable-WindowsSecurityCenter.ps1
|
||||
# 说明: 一键禁用 Windows 11 上的 Windows 安全中心及相关自动恢复机制
|
||||
# 运行方式:以管理员身份在 PowerShell 中执行:
|
||||
# Set-ExecutionPolicy Bypass -Scope Process -Force
|
||||
# .\Disable-WindowsSecurityCenter.ps1
|
||||
# -----------------------------------------------------------------------------
|
||||
|
||||
# 检查是否以管理员权限运行
|
||||
if (-not ([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole(`
|
||||
[Security.Principal.WindowsBuiltInRole] "Administrator")) {
|
||||
Write-Warning "请以管理员权限重新运行此脚本!"
|
||||
exit 1
|
||||
}
|
||||
|
||||
Write-Host "开始禁用 Windows 安全中心及相关组件..." -ForegroundColor Cyan
|
||||
|
||||
# 1. 停止并禁用服务:wscsvc 和 SecurityHealthService
|
||||
$services = @("wscsvc", "SecurityHealthService")
|
||||
foreach ($svc in $services) {
|
||||
Write-Host "→ 禁用服务:$svc"
|
||||
Try {
|
||||
Set-Service -Name $svc -StartupType Disabled -ErrorAction Stop
|
||||
Stop-Service -Name $svc -Force -ErrorAction Stop
|
||||
} Catch {
|
||||
Write-Warning "无法操作服务 $svc:$_"
|
||||
}
|
||||
}
|
||||
|
||||
# 2. 禁用计划任务:Microsoft\Windows\SecurityHealth 下的所有任务
|
||||
$taskPath = "\Microsoft\Windows\SecurityHealth"
|
||||
Write-Host "→ 禁用计划任务:$taskPath\*"
|
||||
Try {
|
||||
Get-ScheduledTask -TaskPath $taskPath | Disable-ScheduledTask -ErrorAction Stop
|
||||
} Catch {
|
||||
Write-Warning "无法禁用计划任务:$_"
|
||||
}
|
||||
|
||||
# 3. 通过注册表禁用 Microsoft Defender 防病毒(相当于组策略 Turn off Defender)
|
||||
$defKey = "HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender"
|
||||
Write-Host "→ 注册表:DisableAntiSpyware = 1"
|
||||
New-Item -Path $defKey -Force | Out-Null
|
||||
New-ItemProperty -Path $defKey `
|
||||
-Name "DisableAntiSpyware" `
|
||||
-PropertyType DWORD `
|
||||
-Value 1 -Force | Out-Null
|
||||
|
||||
# 4. 注册表:禁用 Tamper Protection(可选)
|
||||
$featKey = "HKLM:\SOFTWARE\Microsoft\Windows Defender\Features"
|
||||
Write-Host "→ 注册表:TamperProtection = 0"
|
||||
New-Item -Path $featKey -Force | Out-Null
|
||||
New-ItemProperty -Path $featKey `
|
||||
-Name "TamperProtection" `
|
||||
-PropertyType DWORD `
|
||||
-Value 0 -Force | Out-Null
|
||||
|
||||
# 5. 注册表:将安全中心服务设为“禁用”启动
|
||||
$svcReg1 = "HKLM:\SYSTEM\CurrentControlSet\Services\wscsvc"
|
||||
$svcReg2 = "HKLM:\SYSTEM\CurrentControlSet\Services\SecurityHealthService"
|
||||
Write-Host "→ 注册表:Services Start = 4 (Disabled)"
|
||||
foreach ($path in @($svcReg1, $svcReg2)) {
|
||||
New-ItemProperty -Path $path `
|
||||
-Name "Start" `
|
||||
-PropertyType DWORD `
|
||||
-Value 4 -Force | Out-Null
|
||||
}
|
||||
|
||||
# 6. 注册表:关闭安全中心通知(可选)
|
||||
$scNotiKey = "HKLM:\SOFTWARE\Policies\Microsoft\Security Center"
|
||||
Write-Host "→ 注册表:DisableNotifications = 1"
|
||||
New-Item -Path $scNotiKey -Force | Out-Null
|
||||
New-ItemProperty -Path $scNotiKey `
|
||||
-Name "DisableNotifications" `
|
||||
-PropertyType DWORD `
|
||||
-Value 1 -Force | Out-Null
|
||||
|
||||
Write-Host "所有操作已完成。请重启系统以生效。" -ForegroundColor Green
|
||||
```
|
||||
|
||||
---
|
||||
**Done.**
|
||||
|
Reference in New Issue
Block a user