Server2022
优化脚本
@echo off
chcp 65001 >nul
title Windows Server 2022 自动化配置脚本 - 管理员模式
cls
echo ========================================================
echo ✅ Windows Server 2022 一站式系统配置脚本
echo ✅ 含:关更新/关UAC/永不关屏/开远程桌面等
echo ========================================================
echo.
echo ★ 脚本将自动执行所有配置,全程无需手动操作...
pause >nul
:: ====== 【1/10】彻底关闭Windows系统自动更新 ======
echo.
echo [1/10] 正在关闭Windows系统自动更新...
:: Server 2022 专属注册表路径,兼容LTSC版本
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v AUOptions /t REG_DWORD /d 1 /f >nul 2>&1
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v NoAutoUpdate /t REG_DWORD /d 1 /f >nul 2>&1
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v DisableWindowsUpdateAccess /t REG_DWORD /d 1 /f >nul 2>&1
:: 禁用并停止Windows Update相关服务(Server 2022 关键服务)
sc config wuauserv start= disabled >nul 2>&1
sc stop wuauserv >nul 2>&1
sc config cryptSvc start= disabled >nul 2>&1
sc stop cryptSvc >nul 2>&1
sc config bits start= disabled >nul 2>&1
sc stop bits >nul 2>&1
sc config trustedinstaller start= disabled >nul 2>&1
echo ✔ 系统自动更新已禁用(Server 2022 专属配置)
:: ====== 【2/10】UAC用户账户控制 → 设置为从不通知 ======
echo.
echo [2/10] 正在设置UAC为从不通知...
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 0 /f >nul 2>&1
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v ConsentPromptBehaviorAdmin /t REG_DWORD /d 0 /f >nul 2>&1
echo ✔ UAC已设置为【从不通知】(重启后生效)
:: ====== 【3/10】关闭系统休眠功能(释放磁盘空间) ======
echo.
echo [3/10] 正在关闭系统休眠...
powercfg -h off >nul 2>&1
:: Server 2022 额外清理休眠文件残留
del /f /q C:\hiberfil.sys >nul 2>&1
echo ✔ 休眠功能已关闭,已释放休眠文件占用空间
:: ====== 【4/10】永久关闭屏幕保护程序(适配Server桌面版,Core版无影响) ======
echo.
echo [4/10] 正在关闭屏幕保护程序...
reg add "HKCU\Control Panel\Desktop" /v ScreenSaveActive /t REG_SZ /d 0 /f >nul 2>&1
reg add "HKCU\Control Panel\Desktop" /v ScreenSaverIsSecure /t REG_SZ /d 0 /f >nul 2>&1
:: 额外配置系统级屏保禁用,适配Server多用户
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v ScreenSaverExecutable /t REG_SZ /d "" /f >nul 2>&1
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v ScreenSaverActive /t REG_SZ /d 0 /f >nul 2>&1
echo ✔ 屏幕保护已永久关闭(桌面版生效,Core版无影响)
:: ====== 【5/10】关闭Windows Defender实时防护(Server 2022 专属配置) ======
echo.
echo [5/10] 正在关闭Defender实时防护...
reg add "HKLM\SOFTWARE\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 1 /f >nul 2>&1
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v DisableRealtimeMonitoring /t REG_DWORD /d 1 /f >nul 2>&1
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableWindowsDefender /t REG_DWORD /d 1 /f >nul 2>&1
:: 禁用并停止Server 2022 Defender相关服务
sc config WinDefend start= disabled >nul 2>&1
sc stop WinDefend >nul 2>&1
sc config WdNisSvc start= disabled >nul 2>&1
sc stop WdNisSvc >nul 2>&1
echo ✔ Defender实时防护已禁用(避免误杀EXE服务)
:: ====== 【6/10】关闭通知中心所有弹窗(Server 2022 适配) ======
echo.
echo [6/10] 正在关闭所有系统/应用通知...
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings" /v NOC_GLOBAL_SETTING_ALLOW_NOTIFICATIONS /t REG_DWORD /d 0 /f >nul 2>&1
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\PushNotifications" /v ToastEnabled /t REG_DWORD /d 0 /f >nul 2>&1
:: Server 2022 额外禁用服务器管理器通知
reg add "HKCU\Software\Microsoft\ServerManager" /v DoNotOpenServerManagerAtLogon /t REG_DWORD /d 1 /f >nul 2>&1
reg add "HKLM\SOFTWARE\Microsoft\ServerManager" /v DoNotOpenServerManagerAtLogon /t REG_DWORD /d 1 /f >nul 2>&1
echo ✔ 通知中心已关闭,所有弹窗将被屏蔽(含服务器管理器通知)
:: ====== 【7/10】关闭系统自动维护(Server 2022 关键优化) ======
echo.
echo [7/10] 正在关闭系统自动维护...
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Maintenance" /v MaintenanceDisabled /t REG_DWORD /d 1 /f >nul 2>&1
:: 禁用维护相关任务计划,避免后台干扰EXE服务
schtasks /change /tn "\Microsoft\Windows\TaskScheduler\Maintenance Configurator" /disable >nul 2>&1
schtasks /change /tn "\Microsoft\Windows\TaskScheduler\Regular Maintenance" /disable >nul 2>&1
echo ✔ 自动维护已关闭,禁止后台自动扫描/优化(避免服务中断)
:: ====== 【8/10】关闭快速启动(Server 2022 电源配置) ======
echo.
echo [8/10] 正在关闭快速启动...
powercfg /setactive scheme_current >nul 2>&1
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power" /v HiberbootEnabled /t REG_DWORD /d 0 /f >nul 2>&1
:: Server 2022 额外禁用混合关机
powercfg /setdcvalueindex scheme_current sub_boot hybridboot 0 >nul 2>&1
powercfg /setacvalueindex scheme_current sub_boot hybridboot 0 >nul 2>&1
echo ✔ 快速启动已关闭,提升开机兼容性(适配服务器长期运行)
:: ====== 【9/10】开启远程桌面连接(Server 2022 专属,含防火墙放行) ======
echo.
echo [9/10] 正在开启远程桌面并放行防火墙...
:: 启用远程桌面核心配置
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 /f >nul 2>&1
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" /v UserAuthentication /t REG_DWORD /d 1 /f >nul 2>&1
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server" /v AllowTSConnections /t REG_DWORD /d 1 /f >nul 2>&1
:: Server 2022 防火墙放行(支持远程桌面默认端口3389)
netsh advfirewall firewall set rule group="远程桌面" new enable=yes >nul 2>&1
netsh advfirewall firewall add rule name="RDP-TCP-3389" dir=in action=allow protocol=TCP localport=3389 enable=yes profile=any >nul 2>&1
:: 启用远程桌面服务(Server 2022 关键服务)
sc config TermService start= auto >nul 2>&1
sc start TermService >nul 2>&1
echo ✔ 远程桌面已开启,防火墙已放行(3389端口,可直接连接)
:: ====== 【10/10】设置系统永不关闭屏幕、永不睡眠(Server 2022 电源优化) ======
echo.
echo [10/10] 正在设置永不关闭屏幕、永不系统睡眠...
:: 交流电源(服务器通常接市电,优先配置)
powercfg /change monitor-timeout-ac 0 >nul 2>&1
powercfg /change standby-timeout-ac 0 >nul 2>&1
powercfg /change hibernate-timeout-ac 0 >nul 2>&1
powercfg /change disk-timeout-ac 0 >nul 2>&1
:: 直流电源(备用,适配便携小主机)
powercfg /change monitor-timeout-dc 0 >nul 2>&1
powercfg /change standby-timeout-dc 0 >nul 2>&1
powercfg /change hibernate-timeout-dc 0 >nul 2>&1
powercfg /change disk-timeout-dc 0 >nul 2>&1
:: Server 2022 额外设置高性能电源计划,避免降频干扰服务
powercfg /setactive 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c >nul 2>&1
echo ✔ 已设置:显示器永不关闭、系统永不睡眠、高性能电源模式
:: ====== 执行完成 ======
echo.
echo ========================================================
echo ✅ 所有10项配置全部执行完成!✅
echo ⚠ 提示:UAC、远程桌面、系统更新需重启服务器后生效
echo ⚠ 其余功能已立即生效,重启后所有配置全部稳定运行
echo ⚠ 注意:该脚本适配Server 2022 LTSC(Core版/桌面版均支持)
echo ========================================================
pause激活
slmgr /ipk WX4NM-KYWYW-QJJR4-XV3QB-6VM33
slmgr /skms kms.03k.org
slmgr /ato自动登录
:: 1. 启用自动登录(1=启用,0=禁用)
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v AutoAdminLogon /t REG_DWORD /d 1 /f
:: 2. 设置默认登录用户名(替换为你的实际账号,如 Administrator、自定义账号)
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v DefaultUserName /t REG_SZ /d "你的登录账号" /f
:: 3. 设置默认登录密码(替换为你的账号对应密码,明文存储,仅限内网服务器)
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v DefaultPassword /t REG_SZ /d "你的账号密码" /f
:: 4. (可选)跳过「Ctrl+Alt+Del」登录提示,直接进入桌面
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v AutoLogonSkipHotKey /t REG_DWORD /d 1 /f开机启动
:: 1. 静默安装系统服务(服务名称自定义,如 BasketballService,格式:nssm install 服务名 "EXE完整路径")
nssm install BasketballService "D:\ServerApps\baskball.exe"
:: 2. 配置服务:设置为开机自动启动
nssm set BasketballService Start SERVICE_AUTO_START
:: 3. 配置服务:意外崩溃后自动重启(延迟3秒,避免频繁重启)
nssm set BasketballService AppRestartDelay 3000
nssm set BasketballService OnExit Default RESTART
:: 4. 配置服务:运行目录(即baskball.exe所在文件夹,避免程序读取依赖文件失败)
nssm set BasketballService AppDirectory "D:\ServerApps"
:: 5. (可选)配置日志输出,方便排查程序运行报错(自动创建日志目录)
nssm set BasketballService AppStdout "D:\ServerApps\Logs\stdout.log"
nssm set BasketballService AppStderr "D:\ServerApps\Logs\stderr.log"
nssm set BasketballService AppRotateFiles 1 :: 启用日志文件轮转
nssm set BasketballService AppRotateBytes 10485760 :: 单个日志文件最大10MB
:: 6. 启动该服务(立即验证是否能正常运行,无需重启)
nssm start BasketballService
:: 重启baskball.exe对应的服务
nssm restart BasketballService
:: 停止baskball.exe对应的服务
nssm stop BasketballService
:: 卸载服务(如需重新配置,confirm表示无需手动确认)
nssm remove BasketballService confirm