REM Disable Autorun
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoDriveTypeAutoRun"=dword:000000ff

REGEDIT4 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf] 
@="@SYS:DoesNotExist"

REM Disable Remote Registry
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
"Start"=dword:00000004

REM Disable Registry Editors
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableRegistryTools"=dword:00000001

REM Regedit...
echo y| cacls "C:\WINDOWS\system32\regedit.exe" /t /c /p "Administrator":F
echo y| cacls "C:\WINDOWS\system32\regedit.exe" /t /c /e /g "System":F

REM Regedit...
echo y| cacls "C:\WINDOWS\regedit.exe" /t /c /p "Administrator":F
echo y| cacls "C:\WINDOWS\regedit.exe" /t /c /e /g "System":F

REM Reg.exe...
echo y| cacls "C:\WINDOWS\system32\reg.exe" /t /c /p "Administrator":F
echo y| cacls "C:\WINDOWS\system32\reg.exe" /t /c /e /g "System":F

REM regedt32.exe...
echo y| cacls "C:\WINDOWS\system32\regedt32.exe" /t /c /p "Administrator":F
echo y| cacls "C:\WINDOWS\system32\regedt32.exe" /t /c /e /g "System":F

REM Disable Shared Documents

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoSharedDocuments"=dword:00000001

REM Disable Simple File Sharing

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]


"forceguest"=dword:00000000

REM Disable default shares

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters]
"Size"=dword:00000002
"DisableDos"=dword:00000000
"autodisconnect"=dword:0000000f
"enableforcedlogoff"=dword:00000001
"enablesecuritysignature"=dword:00000000
"requiresecuritysignature"=dword:00000000
"NullSessionPipes"=hex(7):43,00,4f,00,4d,00,4e,00,41,00,50,00,00,00,43,00,4f,\
  00,4d,00,4e,00,4f,00,44,00,45,00,00,00,53,00,51,00,4c,00,5c,00,51,00,55,00,\
  45,00,52,00,59,00,00,00,53,00,50,00,4f,00,4f,00,4c,00,53,00,53,00,00,00,4c,\
  00,4c,00,53,00,52,00,50,00,43,00,00,00,62,00,72,00,6f,00,77,00,73,00,65,00,\
  72,00,00,00,00,00
"NullSessionShares"=hex(7):43,00,4f,00,4d,00,43,00,46,00,47,00,00,00,44,00,46,\
  00,53,00,24,00,00,00,00,00
"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
  00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
  73,00,72,00,76,00,73,00,76,00,63,00,2e,00,64,00,6c,00,6c,00,00,00
"Lmannounce"=dword:00000000
"Guid"=hex:22,3a,ba,ab,cd,bc,c3,43,9e,77,86,56,70,5a,39,55
"AdjustedNullSessionPipes"=dword:00000001
"CachedOpenLimit"=dword:00000000
"AutoShareWks"=dword:00000000

REM Disable Server Service

ECHO Security...
sc config "lanmanserver" start= disabled

REM Disable Null Sessions

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"everyoneincludesanonymous"=dword:00000000
"restrictanonymous"=dword:00000002
"restrictanonymoussam"=dword:00000001

REM Disable Appearance Tab

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"NoDispAppearancePage"=dword:00000001

REM Disable Desktop Tab

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"NoDispBackgroundPage"=dword:00000001


ECHO Disable Screen Saver Tab

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"NoDispScrSavPage"=dword:00000001

ECHO Disable Themes Tab
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"NoThemesTab"=dword:00000001