1、修改注册表（Windows家庭版）

因家庭版没有组策略功能，需要先修改注册表 https://svn.zjtouchnet.com:333/svn/tn_imp/%E5%B8%B8%E7%94%A8%E5%B7%A5%E5%85%B7/Windows%E5%AE%B6%E5%BA%AD%E7%89%88%E5%AE%89%E8%A3%85%E7%BB%84%E7%AD%96%E7%95%A5%E5%89%8D%E9%85%8D%E7%BD%AE%E6%B3%A8%E5%86%8C%E8%A1%A8.reg

Windows Registry Editor Version 5.00[Hkey_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionGroup Policy
ObjectsLocalUserSoftwarePoliciesMicrosoftMMC][-Hkey_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionGroup Policy
ObjectsLocalUserSoftwarePoliciesMicrosoftMMC{8FC0B734-A0E1-11D1-A7D3-0000F87571E3}]"Restrict_Run"=dword:00000000
[Hkey_CURRENT_USERSoftwarePoliciesMicrosoftMMC][-Hkey_CURRENT_USERSoftwarePoliciesMicrosoftMMC{8FC0B734-A0E1-11D1-A7D3
-0000F87571E3}]"Restrict_Run"=dword:00000000[Hkey_CURRENT_USERSoftwarePoliciesMicrosoftMMC]
"RestrictToPermittedSnapins"=dword:00000000

2、下载安装组策略（Windows家庭版） https://svn.zjtouchnet.com:333/svn/tn_imp/%E5%B8%B8%E7%94%A8%E5%B7%A5%E5%85%B7/Windows%E5%AE%B6%E5%BA%AD%E7%89%88%E9%85%8D%E7%BD%AE%E6%B3%A8%E5%86%8C%E8%A1%A8%E5%90%8E%E4%B8%8B%E8%BD%BD%E5%AE%89%E8%A3%85%E7%BB%84%E7%AD%96%E7%95%A5.cmd

@echo off
pushd "%~dp0"
dir /b C:\Windows\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientExtensions-Package~3*.mum >List.txt
dir /b C:\Windows\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientTools-Package~3*.mum >>List.txt
for /f %%i in ('findstr /i . List.txt 2^>nul') do dism /online /norestart /add-package:"C:\Windows\servicing\Packages\%%i"
pause

3、注册表修改加密Oracle修正 家庭版需要先完成步骤1和步骤2，其他Windows版本只需要执行步骤3 https://svn.zjtouchnet.com:333/svn/tn_imp/%E5%B8%B8%E7%94%A8%E5%B7%A5%E5%85%B7/%E8%BF%9C%E7%A8%8B%E6%A1%8C%E9%9D%A2%E6%8A%A5%E2%80%9C%E5%87%BA%E7%8E%B0%E8%BA%AB%E4%BB%BD%E9%94%99%E8%AF%AF%EF%BC%8C%E8%A6%81%E6%B1%82%E5%87%BD%E6%95%B0%E4%B8%8D%E5%8F%97%E6%94%AF%E6%8C%81%E2%80%9D%E9%94%99%E8%AF%AF%E4%BF%AE%E5%A4%8D.bat

@echo off

ECHO 设置“加密 oracle 修正”为从“易受攻击”（0 强制更新的客户端 1 缓解 2 易受攻击）
::更改为“缓解”时远程桌面报“出现身份错误，要求函数不受支持”错误提示
::https://www.cnblogs.com/LuckWJL/p/9018710.html
::https://support.microsoft.com/zh-cn/help/4093492/credssp-updates-for-cve-2018-0886-march-13-2018
REG ADD "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters" /v "AllowEncryptionOracle" /t REG_DWORD /d 2 /f

pause