针对windows2000服务器未有禁防火墙的策略与对默认共享的管理，自己弄了一个，以下内容另存为后缀为adm文件:

CLASS MACHINE
CATEGORY !!Categoryname
   POLICY !!WF_Domain
     KEYNAME "SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile"
  VALUENAME EnableFirewall
  VALUEON NUMERIC 1
         VALUEOFF NUMERIC 0
 END POLICY

   POLICY !!WF_Standard
     KEYNAME "SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile"
  VALUENAME EnableFirewall
  VALUEON NUMERIC 1
         VALUEOFF NUMERIC 0
 END POLICY

   POLICY !!W_AutoShareServe
     KEYNAME "SYSTEM\CurrentControlSet\Services\lanmanserver\parameters"
  VALUENAME AutoShareServe
  VALUEON NUMERIC 1
         VALUEOFF NUMERIC 0
 END POLICY

   POLICY !!W_admin
     KEYNAME "SYSTEM\CurrentControlSet\Services\lanmanserver\parameters"
  VALUENAME AutoShareWks
  VALUEON NUMERIC 1
         VALUEOFF NUMERIC 0
 END POLICY

END CATEGORY
 
[strings]
Categoryname="关闭防火墙"
WF_Domain="域配置所有保护网络"
WF_Standard="标准配置所有保护网络"
W_AutoShareServe="关闭硬盘各分区的共享"
W_admin="关闭admin$共享"