Disable Media Sense in Win2K Pro:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\DisableDHCPMediaSense
Set the DWORD value of DisableDHCPMediaSense to 1. 


  Disable command prompt:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System\DisableCMD
Value of 1 disables cmd.exe but allows batch files.
Value of 2 disables both cmd.exe and batch files.


  Clear the page file at shutdown: 
See http://support.microsoft.com/kb/314834
You must restart the computer for the change to take effect.


  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
SynAttackProtect:
This setting protects against a SYN flood attack. Set to a value of 0, 1, or 2 for increasing levels of protection. The higher the value, the more delay Windows adds to connection attempts, causing TCP connection timeouts.
EnableDeadGWDetect:
Set to 0 to prevent the computer from switching to a different gateway, which could otherwise occur if a DoS attack is in progress. A value of 1 allows the gateway switch.
EnablePMTUDiscovery:
Set to 0 to prevent a hacker from forcing an MTU change to a small value and bogging down the TCP/IP protocol stack. Windows uses an MTU value of 576 bytes for all nonlocal connections with this setting at 0. Set to 1 to allow MTU discovery. 
KeepAliveTime:
Set this value (in milliseconds) to a relatively low number to decrease the length of time Windows sends a keep-alive packet to a remote computer to determine if the connection is still valid. Microsoft recommends a value of 300,000, or five minutes.


  Prevent releasing NetBIOS name after a name-release request
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netbt\Parameters\NoNameReleaseOnDemand
Set the value of NoNameReleaseOnDemand to 1.