The present application discloses an automatic verification method and apparatus for remote Windows operating system security rules. The method comprises: first, by remotely logging on to the Windowsoperating system, acquiring the type of operating system, system path, Windows path and defense level. Then, depending on the operating system type and defense level, get security rules, Next, according to the system path, Windows path and security rules, to obtain the path of security rules, and then, under the path, to build a test file, and to obtain its permission value, and finally, using thepermission value and the actual protection results of the path of security rules for comparison, to verify whether the permission value conforms to the security rules, to obtain the verification results. As will be seen, after that remote Windows operate system security rules and their paths have been determined, By comparing the privilege value of the test file constructed under the security rule path with the actual protection result of the security rule path, the automatic verification of the remote Windows operating system security rules is realized, and the system information security isensured.