Recommended Services

  • Thread starter Thread starter lix
  • Start date Start date
L

lix

Does anyone know what microsoft recommends on
enabling/disabling services. My security peeps are
trying to disable multiple services for security
reasons. It's to the point where the NW peeps can't
perform regular troubleshooting functions. For example,
what is the security risk of enabling ping? Anyway, I am
trying to find a list that tells me if you disable this
then this will happen.
 
Some times its actually better to disable many services in windows, any way
the best thing to start with is "if you don't need certian function or
service, then remove it", for example, if your server will function only as
a domain controller, then remove IIS and all the services installed with it.
if you have a web server, then don't install a terminal service for example.

for a list that tells you what will happen it you stop a certain service,
well this is a little bit difficult, there are too many things and sometimes
it will have many effects, not just a single effect, but when you stop a
windows service, the services mmc snap-in usually provide a description of
the service and what it do, so you can predeict what will happen it you stop
it.

Yours,
Mohammed A. Raslan
 
There is an excellent resource call the Windows 2000 Security Hardening
Guide that is a free download. If gives specific recommendations on
services, registry settings, ntfs permissions, security options, user right
assignments and much more for a variety of scenerios. I would highly
recommend that they read it. Services to be disabled should be selected
carefully. For instance the dhcp client is needed even if dhcp is not used
on the computer. It is available in the links below. --- Steve

http://www.infosec.uga.edu/windows.html
http://tinyurl.com/nt6k
 
Back
Top