RE: What services can I turn off?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Kyle Terns [MSFT] (Kylet_at_online.microsoft.com)
Date: 02/03/04


Date: Tue, 03 Feb 2004 03:16:00 GMT

Hi Andrew,

The article Tom mentioned is in the works, but is not finished yet. I did
however, get the following link from it. There is some good information on
securing Windows 2000 and includes a list of services with descriptions in
Appendix A.

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/
prodtech/windows/windows2000/staysecure/default.asp

Hope this helps!

Kyle Terns, MCSD
Microsoft Developer Support
Internet Information Server

***********************
>>Please do not send email directly to this alias. This is an online
account name for newsgroup participation only.<<

This posting is provided "AS IS" with no warranties, and confers no rights.
You assume all risk for your use.
© 2003 Microsoft Corporation. All rights reserved.
***********************
--------------------
| From: mccall@h2o.demon.co.uk (Andrew McCall)
| Newsgroups: microsoft.public.inetserver.iis
| Subject: What services can I turn off?
| Date: 30 Jan 2004 03:19:16 -0800
| Organization: http://groups.google.com
| Lines: 28
| Message-ID: <3140c7c0.0401300319.32f5c00c@posting.google.com>
| NNTP-Posting-Host: 212.135.153.98
| Content-Type: text/plain; charset=ISO-8859-1
| Content-Transfer-Encoding: 8bit
| X-Trace: posting.google.com 1075461556 24216 127.0.0.1 (30 Jan 2004
11:19:16 GMT)
| X-Complaints-To: groups-abuse@google.com
| NNTP-Posting-Date: Fri, 30 Jan 2004 11:19:16 +0000 (UTC)
| Path:
cpmsftngxa07.phx.gbl!cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.su
l.t-online.de!t-online.de!newsfeed.gamma.ru!Gamma.RU!news.maxwell.syr.edu!po
stnews1.google.com!not-for-mail
| Xref: cpmsftngxa07.phx.gbl microsoft.public.inetserver.iis:292779
| X-Tomcat-NG: microsoft.public.inetserver.iis
|
| Hi Folks,
|
| I am coming from a UNIX/Linux world here, so please be kind!
|
| I have recently installed IIS 5.5 under Windows 2000. I have patched
| this server with all the service packs and hot fixes available, and
| followed many security guides on how to lock the server down.
|
| Under UNIX/Linux, I would normally disable all services and software
| that isn't needed, so for instance if the server was running Apache I
| would turn off finger, SMB/Samba and NFS etc. etc.
|
| I am aware that I can do this under Windows 2000 from the Services
| control panel, but what I can't find is a guide to what I can safely
| turn off for the web server to just be a web server. I did try and
| turn things off that I thought wouldn't be needed, but I ended up
| getting into a bit of a mess with dependencies and chose to re-install
| the server rather than work out what needs what :)
|
| Most or some of the services are self explanitory, but can anyone
| point me out to a guide where I can learn more about the services, in
| particular what I can safely turn off on an IIS server that is only
| serving web pages and isn't part of a domain or used for anything else
| oher than serving web pages.
|
| Thanks,
|
| Andrew McCall
|



Relevant Pages

  • Re: server authentication & ASP authentication
    ... The SQL Server and web server are on the same machine (Windows 2000). ... Use windows instead of standard authentication on SQL Server. ...
    (microsoft.public.sqlserver.security)
  • Re: Run BAT (or other file) on remotely on server
    ... You haven't told us what OS or web server you're using, ... guessing Windows and IIS. ... Why have to manually trigger regular jobs? ...
    (alt.html)
  • Re: 401.2 Error
    ... logged on the web server but when the user tries to logon ... >Does that mean you are expecting a password prompt? ... >> The web server is publicly available although he has the ... He is using Windows XP ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: 401.2 Error
    ... logged on the web server but when the user tries to logon ... >Does that mean you are expecting a password prompt? ... >> The web server is publicly available although he has the ... He is using Windows XP ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Where to run the Certificate Services to be an Enterprise CA
    ... We have Windows 2000 Domain controllers, file servers, and a Web server. ... a Windows 2003 Web server running Windows Sharepoint Services and Project Server, ...
    (microsoft.public.windows.server.security)