Forum Moderators: open

Message Too Old, No Replies

How few services can you get away with on a Web Server?

I keep switching them off and it keeps running

         

IanTurner

1:16 pm on Jul 23, 2004 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



It seems that 75% of the services on a windows server are redundant as far as performing the task of webserving is concerned and in my view all redundant services should be disabled to save on performance and possible exploits.

We have successfully disabled the following:

Alerter
ClipBook
DHCP Client
DHCP Server
Distributed File System
Fax Service
File Replication Service
Intersite Messaging
Internet Connection Sharing
Message Queueing
Messenger
Microsoft MSNinfo
QoS Admission Control (RSVP)
Remote Access Auto Connection Manager
Remote Access Connection Manager
Remote Administrator Service
Remote Registry Service
Routing and Remote Access
Smart Card
Smart Card Helper
SMB Locator
TCP/IP NetBios Helper
Telephony
Telnet
Terminal Services
Utility Manager
Windows Internet Name Service (WINS)

Anyone have any other services that can be disabled.

I guess that I may be able to disable

Remote Procedure Call (RPC)
Remote Procedure Call (RPC) Locator
NTLM Security Support Provider
Windows Management Instrumentation
Windows Management Instrumentation Driver Extensions
Removable Storage - (dependent on backup procedure)
RunAs Service
Internet Autehntication Service
Background Intelligent Transfer Service

Will be testing these early next week to see what happens.

Does anyone have any experience of turning off any of my candidate services?

wackal

9:02 pm on Jul 23, 2004 (gmt 0)

10+ Year Member



this site might help, they guy has a complete list of all services running in windows xp and a guide on which should be disabled:

[blackviper.com...]