Solved

Important Services in Windows 2003,

Posted on 2006-06-12
3
348 Views
Last Modified: 2008-02-01
I would like to know more about important services in Win 2003 that should be set to disabled. In unix we had r-services, telnet as opposed to SSH. In there any services that should be set to disabled or replaced by newer services in Windows.
I have looked at MSB , CISE Security guide, but still confused which services have the greater impact on security.
0
Comment
Question by:kecoak
3 Comments
 
LVL 14

Expert Comment

by:alimu
ID: 16891564
A good start is to not install anything you are not using (eg: don't install IIS if you're not using web services, don't install FTP if you're not using it, etc).
You can get Microsoft Baseline Security Analyser from Microsoft at http://www.microsoft.com/technet/security/tools/mbsahome.mspx which will identify major security issues you have.  It will show you problems, missing patches and also give you an explanation of what you need to do to correct issues.

How you lock down your server depends very much on what roles it plays, if you can tell us more about what functions it performs we may be able to provide more directed information.
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 16891696
usually by default, 2003 server is fairly locked down to a "whats needed" basis, most thins that arent needed but are an option are disabled by default, usually, you don't need to go playing with the services that you may need to one a client OS such as xp.....
0
 
LVL 4

Accepted Solution

by:
mattbcs earned 500 total points
ID: 16892461
One MAJOR point, as far as w2k3 server goes, is installing Service Pack 1. Lots of security fixes are included.

Go through the add/remove programs (windows components) and remove everything you don't absolutely need.
The next step is to go through the services, and evaluate exactly what services you need to run, and disable the rest.

As far as services to disable - it depends on the what the role of the server is going to be.

One more important thing - run windows update, but click on "MICROSOFT UPDATE" - Run that, and keep your updates frequent.

Thanks,
Matt
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

I have never ceased to be amazed how many problems you can encounter on a fresh install of a Windows operating system.  This is certainly case in point& Unable to complete ANY MSI installation.  This means Windows Updates are failing and I can't …
Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now