I have a quick Active Directory question:
Now that i'm a full-time admin I have decided to devote more time to hardening the machines and servers on my company's network. One of the ways I will do this is by disabling unnessacary services.
If I were to attach a GPO to the OU; "Computers", and select which services I wish to disable... would that disable the services once windows has booted? or only when a user has logged in? If the former is the case, then I might as well just disable the services in the "Base" GPO.
Thanks for your input,