Solved

Services Settings for 2008 and 2008R2 - Datacentre

Posted on 2014-02-27
9
121 Views
Last Modified: 2014-03-21
Hello

I'm looking for an official article that highlights the services that should be running as best practice for 2008 and 2008 R2.  

I use SCM for group policy best practices.  I wonder if there's anything out there that would be similar for windows services ?

Also, would the services be different if the OS was on a physical or VM ?

Thanks
0
Comment
Question by:nico-
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
9 Comments
 
LVL 25

Expert Comment

by:Coralon
ID: 39895306
The NSA has several published articles on best practices for locking down 2008 & 2008R2.

And it would not make a difference between a VM and a physical other than hardware drivers and the hypervisor tools.

Coralon
0
 

Author Comment

by:nico-
ID: 39895312
Hi Coralon

Any chance you could post links to the best practices ?

Thanks !
0
 
LVL 25

Expert Comment

by:Coralon
ID: 39895419
0
Turn Insights Into Action

You’ve already invested in ITSM tools, chat applications, automation utilities, and more. Fortify these solutions with intelligent communications so you can drive business processes forward.

With xMatters, you'll never miss a beat.

 
LVL 25

Expert Comment

by:Coralon
ID: 39895424
0
 

Author Comment

by:nico-
ID: 39895839
Hi Coralon

The links in the first starting point don't work .. must be old links
The second post has old material .. I've already used SCM, but I'm looking for something that detail which services should be enabled/disabled etc

Thanks
0
 

Author Comment

by:nico-
ID: 39895884
Hi Coralon

I've used the CIS stuff for Penetration testing before, but 606 pages is a lot to get through :)
I'm just looking for something in spreadsheet form that has all the services and their default state, once a 2008/2008 R2 server is build.  Would the editions - datacentre or standard make any difference to the number of services available to you know ? eg 102 for standard, 110 for datacentre ? (I've guessed the numbers)
0
 

Accepted Solution

by:
nico- earned 0 total points
ID: 39933591
I didn't receive what I was looking for here.  I'm sure there's a simple spreadsheet out there with Normal Startup / Recommended Startup.

I used the Best Practices Analyser in the end

Not very often I don't give out the points. Sorry!
0
 
LVL 25

Expert Comment

by:Coralon
ID: 39935920
Sorry.. hadn't had a chance to get back to this. But, the link was valid when I posted it? I pulled it up before I posted it.  In fact, it's still valid? It popped right up for me.

Microsoft's Best Practices Analyzer does a pretty good job.. But for real security, the nsa is going to be the better choice.

Coralon
0
 

Author Closing Comment

by:nico-
ID: 39944766
No acceptable / useful answer that helped.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
For anyone that has accidentally used newSID with Server 2008 R2 (like I did) and hasn't been able to get the server running again because you were unlucky (as I was) and had no backups - I was able to get things working by doing a Registry Hive rec…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question