Solved

Services Settings for 2008 and 2008R2 - Datacentre

Posted on 2014-02-27
9
119 Views
Last Modified: 2014-03-21
Hello

I'm looking for an official article that highlights the services that should be running as best practice for 2008 and 2008 R2.  

I use SCM for group policy best practices.  I wonder if there's anything out there that would be similar for windows services ?

Also, would the services be different if the OS was on a physical or VM ?

Thanks
0
Comment
Question by:nico-
  • 5
  • 4
9 Comments
 
LVL 25

Expert Comment

by:Coralon
ID: 39895306
The NSA has several published articles on best practices for locking down 2008 & 2008R2.

And it would not make a difference between a VM and a physical other than hardware drivers and the hypervisor tools.

Coralon
0
 

Author Comment

by:nico-
ID: 39895312
Hi Coralon

Any chance you could post links to the best practices ?

Thanks !
0
 
LVL 25

Expert Comment

by:Coralon
ID: 39895419
0
Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 25

Expert Comment

by:Coralon
ID: 39895424
0
 

Author Comment

by:nico-
ID: 39895839
Hi Coralon

The links in the first starting point don't work .. must be old links
The second post has old material .. I've already used SCM, but I'm looking for something that detail which services should be enabled/disabled etc

Thanks
0
 

Author Comment

by:nico-
ID: 39895884
Hi Coralon

I've used the CIS stuff for Penetration testing before, but 606 pages is a lot to get through :)
I'm just looking for something in spreadsheet form that has all the services and their default state, once a 2008/2008 R2 server is build.  Would the editions - datacentre or standard make any difference to the number of services available to you know ? eg 102 for standard, 110 for datacentre ? (I've guessed the numbers)
0
 

Accepted Solution

by:
nico- earned 0 total points
ID: 39933591
I didn't receive what I was looking for here.  I'm sure there's a simple spreadsheet out there with Normal Startup / Recommended Startup.

I used the Best Practices Analyser in the end

Not very often I don't give out the points. Sorry!
0
 
LVL 25

Expert Comment

by:Coralon
ID: 39935920
Sorry.. hadn't had a chance to get back to this. But, the link was valid when I posted it? I pulled it up before I posted it.  In fact, it's still valid? It popped right up for me.

Microsoft's Best Practices Analyzer does a pretty good job.. But for real security, the nsa is going to be the better choice.

Coralon
0
 

Author Closing Comment

by:nico-
ID: 39944766
No acceptable / useful answer that helped.
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Cannot see all of hard drive on HP Server 7 65
Reverse DND setup 6 38
How to run a process periodically from the server 2 16
Separate DNS forwarding 2 17
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question