2. Server security settings--System Services (restart required after setting up)
*Unless it is necessary to open the following system services, the following system services must be *stopped and disabled*: Alerter
Service Name:
Alerter
display name:
Alerter
Service Description:
Notify selected users and computers to manage alerts. If the service is stopped, programs that use administrative alerts will not receive them. If this service is disabled, any service that directly relies on it will not start.
Executable file path:
E:\WINDOWS\system32\ -k LocalService
Other supplements:
Application Layer Gateway Service
Service Name:
ALG
display name:
Application Layer Gateway Service
Service Description:
Provides support for application-level protocol plug-ins and enables network/protocol connections. If this service is disabled, any service that depends on it will not start.
Executable file path:
E:\WINDOWS\System32\
Other supplements:
Background Intelligent Transfer Service
Service Name:
BITS
display name:
Background Intelligent Transfer Service
Service Description:
Service description: Use idle network bandwidth to transfer files in the background. If the service is disabled, such as Windows Update and MSN Explorer functions, it will not automatically download programs and other information. If this service is disabled, any service that relies on it may not be able to transfer files once BITS is disabled.
Executable file path:
E:\WINDOWS\system32\ -k netsvcs
Other supplements:
Computer Browser
Service Name:
Service name: Browser
display name:
Display name: Computer Browser
Service Description:
Service Description: Maintain the update list of computers on the network and provide the list to the computer for specified browsing. If the service is stopped, the list will not be updated or maintained. If the service is disabled, any services that directly depend on this service will not be started.
Executable file path:
Executable file path: E:\WINDOWS\system32\ -k netsvcs
Other supplements:
Distributed File System
Service Name:
Dfs
display name:
Distributed File System
Service Description:
Merge the scattered file shares into a logical namespace and manage these logical volumes on the LAN or WAN. If this service is stopped, the user will not be able to access the file share. If this service is disabled, any service that depends on it will not start.
Executable file path:
E:\WINDOWS\system32\
Other supplements:
Help and Support
Service Name:
helpsvc
display name:
Help and Support
Service Description:
Enable the Help and Support Center to run on this computer. If the service is stopped, the Help and Support Center will not be available. If the service is disabled, any services that directly depend on this service will not be started.
Executable file path:
E:\WINDOWS\System32\ -k netsvcs
Other supplements:
Messenger
Service Name:
Messenger
display name:
Messenger
Service Description:
Transfer NET SEND and sirens service messages between the client and the server. This service has nothing to do with Windows Messenger. If the service is stopped, the sirens message will not be transmitted. If the service is disabled, any services that directly depend on this service will not be started.
Executable file path:
E:\WINDOWS\system32\ -k netsvcs
Other supplements:
NetMeeting Remote Desktop Sharing
Service Name:
mnmsrvc
display name:
NetMeeting Remote Desktop Sharing
Service Description:
Authorized users are allowed to remotely access this computer on the company’s intranet using NetMeeting. If the service is stopped, the remote desktop sharing will be unavailable. If the service is disabled, any service that depends on this service will not be started.
Executable file path:
E:\WINDOWS\system32\
Other supplements:
Print Spooler
Service Name:
Spooler
display name:
Print Spooler
Service Description:
Manage all local and network printing queues and control all printing work. If this service is disabled, printing on the local computer will not be available. If this service is disabled, any service that depends on it will not be enabled.
Executable file path:
E:\WINDOWS\system32\
Other supplements:
Remote Registry
Service Name:
RemoteRegistry
display name:
Remote Registry
Service Description:
Enables remote users to modify the registry settings on this computer. If this service is terminated, only users on this computer can modify the registry. If this service is disabled, any service that depends on it will not start.
Executable file path:
E:\WINDOWS\system32\ -k regsvc
Other supplements:
Task Scheduler
Service Name:
Schedule
display name:
Task Scheduler
Service Description:
Enables users to configure and schedule automatic tasks on this computer. If this service is terminated, these tasks will not run during scheduled time. If this service is disabled, any service that depends on it will not start.
Executable file path:
E:\WINDOWS\System32\ -k netsvcs
Other supplements:
TCP/IP NetBIOS Helper
Service Name:
LmHosts
display name:
TCP/IP NetBIOS Helper
Service Description:
Provides support for NetBIOS on TCP/IP (NetBT) services and NetBIOS name resolution for clients on the network, so that users can share files, print and log in to the network. If this service is disabled, these features may not be available. If this service is disabled, any service that depends on it will not start.
Executable file path:
E:\WINDOWS\system32\ -k LocalService
Other supplements:
Telnet
Service Name:
TlntSvr
display name:
Telnet
Service Description:
Allows remote users to log in to this computer and run programs, and supports a variety of TCP/IP Telnet clients, including UNIX and Windows-based computers. If this service is stopped, the remote user cannot access the program and any service that directly depends on it will start fail.
Executable file path:
E:\WINDOWS\system32\
Other supplements:
Workstation
Service Name:
lanmanworkstation
display name:
Workstation
Service Description:
Create and maintain client network connections to remote services. If the service is stopped, these connections will not be available. If the service is disabled, any services that directly depend on this service will not be started.
Executable file path:
E:\WINDOWS\system32\ -k netsvcs
Other supplements:
The above is the service that needs to be stopped in the standard service of Windows 2003 server. As an IIS network server, the above service must be stopped. If SSL certificate service is required, the setting method is different.
Previous page123456789Next pageRead the full text