Re: Essential Services on Windows Server 2008

[Eric Case <ecase () EMAIL ARIZONA EDU>]

While you are doing this, you may also want to look at removing unnecessary
optional components with Sysocmgr
http://technet.microsoft.com/en-us/library/cc773290(WS.10).aspx (or ocsetup
for 2008).  Some "keywords" you would use are:

                OEAccess = off

                fax = off

                msnexplr = off

                msmsgs = off



-Eric





Eric Case, CISSP

eric (at) ericcase (dot) com

http://www.linkedin.com/in/ericcase



From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Sherry Horeanopoulos
Sent: Friday, May 14, 2010 2:02 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Essential Services on Windows Server 2008



We're plowing through a worksheet for PCI compliance on our BlackBoard
Transaction system and the BB Sys Admin is trying to go through all the
services that are running (like a good PCI Compliant Sys Admin would do..)
to get the list down to only the necessary stuff (as required by PCI).



Perhaps some/all of you have gone through the default running services on an
MS Server 2008 server and have pared down to the minimum possible services.
If so, could you share the results with us?



(This server is running McAfee, BlackBoard (and IIS)and is being backed up
by Commvault - so those processes are identifiable.)



Thanks for any input you may have.