Hello All, We have are looking for some inputs for Disabling/stopping the default services which are running after on Windows 2016 Domain Controllers and on Windows 10 Client. Any direction would be helpful

Something here may help. https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/securing-domain-controllers-against-attack

Disable unwanted services | Microsoft Community Hub

7 Replies

Ali_rahimi
Copper Contributor
Jun 22, 2020
i hope this helps
https://docs.microsoft.com/en-us/windows-server/security/windows-services/security-guidelines-for-disabling-system-services-in-windows-server

g461571
Dave Patrick
MVP
Jun 20, 2020
What services are you asking about specifically? Generally not needed or recommended to alter the state of windows built-in services.
- g461571
  Copper Contributor
  Jun 20, 2020
  Dave Patrick Yes, I was looking specifically the built in services which we can see after promoting the Domain Controllers 2016 or on Windows 10 client.
  We are looking to harden the Operating system keeping that point in focus.
  - Exonix
    Copper Contributor
    Jun 21, 2020
    g461571 wrote:
    We are looking to harden the Operating system keeping that point in focus.
    Hi g461571
    Have installed Core OS or with GUI? To harden your DC I would recommend installing Core (without GUI) and disable RDP. The rest has pretty sufficient default security settings.

Forum Discussion

Disable unwanted services

7 Replies

Resources