Forum Discussion

Copper Contributor

Jun 20, 2020

Solved

Disable unwanted services

Hello All, We have are looking for some inputs for Disabling/stopping the default services which are running after on Windows 2016 Domain Controllers and on Windows 10 Client. Any direction w...

Active Directory

Dave Patrick
Jun 20, 2020
Something here may help.

https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/securing-domain-controllers-against-attack

Dave Patrick

MVP

Jun 20, 2020

What services are you asking about specifically? Generally not needed or recommended to alter the state of windows built-in services.

g461571

Copper Contributor

Jun 20, 2020

Dave Patrick Yes, I was looking specifically the built in services which we can see after promoting the Domain Controllers 2016 or on Windows 10 client.

We are looking to harden the Operating system keeping that point in focus.

Exonix
Copper Contributor
Jun 21, 2020
g461571 wrote:
We are looking to harden the Operating system keeping that point in focus.
Hi g461571
Have installed Core OS or with GUI? To harden your DC I would recommend installing Core (without GUI) and disable RDP. The rest has pretty sufficient default security settings.
Dave Patrick
MVP
Jun 20, 2020
Something here may help.

https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/securing-domain-controllers-against-attack
- g461571
  Copper Contributor
  Jun 20, 2020
  Dave Patrick thanks this is really helpful to start with.
  - Dave Patrick
    MVP
    Jun 20, 2020
    Glad to hear, you're quite welcome.