Disable unwanted services

[g461571]

Hello All,

We have are looking for some inputs for Disabling/stopping the default services which are running after on Windows 2016 Domain Controllers and on Windows 10 Client.

Any direction would be helpful

[#2]

What services are you asking about specifically? Generally not needed or recommended to alter the state of windows built-in services.

[#3]

@Dave Patrick Yes, I was looking specifically the built in services which we can see after promoting the Domain Controllers 2016 or on Windows 10 client.

 We are looking to harden the Operating system keeping that point in focus.

[#4 · Accepted solution]

Something here may help.

https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/securing...

[#5]

@Dave Patrick thanks this is really helpful to start with.

[#6]

Glad to hear, you're quite welcome.

[#7]

---

@g461571 wrote:

 We are looking to harden the Operating system keeping that point in focus.

---

Hi @g461571

Have installed Core OS or with GUI? To harden your DC I would recommend installing Core (without GUI) and disable RDP. The rest has pretty sufficient default security settings.

[#8]

i hope this helps

https://docs.microsoft.com/en-us/windows-server/security/windows-services/security-guidelines-for-di...

@g461571