SOLVED

Disable unwanted services

%3CLINGO-SUB%20id%3D%22lingo-sub-1478724%22%20slang%3D%22en-US%22%3EDisable%20unwanted%20services%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1478724%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20All%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20have%20are%20looking%20for%20some%20inputs%20for%20Disabling%2Fstopping%20the%20default%20services%20which%20are%20running%20after%20on%20Windows%202016%20Domain%20Controllers%20and%20on%20Windows%2010%20Client.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20direction%20would%20be%20helpful%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1478724%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EActive%20Directory%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1478733%22%20slang%3D%22en-US%22%3ERe%3A%20Disable%20unwanted%20services%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1478733%22%20slang%3D%22en-US%22%3E%3CP%3EWhat%20services%20are%20you%20asking%20about%20specifically%3F%20Generally%20not%20needed%20or%20recommended%20to%20alter%20the%20state%20of%20windows%20built-in%20services.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1478740%22%20slang%3D%22en-US%22%3ERe%3A%20Disable%20unwanted%20services%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1478740%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F51719%22%20target%3D%22_blank%22%3E%40Dave%20Patrick%3C%2FA%3E%26nbsp%3BYes%2C%20I%20was%20looking%20specifically%20the%20built%20in%20services%20which%20we%20can%20see%20after%20promoting%20the%20Domain%20Controllers%202016%20or%20on%20Windows%2010%20client.%3C%2FP%3E%3CP%3E%26nbsp%3BWe%20are%20looking%20to%20harden%20the%20Operating%20system%20keeping%20that%20point%20in%20focus.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1478750%22%20slang%3D%22en-US%22%3ERe%3A%20Disable%20unwanted%20services%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1478750%22%20slang%3D%22en-US%22%3E%3CP%3ESomething%20here%20may%20help.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-server%2Fidentity%2Fad-ds%2Fplan%2Fsecurity-best-practices%2Fsecuring-domain-controllers-against-attack%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-server%2Fidentity%2Fad-ds%2Fplan%2Fsecurity-best-practices%2Fsecuring-domain-controllers-against-attack%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1478755%22%20slang%3D%22en-US%22%3ERe%3A%20Disable%20unwanted%20services%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1478755%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F51719%22%20target%3D%22_blank%22%3E%40Dave%20Patrick%3C%2FA%3E%26nbsp%3Bthanks%20this%20is%20really%20helpful%20to%20start%20with.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1478756%22%20slang%3D%22en-US%22%3ERe%3A%20Disable%20unwanted%20services%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1478756%22%20slang%3D%22en-US%22%3E%3CP%3EGlad%20to%20hear%2C%20you're%20quite%20welcome.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1479105%22%20slang%3D%22en-US%22%3ERe%3A%20Disable%20unwanted%20services%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1479105%22%20slang%3D%22en-US%22%3E%3CBLOCKQUOTE%3E%3CHR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F461571%22%20target%3D%22_blank%22%3E%40ghonge%3C%2FA%3E%26nbsp%3Bwrote%3A%3CBR%20%2F%3E%3CP%3E%26nbsp%3BWe%20are%20looking%20to%20harden%20the%20Operating%20system%20keeping%20that%20point%20in%20focus.%3C%2FP%3E%3CHR%20%2F%3E%3C%2FBLOCKQUOTE%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F461571%22%20target%3D%22_blank%22%3E%40ghonge%3C%2FA%3E%3C%2FP%3E%3CP%3EHave%20installed%20Core%20OS%20or%20with%20GUI%3F%20To%20harden%20your%20DC%20I%20would%20recommend%20installing%20Core%20(without%20GUI)%20and%20disable%20RDP.%20The%20rest%20has%20pretty%20sufficient%20default%20security%20settings.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1480257%22%20slang%3D%22en-US%22%3ERe%3A%20Disable%20unwanted%20services%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1480257%22%20slang%3D%22en-US%22%3E%3CP%3Ei%20hope%20this%20helps%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-server%2Fsecurity%2Fwindows-services%2Fsecurity-guidelines-for-disabling-system-services-in-windows-server%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-server%2Fsecurity%2Fwindows-services%2Fsecurity-guidelines-for-disabling-system-services-in-windows-server%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F461571%22%20target%3D%22_blank%22%3E%40ghonge%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Hello All,

 

We have are looking for some inputs for Disabling/stopping the default services which are running after on Windows 2016 Domain Controllers and on Windows 10 Client.

 

Any direction would be helpful

 

7 Replies
Highlighted

What services are you asking about specifically? Generally not needed or recommended to alter the state of windows built-in services.

 

 

Highlighted

@Dave Patrick Yes, I was looking specifically the built in services which we can see after promoting the Domain Controllers 2016 or on Windows 10 client.

 We are looking to harden the Operating system keeping that point in focus.

Highlighted
Best Response confirmed by ghonge (Occasional Contributor)
Highlighted

@Dave Patrick thanks this is really helpful to start with.

Highlighted

Glad to hear, you're quite welcome.

 

 

Highlighted

@ghonge wrote:

 We are looking to harden the Operating system keeping that point in focus.


Hi @ghonge

Have installed Core OS or with GUI? To harden your DC I would recommend installing Core (without GUI) and disable RDP. The rest has pretty sufficient default security settings.