Internal Network Assessment

[Guest]

Archived from groups: microsoft.public.win2000.advanced_server (More info?)

Hi, we recently had a consultant do an internal network
assessment. They found that we had excessive services
running on some servers. They say that Microsoft "out of
the box" configurations are to allow new systems to work
quickly and easily.

I would like to know where I can find information on all
of the services with Windows 2000 advanced server and if
there is a checklist or something like that to use to
make sure that there are no services running that don't
have to be.

For example:

Run Exchange 2000 on a server. What services don't you
need to have running that would allow the server to be
compromised?

Thanks for any reply

 

[Guest]

Archived from groups: microsoft.public.win2000.advanced_server (More info?)

"stockcarsrus" <anonymous@discussions.microsoft.com> wrote in message
news:1c5701c4b622$aeaad0f0$a301280a@phx.gbl...
> Hi, we recently had a consultant do an internal network
> assessment. They found that we had excessive services
> running on some servers. They say that Microsoft "out of
> the box" configurations are to allow new systems to work
> quickly and easily.
>
> I would like to know where I can find information on all
> of the services with Windows 2000 advanced server and if
> there is a checklist or something like that to use to
> make sure that there are no services running that don't
> have to be.
>
> For example:
>
> Run Exchange 2000 on a server. What services don't you
> need to have running that would allow the server to be
> compromised?
>
> Thanks for any reply
>
Your consultant didn't provide this? A client would shoot me if I told them
they had too many services running and didn't tell them what to turn off!

I think this information is going to be published in the security resource
kit. It's hard for me to suggest without knowing what's on your server and
what is going to break if I tell you to turn something off.

Matt
MCT, MCSE