On Fre, Mär 16, 2001 at 10:26:17 -0900, Don Leeper wrote:
> Does anyone have a list of services that can be turned off and what proper
> lockdown procedures you use on a NT box.

What I do is (loosely translated from German and based on Lance Spitzners
list):

Remove Network Services:

        RPC
        NetBios
        Server-Service

Remaining Network Services:

        SNMP-Service
        Workstation (compatibility for Scheduler)
        Computer-Browser (compatibility for Workstation)

Network Properties - Protocols:

        Remove all, only TCP/IP remaining

Network Properties - Bindings:

        Disable WINS-Client

Deactivated Services (set to Manual):

        Computer-Browser
        TCP/IP Netbios Helper
        Netlogon (Anmeldedienst)
        Workstation
        Messenger (Nachrichtendienst)
        Network DDE
        Network DDE-Server
        Warn Service (? Warndienst)

Activated Services (set to Automatic):

        Schedule

-- 
mike gerber - the route is out there!


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to