Anti-intrusion-better server services

Currently, all the operating systems released by Microsoft have built-in "services". For us, unused "services" will not only occupy system resources, more importantly, some services may cause system intrusion (for example, 33889 "Terminal Serices" Terminal service and Remote Registry support Remote connection to the Registry service ......), Some readers may have thought that it is okay to "Disable" these services? Setting these services as "disabled" can prevent others from intruding into your system. However, if the other party obtains your username and password, there is still a way to change these services to "start, in addition to enhancing the user password, what other methods can be used to prevent the other party from exploiting the opened service intrusion? Use the following methods to effectively prevent the other party from using certain services to intrude into your system.

Method 1: invalidate the service

Currently, all the operating systems released by Microsoft have built-in "services". For us, unused "services" will not only occupy system resources, more importantly, some services may cause system intrusion (for example, 33889 "Terminal Serices" Terminal service and Remote Registry support Remote connection to the Registry service ......), Some readers may have thought that it is okay to "Disable" these services? Setting these services as "disabled" can prevent others from intruding into your system. However, if the other party obtains your username and password, there is still a way to change these services to "start, in addition to enhancing the user password, what other methods can be used to prevent the other party from exploiting the opened service intrusion? Use the following methods to effectively prevent the other party from using certain services to intrude into your system.

Services that will easily cause system intrusion are "disabled", and then the registry keys corresponding to these services are deleted, so that even if the other party connects to your system service list, the Service Attributes cannot be modified, if you cannot modify the service properties, you cannot start the service. Open the Registry Editor and find the "HKEY _ LOCAL_MACHINESYSTEMCurrentControlSetSerices" item in sequence. Each sub-key under it is the corresponding "service" in the system ", for example, the sub-Key of the "Messenger" service is "Messenger", but some services have different names, but they are easy to find, the key value of "DisplayName" is the service display name. Here, we take the deletion of the "Messenger" service as an example. The methods for other services are the same, but the items deleted in the Registry are different. before deleting this item, we must export it for backup, click "Messenger" and Right-click and choose "delete" (rename is also acceptable. Double-click "Messenger" in the service list, and the error message shown in Figure 1 is displayed. Of course, this prompt is displayed when the other party connects to your service list and double-click it, instead of the attribute box. To restore the service, you only need to import the backup registry file to the Registry.