Chapter 1 Securing Your Server and Network (8): Stop unused services, chaptersecuring

Chapter 1 Securing Your Server and Network (8): Stop unused services, chaptersecuring
Source: Workshop

Without the consent of the author, no one shall be published in the form of "original" or used for commercial purposes. I am not responsible for any legal liability.

Previous Article: http://blog.csdn.net/dba_huangzj/article/details/38227187

 

Preface:

 

If SQL Server is fully installed, some unnecessary components will also be installed, which will affect the performance and bring greater security risks. In addition, some WIndows Services can be disabled on SQL Server servers. It can be said that SQL Server is a relatively "self-satisfied" software and only needs to use the underlying operating system to access physical resources. On dedicated servers, Windows Services should be minimized.

 

Implementation:

 

1. on Windows Server 2008, click Server Manager or open it through computer manager.

2. In [configuration] → [SERVICE], double-click the [Status] column to sort,

3. Find the service you want to disable, and right-click "properties"> "general"> "Start type" and select "Disable ]:

 

 

Principle:

 

The following describes whether it is necessary to disable services:

Service name	Description
DHCP Client	In most servers, IP addresses are fixed, so this service is not required.
DNS Client	Cached local DNS name
Network Location Awareness	Collect and store network configuration information, and send a warning to the application when the information is changed. It cannot be disabled unless you use Windows 2008 advanced firewall configuration.
Print Spooler	Load the file to the memory for subsequent printing. If the server does not need to print the file, disable it.
Windows Error Reporting Service	When the application stops working or does not respond, it will send an error report. Generally, it can be disabled.
Windows Firewall	If you are using a network firewall, you can disable the firewall of the local machine.
Shell Hardware	You can disable automatic playback for mobile devices.

 

In addition, you can also disable some SQL Server Services (if the application system does not need them): Analysis Services, Reporting Services, and Integration Services. You can even uninstall it.