Chapter 1 Securing Your Server and Network (8): Stop Unused services

Original source: http://blog.csdn.net/dba_huangzj/article/details/38263043, featured catalogue:http://blog.csdn.net/dba_huangzj/article/details/37906349

No person shall, without the consent of the author, be published in the form of "original" or used for commercial purposes, and I am not responsible for any legal liability.

Previous article: http://blog.csdn.net/dba_huangzj/article/details/38227187

Objective:

If SQL Server is fully installed, some nonessential components will also be installed, which can affect performance and pose a greater security risk. Also, some Windows services can be disabled on a server dedicated to SQL Server. It can be said that SQL Server is relatively "self-satisfied" software, only need to use the underlying operating system to access the physical resources, on the dedicated server, Windows services should be minimized.

Realize:

1. On Windows Server 2008, click on "Server Manager" or open it through "Computer Manager".

2. In configuration → services, double-click the Status column to sort

3. Locate the service you want to disable, and then right-click properties → general → startup type to select disable:

Principle:

Here are the services that need to be examined for disabling:

Service Name	Describe
DHCP Client	Most servers, the IP address is fixed, so this service can not be used.
DNS Client	Caching the local DNS name
Network Location Awareness	Collect and store network configuration information and send warnings to applications when information changes, unless you use the Windows 2008 Advanced firewall configuration, you cannot disable it.
Print Spooler	Load files to memory for subsequent printing, if the server does not need to print, you can disable
Windows Error Reporting Service	Error reports are sent when the app stops working or is not responding, and can generally be disabled
Windows Firewall	If you use a network firewall, you can disable the native firewall.
Shell Hardware	For mobile device activation AutoPlay, you can disable.

In addition to this, some of the services of SQL Server can be disabled (if not required by the application system): Analysis Services, Reporting services, and Integration services. can even be uninstalled.