Labels:text | yellow | screenshot | document | font OCR: Hardening Your Windows NT Web Server Hierter D Notifies selected users and computers of administrative alerts, requires the Messenger service CleBouk series Scpporu ChuBoot wewer; requires Network DDE (sharing of clipboard images remotely) Computer browser Maintains a list of network accessible computers, and provides this ist to programs when requested for example, Select Domain) DHCP dient Used to negotiate a SCP /IP address: should not be used by servers Directory replicator Replicates directory trees between computers EventLos R Records system, securint and program events in logs FTP publishing Fart of Internet Information Server (TIS), only startif you plan to use this, can be used ( with strong authentication) for remote Web file management Messenger Sends and receives messages sent by the Alerter o, by administrators der ogon Pertoire authentication and keeps domein data synchronized on a domain controller, suppons authentication on NT workstation NetworkDDE Network transport for Dynamic Data Exchange (DbE) Network OSE OSOM ODE Share barabase Manager (DSDM) manages DDE transactions Sion tors network traffic, the Systemns Management Server (SMS) version can see all packets on the local network segment, and can Ve Uses remotely NTLM Security NT LAN Manager (NTLM) support for Remote Procedure Call (RPC) semies that do not use named pipes, required for local logon Plug and play; Can be disabled alter hardware configuratich Remote access servier Only enable it system is used as a router or fo: PPTS RPC locator Manages the RPC name service database, servers register them availability and chents totake servers RPG service Provides endpoint mapper and other miscellaneous services; required and more secure when other services are disabled Schedule Enables the AT services which can be used remotely) and runs as System Used for Server Message Block (SMB) and provides RPC support, as well as print and named pipe sharing Simple services Chargen, echo, discaro, and daytime: unnecessary and possibly harmful (denial of service and probes) SAMIP SNMP agent. useful in probes SNMP trap Ship traps: a client Sponler Provides ariat spooling service TCP IP NOIBIOS Works with transporting Ne BIOS over TCP/ IP Helper UPS Monitors aninter uphble power supplies Workstation The client side of Server, hatriess World Wide Web The IIS Web server publishing service The Hard Way. You can harden an exposed Windows NT Web server by disabling services. Key: D is Disable. 0 is Optional. R is Required by Microsoft's Internet Information Server (IIS) or Windows NT.
(2000).iso/netwk/951/1p89.gif){kind=small}
(2000).iso/netwk/951/1p83.gif){kind=link}
(2000).iso/netwk/951/ip30.gif){kind=link}