windows2003 服务器系统权限与安全配置（3）

2.2最少的服务如果实现

黑色为自动 绿色为手动 红色为禁用

• Alerter

• Application Experience Lookup Service

• Application Layer Gateway Service

• Application Management

• Automatic Updates [Windows自动更新,可选项]

• Background Intelligent Transfer Service

• ClipBook

• COM+ Event System

• COM+ System Application

• Computer Browser

• Cryptographic Services

• DCOM Server Process Launcher

• DHCP Client

• Distributed File System

• Distributed Link Tracking Client

• Distributed Link Tracking Server

• Distributed Transaction Coordinator

• DNS Client

• Error Reporting Service

• Event Log

• File Replication

• Help and Support

• HTTP SSL

• Human Interface Device Access

• IIS Admin Service

• IMAPI CD-Burning COM Service

• Indexing Service

• Intersite Messaging

• IPSEC Services [如果使用了IP安全策略则自动，如无则禁用，可选操作]

• Kerberos Key Distribution Center

• License Logging

• Logical Disk Manager [可选，多硬盘建议自动]

• Logical Disk Manager Administrative Service

• Messenger

• Microsoft Search

• Microsoft Software Shadow Copy Provider

• MSSQLSERVER

• MSSQLServerADHelper

• Net Logon

• NetMeeting Remote Desktop Sharing

• Network Connections

• Network DDE

• Network DDE DSDM

• Network Location Awareness (NLA)

• Network Provisioning Service

• NT LM Security Support Provider

• Performance Logs and Alerts

• Plug and Play

• Portable Media Serial Number Service [微软反盗版工具，目前只针对多媒体类]

• Print Spooler

• Protected Storage

• Remote Access Auto Connection Manager

• Remote Access Connection Manager

• Remote Desktop Help Session Manager

• Remote Procedure Call (RPC)

• Remote Procedure Call (RPC) Locator

• Remote Registry

• Removable Storage

• Resultant Set of Policy Provider

• Routing and Remote Access

• Secondary Logon

• Security Accounts Manager

• Server

• Shell Hardware Detection

• Smart Card

• Special Administration Console Helper

• SQLSERVERAGENT

• System Event Notification

• Task Scheduler

• TCP/IP NetBIOS Helper

• Telephony

• Telnet

• Terminal Services

• Terminal Services Session Directory

• Themes

• Uninterruptible Power Supply

• Upload Manager

• Virtual Disk Service

• Volume Shadow Copy

• WebClient

• Windows Audio [服务器没必要使用声音]

• Windows Firewall/Internet Connection Sharing (ICS)

• Windows Image Acquisition (WIA)

• Windows Installer

• Windows Management Instrumentation

• Windows Management Instrumentation Driver Extensions

• Windows Time

• Windows User Mode Driver Framework

• WinHTTP Web Proxy Auto-Discovery Service

• Wireless Configuration

• WMI Performance Adapter

• Workstation

• World Wide Web Publishing Service

以上操作完成以后是否就"最小的权限+最少的服务=最大的安全"呢？其实不然，任何事物都是相对的

依我个人而见，以上设置也只是最基本的一些东西而已！