Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have 2 systems running MSWindows Server 2003 and 2008 respectively.
I have done all the updates.
I am interested in securing them e.g. close all unneeded services.
For example my concern is that if I start shuting down services that I consider as uneedded perhaps a needed service is depended on them and will have problems.
Is there a tool that helps on this?
E.g. that gives a report and shuts everything down taking care of the dependencies? Or is it manual effort?

share|improve this question
Ok downvote, but at least say why.That way I learn also – user76678 Jul 12 '11 at 8:26
I didn't downvote you, but your question is illogical - All the services on Windows support different functionality and features. Hence, the only person who can evaluate which services are needed for you servers is you, because only you know what your server is being used for. – Chris Thorpe Jul 30 '11 at 9:14
up vote 4 down vote accepted

Take a look at the SCW - Security Configuration Wizard. For Server 2003 SP1 and Server 2008

share|improve this answer

If you're behind a firewall you don't necessarily need to go around shutting down any services - especially if you aren't sure if they are needed or not.

Unfortunately there's no automated way of doing what you're mentioning (that I'm aware of) since it depends on what you need the server to do and what roles you'll be expecting of it.

The good news is windows server comes pretty bare bones as it is, you need to add roles to it to benefit from most of the functionality which means that so long as you don't add roles you don't need you should be fine.

Are these public facing web servers? You really should put these guys behind a good firewall regardless.

share|improve this answer

Check out the baselines from security compliance manager based on the role of your server. See .

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.