Windows Server 2003 configure

[Daersun]

What changes do you guys make to a default install of 2003 server before hosting clients?

[Hogie]

There's a "bunch" of services I disable, and I make sure its firewalled... Pretty much everything I dont use I turn off (file sharing for example), and make sure that the machine is firewalled.

[Defcon|Rich]

Take a look at this site: http://www.windowsecurity.com/

 

 

[Travis Bickle]

Make sure you turn off DEP (Data Execution Prevention) for applications, check it for windows services only. This will interfere with a lot of game server applications including mods. This is how you do it, Start, Control Panel. Go to System & then the Advanced Tab. Under Performance, choose Settings. In Settings, select the Data Execution Prevention tab. Make sure "Turn on DEP for essential windows programs and services only" is checked off. If "Turn on DEP for all programs and services except those I choose" is checked, change it. This will allow modifications to run with certain game server executables instead of causing a "threat" and a fatal service error.

[Daersun]

yah - dep is the devil

[24play1]

I find even doing that still lets DEP be an arse with some games. I experienced it with SOF2 even tho I had set it as stated above by Travis.

 

 

 

I have now just edited all my boot.ini files

[ECF]

Editing the boot.ini files is the only way to disable DEP in most cases.

 

 

 

Keep in mind there are also 2 different kinds of DEP. Software and hardware. Some systems also require changes to be made in the system's bios to shut down the hardware DEP.

[Betray]

Great thread.. id like more info on this. maybe we can get a list of default win2k3 services to kill.

 

 

 

windows audio?

 

Print Spooler?

 

IMAPI CD-Burning

 

Wireless Configuration

 

DHCP - if you dont use it obviously

 

 

 

I tried that http://www.windowsecurity.com site, but cant find anything usefull. It sucks being the n00b

[tcngs]

How do you disable Data Execution Prevention through the boot.ini? Thank you

[ECF]

http://www.housing.hawaii.edu/resources/support/turnoff-dep.htm

[Guest louise]

Hi

As that link is dead this is the official MS

http://support.microsoft.com/kb/875352

[RackGaming]

Anyone have a full list of services to disable with a fresh 2003 install?