通常,在Windows系统启动后,会默认自动加载许多服务,当然其中大多数是系统运行所必需的,但也有部分是服务器用不到的,这些“无用”的服务,不仅大量占用系统资源,还有可能被黑客所利用,找到进入并控制我们系统的途径。
Windows 2003共计93个系统服务,经过优化设置后,只有20个服务为自动运行,45个服务为手动,28个服务禁止运行。这样大大提高系统运行效率和安全性。
一、推荐自动启动的服务
1. Application Experience Lookup Service
2. COM+ Event System
3. Cryptographic Services
4. DCOM Server Process Launcher
5. DHCP Client
6. Event Log
7. IPSEC Services
8. Performance Logsand Alerts
9. Plug and Play
10. Protected Storage
11. Remote Procedure Call (RPC)
12 .Secondary Logon
13. Security Accounts Manager
14 .System Event Notification
15. Task Scheduler
16 .TCP/IP NetBIOS Helper
17 .Terminal Services
18. Windows Firewall/Internet Connection Sharing(ICS) //提供网络地址转换、寻址、名称解析和/或windows防火墙服务,
19 .Windows Management Instrumentation
20 .Workstation
二、推荐禁用的服务
1. Alerter
2. Windows Audio
3. Computer Browser
4. ClipBook
5. Distributed File System
6. Logical Disk Manager
7. Error Reporting Service
8. Human Interface Device Access
9. IMAPI CD-Burning COM Service
10.Intersite Messaging
11.Kerberos Key Distribution Center
12.License Logging Disabled
13.Messenger
14.NetMeeting Remote Desktop Sharing
15.Network DDE
16.Network DDE DSDM
17.Routing and Remote Access
18.Shell Hardware Detection
19.Windows Image Acquisition (WIA)
20.Themes
21.Telnet
22.Distributed Link Tracking Server
23.Distributed Link Tracking Client
24.Terminal Services Session Directory
25.Windows Time
26.WebClient
27.Automatic Updates
28.Wireless Configuration Disabled
三、推荐手动服务
1. Application Layer Gateway Service
2. Application Management
3. Background Intelligent Transfer Service
4. COM+ System Application
5. Distributed Transaction Coordinator
6. DNS Client
7. File Replication
8. FTP Publishing Service //微软自带FTP服务
9. Help and Support
10. HTTP SSL
11. IAS Jet Database Access
12. IIS Admin Service //微软自带的iis服务,如Web,FTP,NNTP,SMTP等
13. Indexing Service
14. Logical Disk Manager Administrative Service
15. Microsoft POP3 Service
16. Microsoft Software Shadow Copy Provider
17. Net Logon
18. Network Connections
19. Network Location Awareness (NLA)
20. Network Provisioning Service
21. NT LM Security Support Provider
22. Portable Media Serial Number Service
23. Print Spooler
24 .Remote Access Auto Connection Manager
25. Remote Access Connection Manager
26. Remote Desktop Help Session Manager
27. Remote Procedure Call (RPC) Locator
28. Remote Registry
29. Removable Storage
30. Resultant Set of Policy Provider
31. Server
32. Simple Mail Transfer Protocol (SMTP)
33. Smart Card
34. Special Administration Console Helper
35. Telephony
36. Uninterruptible Power Supply
37. Virtual Disk Service
38. Volume Shadow Copy
39. Windows Installer
40. Windows Internet Name Service (WINS)
41. Windows Management Instrumentation Driver Extensions
42. Windows User Mode Driver Framework
43. WinHTTP Web Proxy Auto-Discovery Service
44. WMI Performance Adapter
45. World Wide Web Publishing Service //通过Internet信息服务管理器提供Web连接和管理,需用IIS服务的必需开启
[ 本帖最后由 灰儿 于 2008-9-25 11:53 编辑 ] |