Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

What services windows 7 for domestic users are potentially unsafe that can be disabled without compromising the system, making it the safest and most difficult security breaches?

share|improve this question
add comment

2 Answers

up vote 1 down vote accepted

This is a very broad question to ask, but I would point you towards the Microsoft Security Compliance Manager (SCM).

From the article:

The SCM Console

The SCM Console provides you with a single point of access to work with the recommended security baselines from Microsoft for your security environment. The console also provides access to supporting documentation to help you make informed decisions about how to customize the security baselines to meet your organization's security requirements.

Looking at the operating system from this perspective is a far better option than deciding to simply shut down services willy-nilly. Windows 7 is complex with many dependencies, and just randomly stopping things without understanding the different possibilities is foolish.

share|improve this answer
    
Yes I understand and thanks for the link, but agrees with me that there are several services in Windows that most home users do not use, example: file sharing, remote desktop, vnc, etc. .. These services are easily exploited with the use of tools, I want to turn over potentially unsafe to use and not not compromise the system. –  Thiago Caires Jun 2 '12 at 5:42
    
I think your intentions are honourable, but misplaced. Any system can be compromised, regardless of the services that are running. –  user3463 Jun 2 '12 at 5:45
    
I have to agree again with you, to the unix system more secure can be invaded. But if you have something I can do to harder the invasion on my system, is better. –  Thiago Caires Jun 2 '12 at 5:50
    
That link above is NSA-approved. It's as hard as you're going to get Windows. –  user3463 Jun 2 '12 at 5:51
add comment

I do not know for Windows 7, but on Win 2000 and Win XP I would disable the server service, the telnet service, the remote desktop.

It is important to make thse services permanently disabled rather than marking them as "manual" because an intruder would be able to start them having only user rights if they are not permanently disabled.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.