Note that CIS, NIST and NSA templates are a baseline specs, many of the
settings are left undefined. Most places that implement it specifically
define all services in the template so you should test-test-test the
changes then test again. You can also define the context in which the
service runs (eg: not just system) which can help isolate some services
like 'remote registry'
Francisco Pecorella wrote:
Vic,
I think you can use the NIST Security Configuration Checklists
Repository, specifically
Windows XP Security Guide
http://checklists.nist.gov/repository/1007.html
Windows XP Security Checklist
http://checklists.nist.gov/repository/1057.html
Windows 2003/XP/2000 Addendum
http://checklists.nist.gov/repository/1057.html
--
Regards,
FP
----- Original Message ----- From: "Vic Brown" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Sunday, June 04, 2006 10:58 PM
Subject: Windows XP Services Best Practice
Anyone has a useful link with with information about what XP Pro SP2
services should be "disabled" on enterprise desktops according to
"best" practice? Basically I'm looking for something that has the
service name, functionality, security implication, and best practice
recommendation. Desktop users are only running an office suite.
TIA
--
http://ccopanama.org
----------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
--
Michael Chinn
User Support Officer - Information Technology
Great Barrier Reef Marine Park Authority
PO Box 1379
TOWNSVILLE, QLD 4810
Ph 07 47500874 Fax 07 4772 6093
[EMAIL PROTECTED]
================================================================================
If you have received this transmission in error please notify us immediately
by return email and delete all copies. Any unauthorised use, disclosure or
distribution of this email is prohibited.
================================================================================
---------------------------------------------------------------------------
---------------------------------------------------------------------------
