Configure Windows Server 2003 Services
Applies To: Windows Server 2003, Windows Server 2003 with SP1
You can use Add or Remove Programs in Control Panel to add or remove Microsoft® Windows® Server 2003 services, and you can use the Services console to enable or disable services. As you add and remove Windows Server 2003 services and enable and disable services, you increase and decrease the attack surface of the Web server correspondingly.
Note
You can also add Windows Server2003 services by using the Configure Your Server Wizard.
Requirements
Credentials: Membership in the Administrators group on the local computer.
Tools: Iis.msc.
Recommendation
As a security best practice, log on to your computer using an account that is not in the Administrators group, and then use the Run as command to run IIS Manager as an administrator. At the command prompt, type **runas /user:**administrative_accountname mmc %systemroot%\system32\inetsrv\iis.msc.
Procedures
To add or remove Windows Server 2003 services
From Control Panel, click Add or Remove Programs.
Click Add/Remove Windows Components.
On the Windows Components Wizard page, in the Components box, select or clear the check box next to the component to enable or disable the appropriate Windows Server 2003 services. You may need to select a higher level component and then click Details to locate the component you wish to add or remove.
Click Next to run the Windows Components Wizard.
Follow the instructions in the Windows Components Wizard to complete the addition or removal of the component.
Note
You may need to have your Windows Server2003 CD-ROM available to complete the installation of the component.
To enable or disable Windows Server 2003 services
Open Administrative Tools, and then click Services.
In the details pane, right-click the Windows Server 2003 service that you want to change, and then click Properties.
On the General tab, in the Startup type list box, click one of the following:
Automatic. The service starts automatically when the Web server is restarted.
Manual. The service can be started manually by an administrator or by another service.
Disabled. The service cannot be started by an administrator or by another service unless the startup type is changed to Automatic or Manual.
Click OK to save the changes.