NetDDE, Services for Shares NetDDEdsdm creating a (directories, files communication and printers) channel or a should be trusted share managed to for Windows ensure that applications to sensitive share data over information is a network. not made available unnecessarily via this channel. EventLog, Event Log Ensure these SENS Service and services are System Event started to Notification enable the Service. capturing of event messages to the logs. SNMP, Simple Network Manage access SNMPTRAP Management to information Protocol to via this protocol, manage as it can supply devices on a valuable network. information about your network and network devices. IISADMIN, Internet Ensure correct IAS Information configuration of Server, World these services Wide Web as Publishing misconfiguration Service and of these can Internet compromise Authentication security. Service. RemoteAccess, Remote Access Ensure correct services. configuration of Rasman, RasAcd, these services RasAuto, as RasArp misconfiguration of these can compromise security. NdisTapi, Network Ensure that NdisWan, Protocol and these NetBIOS, Transport layer protocols/drivers services/drivers. are configured NwlnkSpx, Tcpip correctly as incorrect configuration can leave the network open to penetration. Attaching unsecured logon accounts to services can create significant security exposures. Installing service executables in unsecured directories can also create significant security exposures.
NetDDE, NetDDEdsdm Services for creating a communication channel or a trusted share for Windows applications to share data over a network. Shares (directories, files and printers) should be managed to ensure that sensitive information is not made available unnecessarily via this channel. EventLog, SENS Event Log Service and System Event Notification Service. Ensure these services are started to enable the capturing of event messages to the logs. SNMP, SNMPTRAP Simple Network Management Protocol to manage devices on a network. Manage access to information via this protocol, as it can supply valuable information about your network and network devices. IISADMIN, IAS Internet Information Server, World Wide Web Publishing Service and Internet Authentication Service. Ensure correct configuration of these services as misconfiguration of these can compromise security. RemoteAccess, Rasman, RasAcd, RasAuto, RasArp Remote Access services. Ensure correct configuration of these services as misconfiguration of these can compromise security. NdisTapi, NdisWan, NetBIOS, NwlnkSpx, Tcpip Network Protocol and Transport layer services/drivers. Ensure that these protocols/drivers are configured correctly as incorrect configuration can leave the network open to penetration. Attaching unsecured logon accounts to services can create significant security exposures. Installing service executables in unsecured directories can also create significant security exposures.