Microsoft Windows NT 4.0 Guide Manual de usuario descargar pdf (Pagina 86)

Microsoft

Windows Server

™

2003 White Paper

Windows NT 4.0 Server Upgrade Guide 81

Windows Services

There are many changes to services in Windows Server 2003. A service is a process, or set of

processes, that offers basic and extended Windows functionality by providing support to programs

at the system level. All services run in the background and are configured through the use of the

service’s application in Windows NT Server 4.0 or the services MMC snap-in in Windows 2000

and Windows Server 2003. For example, the World Wide Web (WWW) Publishing Service

provides Web services and HTTP functionality.

Many of the changes to services in Windows Server 2003 were made to address security

concerns and minimize the attack area for the default installation. Some services now run with

lower permission than before; other services are not enabled by default, so you may need to

enable them after installing Windows Server 2003.

New Services in Windows Server 2003

It’s important to understand the default and extended services available in Windows Server 2003,

because it helps you understand the functionality of a server more fully. In addition, you become

better able to troubleshoot problems and enhance system security. For example, by disabling

services that are not needed, you can help reduce a server’s security exposure, reduce memory,

and even provide for faster boot times.

To help reduce the default attack surface of Windows Server 2003, Microsoft disabled 19 services

and reduced several services to run under lower privileges. For example, to help reduce the Web

infrastructure attack surface, IIS 6.0 is not installed 0 by default when you install the operating

system—you must explicitly select and install it. In addition, when IIS 6.0 is being installed, it is

configured using its maximum security settings. After installation, IIS 6.0 accepts requests only for

static files until configured to serve dynamic content, and all time-outs and settings are set to

aggressive security defaults. IIS 6.0 can also be disabled using Windows Server 2003 group

policies. For more information about IIS, see IIS 6.0 Security Changes

later in this section.

Many of the ways in which these services are provided have changed from Windows NT Server

4.0 to Windows Server 2003. For a complete list of services and their functionality, see System

Services for the Windows Server 2003 Family and Windows XP Operating Systems on the

Microsoft TechNet Web site.

Setting Server Roles with the Configure Your Server Wizard

One important service change is the use of server roles. Using the Configure Your Server Wizard

as Figure 34 shows, you can choose a type of server—that is, file server, application server,

domain controller, or DNS server—and Windows Server 2003 automatically enables and disables

the proper services for that role.

1 2 ... 81 82 83 84 85 86 87 88 89 90 91 ... 154 155

Sin comentarios

Microsoft Windows NT 4.0 Guide Manual de usuario Pagina 86