2006年1月27日 星期五

關閉不必要的 Windows Service

常常會有專家說:「要關閉用不著的 Services,才可以將系統風險降至最低。」事實上,停用不必要的服務除了可以提高安全性之外,還可以促進系統效能。(少一個程式佔用你的記憶體及 CPU 資源,你的電腦就可以用來做更多的正事。)

但是到底什麼是用不著的 Service?

[[MORE]]底下是你可以關閉的服務列表(本表適用於 WinXP with SP2)。(要關閉它們,請進 控制台/系統管理工具/服務 裡面,或是直接從開始/執行/services.msc)

Disable Alerter
Disable Distributed Link Tracking Client
Disable Help and Support (If you use Windows Help and Support leave this enabled)
Disable Indexing Service
Disable Messenger (Shoot the Messenger and installing SP2 will disable this)
Disable Net Logon
Disable Netmeeting Remote Desktop Sharing
Disable Portable Media Serial Number
Disable Remote Desktop Help Session Manager
Disable Remote Registry Service
Disable Routing and Remote Access
Disable Secondary Logon
Disable SSDP Discovery Service (Unplug n' Pray will disable this)
Disable Telnet
Disable Terminal Services
Disable Universal Plug and Play Device Host
Disable Upload Manager
Disable Wireless Zero Configuration (If you are on a wireless network leave this enabled)

倒是有一些服務,一定要讓它保持在自動啟動的狀態,才能夠提供較佳的安全性:

Automatic Automatic Updates
Automatic Background Intelligent Transfer Service
Automatic Cryptographic Services
Automatic Protected Storage
Automatic Security Accounts Manager
Automatic Security Center
Automatic System Event Notification
Automatic System Restore Service

本文的細節來自於:SecureXPBlackViper's Windows XP Services Guide、或是這個PDF檔

沒有留言:

張貼留言