Securing Windows Server 2003 tasks
Cisco TMS Secure Server Configuration Guide 13.0
Page 14 of 34
Remove unnecessary windows components
To reduce the attack surface of the Cisco TMS server, ensure that Windows Components that are not
required by Cisco TMS are not installed.
Go to Windows Start > Control Panel >Add or Remove Programs > Add/Remove Windows
Components. The following table lists the Windows Components. An N in the Include column
indicates that the component should be unchecked in the Windows Components Wizard. To display
subcomponents, highlight the Windows Component and click the Details button.
Table 2 Windows components
Component
Subcomponent
Include
Accessories and Utilities
N
Application Server
Application Server Console
N
ASP.NET
Y
Enable network COM+ access
Y
Enable network DTC access
N
Internet Information Services
Y (see second
table for details)
Message Queuing
N
Certificate Services
N
E-mail Services
N
Fax Services
N
Indexing Services
N
Internet Explorer Enhanced Security
Configuration
For administrator groups
Y
For all other user groups
Y
Management and Monitoring Tools
Connection Manager Administration
Kit
N
Connection Point Services
N
Network Monitor Tools
N
Simple Network Management
Protocol
Y
WMI SNMP Provider
N
WMI Windows Installer Provider
N
Networking Services
N
Other Network and File Services
N
Remote Installation Services
N
Remote Storage
N
Security Configuration Wizard
Y
Terminal Server
N
Terminal Services Licensing
N
UDDI Services
N
Update Root Certificates
Y
