parro008
Topic Starter
I am trying to configure some baseline Windows monitoring on Win2008 R2 servers.
I have narrowed the list of MicroSoft services down to the following;
BITS bits Running Background Intelligent Transfer Service COMSysApp comsysapp Running COM+ System Application CryptSvc cryptsvc Running Cryptographic Services DcomLaunch dcomlaunch Running DCOM Server Process Launcher Dnscache dnscache Running DNS Client Eventlog eventlog Running Windows Event Log EventSystem eventsystem Running COM+ Event System lanmanserver lanmanserver Running Server lanmanworkstation lanmanworkstation Running Workstation LmHosts lmhosts Running TCP/IP NetBIOS Helper MSDTC msdtc Running Distributed Transaction Coordinator Netlogon netlogon Running Netlogon Netman netman Running Network Connections PlugPlay plugplay Running Plug and Play PolicyAgent policyagent Running IPsec Policy Agent RemoteRegistry remoteregistry Running Remote Registry RpcSs rpcss Running Remote Procedure Call (RPC) SamSs samss Running Security Accounts Manager Schedule schedule Running Task Scheduler SENS sens Running System Event Notification Service ShellHWDetection shellhwdetection Running Shell Hardware Detection SNMP snmp Running SNMP Service SNMPTRAP snmptrap Running SNMP Trap TermService termservice Running Remote Desktop Services TrkWks trkwks Running Distributed Link Tracking Client W32Time w32time Running Windows Time winmgmt winmgmt Running Windows Management Instrumentation WmiApSrv wmiapsrv Stopped WMI Performance Adapter wuauserv wuauserv Running Windows Update
Are all of these required ??
Thanks – RobbieP