Windows Services
o When your SQL Server is under pressure stopping or disabling unnecessary services may free up resource.
o This is especially true of x32 systems where bottom memory allocation is critical.
o Just because x64 has a flat memory model there is still no reason to not pay attention to services, some of which may actually be weak spots in your defenses.
o Important: Do not just disable services and hope for the best, it could be you may be using some of them.
o I’m assuming this is for a dedicated SQL Server and is based upon Windows 2003 SP2.
o Disabled services can stop service pack installation, always set to manual if you are unsure
o IIS requires a special mention, usually this isn’t installed but if you want to run SSRS then it has to be installed.
o I have seen this installed purely to enable smtp forwarding, use a custom proc rather than installing and running IIS.
o Telephony - this cannot be stopped whilst Remote Access Connection Manager and Remote Access Auto Connection are running.
o Windows Firewall – Probably not wanted on a Server ( ** )
o Server Service – ( not listed ) you can stop this but you lose file shares part of the process to harden a SQL Server.
o Windows Installer – ideally this shouldn’t be running but be careful of disabling it.
o Depending on your build and install you may have other services installed or running. I frequently see Full Text Service and Analysis Services running although no use is being made of them, don’t just install everything.
o Same applies to Indexing Service.
|
Windows Service |
Setting |
|
Application Management |
Disabled |
|
Alerter |
Disabled |
|
Automatic Updates |
Disabled |
|
Background Intelligent Transfer Service |
Manual |
|
Clipbook |
Disabled |
|
Computer Browser |
Disabled |
|
Distributed File System |
Disabled |
|
Distributed link tracking client |
Disabled |
|
Distributed transaction coordinator |
Manual |
|
Error Reporting Service |
Disabled |
|
Fax Service |
Disabled |
|
File Replication |
Disabled |
|
Help and Support |
Disabled |
|
HTTP SSL |
Disabled |
|
License Logging |
Disabled |
|
Logical Disk Manager |
Manual |
|
Messenger |
Disabled |
|
Portable Media Serial Number Service |
Manual |
|
Print Spooler |
Disabled |
|
Remote Access Connection Manager |
Manual |
|
Remote Access Auto Connection |
Manual |
|
Remote Registry |
Manual |
|
Secondary Logon |
Manual |
|
Shell Hardware Detection |
Disabled |
|
Task Scheduler |
Disabled |
|
TCP/IP NetBIOS Helper |
Manual |
|
Telephony |
Manual |
|
Windows Audio |
Disabled |
|
Windows Firewall |
Disabled ** |
|
Wireless Configuration |
Disabled |
© www.grumpyolddba.co.uk march 2008