Disabling unused services

Hi Guys

Can I check with you guys if the following services can be disabled.

1) Distributed File System
--> Can I disable it if I can comfirm that my server is not a domain
controller or it is not using the DFS feature?

2) Distributed Link Tracking Client
---> What does this service does? Can I disable it if the Distributed
Link Tracking Server service in my other servers are disabled?

3) Distributed Transaction Coordinator

regards


--
Domon
------------------------------------------------------------------------
Domon's Profile:
View this thread:

 

1) yes
2) yes - assuming you are not relying on this functionality. In most
enviroments I dealt with, this was disabled due to its potential impact on
increase of AD database (and related replication traffic) - for more info
refer to
3) that would depend on whether apps/services hosted on your server rely on
this functionality...

hth
Marcin

"Domon" <Domon.3zs8bb@DoNotSpam.com> wrote in message
newsomon.3zs8bb@DoNotSpam.com...<!--coloro:blue--><span style="color:blue <!--/coloro-->
>
> Hi Guys
>
> Can I check with you guys if the following services can be disabled.
>
> 1) Distributed File System
> --> Can I disable it if I can comfirm that my server is not a domain
> controller or it is not using the DFS feature?
>
> 2) Distributed Link Tracking Client
> ---> What does this service does? Can I disable it if the Distributed
> Link Tracking Server service in my other servers are disabled?
>
> 3) Distributed Transaction Coordinator
>
> regards
>
>
> --
> Domon
> ------------------------------------------------------------------------
> Domon's Profile:
> View this thread:
>
>
>
> <!--colorc--><!--/colorc-->

 

> Hi Guys<!--coloro:blue--><span style="color:blue <!--/coloro-->
>
> Can I check with you guys if the following services can be disabled.
>
> 1) Distributed File System
> --> Can I disable it if I can comfirm that my server is not a domain
> controller or it is not using the DFS feature?
>
> 2) Distributed Link Tracking Client
> ---> What does this service does? Can I disable it if the Distributed
> Link Tracking Server service in my other servers are disabled?
>
> 3) Distributed Transaction Coordinator
>
> regards<!--colorc--><!--/colorc-->

As Marcin indicated, it depends on if you're using those services.
Check the link he provided.

One word of advise, do not disable the DHCP Client service on any
server, whether the machine is a DHCP client or statically configured.
Somewhat of a misnomer, this service performs Dynamic DNS registration
and is tied in with the client resolver service. If disabled on a DC,
you'll get a slew of errors, and no DNS queries will get resolved.

Dynamic DNS Updates Do Not Work if the DHCP Client Service Stops


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit
among responding engineers, and to help others benefit from your
resolution.

Ace Fekay, MCT, MCTS Windows 2008, MCTS Exchange, MCSE, MCSA 2003 &
2000, MCSA Messaging
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
for regional support phone numbers.

 

Hi Marcin / Ace

Thanks for the advise. It really help me alot

I guess that I can disable the Distributed Link Tracking Client service
since the Distributed Link Tracking Server service for all my server is
disabled. Will take noted of the DHCP service issue.

I have a few more queries rearding some windows services.

1) Computer Broswer
--> What will be the impact of disabling this service?

2)NT LM Security Support Provider
Can I disable it if my server is configured to accept NTLMv2 and
kerberos authentication?

3) TCP/IP NetBIOS Helper
What does this service do?

Regards


--
Domon
------------------------------------------------------------------------
Domon's Profile:
View this thread:

 

"Domon" <Domon.3zxsbc@DoNotSpam.com> wrote in message
newsomon.3zxsbc@DoNotSpam.com...<!--coloro:blue--><span style="color:blue <!--/coloro-->
>
> Hi Marcin / Ace
>
> Thanks for the advise. It really help me alot
>
> I guess that I can disable the Distributed Link Tracking Client service
> since the Distributed Link Tracking Server service for all my server is
> disabled. Will take noted of the DHCP service issue.
>
> I have a few more queries rearding some windows services.
>
> 1) Computer Broswer
> --> What will be the impact of disabling this service?
>
> 2)NT LM Security Support Provider
> Can I disable it if my server is configured to accept NTLMv2 and
> kerberos authentication?
>
> 3) TCP/IP NetBIOS Helper
> What does this service do?
>
> Regards
>
>
> --
> Domon<!--colorc--><!--/colorc-->

Domain,

Just be careful on what you disable. The effects of disabling certain
services depend on the operating system version and its role. Disabling a
necessary service may disable certain necessary functions on a machine.

1. You can disable this service on a machine in a domain environment. It
dictates whether it participates with becoming an eligible master browser on
a subnet. To understand what that means, requires some reading.

Description of the Microsoft Computer Browser Service


What's the Microsoft Computer Browser Service?
Disable NetBIOS in W2K/XP/2003 · Hide a Server from the Microsoft Computer
Browser ... Malicious User Can Shut Down Computer Browser Service - 262694
....


Computer Browser Service


2. Leave that running. You need it. It works for all versions of NTLM.

NTLM Security Support Provider.
NTLM SSP is based on Microsoft Windows NT® LAN Manager challenge/response
and NTLM version 2 authentication ...


3. If you disable the TCP NetBIOS Helper, you will not be able to map any
drives or printers using NetBIOS names or FQDN.

"Network Location Cannot be Reached" Error Message When You Try to ... To
resolve this issue, start the TCP/IP NetBIOS Helper Service, and then join
the domain. To start the NetBIOS Helper Service, follow these steps:


Ace

 

Hi Ace

Noted. I will do a check on the services before disabling.

One last question.. Regarding the NT LM Security Provider service,
currently all my servers is having the service startup type as manual.
Somehow, my servers have no authenication problem. My servers are
configured to accept only NTLMv2 only. I am wonder if this is safe to
turn it off?

Regards


--
Domon
------------------------------------------------------------------------
Domon's Profile:
View this thread:

 

"Domon" <Domon.4051fb@DoNotSpam.com> wrote in message
newsomon.4051fb@DoNotSpam.com...<!--coloro:blue--><span style="color:blue <!--/coloro-->
>
> Hi Ace
>
> Noted. I will do a check on the services before disabling.
>
> One last question.. Regarding the NT LM Security Provider service,
> currently all my servers is having the service startup type as manual.
> Somehow, my servers have no authenication problem. My servers are
> configured to accept only NTLMv2 only. I am wonder if this is safe to
> turn it off?
>
> Regards
>
>
> --
> Domon<!--colorc--><!--/colorc-->

No worries about it being set to manual. It will fire up when the system
needs it. But as my response indicated to your question #2, DO NOT disable
it. This service is used for ALL versions of NTLM. Read back in my response,
please, and read the link I provided associated with my answer regarding
this service.

Ace