PatriotBox^TM

Windows 2000 OS

Hardening Guide

This guide will explain the recomendations to Hardening your Windows 2000 OS for Patriotbox. This is not a requirement to install and run Patriotbox but is a good idea anyway.

After installing your OS, you will need to update your system with all relevent service packs and hotfixes.

Next step, from Start >> Run type services.msc. We will now begin to disable the services we do not need. This will give us a trim down OS only listening on a few required ports, thus giving Patriotbox more ports to simulate services on.

Listed are only the Items that need to be changed, all other services can be left in their original state.

Services Disabled Manual Automatic Alerter X Background Intelligent Transfer Service  X Clipbook  X COM+ Event System  X DHCP Client  X Computer Browser  X Distributed Link Tracking Client  X Distributed Transaction Coordinator  X DNS Client  X Event Log  X Fax Service  X Indexing Service  X Internet Connection Sharing  X IPSEC Policy Agent  X Logical Disk Manager  X Logical Disk Manager Administrative Service  X Messenger  X Net Logon  X NetMeeting Remote Desktop Sharing  X Network Connections  X Network DDE  X Network DDE DSDM  X NT LM Security Support Provider  X Performance Logs and Alerts  X Plug and Play  X Print Spooler X Protected Storage  X Qos RSVP  X Remote Access Auto Connection Manager  X Remote Access Connection Manager  X Remote Procedure Call (RPC)  X Remote Procedure Call (RPC) Locator  X Remote Registry Service  X Removable Storage  X Routing and Remote Access  X RunAs Service  X Security Accounts Manager  X Smart Card  X Smart Card Helper  X System Event Notification  X Task Scheduler  X TCP IP Netbios Helper Service  X Telephony  X Telnet  X Windows Installer  X Windows Management Instrumentation  X Windows Mngment Instrumentation Driver Ext.  X Windows Time  X Wireless Configuration  X Workstation  X

These are only recommendations and not requirements.