Downsizing Windows 2016 Core

Discussion in 'Windows Server' started by cx, Mar 3, 2018.

  1. cx

    cx MDL Novice

    Mar 22, 2015
    12
    16
    0
    I would like to modify Windows 2016 core to reduce its attack surface and get rid of features I don't need. For the purpose of an ADDC, what are
    • the services to disable
    • the scheduled tasks to disable
    • Windows component packages I can remove
    • the firewall rules to set
    Here I'm interested in the absolute minimum. Windows packages that are protected can be removed by editing the registry, so I guess it is like hacking server core to be more like nano.

    Any idea?
     
  2. xinso

    xinso MDL Guru

    Mar 5, 2009
    4,242
    5,512
    150
    #2 xinso, Mar 3, 2018
    Last edited: Apr 18, 2018
    deleted
     
  3. LiteOS

    LiteOS MDL Expert

    Mar 7, 2014
    1,549
    659
    60
    Maybe adding the package of ADDC(?) to nano can make more clear picture what is needed
    but im not sure
     
  4. cx

    cx MDL Novice

    Mar 22, 2015
    12
    16
    0
    Nano supports active directory?
     
  5. LiteOS

    LiteOS MDL Expert

    Mar 7, 2014
    1,549
    659
    60
    Make it supported will make the way to lite clearer