Downsizing Windows 2016 Core

Discussion in 'Windows Server' started by cx, Mar 3, 2018.

  1. cx

    cx MDL Novice

    Mar 22, 2015
    12
    16
    0
    #1 cx, Mar 3, 2018
    I would like to modify Windows 2016 core to reduce its attack surface and get rid of features I don't need. For the purpose of an ADDC, what are
    • the services to disable
    • the scheduled tasks to disable
    • Windows component packages I can remove
    • the firewall rules to set
    Here I'm interested in the absolute minimum. Windows packages that are protected can be removed by editing the registry, so I guess it is like hacking server core to be more like nano.

    Any idea?
     
  2. xinso

    xinso MDL Guru

    Mar 5, 2009
    12,690
    13,689
    340
    #2 xinso, Mar 3, 2018
    Last edited: Apr 18, 2018
    deleted
     
  3. LiteOS

    LiteOS Windowizer

    Mar 7, 2014
    2,207
    980
    90
    #3 LiteOS, Mar 9, 2018
    Maybe adding the package of ADDC(?) to nano can make more clear picture what is needed
    but im not sure
     
  4. cx

    cx MDL Novice

    Mar 22, 2015
    12
    16
    0
    #4 cx, Mar 26, 2018 (OP)
    Nano supports active directory?
     
  5. LiteOS

    LiteOS Windowizer

    Mar 7, 2014
    2,207
    980
    90
    #5 LiteOS, Apr 10, 2018
    Make it supported will make the way to lite clearer