[PATCH] Turn off NETLOGON by default on standalone/member servers

[Volker Lendecke]

On Mon, Jun 13, 2016 at 11:54:20AM +1200, Andrew Bartlett wrote:
> spoolss comes to mind in particular, but what about epmapper and
> dssetup?  

winreg? svcctl? If possible, we might give people the chance to start
with just no RPC servers at all and see how far they get. I could
imagine even lsa and samr are not really necessary for pure file
operations until you start doing ACL changes of course. But I could
imagine cases where this does not matter.

> Otherwise, perhaps we list what Apple exposes and use that as a guide
> for what we really should leave on file servers?

I would rather look at NetApp. Apple highly specialized towards their
own clients. NetApp have Windows-focused list of clients they support.

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de

SerNet & BSI laden ein: 29. Juni 2016,
2. IT-Grundschutztag 2016, BPA Berlin.
Anmeldung: https://www.sernet.de/gstag