[PATCH] Turn off NETLOGON by default on standalone/member servers
Volker.Lendecke at SerNet.DE
Mon Jun 13 04:49:50 UTC 2016
On Mon, Jun 13, 2016 at 11:54:20AM +1200, Andrew Bartlett wrote:
> spoolss comes to mind in particular, but what about epmapper and
winreg? svcctl? If possible, we might give people the chance to start
with just no RPC servers at all and see how far they get. I could
imagine even lsa and samr are not really necessary for pure file
operations until you start doing ACL changes of course. But I could
imagine cases where this does not matter.
> Otherwise, perhaps we list what Apple exposes and use that as a guide
> for what we really should leave on file servers?
I would rather look at NetApp. Apple highly specialized towards their
own clients. NetApp have Windows-focused list of clients they support.
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de
SerNet & BSI laden ein: 29. Juni 2016,
2. IT-Grundschutztag 2016, BPA Berlin.
More information about the samba-technical