Unnecessary Services check

Applies To: Forefront Client Security

The Unnecessary Services SSA check determines whether any potentially unnecessary services are installed on the scanned computer. It also detects the current state of these services (enabled or disabled).

This check searches for the following services:

  • MSFtpsvr (FTP Publishing)

  • TIntSvr (Telnet)

  • W3SVC (World Wide Web Publishing)

  • SMTPSVC (Simple Mail Transfer Protocol)

Resolutions for potentially unacceptable scores

For High and Medium scores, it is recommended that you investigate the scanned computer and determine whether the services found to be installed or running are necessary. If unnecessary, they should be disabled. For example, if the Telnet service is found to be installed and enabled, but users are not required to remotely connect through Telnet to that specific computer, this service should be disabled.

Scoring and results

This check generates scores on two levels:

  • Overall

  • Per service

Overall scoring

The following table shows how Client Security determines the overall score resulting from assessing the status of potentially unnecessary services on the scanned computer.

Score Number of services with Medium score Number of services with Informational score Number of services with Low score Results message

Medium

At least 1

0 or more

0 or more

The following number of potentially unnecessary services are installed: number.

Informational

0

At least 1

0 or more

The following number of potentially unnecessary services are installed: number. However, the services are disabled or configured by Group Policy.

Low

0

0

0 or more

No potentially unnecessary services were found installed.

Per service scoring

The following table shows how Client Security determines the score resulting from assessing the scanned computer for a specific, potentially unnecessary service.

Score Service is installed Service status Startup type Startup type configured by Group Policy Results message

Medium

Yes

Started

Automatic, Manual, or Disabled

No

The following service is installed: service-name. Status: Running, StartupType: startup-mode.

 

Yes

Stopped

Automatic or Manual

No

The following service is installed: service-name. Status: Stopped. StartupType: startup-mode.

Informational

Yes

Started or Stopped

Automatic, Manual, or Disabled

Yes

The following service is installed: service-name. However, startup mode has been configured by Group Policy.

 

Yes

Stopped

Disabled

No

The following service is installed but disabled: service-name. Status: Stopped.

Low

No

Not applicable

Not applicable

Not applicable

The following service is not installed: service-name.