sli said:
Pretentious advice. It's not an either/or situation. You can secure your
computer AND disable many, many unnecessary things including dcom and many
services. Few systems need even half the services that are started by
default.
Yes, you can safely disable unneeded things, but most users don't know how,
let alone know what to disable. If home users have an AV program and
firewall then they don't really need to worry about disabling things to
protect themselves from exploits. A proper patched and protected computer
will fair just fine on the net. Also, the computers now-a-days are plenty
strong to run all the default services whether they are needed or not. Why
disable them if you get no real performance gain and your protected security
wise. If it ain't broke, don't fix it. Of course if users listened to my
advice I'd put myself out of business. Lots of probs I fix are because a
user tried to disable something that Joes, second cousins, mother said could
have a problem if the sun was shinning that day. To many users doing things
they need not to be doing. The computer runs fine as default, just secure it
down with av and firewall and stay patched at windows update.