Ever wonder what Windows Server services you should disable for performance or security purposes?

Wishing there was a comprehensive list?

This doc has been around for a long time, but you might have missed it because the title is confusing... https://docs.microsoft.com/en-us/windows-server/security/windows-services/security-guidelines-for-disabling-system-services-in-windows-server

See, any Windows Server admin who was around prior to 2016 would think "Desktop Experience" means Remote Desktop, because that's what you enabled to get the Aero interface on Windows Server.

Desktop Experience in this case refers to having a GUI, not a core install.

Some of the items on this list are interesting. I'd recommend disabling Print Spooler on anything not printing, including domain controllers (which should never be a print server).

This does break the ability to publish/update printers in AD. Just enable it as needed for this.

And whoever decided that XBOX services were needed by default on a Windows Server - for shame

I realize it's needed for the Store to work, but nobody is using that either

If less than 1% of your user base is going to use it, make it an optional feature we can enable...

Anyone ever use AllJoyn in Windows to talk to their BACnet devices? Yeah, me neither.

But someone thought it should be enabled by default, on a server OS.

Search the web for MapsBroker. I've never been able to find an app that uses it, but everyone unanimously disables it...