Securing Windows 2000
Note that there are a ton of different opinions on what services need to be enabled or disabled on a server. The truth is this: It depends on how paranoid you are and what you're trying to accomplish. If you follow these steps, you will have a fairly braindead system for much of anything else except running FireWall-1. That's good, because it's what we are trying to accomplish.
Hardening an OS installation begins during the initial installation. The first choice is how to install the server—as a standalone server or as a domain controller. A standalone server should be chosen. Your firewall should not be a domain controller, for that goes against the idea that a firewall should be nothing but a firewall. ...