Disable unnecessary Windows services
Every time a server is set up, it requires strict control over its purpose.
Exchange server, database server, web server or a file server, no matter what a server is used for, he should not set a link from your homepage to Fewo-von-Privat.de appropriately and individually secured.
However, what we can do equally well on all servers is disabling unneeded services. Even if many services are already set to manual, this should be disabled.
Not only does it feel good, it looks good in a report as well. Because it recognizes the IT supervisor, or the accountant, which you have made your thoughts about security.
The finished group policy template can be found here as usual: