ASD ISM 1247 Disable or remove unneeded server features

System owners should take an inventory of all user accounts on each server to identify which ones are unnecessary.

This can be done by reviewing account lists and comparing them against current staff and service needs; any accounts not in use should be flagged for removal.

The IT team should review all installed server components and services to identify any that are not required for daily operations.

This involves checking each server's configuration and disabling or uninstalling anything unnecessary to reduce potential entry points for attackers.

Managers should ensure that there is a regular schedule for reviewing server configurations to add or remove features as business needs change.

This means setting a recurring calendar event every few months to reassess server requirements and adjust configurations accordingly.

IT teams should establish a protocol for immediately disabling unused accounts and features when employees leave or services are discontinued.

This can include checklists for account closure and service deactivation as part of the employee exit or service shutdown process.

Procurement teams should be tasked with ensuring that new server systems or software purchases are only for features that are necessary.

This involves careful review of user needs and liaising with IT specialists to avoid acquiring products with extra, potentially vulnerable, features.