Disable Windows Services (credit to MindTap)
Example:
You are the security analyst for a small corporate network. You have had problems with users installing remote access services like Remote Desktop Services and VNC Server. You need to find, stop, and disable these services on all computers running them.
In this lab, your task is to:
- Use Zenmap to run a scan on the 192.168.0.0/24 network to look for the following open ports:
- Port 3389 - Remote Desktop Services (TermServices)
- Port 5900 - VNC Server (vncserver)
- Answer Questions 1 and 2.
- Disable and stop the services for the open ports found running on the applicable computers.
Use the following table to identify the computers: IP Address Computer Name 192.168.0.30 Exec 192.168.0.31 ITAdmin 192.168.0.32 Gst-Lap 192.168.0.33 Office1 192.168.0.34 Office2 192.168.0.45 Support 192.168.0.46 IT-Laptop - Explanation:
- Ports to scan:
- 3389 - Remote Desktop Services (TermServices)
- 5900 - VNC Server (vncserver)
- Computer identification:
- Ports to scan:
- PLANATIONWhile completing this lab, use the following information:
| IP Address | Computer Name |
| 192.168.0.30 | Exec |
| 192.168.0.31 | ITAdmin |
| 192.168.0.32 | Gst-Lap |
| 192.168.0.33 | Office1 |
| 192.168.0.34 | Office2 |
| 192.168.0.45 | Support |
| 192.168.0.46 | IT-Laptop |
Complete this lab as follows:
- Using Zenmap, scan the network for open remote access ports.
- From the Favorites bar, select Zenmap.
- Maximize the windows for better viewing.
- In the Command field, type nmap -p [port number] 192.168.0.0/24 to scan the port.
- Select Scan (or press Enter) to scan the subnet for a given service.
- Using the table in the scenario, identify the computer(s) with the open port using the IP address found.
- In the top right, select Answer Questions.
- Answer Question 1.
- Repeat steps 1c-1e and then answer Question 2.
- For the computers that have a remote access service port open, disable and and then stop the applicable service from running.
- From the top navigation tabs, select Floor 1 Overview.
- Select the computer with the remote access service port open. If needed, minimize or move the Lab Questions dialog.
- In the search field on the taskbar, type Services.
- Under Best Match, select Services.
- Maximize the window for easier viewing.
- Double-click the service (Remote Desktop Services or VNC Server) that needs to be stopped.
- Using the Startup Type drop-down, select Disabled.
- Under Service status, select Stop.
- Select OK.
- Repeat step 2a-2i.
- In the top right, select Answer Questions.
- Select Score Lab.
Comments
Post a Comment