[toc]
This article describes some general recommended configuration settings for Windows servers.
Disable unnecessary Windows services
There are many background Windows services running on a server. It is a good idea to set as many nonessential ones as possible to manual so that they don't start and reduce the resources available to the essential services. The list of services that you can turn off may vary from company to company, so consider that when determining what to disable.
Consider excluding some directories for antivirus software
Many organizations require antivirus solutions to be run. If you are running A/V software, consider excluding certain directories when necessary. Antivirus software can hold exclusive locks on files and folders and interfere with other services. You might, for example, consider excluding application directories and database files from routine scans. But any folder that can be affected by outside services, such as a drop folder for external uploads to a website, should be included in scans.
Consider applying Windows updates manually
You should consider how Windows Update software services are scheduled and applied in your production environment. These services can be configured to automatically update your server(s). However, it is more desirable to install Windows updates in a staging or test environment to check their interaction with your community configuration. If the update(s) do not adversely affect your community, you can then install the Windows update on production servers manually.