NNTP service enabled
[This topic is intended to address a specific issue called out by the Exchange Server Analyzer Tool. You should apply it only to systems that have had the Exchange Server Analyzer Tool run against them and are experiencing that specific issue. The Exchange Server Analyzer Tool, available as a free download, remotely collects configuration data from each server in the topology and automatically analyzes the data. The resulting report details important configuration issues, potential problems, and nondefault product settings. By following these recommendations, you can achieve better performance, scalability, reliability, and uptime. For more information about the tool or to download the latest versions, see "Microsoft Exchange Analyzers" at http://go.microsoft.com/fwlink/?linkid=34707.]
Topic Last Modified: 2005-11-18
The Microsoft® Exchange Server Analyzer Tool queries the Win32_Service Microsoft Windows® Management Instrumentation (WMI) class to determine the value of the Started key for the Network News Transfer Protocol service (NntpSvc). A value of True indicates that the Network News Transfer Protocol (NNTP) service is running on this Exchange server.
The Exchange Server Analyzer also reads the following property in the Internet Information Services (IIS) metabase to determine if an NNTP feed is configured for the Exchange server:
If the Exchange Server Analyzer finds that the NNTP service is started, but no feeds have been configured for the server, a warning is displayed.
To save resources, and as a general security precaution, you should not run any services for components that are not being used. Each service that is run exposes functionality that malicious users may be able to exploit. It is recommended that you disable all services that are not being used.
To disable the NNTP Service
Click Start, click Programs, click Administrative Tools, and then click Services.
Right-click the Network News Transfer Protocol (NNTP) service and click Properties.
On the General tab, click Stop.
Under Startup type, select Disabled, and then click OK.
For more information about securing Exchange Server 2003, see the Exchange Server 2003 Security Hardening Guide (http://go.microsoft.com/fwlink/?linkid=47578).