For a sample of system components, inspect services that are running, stopped or enabled. Verify that only necessary services are enabled and running. Implement security features for any required services that are considered to be insecure. Services can be automatically started when the computer boots, can be paused and restarted, and do not show any user interface. Services are often network-facing, making them especially vulnerable to remote attacks, also they typically run in a high-privilege account such as LocalSystem. Use Services Control Manager(SCM) to manage the services. The Services Control Manager is the central utility provided by Windows to administer services. Please ensure that your systems are not running with any insecure privileged, unappropriately access controlled, unnecessary services.