[Blake]

The more services running on a computer, the more entry points there may be available to malicious attack. A service is a potential entry point because it processes client requests. To help reduce this risk, you should disable unnecessary system services.

Required
Event Log
IIS Admin Service
License Logging Service
MSDTC
Protected Storage
Remote Procedure Call (RPC) Service
Server
Windows NT Server or Windows NT Workstation
Windows NTLM Security Support Provider
Workstation
World Wide Web Publishing Service

May Be Required
Certificate Authority (required to issue certificates)
Content Index (required if using Index Server)
FTP Publishing Service (required if using FTP service; it's highly recommended that FTP and Web services run on different servers)
NNTP Service (required if using NNTP Service)
Plug and Play (recommended, but not required)
Remote Access Services (required if you use dial-up access)
RPC Locator (required if doing remote administration)
Server Service (can be disabled, but required to run User Manager)
SMTP Service (required if using SMTP Service)
Telephony Service (required if access is by dial-up connection)
Uninterruptible Power Supply (UPS) (optional; but it is recommended that you use a UPS)
Workstation (optional; important if you have UNC virtual roots)

Not Required by Most Installations
alerter
ClipBook Server
Computer Browser
DHCP Client
Messenger
NetBIOS Interface
Net Logon
Network DDE & Network DDE DSDM
Network Monitor Agent
NWLink NetBIOS
NWLink IPX/SPX Compatible Transport (not required unless you don't have TCP/IP or another transport)
Simple TCP/IP Services
Spooler
TCP/IP NetBIOS Helper
WINS Client (TCP/IP)

Do not install application software or development tools on your server!!!!