How to disable/uninstall snmp
A previous network admin told our techs to always install snmp on our computers. I am thinking now that maybe we don't need to run this service. We are using KACE1000 and 2000. Do you agree? If so, is there a way to run a script that would remove this from our computers?
Thanks.
Answers (4)
Windows 7
If you just want to kill it change the snmptrap service startup to disabled via the kace 1000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SNMPTRAP]
"Start"=dword:00000004
Comments:
-
I see there are 2 keys -- one called SNMP and one called SNMPTRAP. Could I use "Start"=dword:00000004 in both or would the snmptrap disabled be adequate? - jfrasier 11 years ago
You can disable both, snmp is the internal gatherer and snmptrap is the messenger. All you really need to do is shoot the messenger!
Whether or not to use SNMP is pretty much a personal choice. The bottom line is whether the information you are getting via SNMP is useful and unique (i.e. you can *only* get it from SNMP and you need that info to manage things efficiently/effectively). Just be aware that there are security risks if it's not configured properly.
http://www.lovemytool.com/blog/2012/03/enabling-snmp-worth-security-risks-by-chris-greer.html
http://msdn.microsoft.com/en-us/library/aa909970.aspx
Old, but still worth a read:
http://www.techrepublic.com/article/lock-it-down-dont-allow-snmp-to-compromise-network-security/1036978
Regardless of whether you use it or not, here's a good post on how to configure it:
http://social.technet.microsoft.com/Forums/en-US/windowsserver2008r2management/thread/06b48ced-1bb1-4adf-91e1-2dc8502e0273/
Since it can be managed through registry settings, this is a prime candidate for policy enforcement (scripts) via the K1000. Just figure out what registry setting you want to have in place, then go to Scripting > Configuration Policy > Enforce Registry Settings to setup your enforcement script.
Hope that helps!
John
