A previous network admin told our techs to always install snmp on our computers. I am thinking now that maybe we don't need to run this service. We are using KACE1000 and 2000. Do you agree? If so, is there a way to run a script that would remove this from our computers?

Thanks.

0 Comments   [ + ] Show Comments

Comments

Please log in to comment

Answers

1

Windows 7

If you just want to kill it change the snmptrap service startup to disabled via the kace 1000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SNMPTRAP]


"Start"=dword:00000004

Answered 06/28/2012 by: SMal.tmcc
Red Belt

  • I see there are 2 keys -- one called SNMP and one called SNMPTRAP. Could I use "Start"=dword:00000004 in both or would the snmptrap disabled be adequate?
Please log in to comment
1

You can disable both, snmp is the internal gatherer and snmptrap is the messenger.  All you really need to do is shoot the messenger!

Answered 06/29/2012 by: SMal.tmcc
Red Belt

Please log in to comment
0

Whether or not to use SNMP is pretty much a personal choice.  The bottom line is whether the information you are getting via SNMP is useful and unique (i.e. you can *only* get it from SNMP and you need that info to manage things efficiently/effectively).  Just be aware that there are security risks if it's not configured properly.

http://www.lovemytool.com/blog/2012/03/enabling-snmp-worth-security-risks-by-chris-greer.html

http://msdn.microsoft.com/en-us/library/aa909970.aspx

Old, but still worth a read:

http://www.techrepublic.com/article/lock-it-down-dont-allow-snmp-to-compromise-network-security/1036978

Regardless of whether you use it or not, here's a good post on how to configure it:

http://social.technet.microsoft.com/Forums/en-US/windowsserver2008r2management/thread/06b48ced-1bb1-4adf-91e1-2dc8502e0273/

Since it can be managed through registry settings, this is a prime candidate for policy enforcement (scripts) via the K1000.  Just figure out what registry setting you want to have in place, then go to Scripting > Configuration Policy > Enforce Registry Settings to setup your enforcement script.

Hope that helps!

John

Answered 06/27/2012 by: jverbosk
Red Belt

Please log in to comment
0

BTW -- you guys rock

Answered 06/28/2012 by: jfrasier
Seventh Degree Black Belt

Please log in to comment
Answer this question or Comment on this question for clarity