initial hardening - turning off services