Any unnecessary services and accounts should be disabled in order to reduce the attack surface of the system. This includes disabling any unused accounts, services, or ports that are not necessary for running the system.