Why can't you use third-party software on servers?

Question

System administration

Good afternoon.
Everyone knows that you do not need to install software on servers that is not used in the operation of server services. For example, all sorts of launchers, turbo launches and more.
Could you provide links to literature or articles that describe the risks of using third-party software on servers?

Answer 1

Why can't you use third-party software on servers?

And who told you that you can't? It is possible and often necessary.

Answer 2

I have a server installed in 2004.
13 years old Carl!
There are no crashes.
None at all.
It reboots once a year or two, for prevention.
Although this is a Windows Server system that is scolded by many (fools).
BUT!!!
Of the software, except for Windows itself, there is the bare minimum:
Far Manager, 7zip, MS SQL Server, nncron, 1C Enterprise.
For some reason it seems to me that this is the reason for stability.
And in good hardware.

Answer 3

It is known that any software may contain vulnerabilities, conflict with others, etc. Therefore, one does not need to be seven spans in the forehead to understand that a responsible computer should have only the necessary minimum of software.

Answer 4

here, first of all, determine the need for this software ..
Server - a computer that provides a service that is used remotely (in most cases), there is usually no need to work directly on it, and, accordingly, in utilities on it.

Answer 5

Let's start with a quote:

all sorts of launchers, turbo launches and more

- on server? What for? The minimum required set of programs is installed on the server, nothing more. Even on the terminal server on which users work, only what is necessary for work is installed.
Generally,

all sorts of launchers, turbo launches and more

it makes no sense to install it anywhere and never - an absolutely unnecessary type of program, everything can be done by means of the system, in modern systems there are many tools for this.

Answer 6

If you want to read from the security side, then I recommend focusing on PCI DSS https://www.pcisecuritystandards.org/document_library

Answer 7

don't forget the Server Role. If this is a DC, then there are unnecessary launchers, the maximum that may be needed is utilities for working with the controller and backup agents if it is not VSS, often a donkey as a browser is enough for such roles. If the role of the Terminal Server is there tons of third-party software, from archivers to EDS