Active services and hosts can be accessed by other services, hosts, and users within the domain. There can be situations when it is necessary to remove a host or a service from activity. However, deleting a service or a host removes the entry and all the associated configuration, and it removes it permanently.

Disabling a host or service prevents domain users from access it without permanently removing it from the domain. This can be done by using the host-disable and service-disable commands.

For example, for a host:

$ ipa host-disable server.example.com

For a service, specify the principal rather than the hostname:

$ ipa service-disable http/server.example.com