| Service |
Purpose |
Comments |
Recommendations |
Dependencies |
| Alerter |
Notifies users of administrative alerts. |
Not required under normal circumstances. |
Disabled. |
Workstation |
| Error Reporting Service |
Sends reports to Microsoft when application errors occurs. |
Uses memory and resources. Strictly optional. |
Disabled |
Remote Procedure Call (RPC) |
| FTP Publishing Service |
|
Not installed by default, but if needed, you may install
it later from the installation CD. Used to provide a FTP server on
your network. |
Leave not installed or Disabled |
IIS Admin |
| Help and Support |
|
Required for Microsoft online help documents. |
Disabled unless you really want it. |
Remote Procedure Call (RPC) |
| Human Interface Device Access |
|
Not all peripherals require this service. (May be needed
by cameras and similar devices.) |
Disabled unless you really need it; Automatic if you
do. |
Remote Procedure Call (RPC) |
| IIS Admin |
|
Not installed by default, but if needed, you may install
it later from the installation CD. Usually used in conjunction with
local Web site or FTP servers. |
Leave not installed or Disabled unless you really need
it. |
Remote Procedure Call (RPC), Security Accounts Manager |
| IMAPI CD-Burning COM Service |
Used for "drag and drop" CD
burn capability. |
|
Disabled unless needed, then Manual. |
|
| Indexing Service |
|
This is a major resource user. You can
remove the function using "Add/Remove Programs" |
Disabled or even better, uninstalled. |
Remote Procedure Call (RPC) |
| Internet Connection Firewall and Internet Connection
Sharing |
Used to allow multiple computers on your network to access
the internet using only one account. |
This service is installed on the "modem" computer. |
Automatic if using this function, Disabled if not required. |
Application Layer Gateway Service, Network Connections,
Network Location Awareness, Remote Access Connection Manager |
| IPSEC Services |
|
May be required on some domains, but
the "average" user
will not need this. If you are concerned about security, enable this
feature. |
Disabled |
IPSEC driver, Remote Procedure Call (RPC), TCP/IP Protocol
Driver |
| Logical Disk Manager |
Needed to run the Disk Management MMC console for dynamic
volumes. |
|
Disabled |
Plug and Play, Remote Procedure Call (RPC) |
| Logical Disk Manager Administrative Service |
Needed to run the Disk Management MMC console for dynamic
volumes. |
|
Disabled |
Logical Disk Manager, Plug and Play, Remote Procedure
Call (RPC) |
| Message Queuing |
|
Not installed by default, but if needed,
you may install it later off of the WinXP CD. May be used on some
domains, but the "average" home
user will never need this service. |
Leave not installed or Disabled |
Distributed Transaction Coordinator, Message Queuing
access control, NT LM Security Support Provider, Reliable Multicast
Protocol driver, Remote Procedure Call (RPC) Server |
| Message Queuing Triggers |
|
Not installed by default, but if needed, you may install
it later from the installation CD. Required if you use Message Queuing
service. |
Leave not installed or Disabled |
Message Queuing |
| Messenger |
Sends messages between clients and servers. |
Not needed under normal "home" conditions. |
Disabled |
NetBIOS Interface, Plug and Play, Remote Procedure Call
(RPC)- Workstation |
| MS Software Shadow Copy Provider |
Used in conjunction with the Volume Shadow Copy Service.
Microsoft Backup also uses these services. |
|
Disabled |
Remote Procedure Call (RPC) |
| Net Login |
Used for logging onto a Domain Controller. |
|
Disabled |
Workstation |
| NetMeeting Remote Desktop Sharing |
Enables you to access your computer using NetMeeting. |
This may create a big open door for the unwanted. If
you are concerned about security, Disable this function. Even if you
are not worried, you can still disable it. |
Disabled |
|
| Network Connections |
Required for managing network connectivity. |
Set to disabled if you have no network or you do not
change the configurations a lot. If your Internet connectivity is effected
after disabling this function, set it back to Automatic! |
Automatic if needed, Disabled if not. |
Remote Procedure Call (RPC) |
| Network DDE |
. |
Not used by most programs. Unless you use remote ClipBook,
Disable it. |
Disabled |
Network DDE DSDM |
| Network DDE DSDM |
|
Not used by most programs. Unless you use remote ClipBook,
Disable it. |
Disabled |
AFD Networking Support Environment, TCP/IP Protocol
Driver |
| Network Location Awareness (NLA) |
Required for use with the Internet Connection Sharing
Service (server only.) |
|
Disabled unless running ICS/ICF. |
|
| NT LM Security Support Provider |
|
Not needed unless you are running Message Queuing or
Telnet server. |
Disabled unless needed. |
|
| Performance Logs and Alerts |
Collects performance data on a schedule and sends the
information to a log or triggers an alert. |
|
Disabled |
|
| Plug and Play |
The basis of the Plug and Play (PnP) environment. |
NOTE: PnP is not related to UPnP. UPnP is used
for connectivity on networks using TCP/IP to devices such as scanners
or printers. Your sound card is PnP. Do not disable Plug and Play service. |
Automatic |
|
| Portable Media Serial Number |
Retrieves serial numbers from portable music players
connected to your computer. |
It is not known if any devices actually require this. |
Disabled unless a device ceases to function properly. |
|
| Print Spooler |
Queues up print jobs for later printing. |
This service is Required if you have printers, even if
they are network printers. If this does not fit your needs, Disable
it. |
Automatic if needed, Disabled otherwise. |
Remote Procedure Call (RPC) |
| Protected Storage |
Allows for the saving of local passwords or even Web
site information (AutoComplete.) |
This service is set to Automatic by default. If you are
concerned about security reasons, you may want to disable this feature
to make theft of information more difficult. |
Disabled |
Remote Procedure Call (RPC) |
| QoS RSVP |
Provides traffic control on a network using IPSEC and
applications that support QoS, plus have an adapter that supports it. |
The QoS Packet Driver is installed by default on any
TCP/IP connections. You can uninstall it if it is not needed on your
network. |
Disabled |
AFD Networking Support Environment, Remote Procedure
Call (RPC), TCP/IP Protocol Driver |
| Remote Access Auto Connection Manager |
Creates a connection to a network when a program requests
a remote address. |
This service may be required for your Internet connection.
If things cease to function after disabling this service, set it to
Automatic. |
Disabled unless required for your Internet connection. |
Remote Access Connection Manager, Telephony |
| Remote Access Connection Manager |
Creates a network connection. |
This service is required for dial-up networking and if
you use Internet Connection Sharing. If things cease to function after
disabling this service, set it to Automatic. |
Disabled unless required for your internet connection. |
Telephony |
| Remote Desktop Help Session Manager |
Manages and controls Remote Assistance. |
If you do not want or need to use this feature, Disable
it. |
Disabled unless using it. |
Remote Procedure Call (RPC) |
| Remote Procedure Call (RPC) |
This service is vital. Just about everything depends
on this service to be running. |
This is also the only service that you can not disable
using the Services MMC. |
Automatic. |
|
| Remote Procedure Call (RPC) Locator |
Manages the RPC name service database. |
May not be needed by most users. If something on your
network breaks after you disable this service, set it back to Manual
or Automatic. |
Disabled unless required for your network. |
Workstation |
| Remote Registry Service |
|
This is one of those not needed services. If you are
concerned about security, disable this service. |
Disabled |
|
| Removable Storage |
Used for managing removable media. |
Disable this service if you do not have items like tape
backup devices, etc. If your CD ROM/DVD Drive stops working properly,
place this service into Automatic. Normally, this service is not needed. |
Disabled |
Remote Procedure Call (RPC) |
| RIP Listener |
|
Not installed by default. If you do not know what it
is, you do not need it. |
Leave not installed or Disabled |
Remote Procedure Call (RPC) |
| Routing and Remote Access |
|
If you do not know what it is, you do not need it. |
Leave not installed or Disabled |
NetBIOSGroup, Remote Procedure Call (RPC) |
| Secondary Logon |
Enables starting processes under alternate credentials. |
It is not known if any programs use this service, |
Disabled |
|
| Security Accounts Manager |
Like Protected Storage, it saves security information
for local users. |
This service is Required for IIS Admin. |
Disabled unless needed. |
Remote Procedure Call (RPC) |
| Server |
Used for file and print sharing from your computer or
if you use Message Queuing. |
Workstation is needed to connect to another computer
that has the files you are looking for. For security purposes, you
may Disable this service if you do not require local printers and files
to be shared across your network. |
Disabled unless needed. If a device stops working properly,
place this service into Automatic. |
|
| Shell Hardware Detection |
Used for the autoplay of devices such as memory cards. |
Set to Automatic if you are experiencing problems with
laptop docking stations. |
Disabled unless needed. |
Remote Procedure Call (RPC) |
| Simple Mail Transport Protocol (SMTP) |
|
Not installed by default, but if needed, you may install
it later. Supports the use of a local (outbound) email server. |
Leave not installed or Disabled |
Event Log, IIS Admin |
| Simple TCP/IP Services |
Supports some older UNIX networking services. |
Not installed by default, but if needed, you may install
it later. |
Leave not installed or Disabled |
AFD Networking Support Environment |
| Smart Card |
Supports the use of a Smart Card for local or network
computer authentication. |
If you do not have a "Smart Card" you
do not need this service. |
Disabled |
Plug and Play |
| Smart Card Helper |
Supports the use of a Smart Card for local or network
computer authentication. |
If you do not have a "Smart Card," you
do not need this service. |
Disabled |
|
| SNMP Service |
Supports the use of networking equipment that use SNMP
as a mode of management. |
Not installed by default, but if needed, you may install
it later. |
Leave not installed or Disabled |
Event Log |
| SNMP Trap Service |
Supports the use of networking equipment that use SNMP
as a mode of management |
Not installed by default, but if needed, you may install
it later. |
Leave not installed or Disabled |
Event Log |
| SSDP Discovery Service |
Used to locate UPnP devices on your home network. Used
in conjunction with Universal Plug and Play Device Host, it detects
and configures UPnP devices on your home network. |
For security reasons and unless you have these devices,
Disable this service. If any external device does not function as a
result of this service being disabled, place it back in to Automatic.
NOTE: UPnP is not related to PnP. UPnP is used for connectivity
on networks using TCP/IP to devices such as scanners or printers. Your
sound card is PnP. Do not disable Plug and Play service. |
Disabled |
|
| System Event Notification |
Used in conjunction with COM+ Event System, this service
notifies particular services when system events, such as logon and
power events occurs. |
Not needed by most users or programs |
Disabled |
COM+ Event System |
| System Restore Service |
Creates system snap shots or restore points for returning
to at a later time. |
Heavy resource uses. If not using System Restore, disable. |
Automatic |
Remote Procedure Call (RPC) |
| Task Scheduler |
This service is used to schedule maintenance, Microsoft
Backup sessions or maybe even AutoUpdate. |
You can do these manually if desired.
NOTE: BootVis Requires Task Scheduler and COM+ Event System to be
running if you want to take
advantage of the "optimize system" function, due to the pre-fetching
function built into XP. Pre-fetching only occurs on bootup, so if you
do not care about a few extra seconds of boot time, you can disable
Task Scheduler. |
Disabled unless using the programs mentioned here. |
Remote Procedure Call (RPC) |
| TCP/IP NetBIOS Helper Service |
Legacy support for NetBios over TCP/IP. |
If your network does not use NetBios, disable this function. |
Disabled |
AFD Networking Support Environment, NetBios over TCP/IP |
| TCP/IP Printer Server |
Used for setting up a local UNIX print server |
Not installed by default. If you do not need this function,
leave it uninstalled. |
Leave not installed or Disabled |
Print Spooler, TCP/IP Protocol Driver |
| Telephony |
Controls telephony devices on the local computer. |
This service is required for dial-up modem connectivity. |
Automatic if you require dial-up connectivity, Disabled
otherwise. |
Plug and Play, Remote Procedure Call (RPC) |
| Telnet |
Allows remote logon to the local computer through the
telnet function. |
For security reasons, this service should be Disabled
unless you specifically require its functionality. |
Disabled |
NT LM Security Support Provider, Remote Procedure Call
(RPC), TCP/IP Protocol Driver |
| Terminal Services |
Allows remote logon to the local computer. |
This service is required for Fast User Switching, Remote
Desktop and Remote Assistance. For security reasons, this service should
be Disabled unless you specifically require its functionality. |
Disabled |
Remote Procedure Call (RPC) |
| Themes |
Used to display XP themes and colors on your desktop. |
If you do not care about the "new" XP
look, disable this service to save memory. |
Disabled |
|
| Uninterruptible Power Supply |
|
If your UPS connects using USB, it may not need this
service to run.
Windows Update also has a "patch" for this service. |
Disabled |
|
| Universal Plug and Play Device Host |
Used in conjunction with SSDP Discovery Service, it detects
and configures UPnP devices on your home network. |
For security reasons and unless you have these devices,
Disable this service. If any external device does not function as a
result of this service being disabled, place it back in to Automatic.
NOTE: UPnP is not related to PnP. UPnP is used for connectivity
on networks using TCP/IP to devices such as scanners or printers. Your
sound card is PnP. Do not disable Plug and Play service. |
Disabled |
SSDP Discovery Service |
| Upload Manager |
As with BITS, this service manages file transfers between
clients and servers on the network. |
This service is not required for basic File and Print
sharing. If you are comfortable with using FTP, use that. |
Disabled |
Remote Procedure Call (RPC) |
| Volume Shadow Copy |
Used in conjunction with the MS Software Shadow Copy
Provider Service. |
MS Backup also uses these services. |
Disabled |
Remote Procedure Call (RPC) |
| WebClient |
|
For security reasons you may want to set this service
to Disabled. |
Disabled |
WebDav Client Redirector |
| Windows Audio |
This service is required if you want to hear audio. |
If your computer does not have a sound card, Disable
this service. |
Automatic if you have a sound card, Disabled if you do
not. |
Plug and Play, Remote Procedure Call (RPC) |
| Windows Image Acquisition (WIA) |
Used for some scanners and cameras. |
If, after Disabling this service, your scanner or camera
fails to function properly, enable this service. |
Disabled |
Remote Procedure Call (RPC) |
| Windows Installer |
This service is required for software programs that install
using MSI files. |
|
Automatic |
Remote Procedure Call (RPC) |
| Windows Management Instrumentation |
This service is required if you want
to see the "Dependencies" tab
in service configuration and you want everything to go smoothly. |
Disabling this service is not recommended. |
Automatic |
Event Log, Remote Procedure Call (RPC) |
| Windows Management Instrumentation Driver Extension |
|
Not as vital as Windows Management Instrumentation, but
it is recommend leaving this service in Manual. |
Manual |
|
| Windows Time |
Automatically sets your clock by contacting a server
on the Internet. |
Great idea if your network is always
connected to the Internet, but otherwise, the Event Log fills up
with "can not
find server" messages. |
Disabled unless you use it. |
|
| Wireless Zero Configuration |
Automatic configuration for wireless network devices. |
If you do not have any wireless network devices in use,
Disable this service. |
Disabled |
NDIS Usermode I/O Protocol, Remote Procedure Call (RPC) |
| WMI Performance Adapter |
|
Unknown uses |
Disabled |
Remote Procedure Call (RPC) |
| Workstation |
Used to connect local computer to remote computers, for
example, Internet connectivity and local File and Print sharing. Many
services depend on Workstation to be functioning. |
Leave it on Automatic. |
Automatic |
|
| World Wide Web Publishing Service |
Used for setting up a local web server. |
Not installed by default. If you do not need
this function, leave it uninstalled. |
Leave not installed or Disabled |
IIS Admin |