This page has been robot translated, sorry for typos if any. Original content here.

Services in Windows XP. Disable unused services.

While Windows XP is running, many services start and run. You can view the entire list of services by clicking "Start" - "Control Panel" - "Administrative Tools" "Services". But not all services are necessary for the normal operation of the computer. The following is a list of services that are disabled or enabled in my configuration . In fact, there may be more services. To access the Internet, I use a modem connection.

Warning : this process involves a certain degree of risk, and therefore it is desirable to have at least a general idea of ​​what we are going to do.

Ati hotkey poller
This service appears for Ati RADEON video card users.
Service Name : Ati HotKey Poller
Executable file or process name : Ati2evxx.exe
Service is necessary only if you use the ATi Hotkeys for configuration, which can be viewed in the ATi Control Panel. If you do not use them (in this case you do not lose anything), then you can Disable .

ATI Smart
Constantly monitors the quality of work and makes some adjustments to the graphics system, if necessary, to increase stability.
Service Name : ATI Smart
Executable file or process name : ati2sgag.exe
But he performs his tasks quite inefficiently, while devouring resources. But recommended mode is Auto

Automatic Updates
Includes downloading and installing key Windows updates automatically.
Service Name : wuauserv
Executable file or process name : svchost.exe
This service is unnecessary for me, so we set the mode to Disabled

WMI Performance Adapter
Provides performance library information from HiPerf WMI vendors. It seems to be related to the so-called Perfomance Counters - a system for providing information about loading memory, resources, various devices, etc.
Service Name : WmiApSrv
Executable file or process name : wmiapsrv.exe
Only necessary for specific software, therefore - Disabled




Wireless Setup (Wireless Zero Configuration)
Provides automatic configuration of 802.11 adapters.
Service Name : WZCSVC
Executable file or process name : svchost.exe
If wireless adapters are not connected to the computer, then - Disabled




Windows Firewall / Internet Sharing (ICS)
Provides support for address translation, addressing, and name resolution services or prevents service intrusion on a home or small office network.
Service Name : SharedAccess
Executable file or process name : svchost.exe
When using a third-party product to protect your computer, such as Outpost firewall, Norton Personal Firewall, ZoneAlarm, etc., the recommended mode is Disabled .




Web Client (WebClient)
Allows Windows programs to create, access and modify files stored on the Internet.
Service Name : WebClient
Executable file or process name : svchost.exe
There are no useful functions in this service, so the mode is Disabled .




Secondary Logon
Allows you to start processes on behalf of another user. If this service is stopped, this type of user registration is not available
Service Name : seclogon
Executable file or process name : svchost.exe
I have this service - Disabled




Remote Access Auto Connection Manager
Creates a connection to a remote network when a program accesses a remote DNS or NetBIOS name or address.
Service Name : RasAuto
Executable file or process name : svchost.exe
This service may be necessary for the functioning of your Internet connection. We expose - Manually




Logical Disk Manager
Discovery and monitoring of new hard drives and transferring information about hard drive volumes to the logical drive manager management service
Service Name : dmserver
Executable file or process name : svchost.exe
If this service is stopped, the status of dynamic disks and configuration information may be outdated. We expose - Manually




Print Spooler
The print spooler is a key component of the Windows printing system. It manages print queues in the system, and also interacts with printer drivers and I / O components, such as USB ports and TCP / IP protocols.
Service Name : Spooler
Executable file or process name : spoolsv.exe
Since I have not installed any printers, we set it to Disabled .




Remote Access Connection Manager
Creates a network connection
Service Name : RasMan
Executable file or process name : svchost.exe
This service is required if you use Internet sharing. We expose - Manually .




Remote Desktop Help Session Manager
Manages the capabilities of the remote assistant.
Service Name : RDSessMgr
Executable file or process name : sessmgr.exe
Since I do not need the services of a remote assistant, we set it to Disabled .




Network DDE Manager (Network DDE DSDM)
Manages network shares of dynamic data exchange (DDE).
Service Name : NetDDE dsdm
Executable file or process name : netdde.exe
If you do not use the Exchange folder server (ClipBook), the mode is Disabled .




Security Accounts Manager
Stores security information for a local user account
Service Name : SamSs
Executable file or process name : lsass.exe
This service is required for IIS Admin (IIS Admin). Recommended - Auto .




Access to HID Devices (Human Interface Device Access)
Provides universal access to HID devices (Human Interface Devices), which activates and supports the use of predefined shortcut keys on keyboards, control devices, or other multimedia devices
Service Name : HidServ
Executable file or process name : svchost.exe
If there is no problem after disconnecting, then the mode is Disabled.




Event Log
Provides support for viewing event log messages issued by Windows programs and system components, and viewing these messages
Service Name : Eventlog
Executable file or process name : services.exe
This service cannot be stopped. This service helps to identify failed programs that cause errors during the operation of the operating system. Recommended mode - Auto .




Performance Logs and Alerts
Controls the collection of performance data from local or remote computers based on a specified schedule, and ensures that this data is logged or triggers an alert.
Service Name : SysmonLog
Executable file or process name : smlogsvc.exe
If you are not going to collect performance data, then the mode is Disabled .




Protected Storage
Provides secure storage of sensitive data, such as private keys, to prevent unauthorized access to services, processes, or users.
Service Name : ProtectedStorage
Executable file or process name : lsass.exe
If you have to work with encrypted data and keys from various programs, then the mode is Auto . For security reasons, this service is Disabled .




Windows Management Instrumentation
Provides a common interface and object model for accessing information about managing the operating system, devices, applications, and services
Service Name : Winmgmt
Executable file or process name : svchost.exe
After stopping this service, many Windows applications may not work correctly. When this service is disabled, services dependent on it cannot be started. Recommended mode - Auto .




Uninterruptible Power Supply
Controls the operation of uninterruptible power supplies (UPS) connected to a computer.
Service Name : UPS
Executable file or process name : ups.exe
If there is no source, then the mode is Disabled .




Distributed Link Tracking Client
Supports links between NTFS files that are moved within a computer or between computers in a domain.
Service Name : TrkWks
Executable file or process name : svchost.exe
For this service, you can set the mode to - Manual .




Distributed Transaction Coordinator
Coordinate transactions across multiple resource managers, such as databases, message queues, and file systems.
Service Name : MSDTC
Executable file or process name : msdtc.exe
If this service is stopped, such transactions will not be executed. If this service is disabled, all services that explicitly depend on it will not be able to start. Recommended mode - Manual .




Remote Procedure Call (RPC) Locator
The remote procedure call locator system service manages the RPC name service database.
Service Name : RpcLocator
Executable file or process name : locator.exe
If there is a network connection, then the mode is Manual . Since I do not have a network, the mode is Disabled .




Routing and Remote Access
It offers routing services to organizations in local and global networks.
Service Name : RemoteAccess
Executable file or process name : svchost.exe
This service is necessary if you want to allow incoming connections to your computer using a modem (or other devices) to gain access to your local network. Recommended in order to increase security mode - Disabled .




NetBIOS Support Module over TCP / IP (TCP / IP NetBIOS Helper Service)
Includes support for NetBIOS over TCP / IP (NetBT) and NetBIOS name resolution. This service is necessary for the normal support of NetBIOS over TCP / IP.
Service Name : LmHosts
Executable file or process name : svchost.exe
Recommended mode - Auto . If your network does not use NetBIOS or WINS, or if there is no network at all, then - Disabled .




Smart Card Helper
Provides support for older smart card readers (without PnP).
Service Name : SCardDrv
Executable file or process name : SCardSvr.exe
If you do not use smart cards, then the mode is Disabled .




Computer Browser
Serves the list of computers on the network and issues it to programs upon request.
Service Name : Browser
Executable file or process name : svchost.exe
This service can be safely switched to - Disabled .




Annunciator (Alerter)
Sends administrative alerts to selected users and computers.
Service Name : Alerter
Executable file or process name : svchost.exe
If the service is stopped, a program that uses administrative alerts will not receive them. If this service is not resolved, you cannot start any explicitly dependent services. I do not need this service, so the mode is Disabled .




Shell Hardware Detection
Provides notifications for auto-play or Auto-Run events.
Service Name : ShellHWDetection
Executable file or process name : svchost.exe
We leave this service in the - Auto mode.




Task Scheduler
Allows you to configure the schedule for automatic execution of tasks on this computer.
Service Name : Scheduler
Executable file or process name : svchost.exe
If you do not plan to launch programs at a certain time, then the mode is Disabled .




NT LM Security Support Provider
Provides security for programs that use remote procedure calls (RPC) over transports other than named pipes.
Service Name : NtLmSsp
Executable file or process name : lsass.exe
this service when using Message Queuing or Telnet server. Recommended mode - Manual .




Workstation
Provides network connectivity and connectivity.
Service Name : lanmanworkstation
Executable file or process name : svchost.exe
If the service is stopped, the program, connection data will be unavailable. If this service is not resolved, you cannot start any explicitly dependent services. Recommended mode is Auto .




Windows Management Instrumentation Driver Extension (WMI) driver extensions
Provides the exchange of control information with devices
Service Name : Wmi
Executable file or process name : svchost.exe
The mode for this service is Manual .

Server
Provides support for sharing files, printers, and named pipes for this computer through a network connection.
Service Name : lanmanserver
Executable file or process name : svchost.exe
This service can be disabled if there is no network, so the mode is Disabled .




Exchange Folder Server (ClipBook)
Allows you to view the pages of folders exchanged by remote computers.
Service Name : ClipSrv
Executable file or process name : clipsrv.exe
If this service is stopped, the Exchange Folder Viewer cannot exchange information with remote computers. If this service is disabled, any services that explicitly depend on it cannot be started. This service is in my mode - Disabled .




Network Logon (Net Logon)
Supports pass-through identification of account login events for domain computers.
Service Name : Netlogon
Executable file or process name : lsass.exe
This service can be switched to the mode - Disabled .




Network Connections
Manages the objects of the Network and remote access to the network folder, which displays the properties of the local network and remote access connections.
Service Name : Netman
Executable file or process name : svchost.exe
This service is required to support network connections. Recommended mode - Manual .




COM + Event System
Support for the System Event Notification Service (SENS), which automatically distributes events to subscribed COM components.
Service Name : EventSystem
Executable file or process name : svchost.exe
If this service is stopped, SENS will be closed and will not be able to provide entry and exit notifications. If this service is disabled, all services that explicitly depend on it will not be able to start. Recommended mode - Manual .




System Application COM + (COM + System Application)
Manage configuration and tracking of COM + components.
Service Name : COMSysApp
Executable file or process name : dllhost.exe
If this service is stopped, most COM + components will not work correctly. If this service is disabled, all services that explicitly depend on it will not be able to start. Recommended mode - Manual .




IMAPI CD Burning COM Service (IMAPI CD-Burning COM Service)
This service manages CD burning using IMAPI (Image Mastering Applications Programming Interface).
Service Name : ImapiService
Executable file or process name : imapi.exe
If there is a popular package for burning Nero discs, then why is this service needed? True, red marks remain in the event log after each system startup, but this is fixable: Administration - Component Services - Console Root - Component Services - Computers - My Computer - DCOM Setup - Microsoft IMAPI. Next, "Properties", the "Location" tab, uncheck "Run the application on this computer." For this service, the mode is Disabled .




Logical Disk Manager Administrative Service
Performs configuration of hard drives and volumes.
Service Name : dmadmin
Executable file or process name : dmadmin.exe
This service runs only during configuration processes and then stops. Recommended mode - Manual .




System Restore Service
Performs system recovery functions. To stop this service, you should disable system recovery on the System Restore tab, which can be accessed by right-clicking on the My Computer shortcut on the desktop and selecting Properties
Service Name : srservice
Executable file or process name : svchost.exe
The name itself says that the service should be in Auto mode. In my case, this service is Disabled .




Windows Time Service (Windows Time)
Manages date and time synchronization on all clients and servers on the network.
Service Name : W32Time
Executable file or process name : svchost.exe
If this service is stopped, date and time synchronization will not be available. If this service is disabled, any services that explicitly depend on it cannot be started. I do not need this service. Set the mode to Disabled .




Image Download Service (WIA) (Windows Image Acquisition)
Provides services for receiving images from scanners and digital cameras.
Service Name : stisvc
Executable file or process name : svchost.exe
Set the mode to Manual .




Indexing Service
Indexes the contents and properties of files on local and remote computers, provides quick access to files using a flexible query language.
Service Name : cisvc
Executable file or process name : cisvc.exe
The indexing system can turn on not only during computer downtime, but also at any very inopportune time. We translate this service into the mode - Disabled .




SSDP Discovery Service
Enable UPnP device discovery on the home network.
Service Name : SSDPSRV
Executable file or process name : svchost.exe
Disable this service. Mode - Disabled .




Error Reporting Service
Allows you to register errors for services and applications running in a non-standard environment.
Service Name : ERSvc
Executable file or process name : svchost.exe
If an error occurs, the service sends information to Microsoft. I do not need such a service - Disabled .




Portable Media Serial Number Service
Gets the serial number of the portable media player connected to this computer.
Service Name : WmdmPmSp
Executable file or process name : svchost.exe
If this service is stopped, protected content may not be downloaded to the device. Leave this service in the - Manual mode.




Network DDE Service (Network DDE)
Provides network transport and security for dynamic data exchange (DDE) for programs running on one or on different computers.
Service Name : NetDDE
Executable file or process name : netdde.exe
If Ds do not use the Exchange folder server (ClipBook), then the mode is Disabled .




Network Location Awareness (NLA)
This service collects and stores information about the location and network settings, and also notifies applications of their change
Service Name : Nla
Executable file or process name : svchost.exe
Recommended mode - Manual.




Message Service (Messenger)
Sends and receives messages sent by administrators or the alert service. This service is not related to Windows Messenger.
Service Name : Messenger
Executable file or process name : services.exe
If you are not using Windows Messenger, then the recommended mode is Disabled .




Application Layer Gateway Service
Designed to support plug-ins that allow network protocols to go through the firewall and function when using Internet Connection Sharing.
Service Name : ALG
Executable file or process name : alg.exe
Recommended mode - Manual .




IPSEC Services
Manages the IP Security Policy and launches ISAKMP / Oakley (IKE) and the IP Security Driver.
Service Name : PolicyAgent
Executable file or process name : lsass.exe
On the home computer, this service can be - Disable .




Cryptographic Services
It provides three management services: a directory database service that verifies the digital signatures of Windows files; Secure Root Service, which adds and removes the certificate authority’s trusted root certificates from this computer. and a key service that allows you to apply for certificates from this computer.
Service Name : CryptSvc
Executable file or process name : svchost.exe
If this service is stopped, all of these management services will not work. Essentially, this service checks for Windows file signatures. Recommended mode is Auto .




Terminal Services
This service provides the ability for multiple users to interactively connect to a computer and displays the desktop and applications on remote computers. It is the basis for Remote Desktop (including remote administration), fast user switching, Remote Assistance, and Terminal Services.
Service Name : TermService
Executable file or process name : svchost.exe
The recommended mode for this service is Manual , but mine is Disabled .




Smart Cards
This service controls access to smart card readers.
Service Name : SCardSvr
Executable file or process name : SCardSvr.exe
If this service is stopped, this computer will not be able to read smart cards. I do not need it - Disabled .




Fast User Switching Compatibility
This service manages applications that require support in a multi-tenant environment.
Service Name : FastUserSwitching Compatibility
Executable file or process name : svchost.exe
It makes sense to enable the service if several users are working on your system, otherwise there is no need to start this service. If you still decide to enable the service, then it will allow you to switch between users without closing running programs, which are very convenient. Recommended mode - Manual .




Help and Support
Provides the ability to operate the Help and Support Center on this computer.
Service Name : helpsvc
Executable file or process name : svchost.exe
This service is required to run Microsoft help documents. Recommended mode - Manual .




Removable Storage
This service manages removable media, disks, and libraries. It is necessary for working with removable media (magneto-optical drives, etc.).
Service Name : NtmsSvc
Executable file or process name : svchost.exe
If you began to have problems (autorun stopped working, etc.) with your CD-ROM, DVD-ROM, etc., then set the value to Auto . Recommended mode - Manual .




Telephony (Telephony)
Provides support for the Telephony API (TAPI) for programs that manage telephone equipment and voice IP connections on this computer, as well as via LAN - on servers where the corresponding service is running.
Service Name : TapiSrv
Executable file or process name : svchost.exe
Recommended mode - Manual.




Themes
Management of themes.
Service Name : Themes
Executable file or process name : svchost.exe
If themes are used, the mode is Auto . I like the classic look. Mode - Disabled .




Shadow copy of volume (Volume Shadow Copy)
Controls the creation of shadow copies (status checkpoints) of disk volumes that are used for backup and recovery or for other purposes.
Service Name : VSS
Executable file or process name : vssvc.exe
If this service is stopped, shadow copies of recovery volumes will not be available and backup and recovery may not work. If this service is disabled, any services that explicitly depend on it cannot be started. Recommended mode - Manual .




System Event Notification
This service logs system events, such as registration in Windows, the network and changes in the power supply. Notifies COM + system event subscribers by sending alerts.
Service Name : SENS
Executable file or process name : svchost.exe
Recommended value is Auto .




Remote Procedure Call (RPC)
This service can be called key in Windows XP, your system will not work without it, which is why this is the only service that you cannot disable through the Services console
Service Name : RpcSs
Executable file or process name : svchost.exe
This service should always be in Auto mode.




Remote Registry Service
Allows remote users to modify registry settings on this computer
Service Name : RemoteRegistry
Executable file or process name : svchost.exe
This service is recommended to be switched to the mode - Disabled .




Universal PnP Device Host (Universal Plug and Play Device Host)
This service provides support for host PnP devices.
Service Name : UPNPhost
Executable file or process name : svchost.exe
Recommended mode - Disabled .




Application Management
Provides software installation services, such as assignment, publication, and deletion.
Service Name : AppMgmt
Executable file or process name : svchost.exe
Recommended mode - Manual .




Background Intelligent Transfer Service
Provides data transfer between clients and servers in the background.
Service Name : BITS
Executable file or process name : svchost.exe
If BITS is disabled, features such as Windows Update may not work correctly. Especially not necessary. Mode - Disabled .




Security Center
Monitors system security settings and parameters.
Service Name : wscsvc
Executable file or process name : svchost.exe
The Security Center does not carry any additional functionality besides facilitating access to the protection settings of your computer. Recommended mode - Disabled .

DHCP Client
Manages network configuration by registering and updating IP addresses and DNS names
Service Name : Dhcp
Executable file or process name : svchost.exe
Many DSL or cable connections require this service to provide Internet access. If you disable this service and your Internet connection stops working, then return the mode to Auto . In my configuration, this service is in Manual mode.


DNS Client
Resolves DNS names to addresses for this computer and puts them in the cache.
Service Name : Dnscache
Executable file or process name : svchost.exe
If the service is stopped, you cannot resolve the DNS names and host the Active Directory directory service of domain controllers. If this service is not resolved, you cannot start any explicitly dependent services. Recommended mode is Auto . Although I have a mode - Manual .




MS Software Shadow Copy Provider (MS Software Shadow Copy Provider)
Manages shadow copies obtained by shadow copying a volume.
Service Name : SwPrv
Executable file or process name : dllhost.exe
If the service is stopped, there will be no way to manage shadow copies. If the service is disconnected, all explicitly dependent services cannot be started. Recommended mode - Manual .




NetMeeting Remote Desktop Sharing (NetMeeting Remote Desktop Sharing)
Allows trusted users to access the Windows desktop through a corporate intranet using NetMeeting.
Service Name : mnmsrvc
Executable file or process name : mnmsrvc.exe
If this service is stopped, remote desktop control is not available. If this service is disabled, any services that explicitly depend on it cannot be started. Own security is more expensive, so the mode is Disabled .




Plug and Play (Plug and Play)
Allows the computer to recognize changes in installed equipment and adapt to them, either without requiring user intervention, or minimizing it.
Service Name : PlugPlay
Executable file or process name : services.exe
Stopping or disabling this service may cause the system to become unstable. Never disable this service. The mode is always Auto .




QoS RSVP (QoS RSVP)
Provides network alerts and local traffic management for QoS programs and control programs
Service Name : RSVP
Executable file or process name : rsvp.exe
Recommended mode - Disabled .




Telnet (Telnet)
It allows a remote user to log into the system and run programs, supports various TCP / IP Telnet clients, including computers with UNIX and Windows operating systems.
Service Name : TlntSvr
Executable file or process name : tlntsvr.exe
If this service is stopped, the remote user will not be able to start the program. If this service is disabled, any services that explicitly depend on it cannot be started. Why do I need a remote user? Recommended mode - Disabled .




Windows Audio (Windows Audio)
Sound device management for Windows programs
Service Name : AudioSrv
Executable file or process name : svchost.exe
If this service is stopped, sound devices and effects will not work properly. If this service is disabled, any services that explicitly depend on it cannot be started. Recommended mode is Auto .




Windows Installer (Windows Installer)
This service allows you to install, uninstall or restore software in accordance with the instructions of the MSI files. This service is required to install applications that use MSI files.
Service Name : MSIServer
Executable file or process name : msiexec.exe
If this service is disabled, any services that explicitly depend on it cannot be started. Recommended mode - Manual .