This page has been robot translated, sorry for typos if any. Original content here.

Services in Windows XP. Disable unused services.

While Windows XP is running, many services are started and running. To view the entire list of services, click "Start" - "Control Panel" - "Administration" "Services". But not all services are necessary for the normal operation of the computer. Below is a list of services that are disabled or included in my configuration . In fact, there may be more services. To access the Internet, I use a dial-up connection.

Warning : this process implies a certain degree of risk, and therefore it is desirable to have at least a general idea of ​​what we are going to do.

Ati HotKey Poller
This service appears for users of video cards from Ati RADEON.
Service Name : Ati HotKey Poller
Executable file or process name : Ati2evxx.exe
The service is required only if you use the hotkeys ATi Hotkey to configure, which can be viewed in the ATi Control Panel. If you do not use them (in this case you do not lose anything), you can Disable .

ATI Smart
Constantly observes the quality of work and makes some adjustments in the work of the graphics system, if necessary to improve stability.
Service Name : ATI Smart
Executable file or process name : ati2sgag.exe
But it performs its tasks quite inefficiently, while devouring resources. But the recommended mode is Auto

Automatic Updates
Includes downloading and installing key updates of Windows in automatic mode.
Service name : wuauserv
Executable file or process name : svchost.exe
This service is unnecessary for me, so put the mode - Disabled

WMI Performance Adapter (WMI Performance Adapter)
Provides information about performance libraries from WMI HiPerf providers. It seems that it has something to do with the so-called. Perfomance Counters - a system for providing information on loading memory, resources, various devices, etc.
Service Name : WmiApSrv
Executable file or process name : wmiapsrv.exe
It is necessary only for a specific software, therefore - Disabled




Wireless Configuration (Wireless Zero Configuration)
Provides automatic configuration of 802.11 adapters.
Service Name : WZCSVC
Executable file or process name : svchost.exe
If no wireless adapters are connected to the computer, then - Disabled




Windows Firewall / Internet Sharing (ICS)
Provides support for address translation, addressing and name resolution services, or prevents intrusion of services on a home or small office network.
Service Name : SharedAccess
Executable file or process name : svchost.exe
If you use a third-party product to protect your computer, for example, Outpost firewall, Norton Personal Firewall, ZoneAlarm, etc., it is recommended that the mode is Disabled .




Web Client (WebClient)
Allows Windows programs to create, access and modify files stored on the Internet.
Service name : WebClient
Executable file or process name : svchost.exe
There are no useful functions in this service, so the mode is Disabled .




Secondary Logon (Secondary Logon)
Allows you to run processes on behalf of another user. If this service is stopped, this type of user registration is unavailable
Service Name : seclogon
Executable file or process name : svchost.exe
This service I have - Disabled




The Remote Access Auto Connection Manager
Creates a connection to the remote network when the program accesses a remote DNS or NetBIOS name or address.
Service Name : RasAuto
Executable file or process name : svchost.exe
This service may be necessary for the functioning of your Internet connection. Expose - Manually




The Logical Disk Manager
Detect and monitor new hard disks and transfer information about hard disk volumes to the Logical Disk Manager management service
Service name : dmserver
Executable file or process name : svchost.exe
If this service is stopped, the state of the dynamic disks and the configuration information may become obsolete. Expose - Manually




Spooler (Print Spooler)
Spooler is a key component of the printing system in Windows. It manages the print queues in the system, and also interacts with printer drivers and I / O components, such as USB ports and TCP / IP protocols.
Service Name : Spooler
Executable file or process name : spoolsv.exe
Since I have not installed any printer, I set it to - Disabled .




Remote Access Connection Manager
Creates a network connection
Service Name : RasMan
Executable file or process name : svchost.exe
This service is required if you are sharing Internet. Expose - Manually .




Remote Desktop Help Session Manager
Manages the capabilities of the remote assistant.
Service Name : RDSessMgr
Executable file or process name : sessmgr.exe
Since I do not need remote assistant services, then we expose - Disabled .




Network DDE Manager (Network DDE DSDM)
Manages shared network shares of dynamic data exchange (DDE).
Service name : NetDDE dsdm
Executable file or process name : netdde.exe
If you do not use the clipboard server (ClipBook), the mode is Disabled .




The Security Accounts Manager
Stores security information for a local user account
Service Name : SamSs
Executable file or process name : lsass.exe
This service is required for IIS Admin (IIS Admin). Recommended - Auto .




Access to HID-devices (Human Interface Device Access)
Provides universal access to HID-devices (Human Interface Devices), which activates and supports the use of predefined shortcut keys on the keyboard, control devices or other multimedia devices
Service Name : HidServ
Executable file or process name : svchost.exe
If there are no problems after shutdown, the mode is Disabled




Event Log
Provides support for messages from event logs issued by Windows programs and system components, and viewing of these messages
Service Name : Eventlog
Executable file or process name : services.exe
This service can not be stopped. This service helps to identify the faulty programs that cause errors when operating the operating system. Recommended mode - Auto .




Logs and performance alerts (Performance Logs and Alerts)
Manages the collection of performance data from local or remote computers that are performed based on a specified schedule, and provides a record of these data in the logs or triggers an alert.
Service Name : SysmonLog
Executable file or process name : smlogsvc.exe
If you are not going to collect performance data, then the mode is Disabled .




Protected Storage
Provides secure storage of sensitive data, such as private keys, to prevent unauthorized access to services, processes or users.
Service Name : ProtectedStorage
Executable file or process name : lsass.exe
If you have to work with encrypted data and keys from different programs, then the mode is Auto . I have this service disabled for security reasons.




Windows Management Instrumentation
Provides a common interface and object model for accessing operating system management information, devices, applications, and services
Service name : Winmgmt
Executable file or process name : svchost.exe
After stopping this service, many Windows applications may not work correctly. If you disable this service, the services dependent on it can not be started. Recommended mode - Auto .




Uninterruptible Power Supply
Manages the operation of uninterruptible power supplies (UPS) connected to a computer.
Service Name : UPS
Executable file or process name : ups.exe
If there is no source, then the mode is Disabled .




The Distributed Link Tracking Client
Supports the communication of NTFS files that are moved within the computer or between computers in the domain.
Service Name : TrkWks
Executable file or process name : svchost.exe
For this service, you can set the mode to Manual .




The Distributed Transaction Coordinator
Coordinate transactions that span multiple resource managers, such as databases, message queues, and file systems.
Service Name : MSDTC
Executable file or process name : msdtc.exe
If this service is stopped, such transactions will not be performed. If this service is disabled, all services that explicitly depend on it can not start. Recommended mode - Manual .




Remote Procedure Call (RPC) Locator (RPC) Locator
The Remote Procedure Call Locator system service manages the RPC name service database.
Service Name : RpcLocator
Executable file or process name : locator.exe
If there is a network connection, then the mode is Manual . Since I do not have a network, the mode is Disabled .




Routing and Remote Access (Routing and Remote Access)
It offers routing services to organizations in local and global networks.
Service Name : RemoteAccess
Executable file or process name : svchost.exe
This service is required if you want to allow incoming connections to your computer using a modem (or other devices) to gain access to your local network. It is recommended in order to improve the security mode - Disabled .




NetBIOS Support Module over TCP / IP (TCP / IP NetBIOS Helper Service)
Includes support for NetBIOS over TCP / IP (NetBT) and for resolving NetBIOS names in addresses. This service is required for normal NetBIOS support over TCP / IP.
Service Name : LmHosts
Executable file or process name : svchost.exe
Recommended mode - Auto . If your network does not use NetBIOS or WINS, or there is no network at all, then - Disabled .




Smart Card Helper
Provides support for older smart card readers (without PnP).
Service Name : SCardDrv
Executable file or process name : SCardSvr.exe
If you do not use smart cards, the mode is Disabled .




Computer Browser
Serves a list of computers on the network and issues it to programs on request.
Service Name : Browser
Executable file or process name : svchost.exe
This service can be safely moved to the mode - Disabled .




Alerter
Sends administrative notifications to selected users and computers.
Service Name : Alerter
Executable file or process name : svchost.exe
If the service is stopped, the program using administrative notifications will not receive it. If this service is not resolved, you can not run any explicitly dependent services. I do not need this service, so the mode is Disabled .




Shell Hardware Detection
Provides notifications for automatic playback events or executing "Autostart".
Service Name : ShellHWDetection
Executable file or process name : svchost.exe
We leave this service in Auto mode.




Task Scheduler (Task Scheduler)
Allows you to configure the schedule for the automatic execution of tasks on this computer.
Service Name : Scheduler
Executable file or process name : svchost.exe
If you do not plan to run programs at a certain time, then the mode is Disabled .




The NT LM Security Support Provider
Provides security for programs that use remote procedure calls (RPCs) through transports other than named pipes.
Service Name : NtLmSsp
Executable file or process name : lsass.exe
this service when using Message Queuing or Telnet server. Recommended mode - Manual .




Workstation
Provides support for network connections and communication.
Service name : lanmanworkstation
Executable file or process name : svchost.exe
If the service is stopped, the program, connection data will be unavailable. If this service is not resolved, you can not run any explicitly dependent services. The recommended mode is Auto .




WMI driver extensions (Windows Management Instrumentation Driver Extension)
Provides the exchange of control information with devices
Service Name : Wmi
Executable file or process name : svchost.exe
The mode for this service is Manual .

Server
Provides support for sharing files, printers, and named pipes for this computer through a network connection.
Service name : lanmanserver
Executable file or process name : svchost.exe
This service can be disabled if there is no network, so the mode is Disabled .




Clipboard server (ClipBook)
Allows you to view the pages of the exchange folders of remote computers.
Service Name : ClipSrv
Executable file or process name : clipsrv.exe
If this service is stopped, the Exchange folder browser can not communicate with remote computers. If this service is disabled, any services that are explicitly dependent on it can not be started. This service is in my mode - Disabled .




Network Logon (Net Logon)
Supports end-to-end authentication of account login events for domain computers.
Service Name : Netlogon
Executable file or process name : lsass.exe
This service can be switched to the - Disconnected mode.




Network Connections
Manages the objects in the Network folder and dial-up network, which displays the properties of the local network and dial-up connections.
Service Name : Netman
Executable file or process name : svchost.exe
This service is required to support network connections. Recommended mode - Manual .




COM + Event System (COM + Event System)
Support for the System Event Notification Service (SENS), which provides automatic distribution of events to the subscribed COM components.
Service Name : EventSystem
Executable file or process name : svchost.exe
If this service is stopped, SENS will be closed and will not be able to provide notifications for logging in and out. If this service is disabled, all services that explicitly depend on it can not start. The recommended mode is Manual .




System application COM + (COM + System Application)
Managing the configuration and tracking of COM + components.
Service name : COMSysApp
Executable file or process name : dllhost.exe
If this service is stopped, most COM + components will not work correctly. If this service is disabled, all services that explicitly depend on it can not start. The recommended mode is Manual .




The COM service of CD burning of IMAPI (IMAPI CD-Burning COM Service)
This service manages the recording of CDs using IMAPI (Image Mastering Applications Programming Interface).
Service Name : ImapiService
Executable file or process name : imapi.exe
If there is a popular package for burning Nero discs, then why is this service needed? True, in the event log, after every system startup, there are red marks, but this is fixable: Administration - Component Services - Console Roof - Component Services - Computers - My Computer - DCOM Configuration - Microsoft IMAPI. Next, "Properties" tab "Location", remove the check mark "Run the application on this computer." For this service, the mode is Disabled .




The Logical Disk Manager Administrative Service
Configures hard disks and volumes.
Service name : dmadmin
Executable file or process name : dmadmin.exe
This service is performed only during configuration configuration processes, and then stops. The recommended mode is Manual .




System Restore Service
Performs system restore functions. To stop this service, you should disable System Restore on the System Restore tab, which you can access by right-clicking on the My Computer shortcut on the desktop and selecting Properties
Service name : srservice
Executable file or process name : svchost.exe
The name itself says that the service should be in the Auto mode. In my case, this service is Disabled .




Windows Time Service (Windows Time)
Manages the synchronization of the date and time on all clients and servers on the network.
Service Name : W32Time
Executable file or process name : svchost.exe
If this service is stopped, the date and time synchronization will not be available. If this service is disabled, any services that are explicitly dependent on it can not be started. I do not need this service. We set the mode - Disabled .




Image Acquisition Service (WIA) (Windows Image Acquisition)
Provides services for obtaining images from scanners and digital cameras.
Service name : stisvc
Executable file or process name : svchost.exe
We set the mode to Manual .




Indexing Service
Indexes content and properties of files on local and remote computers, provides quick access to files using a flexible query language.
Service name : cisvc
Executable file or process name : cisvc.exe
The indexing system can turn on not only during a computer downtime, but also at any most inopportune time. This service is transferred to the mode - Disabled .




SSDP Discovery Service
Enable detection of UPnP devices on the home network.
Service Name : SSDPSRV
Executable file or process name : svchost.exe
We disable this service. Mode - Disabled .




Error Reporting Service
Allows you to log errors for services and applications running in a non-standard environment.
Service Name : ERSvc
Executable file or process name : svchost.exe
When an error occurs, the service sends information to Microsoft. I do not need such a service - Disconnected .




Serial Number Service for Portable Media Devices
Gets the serial number of the portable media player connected to this computer.
Service name : WmdmPmSp
Executable file or process name : svchost.exe
If this service is stopped, the protected content may not be downloaded to the device. Leave this service in the mode - Manually .




Network DDE Service
Provides network transport and security for dynamic data exchange (DDE) for programs running on one or on different computers.
Service Name : NetDDE
Executable file or process name : netdde.exe
If Ds do not use the Clipboard Server, the mode is Disabled .




Network Location Awareness (NLA)
This service collects and stores location information and network settings, and notifies applications of their changes
Service Name : Nla
Executable file or process name : svchost.exe
The recommended mode is Manual.




Messenger
Sends and receives messages sent by administrators or an alert service. This service is not related to the Windows Messenger program.
Service Name : Messenger
Executable file or process name : services.exe
If you do not use Windows Messenger, then the recommended mode is Disabled .




The Application Layer Gateway Service
It is designed to support plug-ins that allow network protocols to pass through the firewall and function in the case of sharing Internet connection.
Service Name : ALG
Executable file or process name : alg.exe
The recommended mode is Manual .




IPSEC Services (IPSEC Services)
Manages the IP Security policy and runs ISAKMP / Oakley (IKE) and the IP Security driver.
Service Name : PolicyAgent
Executable file or process name : lsass.exe
On the home computer this service can be - Disable .




Cryptographic Services
Provides three management services: a directory database service that verifies the digital signatures of Windows files; a secure root service that adds and removes certificates from the trusted root of the certification authority from that computer; and a key service that allows you to apply for certificates from this computer.
Service Name : CryptSvc
Executable file or process name : svchost.exe
If this service is stopped, all of these management services will not work. In fact, this service checks the signatures of Windows files. The recommended mode is Auto .




Terminal Services
This service allows several users to interactively connect to the computer and displays the desktop and applications on remote computers. It is the basis for remote desktop (including remote administration), fast switching of users, remote assistant and terminal services.
Service name : TermService
Executable file or process name : svchost.exe
The recommended mode for this service is Manual , but I have - Disabled .




Smart Cards
This service controls access to smart card readers.
Service Name : SCardSvr
Executable file or process name : SCardSvr.exe
If this service is stopped, this computer will not be able to read smart cards. I do not need it - Disconnected .




Fast User Switching Compatibility
This service manages applications that require support in a multi-user environment.
Service Name : FastUserSwitching Compatibility
Executable file or process name : svchost.exe
It makes sense to include the service if several users are running on your system, otherwise there is no need to start this service. If you still decide to turn on the service, then it will allow you to switch between users without closing the running programs, which can be very convenient. The recommended mode is Manual .




Help and Support
Enables the Help and Support Center to work on this computer.
Service name : helpsvc
Executable file or process name : svchost.exe
This service is required to run Microsoft reference documents. The recommended mode is Manual .




Removable Storage
This service manages removable media, disks and libraries. It is necessary for working with removable media (magneto-optical drives, etc.).
Service Name : NtmsSvc
Executable file or process name : svchost.exe
If you start having problems (stopped running autorun, etc.) with your CD-ROM, DVD-ROM, etc., then set the value to Auto . The recommended mode is Manual .




Telephony
Provides support for the Telephony API (TAPI) for programs that manage telephone equipment and voice IP connections on this computer, and also through LANs on servers where the corresponding service is running.
Service Name : TapiSrv
Executable file or process name : svchost.exe
The recommended mode is Manual.




Themes
Managing the themes of the design.
Service Name : Themes
Executable file or process name : svchost.exe
If themes are used, the mode is Auto . I like the classic look. Mode - Disabled .




Volume Shadow Copy
Manages the creation of shadow copies (status checkpoints) of disk volumes that are used for archiving and restoring or for other purposes.
Service Name : VSS
Executable file or process name : vssvc.exe
If this service is stopped, shadow copies of the recovery volumes will not be available and the backup and restore might not work. If this service is disabled, any services that are explicitly dependent on it can not be started. The recommended mode is Manual .




Notification of system events (System Event Notification)
This service logs system events, such as logging on to Windows, on the network, and changes in the power supply. Notifies subscribers from the category COM + system event by sending notifications.
Service Name : SENS
Executable file or process name : svchost.exe
The recommended value is Auto .




Remote Procedure Call (RPC)
This service can be called the key in Windows XP, your system will not work without it, which is why this is the only service that you can not disconnect through the Service console
Service Name : RpcSs
Executable file or process name : svchost.exe
This service should always be in Auto mode.




Remote Registry Service
Allows remote users to modify the registry settings on this computer
Service Name : RemoteRegistry
Executable file or process name : svchost.exe
This service is recommended to be switched to the mode - Disabled .




Universal Plug and Play Device Host
This service provides support for universal PnP-devices of the node
Service Name : UPNPhost
Executable file or process name : svchost.exe
Recommended Mode - Disabled .




Application Management
Provides software installation services, such as assignment, publishing, and deletion.
Service Name : AppMgmt
Executable file or process name : svchost.exe
The recommended mode is Manual .




Background Intelligent Transfer Service
Provides data transfer between clients and servers in the background.
Service Name : BITS
Executable file or process name : svchost.exe
If the BITS service is disabled, features such as Windows Update can not work correctly. Especially not necessary. Mode - Disabled .




Security Center
It monitors the settings and security settings of the system.
Service name : wscsvc
Executable file or process name : svchost.exe
The Security Center does not carry any additional functionality, except for easier access to your computer's security settings. Recommended Mode - Disabled .

DHCP Client (DHCP Client)
Manages the network configuration by registering and updating IP addresses and DNS names
Service Name : Dhcp
Executable file or process name : svchost.exe
Many DSL or cable connections require this service to provide Internet access. If you disable this service and your Internet connection stops working, then return to the Auto mode. In my configuration, this service is in manual mode.


DNS Client (DNS Client)
Allows for this computer DNS names in addresses and places them in the cache.
Service Name : Dnscache
Executable file or process name : svchost.exe
If the service is stopped, you can not resolve DNS names and place the Active Directory directory service on domain controllers. If this service is not resolved, you can not run any explicitly dependent services. The recommended mode is Auto . Although I have a mode - Manually .




MS Software Shadow Copy Provider
Manages shadow copies obtained by shadowing a volume.
Service Name : SwPrv
Executable file or process name : dllhost.exe
If the service is stopped, it will not be possible to manage shadow copies. If the service is disabled, you can not start all explicitly dependent services. The recommended mode is Manual .




NetMeeting Remote Desktop Sharing (NetMeeting Remote Desktop Sharing)
Allows trusted users to access the Windows desktop through a corporate intranet using NetMeeting.
Service name : mnmsrvc
Executable file or process name : mnmsrvc.exe
If this service is stopped, remote desktop management is not available. If this service is disabled, any services that are explicitly dependent on it can not be started. Own safety is more expensive, so the mode is Disabled .




Plug and Play (Plug and Play)
Allows the computer to recognize changes in installed equipment and to adapt to them, either without requiring user intervention, or minimizing it.
Service Name : PlugPlay
Executable file or process name : services.exe
Stopping or disabling this service may result in unstable system operation. Never disconnect this service. The mode is always Auto .




QoS RSVP (QoS RSVP)
Provides alerts to the network and management of local traffic for QoS-programs and control programs
Service Name : RSVP
Executable file or process name : rsvp.exe
Recommended mode - Disabled .




Telnet (Telnet)
Allows a remote user to log on and start programs, supports various Telnet TCP / IP clients, including computers running UNIX and Windows operating systems.
Service Name : TlntSvr
Executable file or process name : tlntsvr.exe
If this service is stopped, the remote user will not be able to start the programs. If this service is disabled, any services that are explicitly dependent on it can not be started. Why do I need a remote user? Recommended Mode - Disabled .




Windows Audio (Windows Audio)
Managing sound devices for Windows programs
Service Name : AudioSrv
Executable file or process name : svchost.exe
If this service is stopped, the sound devices and effects will not work properly. If this service is disabled, any services that are explicitly dependent on it can not be started. The recommended mode is Auto .




Windows Installer (Windows Installer)
This service allows you to install, uninstall or restore the software in accordance with the instructions of the MSI files. This service is required to install applications that use MSI files.
Service Name : MSIServer
Executable file or process name : msiexec.exe
If this service is disabled, any services that are explicitly dependent on it can not be started. The recommended mode is Manual .