This page has been robot translated, sorry for typos if any. Original content here.

Services in Windows XP. Disable unused services.

While running, Windows XP starts and runs many services. You can view the entire list of services by clicking "Start" - "Control Panel" - "Administration", "Services". But not all services are necessary for normal computer operation. Below is a list of services that are disabled or enabled in my configuration . Actually there can be more services. To access the Internet, I use a dial-up connection.

Warning : this process involves some degree of risk, and therefore it is desirable to have at least a general idea of ​​what we are going to do.

Ati hotkey poller
This service appears in users of video cards from Ati RADEON.
Service Name : Ati HotKey Poller
Executable file or process name : Ati2evxx.exe
The service is only needed if you use the ATi Hotkey hotkeys for configuration, which can be viewed in the ATi Control Panel. If you do not use them (in this case, you do not lose anything), then you can Disable .

ATI Smart
Constantly monitors the quality of work and makes some adjustments to the work of the graphics system, if necessary, increase stability.
Service Name : ATI Smart
Executable file or process name : ati2sgag.exe
But he performs his tasks rather inefficiently, devouring resources. But recommended mode - Auto

Automatic Updates (Automatic Updates)
It includes the download and installation of key Windows updates automatically.
Service Name : wuauserv
Executable file or process name : svchost.exe
I don’t need this service, so we set the mode to Disabled

WMI Performance Adapter
Provides information about performance libraries from HiPerf WMI providers. It seems to be related to the so-called. Perfomance Counters - a system for providing information about the load of memory, resources, various devices, etc.
Service Name : WmiApSrv
Executable file or process name : wmiapsrv.exe
It is necessary only for specific software, therefore - Disabled




Wireless Setup (Wireless Zero Configuration)
Provides automatic configuration of 802.11 adapters.
Service Name : WZCSVC
Executable file or process name : svchost.exe
If no wireless adapters are connected to the computer, then - Disabled




Windows Firewall / Internet Sharing (ICS)
Provides support for address translation, addressing and name resolution services, or prevents intrusion of services into a home or small office network.
Service Name : SharedAccess
Executable file or process name : svchost.exe
When using a third-party product to protect your computer, for example, Outpost firewall, Norton Personal Firewall, ZoneAlarm, etc., then the Disabled mode is recommended.




Web Client (WebClient)
Allows Windows-based programs to create, access and modify files stored on the Internet.
Service Name : WebClient
Executable file or process name : svchost.exe
There are no useful functions in this service, so the mode is Disabled .




Secondary Logon (Secondary Logon)
Allows you to run processes on behalf of another user. If this service is stopped, this type of user registration is not available.
Service Name : seclogon
Executable file or process name : svchost.exe
I have this service - Disabled




Remote Access Auto Connection Manager
Creates a connection to a remote network when a program accesses a remote DNS or NetBIOS name or address.
Service Name : RasAuto
Executable file or process name : svchost.exe
This service may be necessary for the operation of your Internet connection. Exhibit - Manually




Logical Disk Manager
Detection and monitoring of new hard disks and transfer of information about hard disk volumes to the logical disk manager management service
Service Name : dmserver
Executable file or process name : svchost.exe
If this service is stopped, the status of dynamic disks and configuration information may be outdated. Exhibit - Manually




Print Spooler
The spooler is a key component of the printing system in Windows. It manages print queues in the system, and also interacts with printer drivers and I / O components, such as USB ports and TCP / IP protocols.
Service Name : Spooler
Executable file or process name : spoolsv.exe
Since I have not installed a single printer, set - Disabled .




Remote Access Connection Manager
Creates a network connection
Service Name : RasMan
Executable file or process name : svchost.exe
This service is required if you use Internet sharing. Expose - Manually .




Remote Desktop Help Session Manager
Manages remote assistance capabilities.
Service Name : RDSessMgr
Executable file or process name : sessmgr.exe
Since I do not need the services of a remote assistant, we expose - Disabled .




Network DDE Manager (Network DDE DSDM)
Manages network dynamic data exchange (DDE) resources.
Service Name : NetDDE dsdm
Executable file or process name : netdde.exe
If you do not use the Clip Folder Server (ClipBook), the mode is Disabled .




Security Account Manager (Security Accounts Manager)
Stores security information for a local user account
Service Name : SamSs
Executable file or process name : lsass.exe
This service is required for IIS Admin (IIS Admin). Recommended - Auto .




HID Access (Human Interface Device Access)
Provides universal access to HID-devices (Human Interface Devices), which activates and supports the use of predefined keyboard shortcuts on the keyboard, control devices or other multimedia devices
Service Name : HidServ
Executable file or process name : svchost.exe
If there are no problems after shutdown, then the mode is Disabled.




Event Log (Event Log)
Provides support for event log messages generated by Windows programs and system components, and viewing these messages
Service Name : Eventlog
Executable file or process name : services.exe
This service cannot be stopped. This service helps to identify failed programs that cause errors when operating the operating system. Recommended mode - Auto .




Performance Logs and Alerts
Manages the collection of performance data from local or remote computers based on a specified schedule, and provides a record of this data in the logs or triggers an alert.
Service Name : SysmonLog
Executable file or process name : smlogsvc.exe
If you are not going to collect performance data, then the mode is Disabled .




Protected Storage
Provides secure storage of sensitive data, such as private keys, to prevent unauthorized access of services, processes or users.
Service Name : ProtectedStorage
Executable file or process name : lsass.exe
If you have to work with encrypted data and keys from various programs, then the mode is Auto . I have this service for security reasons - Disabled .




Windows Management Instrumentation
Provides a generic interface and object model for accessing information about managing the operating system, devices, applications, and services
Service Name : Winmgmt
Executable file or process name : svchost.exe
After stopping this service, many Windows applications may not work correctly. When this service is disabled, its dependent services cannot be started. Recommended mode - Auto .




Uninterruptible Power Supply (uninterruptible power supply)
Manages the operation of uninterruptible power supplies (UPS) connected to the computer.
Service Name : UPS
Executable file or process name : ups.exe
If there is no source, then the mode is Disabled .




Distributed Link Tracking Client
It supports the connection of NTFS-files moved within the computer or between computers in the domain.
Service Name : TrkWks
Executable file or process name : svchost.exe
For this service, you can set the mode - Manual .




Distributed Transaction Coordinator
Coordination of transactions covering multiple resource managers, such as databases, message queues, and file systems.
Service Name : MSDTC
Executable file or process name : msdtc.exe
If this service is stopped, such transactions will not be executed. If this service is disabled, all services that are explicitly dependent on it cannot start. Recommended mode - Manual .




Remote Procedure Call Locator (RPC) (Remote Procedure Call (RPC) Locator)
The remote procedure call locator system service manages the RPC name service database.
Service Name : RpcLocator
Executable file or process name : locator.exe
If there is a network connection, then the mode is Manual . Since I have no network, the mode is Disabled .




Routing and Remote Access
It offers routing services to organizations in local and global networks.
Service Name : RemoteAccess
Executable file or process name : svchost.exe
This service is necessary if you want to allow incoming connections to your computer using a modem (or other devices) to gain access to your local network. Recommended in order to increase security mode - Disabled .




NetBIOS over TCP / IP module (TCP / IP NetBIOS Helper Service)
Includes support for NetBIOS over TCP / IP (NetBT) and resolution of NetBIOS names in addresses. This service is required for normal NetBIOS support over TCP / IP.
Service Name : LmHosts
Executable file or process name : svchost.exe
Recommended mode - Auto . If your network does not use NetBIOS or WINS, or there is no network at all, then - Disabled .




Smart Card Helper Module
Provides support for old smart card readers (no PnP).
Service Name : SCardDrv
Executable file or process name : SCardSvr.exe
If you do not use smart cards, then the mode is Disabled .




Computer Browser (Computer Browser)
Serves a list of computers on the network and gives it to programs on request.
Service Name : Browser
Executable file or process name : svchost.exe
This service can be safely transferred to the mode - Disabled .




Annunciator (Alerter)
Sends administrative alerts to selected users and computers.
Service Name : Alerter
Executable file or process name : svchost.exe
If the service is stopped, a program using administrative alerts will not receive them. If this service is unresolved, it will not be possible to start any explicitly dependent services. I do not need this service, so the mode is Disabled .




Shell Hardware Detection
Provides notifications for autoplay or autostart events.
Service Name : ShellHWDetection
Executable file or process name : svchost.exe
We leave this service in the mode - Auto .




Task Scheduler
Allows you to configure the schedule for automatic execution of tasks on this computer.
Service Name : Scheduler
Executable file or process name : svchost.exe
If you do not plan to launch programs at a specific time, then the mode is Disabled .




NT LM Security Support Provider
Provides security to programs using remote procedure call (RPC) through transports other than named pipes.
Service Name : NtLmSsp
Executable file or process name : lsass.exe
This service when using Message Queuing or Telnet server. Recommended mode - Manual .




Workstation
Provides support for network connections and connectivity.
Service Name : lanmanworkstation
Executable file or process name : svchost.exe
If the service is stopped, the program data connections will not be available. If this service is unresolved, it will not be possible to start any explicitly dependent services. Recommended mode - Auto .




WMI Driver Extensions (Windows Management Instrumentation Driver Extension)
Provides exchange of control information with devices
Service Name : Wmi
Executable file or process name : svchost.exe
The mode for this service is Manual .

Server
Provides support for sharing files, printers, and named pipes for this computer through a network connection.
Service Name : lanmanserver
Executable file or process name : svchost.exe
This service can be disabled if there is no network, so the mode is Disabled .




Exchange Folder Server (ClipBook)
Allows you to view the pages of folders sharing remote computers.
Service Name : ClipSrv
Executable file or process name : clipsrv.exe
If this service is stopped, the folder viewer cannot be exchanged with remote computers. If this service is disabled, any services that are explicitly dependent on it cannot be started. This service is in my mode - Disabled .




Network Logon (Net Logon)
Supports pass-through identification of account login events for domain computers.
Service Name : Netlogon
Executable file or process name : lsass.exe
This service can be switched to - Disabled .




Network Connections (Network Connections)
Manages objects in the Network and remote access to the network, displaying properties of the local network and remote access connections.
Service Name : Netman
Executable file or process name : svchost.exe
This service is required to support network connections. Recommended mode - Manual .




COM + Event System (COM + Event System)
Support for the System Event Notification (SENS) service, which provides automatic event propagation to subscribing COM components.
Service Name : EventSystem
Executable file or process name : svchost.exe
If this service is stopped, SENS will be closed and will not be able to provide notifications of entry and exit. If this service is disabled, all services that are explicitly dependent on it cannot start. Recommended mode - Manual .




COM + System Application (COM + System Application)
Manage the configuration and monitoring of COM + components.
Service Name : COMSysApp
Executable file or process name : dllhost.exe
If this service is stopped, most COM + components will not work correctly. If this service is disabled, all services that are explicitly dependent on it cannot start. Recommended mode - Manual .




IMAPI CD Burning Service (IMAPI CD-Burning COM Service)
This service manages CD burning using IMAPI (Image Mastering Applications Programming Interface).
Service Name : ImapiService
Executable file or process name : imapi.exe
If there is a popular package for recording Nero discs, then why is this service needed? True, red marks remain in the event log after each system startup, but this is fixable: Administration - Component Services - Console Root - Component Services - Computers - My Computer - DCOM Configuration - Microsoft IMAPI. Next "Properties" tab "Location", remove the checkmark "Run application on this computer." For this service, the mode is Disabled .




Logical Disk Manager Administrative Service
Performs configuration of hard drives and volumes.
Service Name : dmadmin
Executable file or process name : dmadmin.exe
This service runs only during configuration processes, and then stops. Recommended mode - Manual .




System Restore Service
Performs system recovery functions. To stop this service, you should turn off System Restore on the System Restore tab, which can be accessed by right-clicking the My Computer shortcut on your desktop and selecting Properties.
Service Name : srservice
Executable file or process name : svchost.exe
The name itself says that the service should be in mode - Auto . In my case, this service is Disabled .




Windows Time Service (Windows Time)
Manages date and time synchronization across all clients and servers on the network.
Service Name : W32Time
Executable file or process name : svchost.exe
If this service is stopped, date and time synchronization will not be available. If this service is disabled, any services that are explicitly dependent on it cannot be started. I do not need this service. Expose the mode - Disabled .




Image Download Service (WIA) (Windows Image Acquisition)
Provides imaging services from scanners and digital cameras.
Service Name : stisvc
Executable file or process name : svchost.exe
Set the mode - Manually .




Indexing Service
Indexes the contents and properties of files on local and remote computers, provides quick access to files using a flexible query language.
Service Name : cisvc
Executable file or process name : cisvc.exe
The indexing system can turn on not only when the computer is idle, but also at any inappropriate time. This service is transferred to the mode - Disabled .




SSDP Discovery Service
Enable the detection of UPnP devices in the home network.
Service Name : SSDPSRV
Executable file or process name : svchost.exe
This service is disabled. Mode - Disabled .




Error Reporting Service
Allows you to log errors for services and applications running in a nonstandard environment.
Service Name : ERSvc
Executable file or process name : svchost.exe
When an error occurs, the service sends information to Microsoft. I do not need such a service - Disabled .




Serial number service of portable multimedia devices
Gets the serial number of the portable media player connected to this computer.
Service Name : WmdmPmSp
Executable file or process name : svchost.exe
If this service is stopped, the protected content may not be downloaded to the device. Leave this service in the mode - Manually .




Network DDE Service (Network DDE)
Provides network transport and security for dynamic data exchange (DDE) for programs running on the same or on different computers.
Service Name : NetDDE
Executable file or process name : netdde.exe
If Ds does not use the Exchange Folder Server (ClipBook), then the mode is Disabled .




Network Location Service (NLA)
This service collects and stores information about the location and network settings, and also notifies applications about their changes.
Service Name : Nla
Executable file or process name : svchost.exe
Recommended mode - Manual.




Messenger Service
Sends and receives messages sent by administrators or alert service. This service is not related to Windows Messenger.
Service Name : Messenger
Executable file or process name : services.exe
If you do not use Windows Messenger, then the recommended mode is Disabled .




Application Layer Gateway Service
Designed to support plug-ins that allow network protocols to pass through the firewall and function when using Internet Connection Sharing.
Service Name : ALG
Executable file or process name : alg.exe
Recommended mode - Manual .




IPSEC Services (IPSEC Services)
Manages IP security policy and starts ISAKMP / Oakley (IKE) and IP security driver.
Service Name : PolicyAgent
Executable file or process name : lsass.exe
On the home computer this service can be - Disable .




Cryptographic Services
Provides three management services: a directory database service that verifies the digital signatures of Windows files; a secure root service that adds and deletes certificates from a trusted root certification authority from this computer; and a key service that allows you to apply for certificates from this computer.
Service Name : CryptSvc
Executable file or process name : svchost.exe
If this service is stopped, all these management services will not work. Essentially, this service verifies the signature of Windows files. Recommended mode - Auto .




Terminal Services
This service allows multiple users to interactively connect to a computer and displays the desktop and applications on remote computers. It is the basis for remote desktop (including remote administration), fast user switching, remote assistant and terminal services.
Service Name : TermService
Executable file or process name : svchost.exe
The recommended mode for this service is Manually , but mine is Disabled .




Smart Cards (Smart Card)
This service controls access to smart card readers.
Service Name : SCardSvr
Executable file or process name : SCardSvr.exe
If this service is stopped, this computer will not be able to read smart cards. I do not need it - Disabled .




Fast User Switching Compatibility
This service manages applications that require support in a multi-user environment.
Service Name : FastUserSwitching Compatibility
Executable file or process name : svchost.exe
It makes sense to enable the service if there are several users on your system, otherwise there is no need to start this service. If you do decide to enable the service, it will allow you to switch between users without closing the running programs, which are very convenient. Recommended mode - Manual .




Help and Support
Provides the ability to work center help and support on this computer.
Service Name : helpsvc
Executable file or process name : svchost.exe
This service is required to run Microsoft reference documents. Recommended mode - Manual .




Removable Storage (Removable Storage)
This service manages removable media, drives, and libraries. It is necessary for working with removable media (magneto-optical drives, etc.).
Service Name : NtmsSvc
Executable file or process name : svchost.exe
If you have problems (autorun, etc.) stopped working with your CD-ROM, DVD-ROM, etc., then set the value to Auto . Recommended mode - Manual .




Telephony (Telephony)
Provides Telephony API (TAPI) support for programs that manage telephone equipment and voice IP connections on this computer, as well as via LAN — on servers running the corresponding service.
Service Name : TapiSrv
Executable file or process name : svchost.exe
Recommended mode - Manual.




Themes
Management themes.
Service Name : Themes
Executable file or process name : svchost.exe
If themes are used, then the mode is Auto . I like the classic look. Mode - Disabled .




Volume Shadow Copy
Manages the creation of shadow copies (state checkpoints) of disk volumes that are used for archiving and restoring, or for other purposes.
Service Name : VSS
Executable file or process name : vssvc.exe
If this service is stopped, shadow copies of the recovery volumes will not be available and backup and recovery may not work. If this service is disabled, any services that are explicitly dependent on it cannot be started. Recommended mode - Manual .




System Event Notification
This service logs system events, such as registration with Windows, online, and changes in power supply. Notifies subscribers from the category of COM + system event, sending alerts.
Service Name : SENS
Executable file or process name : svchost.exe
Recommended value - Auto .




Remote Procedure Call (RPC) (Remote Procedure Call)
This service can be called key in Windows XP, your system will not work without it, which is why it is the only service that you cannot disable via the Service console.
Service Name : RpcSs
Executable file or process name : svchost.exe
This service should always be in Auto mode.




Remote Registry (Remote Registry Service)
Allows remote users to modify registry settings on this computer.
Service Name : RemoteRegistry
Executable file or process name : svchost.exe
This service is recommended to be transferred to the mode - Disabled .




Universal PnP Device Host (Universal Plug and Play Device Host)
This service provides support for generic PnP node devices.
Service Name : UPNPhost
Executable file or process name : svchost.exe
Recommended mode - Disabled .




Application Management
Provides software installation services such as assignment, publication, and deletion.
Service Name : AppMgmt
Executable file or process name : svchost.exe
Recommended mode - Manual .




Background Intelligent Transfer Service
Provides data transfer between clients and servers in the background.
Service Name : BITS
Executable file or process name : svchost.exe
If BITS is disabled, features such as Windows Update cannot work correctly. Especially not necessary. Mode - Disabled .




Security Center
Monitors system settings and security settings.
Service Name : wscsvc
Executable file or process name : svchost.exe
Security Center does not provide any additional functionality other than facilitating access to the protection settings of your computer. Recommended mode - Disabled .

DHCP client (DHCP Client)
Manages network configuration by registering and updating IP addresses and DNS names
Service Name : Dhcp
Executable file or process name : svchost.exe
Many DSL or cable connections require this service to provide Internet access. If you disable this service and your Internet connection stops working, then return the mode to Auto . In my configuration, this service is in Manual mode.


DNS Client (DNS Client)
Resolves DNS names for addresses for this computer and places them in a cache.
Service Name : Dnscache
Executable file or process name : svchost.exe
If the service is stopped, you cannot resolve the DNS names and host the Active Directory directory service of the domain controllers. If this service is unresolved, it will not be possible to start any explicitly dependent services. Recommended mode - Auto . Although I have a mode - Manually .




MS Software Shadow Copy Provider (MS Software Shadow Copy Provider)
Manages shadow copies obtained by using volume shadow copies.
Service Name : SwPrv
Executable file or process name : dllhost.exe
If the service is stopped, it will not be possible to manage shadow copies. If the service is disabled, it will not be possible to start all obviously dependent services. Recommended mode - Manual .




NetMeeting Remote Desktop Sharing (NetMeeting Remote Desktop Sharing)
Allows authenticated users to access the Windows desktop through the corporate intranet using NetMeeting.
Service Name : mnmsrvc
Executable file or process name : mnmsrvc.exe
If this service is stopped, remote desktop control is not available. If this service is disabled, any services that are explicitly dependent on it cannot be started. Own security is more expensive, so the mode is Disabled .




Plug and Play (Plug and Play)
Allows the computer to recognize changes in installed equipment and adapt to them, either without requiring user intervention, or minimizing it.
Service Name : PlugPlay
Executable file or process name : services.exe
Stopping or disabling this service may cause system instability. Never disable this service. Mode is always Auto .




QoS RSVP (QoS RSVP)
Provides distribution of network alerts and local traffic management for QoS programs and control programs
Service Name : RSVP
Executable file or process name : rsvp.exe
Recommended mode - Disabled .




Telnet (Telnet)
Allows a remote user to log in and start programs; supports various TCP / IP Telnet clients, including computers running UNIX and Windows operating systems.
Service Name : TlntSvr
Executable file or process name : tlntsvr.exe
If this service is stopped, the remote user will not be able to start the program. If this service is disabled, any services that are explicitly dependent on it cannot be started. Why do I need a remote user? Recommended mode - Disabled .




Windows Audio (Windows Audio)
Sound Device Management for Windows Software
Service Name : AudioSrv
Executable file or process name : svchost.exe
If this service is stopped, sound devices and effects will not work properly. If this service is disabled, any services that are explicitly dependent on it cannot be started. Recommended mode - Auto .




Windows Installer (Windows Installer)
This service allows you to install, remove, or restore software according to the instructions in the MSI files. This service is required to install applications that use MSI files.
Service Name : MSIServer
Executable file or process name : msiexec.exe
If this service is disabled, any services that are explicitly dependent on it cannot be started. Recommended mode - Manual .