Text preview for : Extraordinar Windows_XP_Services_Information_REV5.pdf part of xp pro, home xp home, pro service
Back to : Extraordinar Windows_XP_S | Home
Windows XP Home and Professional Service Configurations
Original content created July 28, 2001 Last update was Sunday, August 31, 2003 Copyright © 2001-2003 by Black Viper All Rights Reserved. All trademarks mentioned in this document are property of their respective owners. Up to date content and contact information is located at http://www.blkviper.com or http://www.blackviper.com Table of contents: This Page: Notes for a Happier Computer and User: Table Header Information: Services Configuration Table: Services Information: Strange Processes Page 1 Page 2 Page 3 Pages 4-12 Pages 13-58 Pages 59-64
________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 1 Revision 5: Sunday, August 31, 2003
Notes for a Happier Computer and User:
· · · ·
·
· ·
·
· ·
Do NOT use "msconfig" to disable services, type "services.msc" in the Run box instead! Before disabling any service, check out the information about each starting on Page 13 of this document. Service settings are global, meaning changes apply to all users. All of these services are "Standard" with Windows XP. If you discover something other than these listed here running, another program installed them. A few of the more common processes are listed starting on page 41. Still unsure? Put your setting to "manual" or the listing under "Safe." Manual allows Windows XP to start the service when it needs to (or when ever it feels like it), but not at boot up. Depending on your configuration, not all services will start when required while in "Manual" mode. If you find you need a service, place it in Automatic. After adjusting your service settings, reboot your computer. If you do not have some of these services listed, do not panic! If your computer manufacture "pre-installed" your XP, they choose not to have certain services installed for you. This is, in most cases, a fact with OEM versions of Windows XP Home. If you find this document helpful and you wish to use this information (forums, web sites), please link to http://www.blkviper.com and do not copy or redistribute it. The online information is up to date and I do not want anyone posting old content. Disabling all of the "unneeded services" frees up 12-70 MB of RAM, depending on system. Do you mean that out of 89 services, 36 are set to Automatic as DEFAULT, but, we MAY only need 8 running?!? YES.
________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 2 Revision 5: Sunday, August 31, 2003
Table Header Information:
· · · · · · ·
·
·
·
·
·
·
Display Name ~ is how it displays in the Services Control Panel. Service Name ~ is what the service's "short" name is and what displays in the registry. Process Name ~ name of the Process running in the background (displays in Task Manager by hitting Ctrl+Alt+Del). Dependencies ~ describe what other services this service needs to run. Default Home ~ this is what runs by default on Windows XP Home. Default Pro ~ this is what runs by default on Windows XP Professional. "SAFE" Configuration ~ this is the configuration that 95% of the people will be able to use with little or no side effects. It will also minimizes the amount of "errors" that is reported in the Event Viewer. This does NOT guarantee it will work for you, but if this scares you, this configuration would be a good starting point. Internet Gateway Configuration ~ setup to allow multiple computers on a network to share one access point using Microsoft's "Internet Connection Sharing and Personal Firewall" software. If you do not have this type of setup, compare the differences between "SAFE" and "GAMING" to find a middle ground that works for your system. Other software or hardware type firewall and gateway software may require a slightly different configuration. Gaming Configuration ~ this is the power user setup. This setup is a system that connects through a network (such as a gateway / router) to the internet, provides file and print sharing resources and gaming enjoyment. Some things MAY not function with this setup. No passwords save. Its use is not for a computer with analog modems or some direct DSL/cable connections. Try "Internet Gateway" Configuration first. Super Tweak Configuration ~ this is the Super Geek setup. This setup is a system that connects through a network (such as a gateway / router) to the internet with a static IP address. This system does not provide file and print sharing resources, nor have the ability to print. Its use is not for a computer with analog modems or many direct DSL/cable connections. You can use this configuration for extreme tweaking and testing purposes. Many things MAY not function with this setup. No passwords save. The Event Log may display "errors" of not being able to start certain services. CDRW functions may no longer work. Please do not ask, "How do I fix" questions while using this configuration. The answer will be "Use SAFE." This information's intention is for reference only. However, I use this configuration on a daily basis. Automatic ~ With a service in this state, it will start at boot time. Some services, when no longer required, will also automatically stop when not needed. However, this is very rare. If you find you do not need a service, place it into Manual or Disabled. Manual ~ Manual mode allows Windows to start a service when needed. However, very few services will start up when required in Manual mode. If you find you need a service, place it into Automatic. Disabled ~ This setting will stop a service from starting, even if needed. Errors in the Event Viewer will show up complaining of that fact. Some services, while Disabled, will constantly complain. However, this situation is taken care of if placed in Manual. The service descriptions identifies those that should be in Manual vice Disabled.
________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 3 Revision 5: Sunday, August 31, 2003
Display Name
Service Name
Alerter Alerter Application Layer ALG Gateway Service Application AppMgmt Management Automatic wuauserv Updates Background Intelligent BITS Transfer Service ClipBook ClipSrv COM+ Event EventSystem System COM+ System COMSysApp Application Computer Browser Browser Cryptographic CryptSvc Services
Process Dependencies Name services.exe Workstation Alg.exe svchost.exe svchost.exe svchost.exe clipsrv.exe svchost.exe dllhost.exe svchost.exe svchost.exe None None None Remote Procedure Call (RPC), Workstation Network DDE Remote Procedure Call (RPC) Remote Procedure Call (RPC) Server, Workstation
Internet Super Default Default "SAFE" Gaming Gateway Home Pro Tweak Manual Manual Disabled Disabled Disabled Disabled Manual Manual Manual Manual Manual Manual Automatic Disabled Disabled Manual Manual Manual
Automatic Automatic Automatic Automatic Disabled Disabled Manual Manual Manual Manual Manual Manual Manual Manual Disabled Disabled Disabled Disabled Manual Manual Manual Manual Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled
Automatic Automatic Disabled Automatic Disabled Disabled
DHCP Client
Dhcp
svchost.exe
Remote Procedure Automatic Automatic Automatic Automatic Disabled Disabled Call (RPC) AFD Networking Support Environment, NetBios over TCP/IP, Automatic Automatic Automatic Disabled Automatic Disabled TCP/IP Protocol Driver
________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 4 Revision 5: Sunday, August 31, 2003
Display Name
Service Name
Process Name svchost.exe
Dependencies
Default Home
Default Pro
"SAFE"
Internet Gaming Gateway Manual Manual
Super Tweak
Distributed Link TrkWks Tracking Client Distributed Transaction MSDTC Coordinator DNS Client Error Reporting Service Event Log Fast User Switching Compatibility Fax Service FTP Publishing Service Dnscache ERSvc Eventlog
Remote Procedure Call (RPC) Remote Procedure msdtc.exe Call (RPC), Security Accounts Manager TCP/IP Protocol svchost.exe Driver Remote Procedure svchost.exe Call (RPC) services.exe None Terminal Services Plug and Play, Print Spooler, Remote Procedure Call (RPC), Telephony IIS Admin Remote Procedure Call (RPC) Remote Procedure Call (RPC) Remote Procedure Call (RPC), Security Accounts Manager
Automatic Automatic Manual Manual Manual Manual
Disabled Disabled Disabled Disabled
Automatic Automatic Automatic Automatic Disabled Disabled Automatic Automatic Disabled Disabled Disabled Disabled
Automatic Automatic Automatic Automatic Automatic Automatic Manual Manual Manual Manual Disabled Disabled
FastUserSwitching svchost.exe Compatibility
FAX
fxssvc.exe
Not Installed
Not Installed
Not Installed Not Installed
Not Installed Not Installed
Not Installed Not Installed
Not Installed Not Installed
NA
inetinfo.exe svchost.exe svchost.exe inetinfo.exe
Not Not Available Installed
Help and Support helpsvc Human Interface HidServ Device Access IIS Admin IISADMIN
Automatic Automatic Disabled Disabled Disabled Disabled Disabled Disabled Not Not Available Installed Not Installed Not Installed
Disabled Disabled Disabled Disabled Not Installed Not Installed
________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 5 Revision 5: Sunday, August 31, 2003
Display Name IMAPI CDBurning COM Service
Service Name ImapiService
Process Name imapi.exe cisvc.exe
Dependencies None
Default Home Manual Manual
Default Pro Manual Manual
"SAFE"
Internet Gaming Gateway
Super Tweak
Automatic Automatic Disabled Disabled Disabled Disabled Disabled Disabled
Indexing Service Cisvc
Internet Connection Firewall/Internet SharedAccess Connection Sharing
IPSEC Services
PolicyAgent
Logical Disk Manager Logical Disk Manager Administrative Service
dmserver
dmadmin
Remote Procedure Call (RPC) Application Layer Gateway Service, Network Connections, svchost.exe Network Location Awareness, Remote Access Connection Manager IPSEC driver, Remote Procedure lsass.exe Call (RPC), TCP/IP Protocol Driver Plug and Play, svchost.exe Remote Procedure Call (RPC) Logical Disk Manager, Plug and dmadmin.exe Play, Remote Procedure Call (RPC)
Manual
Automatic Automatic Automatic Disabled Disabled
Automatic Automatic Disabled Disabled
Disabled Disabled
Manual
Automatic Manual
Manual
Disabled Disabled
Manual
Manual
Manual
Manual
Disabled Disabled
________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 6 Revision 5: Sunday, August 31, 2003
Display Name
Service Name
Process Name
Dependencies
Default Home
Default Pro
"SAFE"
Internet Gaming Gateway
Super Tweak
Message Queuing NA
Message Queuing NA Triggers
Messenger
Messenger
Distributed Transaction Coordinator, Message Queuing access control, NT LM Not Not Not mqsvc.exe Security Support Available Installed Installed Provider, Reliable Multicast Protocol driver, Remote Procedure Call (RPC), Server Not Not Not mqtgsvc.exe Message Queuing Available Installed Installed NetBIOS Interface, Plug and Play, svchost.exe Remote Procedure Automatic Automatic Disabled Call (RPC), Workstation dllhost.exe lsass.exe Remote Procedure Call (RPC) Workstation Manual Manual Manual Manual Manual
Not Installed
Not Installed
Not Installed
Not Installed
Not Installed
Not Installed
Disabled
Disabled Disabled
MS Software Shadow Copy Provider Net Login NetMeeting Remote Desktop Sharing Network Connections
SwPrv Netlogon mnmsrvc Netman
Manual
Disabled Disabled Disabled Disabled Disabled Disabled Disabled
Automatic Disabled Disabled Manual Disabled Disabled Manual
mnmsrvc.exe None svchost.exe
Remote Procedure Manual Manual Call (RPC) Network DDE Network DDE NetDDE netdde.exe Manual Manual DSDM ________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 7 Revision 5: Sunday, August 31, 2003
Automatic Manual
Disabled Disabled
Disabled Disabled
Display Name Network DDE DSDM
Service Name NetDDE
Process Name netdde.exe
Dependencies
Default Home
Default Pro Manual
"SAFE"
Internet Gaming Gateway
Super Tweak
AFD Networking Support Enviroment, Manual TCP/IP Protocol Driver None None Manual Manual Manual
Disabled Disabled
Disabled Disabled
Network Location Awareness Nla (NLA) NT LM Security NtLmSsp Support Provider Performance SysmonLog Logs and Alerts Plug and Play PlugPlay Portable Media WmdmPmSp Serial Number Print Spooler Spooler
svchost.exe lsass.exe
Manual Manual Manual
Manual Manual
Automatic Disabled Disabled Manual Manual Disabled
smlogsvc.exe None services.exe None svchost.exe spoolsv.exe lsass.exe None
Disabled Disabled
Disabled Disabled
Automatic Automatic Automatic Automatic Automatic Automatic Automatic Automatic Disabled Disabled Disabled Disabled Automatic Disabled Disabled Disabled
Protected Storage ProtectedStorage
QoS RSVP
RSVP
rsvp.exe
Remote Access Auto Connection RasAuto Manager
svchost.exe
Remote Procedure Automatic Automatic Automatic Automatic Call (RPC) Remote Procedure Automatic Automatic Automatic Automatic Call (RPC) AFD Networking Support Environment, Remote Procedure Manual Manual Disabled Disabled Call (RPC), TCP/IP Protocol Driver Remote Access Connection Manager, Manual Manual Manual Automatic Telephony
Disabled Disabled
Disabled Disabled
________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 8 Revision 5: Sunday, August 31, 2003
Display Name Remote Access Connection Manager Remote Desktop Help Session Manager Remote Procedure Call (RPC) Remote Procedure Call (RPC) Locator Remote Registry Service Removable Storage RIP Listener Routing and Remote Access
Service Name RasMan
Process Name svchost.exe
Dependencies Telephony Remote Procedure Call (RPC)
Default Home Manual
Default Pro Manual
"SAFE" Manual
Internet Gaming Gateway
Super Tweak
Automatic Disabled Disabled
RDSessMgr
sessmgr.exe
Manual
Manual
Disabled Disabled
Disabled Disabled
RpcSs
svchost.exe
None (but everything Automatic Automatic Automatic Automatic Automatic Automatic depends on it) Workstation None Remote Procedure Call (RPC) Remote Procedure Call (RPC) NetBIOSGroup, Remote Procedure Call (RPC) None Remote Procedure Call (RPC) None Manual Manual Manual Manual Manual Disabled
RpcLocator RemoteRegistry NtmsSvc NA RemoteAccess
locator.exe svchost.exe svchost.exe svchost.exe svchost.exe svchost.exe lsass.exe svchost.exe
Not Automatic Disabled Disabled Available Manual Not Installed Manual Not Installed Manual Not Installed Manual Not Installed
Disabled Disabled Disabled Disabled Not Installed Not Installed
Disabled Manual
Disabled Disabled
Disabled Disabled Disabled Disabled
Secondary Logon seclogon Security Accounts SamSs Manager Server lanmanserver
Automatic Automatic Disabled Disabled
Automatic Automatic Automatic Automatic Disabled Disabled Automatic Automatic Disabled Automatic Disabled Disabled
________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 9 Revision 5: Sunday, August 31, 2003
Display Name Shell Hardware Detection Simple Mail Transport Protocol (SMTP) Simple TCP/IP Services Smart Card Smart Card Helper SNMP Service SNMP Trap Service SSDP Discovery Service System Event Notification System Restore Service Task Scheduler
Service Name
Process Name
Dependencies Remote Procedure Call (RPC) Event Log, IIS Admin
Default Home
Default Pro
"SAFE"
Internet Gaming Gateway
Super Tweak
ShellHWDetection svchost.exe SMTPSVC NA SCardSvr SCardDrv NA NA SSDPSRV SENS srservice Schedule inetinfo.exe tcpsvcs.exe
Automatic Automatic Automatic Automatic Disabled Disabled Not Not Available Installed Not Installed Manual Manual Not Installed Not Installed Manual Not Installed Not Installed Not Installed Not Installed
AFD Networking Not Support Environment Installed SCardSvr.exe Plug and Play Manual SCardSvr.exe None snmp.exe Event Log Manual Not Installed Not Installed Manual
Not Not Installed Installed Disabled Disabled Disabled Disabled Not Installed Not Installed Not Installed Not Installed
Not Not Installed Installed Disabled Disabled Disabled Disabled Not Installed Not Installed Not Installed Not Installed
snmptrap.exe Event Log svchost.exe svchost.exe svchost.exe svchost.exe svchost.exe tcpsvcs.exe None
Disabled Disabled
Disabled Disabled
COM+ Event System Automatic Automatic Automatic Automatic Disabled Disabled Remote Procedure Automatic Automatic Disabled Disabled Call (RPC) Remote Procedure Automatic Automatic Automatic Automatic Call (RPC) AFD Networking Support Environment, Automatic Automatic Disabled Disabled NetBios over TCP/IP Print Spooler, TCP/IP Not Not Not Not Protocol Driver Installed Installed Installed Installed Disabled Disabled Disabled Disabled Disabled Disabled Not Installed Not Installed
TCP/IP NetBIOS LmHosts Helper Service TCP/IP Printer Server LPDSVC
________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 10 Revision 5: Sunday, August 31, 2003
Display Name Telephony
Service Name TapiSrv
Process Name svchost.exe
Dependencies Plug and Play, Remote Procedure Call (RPC) NT LM Security Support Provider, Remote Procedure Call (RPC), TCP/IP Protocol Driver Remote Procedure Call (RPC) None None SSDP Discovery Service Remote Procedure Call (RPC) Remote Procedure Call (RPC) WebDav Client Redirector Plug and Play, Remote Procedure Call (RPC) Remote Procedure Call (RPC)
Default Home Manual
Default Pro Manual
"SAFE" Manual
Internet Gaming Gateway
Super Tweak
Automatic Disabled Disabled
Telnet
TlntSvr
tlntsvr.exe
Not Manual Available
Disabled Disabled
Disabled Disabled
Terminal Services TermService Themes Uninterruptible Power Supply Universal Plug and Play Device Host Themes UPS UPNPhost
svchost.exe svchost.exe ups.exe svchost.exe svchost.exe vssvc.exe svchost.exe svchost.exe
Manual
Manual
Manual
Manual
Disabled Disabled
Automatic Automatic Automatic Automatic Disabled Disabled Manual Manual Manual Manual Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled
Upload Manager uploadmgr Volume Shadow VSS Copy WebClient WebClient
Automatic Automatic Disabled Disabled Manual Manual Manual Manual
Automatic Automatic Disabled Disabled
Windows Audio AudioSrv Windows Image Acquisition Stisvc (WIA)
Automatic Automatic Automatic Automatic Automatic Automatic
svchost.exe
Manual
Manual
Manual
Manual
Disabled Disabled
________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 11 Revision 5: Sunday, August 31, 2003
Display Name Windows Installer Windows Management Instrumentation Windows Management Instrumentation Driver Extension Windows Time Wireless Zero Configuration WMI Performance Adapter Workstation
Service Name MSIServer Winmgmt
Process Name msiexec.exe svchost.exe
Dependencies Remote Procedure Call (RPC)
Default Home Manual
Default Pro Manual
"SAFE" Manual
Internet Gaming Gateway Manual Manual
Super Tweak Manual
Event Log, Remote Automatic Automatic Automatic Automatic Automatic Automatic Procedure Call (RPC) Not Manual Available
Wmi W32Time WZCSVC
svchost.exe svchost.exe svchost.exe
None
Manual
Manual
Manual
Disabled
None Automatic Automatic Disabled Disabled NDIS Usermode I/O Protocol, Remote Automatic Automatic Disabled Disabled Procedure Call (RPC) Remote Procedure Call (RPC) None (but plenty depend on it) IIS Admin Manual Manual Disabled Disabled
Disabled Disabled Disabled Disabled
WmiApSrv
wmiapsrv.exe
Disabled Disabled
lanmanworkstation svchost.exe inetinfo.exe
Automatic Automatic Automatic Automatic Automatic Automatic Not Not Available Installed Not Installed Not Installed Not Installed Not Installed
World Wide Web Publishing W3SVC Service
Up to date content and contact information is located at http://www.blkviper.com or http://www.blackviper.com
________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 12 Revision 5: Sunday, August 31, 2003
Black Viper's Windows XP Home and Professional Services 411
Original content created July 28, 2001 Last update was Sunday, August 31, 2003 Copyright © 2001-2003 by Black Viper All Rights Reserved. Up to date content and contact information is located at www.blkviper.com or www.blackviper.com. __________________________________________________ Alerter The Alerter service notifies users of administrative alerts on a network. This service usually is not required under normal circumstances. Note: This is NOT "WinPopUp." Default XP Home: Manual Default XP Pro: Manual Safe Setting: Disabled Log on as: NT AUTHORITY\LocalService Dependencies: What service Alerter needs to function properly: · Workstation What other service require Alerter to function properly: · None Application Layer Gateway Service Provides support for 3rd party plug-ins for Internet Connection Sharing/Internet Connection Firewall. This service is required if using Internet Connection Sharing / Internet Connection Firewall to connect to the internet. This service uses about 1.5 MB of memory in an idle state. Default XP Home: Manual Default XP Pro: Manual Safe Setting: Manual Log on as: NT AUTHORITY\LocalService
________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 13 Revision 5: Sunday, August 31, 2003
Dependencies: What service Application Layer Gateway Service needs to function properly: · None What other service require Application Layer Gateway Service to function properly: · Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS) Application Management Used for Assign, Publish and Remove software services. If you cannot modify your software installation of certain applications, put this service in to Automatic or Manual. If you have Windows XP Home Version, this service may be causing problems described in this knowledge base article: http://support.microsoft.com/default.aspx?scid=kb;en-us;Q328213?SD=EE I have not tested this, but for now, Disable this service in Windows XP Home until installation of Service Pack 1. Default XP Home: Manual Default XP Pro: Manual Safe Setting: Manual Log on as: Local System account Dependencies: What service Application Management needs to function properly: · None What other service require Application Management to function properly: · None Automatic Updates This service is used to check up to see if there is any critical or otherwise updates available for download. You may choose to update manually due to the very long lag time from when an update is available and when Windows XP reports it. After the installation of Service Pack 1, you may configure how "often" updates are checked. Using default values, Windows XP "automatically" downloads the updates and asks to "install" them. A few reasons why you may think this is unacceptable in your situation: · · · You could have a dial-up connection. If XP feels like downloading whenever it wants, it just may not allow you to do what "you" want. You may also: Wish to know what, when and how an update installs BEFORE using any bandwidth. Want to read about the update BEFORE downloading.
________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 14 Revision 5: Sunday, August 31, 2003
·
Want to know WHY you need it and WHAT it fixes.
It is very important that if you decide to disable this service, you check the Windows Update site often to ensure the latest patches install properly. Take note: Manual (and Automatic) updates via Windows Update web site requires Cryptographic Services to be running. Place both Automatic Updates and Cryptographic Services in to automatic if you do not wish to update manually. Default XP Home: Automatic Default XP Pro: Automatic Safe Setting: Automatic Log on as: Local System account Dependencies: What service Automatic Updates needs to function properly: · None What other service require Automatic Updates to function properly: · None Background Intelligent Transfer Service This service is used to transfer asynchronous data via http1.1 servers. According to Microsoft's site, Windows Update uses this "feature." It "continues" a download if you log off or shutdown the system (that is, when you log back in). The problem with that is, I do not like having this "feature" running all of the time. Even though I have found no side effects as to this being disabled, you may require this service for some MSN Explorer, Windows Messenger, Windows Media Player or future .NET functions. Take note: Manual update via Windows Update web site requires Cryptographic Services to be running. Default XP Home: Manual Default XP Pro: Manual Safe Setting: Disabled Log on as: Local System account Dependencies: What services Background Intelligent Transfer Service needs to function properly: · Remote Procedure Call (RPC) · Workstation What other service require Background Intelligent Transfer Service to function properly: · None ________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 15 Revision 5: Sunday, August 31, 2003
ClipBook Used to store information (cut / paste) and share it with other computers. I have never found enough need for this to allow this service to always be running. This service alone uses about 1.3 MB of memory. Default XP Home: Manual Default XP Pro: Manual Safe Setting: Disabled Log on as: Local System account Dependencies: What services ClipBook needs to function properly: · Network DDE o Network DDE DSDM What other service require ClipBook to function properly: · None COM+ Event System You will receive, in the Event Log, an entry from "DCOM" complaining about not having this service running if disabled. I am unaware of any application that uses COM+, but if set to manual, many services report to it, so it will start anyway. This service is required for System Event Notification. For the fun of it: "C:\Program Files\ComPlus Applications\" On your system, see if you have any installed "COM+" Applications. If not, you can probably disable this service with no side effects (besides the Event Log complaining upon reboots). Take note: BootVis requires Task Scheduler and COM+ Event System to be running if you wish to take advantage of the "optimize system" function. Why is it required? It is due to the prefetching function built into Windows XP. Another Note: Pre-fetching only occurs on boot up and application start, so if you do not care about a few extra seconds of boot time, you may decide to not even bother with it and disable Task Scheduler. Depending on the system, pre-fetching may increase performance. Windows Media Player may also require this service for some "features" to function. MS' .NET may require this service in the future. I recommend disabled for Super Tweaking, automatic for "safe," and manual for most other configurations. Default XP Home: Manual Default XP Pro: Manual Safe Setting: Manual Log on as: Local System account
________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 16 Revision 5: Sunday, August 31, 2003
Dependencies: What service COM+ Event System needs to function properly: · Remote Procedure Call (RPC) What other service require COM+ Event System to function properly: · System Event Notification COM+ System Application You will receive, in the Event Log, an entry from "DCOM" complaining about not having this service running if disabled. I am unaware of any application that uses COM+, but if set to manual, many services report to it, so it will start anyway. For the fun of it: "C:\Program Files\ComPlus Applications" On your system, see if you have any installed "COM+" Applications. If not, you can probably disable this service with no side effects (besides the Event Log complaining upon reboots). This service is required for System Event Notification. Default XP Home: Manual Default XP Pro: Manual Safe Setting: Manual Log on as: Local System account Dependencies: What service COM+ System Application needs to function properly: · Remote Procedure Call (RPC) What other service require COM+ System Application to function properly: · None Computer Browser Computer Browser service maintains a listing of computers and resources located on the network. This service is not required on a standalone system. In fact, even if you want to browse the network (workgroup or domain) or have mapped network shares as local hard drives, you can still do so. On a large network, one computer is designated the "master" browser and another one is the "backup" browser. All others just announce they are available every 12 minutes to "take over" duties if one of the other computers fail. No lag time is discernable if this service remains disabled on all but one computer. Honestly, I do not even believe one needs to be running. You could, "just in case," but it sure does not need to be running on all computers, all of the time. Default XP Home: Automatic Default XP Pro: Automatic Safe Setting: Disabled ________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 17 Revision 5: Sunday, August 31, 2003
Log on as: Local System account Dependencies: What services Computer Browser needs to function properly: · Server · Workstation What other service require Computer Browser to function properly: · None Cryptographic Services Mainly, it confirms signatures of Windows files. You may always get a dialog box complaining about uncertified drivers if this is disabled. This service is required for Windows Update to function in manual and automatic mode and this service is required to install Service Pack 1 unified updates and DirectX 9.0. Windows Media Player and future .NET applications may also require this service for some "features" to function. This service uses about 1.9 MB of memory. Default XP Home: Automatic Default XP Pro: Automatic Safe Setting: Automatic Dependencies: What service Cryptographic Services needs to function properly: · Remote Procedure Call (RPC) What other service require Cryptographic Services to function properly: · None DHCP Client This service automatically receives a Dynamic IP address from your DHCP server and DNS updates. Required for ICS / internet client and if you run IPSEC, disable on a standalone system or one that has a static IP address. Take note: Most DSL/cable ISP's use DHCP to provide internet access. If you disable this service and your Internet connection no longer works, place this back into automatic. Most DSL and cable hardware routers have the option of enabling a DHCP server for the internal network. Ensure that the router is configured the same as your local PC's. Default XP Home: Automatic Default XP Pro: Automatic Safe Setting: Automatic Log on as: Local System account
________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 18 Revision 5: Sunday, August 31, 2003
Dependencies: What services DHCP Client needs to function properly: · AFD Networking Support Environment · NetBIOS over TCP/IP o TCP/IP Protocol Driver IPSEC driver · TCP/IP Protocol Driver o IPSEC driver What other service require DHCP Client to function properly: · None Distributed Link Tracking Client Maintains links with NTFS files within your computer or across a domain. For example, you could make a file on "Computer A." You then create a "short cut" or "link" to that file on "Computer B." If you would move the file on Computer A to a different location, this service would tell Computer B to update its information to allow uninterrupted connectivity. Even though this is rather valuable on a large network, I have not found a use for this service on a home network. It uses about 3.5 MB to 4 MB in an idle state. Default XP Home: Automatic Default XP Pro: Automatic Safe Setting: Manual Log on as: Local System account Dependencies: What service Distributed Link Tracking Client needs to function properly: · Remote Procedure Call (RPC) What other service require Distributed Link Tracking Client to function properly: · None Distributed Transaction Coordinator Automatically takes care of transactions that span multiple resources. This service is required if using Message Queuing. You may also see complaints in the Event Log if this service is disabled, but I have experienced no side effects. Microsoft's .NET may require this service in the future. Default XP Home: Manual Default XP Pro: Manual Safe Setting: Manual
________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 19 Revision 5: Sunday, August 31, 2003
Log on as: NT AUTHORITY\NetworkService Dependencies: What services Distributed Transaction Coordinator needs to function properly: · Remote Procedure Call (RPC) · Security Accounts Manager o Remote Procedure Call (RPC) What other services require Distributed Transaction Coordinator to function properly: · Message Queuing o Message Queuing Triggers DNS Client Resolves and caches DNS names and Active Directory domain controller functions. This service is not required for DNS lookups, but if it makes you happy to have it running, you may. However, DNS Client is required if using IPSEC. If you attempt to "repair" your network connection and a dialog box complains that the "DNS resolver failed to flush the cache," this service is the reason. Default XP Home: Automatic Default XP Pro: Automatic Safe Setting: Automatic Log on as: NT AUTHORITY\NetworkService Dependencies: What service DNS Client needs to function properly: · TCP/IP Protocol Driver o IPSEC driver What other service require DNS Client to function properly: · None Error Reporting Service Calls home to Microsoft when application errors occur. I personally do not like this. I feel it is a waste of memory and resources. On the other hand, if you are experiencing system crashes often, the best way to deal with them is to report them using this tool. Default XP Home: Automatic Default XP Pro: Automatic Safe Setting: Disabled Log on as: Local System account
________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 20 Revision 5: Sunday, August 31, 2003
Dependencies: What service Error Reporting Service needs to function properly: · Remote Procedure Call (RPC) What other service require Error Reporting Service to function properly: · None Event Log View Event Log messages from applications in Event Viewer. Always helpful to check out the Event Log to see what problems with applications are popping up that is "hidden" from the normal user. To see quickly what, if anything has resulted in your adjustments, you may consider clearing the Event Log. Windows Management Instrumentation also requires Event Log Service to be running. If you disable the Event Log Service, but do not disable Windows Management Instrumentation, your computer may have an extended boot time while Windows Management Instrumentation is waiting for the Event Log to start. It is just best to keep Event Log active for troubleshooting purposes and normal operations. Default XP Home: Automatic Default XP Pro: Automatic Safe Setting: Automatic Log on as: Local System account Dependencies: What service Event Log needs to function properly: · None What other services require Event Log to function properly: · Simple Mail Transfer Protocol (SMTP) · SNMP Service · SNMP Trap Service · Windows Management Instrumentation Fast User Switching Compatibility Unless you have many users on a system, you probably do not even need this service to be running. You could benefit, however, greatly if you use this service in conjunction with many users on your local computer to allow switching users without closing all existing applications running under a different account. Default XP Home: Manual Default XP Pro: Manual Safe Setting: Manual Log on as: Local System account ________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 21 Revision 5: Sunday, August 31, 2003
Dependencies: What services Fast User Switching Compatibility needs to function properly: · Terminal Services o Remote Procedure Call (RPC) What other service require Fast User Switching Compatibility to function properly: · None Fax Service Not installed by default, but if needed, you may install it later off the Windows XP CD. Maintains the ability to send and receive FAX documents on your computer. Default XP Home: Not Installed Default XP Pro: Not Installed Safe Setting: Not Installed Log on as: Local System account Dependencies: What services Fax Service needs to function properly: · Plug and Play · Print Spooler o Remote Procedure Call (RPC) · Remote Procedure Call (RPC) · Telephony o Plug and Play o Remote Procedure Call (RPC) What other service require Fax Service to function properly: · None FTP Publishing Service This feature is not available on Windows XP Home or installed by default on Windows XP Pro, but if you need it, you may install it later off the Windows XP CD. This service provides a FTP server on your network. Default XP Home: Not Installed Default XP Pro: Not Installed Safe Setting: Not Installed Log on as: Local System account
________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 22 Revision 5: Sunday, August 31, 2003
Dependencies: What services FTP Publishing Service needs to function properly: · IIS Admin o Remote Procedure Call (RPC) o Security Accounts Manager Remote Procedure Call (RPC) What other service require FTP Publishing Service to function properly: · None Help and Support This service is required for Microsoft's online (or offline) help documents. If you ever "attempt" to use Help and Support, the service places itself back into "Automatic" and starts even if you already had this service on disabled. I try to avoid as much Microsoft help as I can... :) Default XP Home: Automatic Default XP Pro: Automatic Safe Setting: Disabled Log on as: Local System account Dependencies: What service Help and Support needs to function properly: · Remote Procedure Call (RPC) What other service require Help and Support to function properly: · None Human Interface Device Access You may not have any peripherals that require this service. If one of yours magically does not function anymore, set it to automatic. Namely, scanners with function buttons (fax, copy) or even an "Internet" keyboard with volume or play controls. Default XP Home: Disabled Default XP Pro: Disabled Safe Setting: Disabled Log on as: Local System account Dependencies: What service Human Interface Device Access needs to function properly: · Remote Procedure Call (RPC)
________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 23 Revision 5: Sunday, August 31, 2003
What other service require Human Interface Device Access to function properly: · None IIS Admin This feature is not available on Windows XP Home or installed by default on Windows XP Pro, but if needed, you may install it later off the Windows XP CD. This service usually operates in conjunction with a local web site or FTP server. Leave it uninstalled mainly because IIS has been "popular" for crackers to break. Default XP Home: Not Installed Default XP Pro: Not Installed Safe Setting: Not Installed Log on as: Local System account Dependencies: What services IIS Admin needs to function properly: · Remote Procedure Call (RPC) · Security Accounts Manager o Remote Procedure Call (RPC) What other services require IIS Admin to function properly: · FTP Publishing Service · Simple Mail Transport Protocol (SMTP) · World Wide Web Publishing Service IMAPI CD-Burning COM Service This service operates that cool "drag and drop" CD burn capability. You will need this service to burn CD's. What is the good news? If you set this service to manual, the service starts and stops itself when used with some software packages. This is practically the only service that does do this! If you still cannot burn a CD with it on manual, switch to automatic and feel safe that it starts only when "needed." This service may take up about 1.6 MB of memory in an idle state. Default XP Home: Manual Default XP Pro: Manual Safe Setting: Automatic Log on as: Local System account Dependencies: What service IMAPI CD-Burning COM Service needs to function properly: · None What other service require IMAPI CD-Burning COM Service to function properly: · None ________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 24 Revision 5: Sunday, August 31, 2003
Indexing Service This service always has been a major resource hog. I NEVER recommend having this service enabled. Remove the function via the "Add / Remove Programs" icon in the control panel (Windows Setup Programs). It uses about 500 K to 2 MB in an idle state, not to mention the amount of memory and CPU resources it takes to INDEX the drives. I have had people (and witnessed it on other people's computers) report to me that the Indexing Service sometimes starts up EVEN while the system is NOT idle... as in the middle of a game. You may feel, as I do, that this is unacceptable. If your computer suddenly seems "sluggish," Indexing Service is usually the cause of it. Default XP Home: Manual Default XP Pro: Manual Safe Setting: Disabled Log on as: Local System account Dependencies: What service Indexing Service needs to function properly: · Remote Procedure Call (RPC) What other service require Indexing Service to function properly: · None Internet Connection Firewall and Internet Connection Sharing This service is used to allow multiple computers on your network to access the internet via only one account. This service installs on the "modem" computer. If you are using a third party firewall or Internet Connection Sharing software package, this service is not required. Default XP Home: Manual Default XP Pro: Automatic Safe Setting: Automatic Log on as: Local System account Dependencies: What services Internet Connection Firewall (ICF) and Internet Connection Sharing (ICS) needs to function properly: · Application Layer Gateway Service · Network Connections o Remote Procedure Call (RPC) · Network Location Awareness (NLA) o AFD Networking Support Environment o NetBIOS over TCP/IP TCP/IP Protocol Driver · IPSEC driver ________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 25 Revision 5: Sunday, August 31, 2003
·
Remote Access Connection Manager o Telephony Plug and Play Remote Procedure Call (RPC)
What other service require Internet Connection Firewall (ICF) and Internet Connection Sharing (ICS) to function properly: · None IPSEC Services May be required on some domains or VPN connections, but the "average" user will not need this. Default XP Home: Automatic Default XP Pro: Automatic Safe Setting: Disabled Log on as: Local System account Dependencies: What services IPSEC Services needs to function properly: · IPSEC driver · Remote Procedure Call (RPC) · TCP/IP Protocol Driver o IPSEC driver What other service require IPSEC Services to function properly: · None Logical Disk Manager This service is vital to run the Disk Management MMC console for dynamic volumes. If you attempt to "Manage" your hard drives and a dialog box pops up complaining about not being able to do this, start this service. Default XP Home: Manual Default XP Pro: Automatic Safe Setting: Manual Log on as: Local System account Dependencies: What services Logical Disk Manager needs to function properly: · Plug and Play · Remote Procedure Call (RPC) ________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 26 Revision 5: Sunday, August 31, 2003
What other service require Logical Disk Manager to function properly: · Logical Disk Manager Administrative Service Logical Disk Manager Administrative Service This service is vital to run the Disk Management MMC console for dynamic volumes. Default XP Home: Manual Default XP Pro: Manual Safe Setting: Manual Log on as: Local System account Dependencies: What services Logical Disk Manager Administrative Service needs to function properly: · Logical Disk Manager o Plug and Play o Remote Procedure Call (RPC) · Plug and Play · Remote Procedure Call (RPC) What other service require Logical Disk Manager Administrative Service to function properly: · None Message Queuing This feature is not available on Windows XP Home or installed by default on Windows XP Pro, but if needed, you may install it later off of the Windows XP CD. May be used on some domains, but the "average" home user will never need this service. Default XP Home: Not Installed Default XP Pro: Not Installed Safe Setting: Not Installed Log on as: Local System account Dependencies: What services Message Queuing needs to function properly: · Distributed Transaction Coordinator o Remote Procedure Call (RPC) o Security Accounts Manager Remote Procedure Call (RPC) · Message Queuing access control · NT LM Security Support Provider · Reliable Multicast Protocol driver · Protected Storage o Remote Procedure Call (RPC) ________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 27 Revision 5: Sunday, August 31, 2003
· ·
Remote Procedure Call (RPC) Server
What other service require Message Queuing to function properly: · Message Queuing Triggers Message Queuing Triggers This feature is not available on Windows XP Home or installed by default on Windows XP Pro, but if needed, you may install it later off the Windows XP CD. This service is required if you use Message Queuing service. Default XP Home: Not Installed Default XP Pro: Not Installed Safe Setting: Not Installed Log on as: Local System account What services Message Queuing Triggers needs to function properly: · Message Queuing o Distributed Transaction Coordinator Remote Procedure Call (RPC) Security Accounts Manager · Remote Procedure Call (RPC) o Message Queuing access control o NT LM Security Support Provider o Reliable Multicast Protocol driver o Protected Storage Remote Procedure Call (RPC) o Remote Procedure Call (RPC) o Server What other service require Message Queuing Triggers to function properly: · None Messenger This service provides the ability to send messages between clients and servers. This service needs not to be running under normal "home" conditions. It is also advisable to make this service go away to avoid the possibility of "net send" messages hitting your computer from the internet. This has nothing to do with MSN Messenger, nor is it "WinPopUp." To test for this security vulnerability, at the command prompt, (run: cmd.exe) type: net send 127.0.0.1 hi If you get a popup "hi" message, you should disable the Messenger service. If you get an error stating, "The message alias could not be found on the network," you are safe. ________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 28 Revision 5: Sunday, August 31, 2003
If, for whatever reason, you need the Messenger service running but wish not to have spam popups active, you can disable the particular ports at your firewall. The Messenger service uses UDP ports 135, 137, and 138; TCP ports 135, 139, and 445. Default XP Home: Automatic Default XP Pro: Automatic Safe Setting: Disabled Log on as: Local System account Dependencies: What services Messenger needs to function properly: · NetBIOS Interface · Plug and Play · Remote Procedure Call (RPC) · Workstation What other service require Messenger to function properly: · None MS Software Shadow Copy Provider Used in conjunction with the Volume Shadow Copy service, Microsoft Backup uses these services. You will receive, in the Event Log, an entry complaining about not having this service running if disabled. I have yet to find a side effect, though, but to avoid the messages; you can place the service in manual. Some third party hard disk "ghost" or "imaging" software may require this service to be running. Default XP Home: Manual Default XP Pro: Manual Safe Setting: Manual Log on as: Local System account Dependencies: What service MS Software Shadow Copy Provider needs to function properly: · Remote Procedure Call (RPC) What other service require MS Software Shadow Copy Provider to function properly: · None
________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 29 Revision 5: Sunday, August 31, 2003
Net Login Used for logging onto a Domain Controller. This service is not required on a standalone system, or for a "home" network. Default XP Home: Manual Default XP Pro: Automatic Safe Setting: Disabled Dependencies: What service Net Logon needs to function properly: · Workstation What other service require Net Logon to function properly: · None NetMeeting Remote Desktop Sharing Enables a user to access your computer using NetMeeting. This may create a BIG open door for the unwanted. If you are paranoid about security, disable this function. Even if you were not worried, I would still get rid of it. Default XP Home: Manual Default XP Pro: Manual Safe Setting: Disabled Log on as: Local System account (with permission to interact with desktop) Dependencies: What service NetMeeting Remote Desktop Sharing needs to function properly: · None What other service require NetMeeting Remote Desktop Sharing to function properly: · None Network Connections Required for managing network connectivity. Set to disabled if you have no network or you do not toy with the configurations a lot. If your internet connectivity no longer operates after disabling this function, set it back to Automatic! Note: While disabling this service, you will no longer see the system tray icon (lower right) displayed, even for modem connections. Connectivity, however, still exists even on incoming shared network drives. Default XP Home: Manual Default XP Pro: Manual Safe Setting: Manual ________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 30 Revision 5: Sunday, August 31, 2003
Log on as: Local System account (with permission to interact with desktop) Dependencies: What service Network Connections needs to function properly: · Remote Procedure Call (RPC) What other service require Network Connections to function properly: · Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS) Network DDE I have not found a good use for this service. Unless you use remote ClipBook, disable it. This uses about 1.5 MB idle. Default XP Home: Manual Default XP Pro: Manual Safe Setting: Disabled Log on as: Local System account Dependencies: What service Network DDE needs to function properly: · Network DDE DSDM What other service require Network DDE to function properly: · ClipBook Network DDE DSDM I have not found a good use for this service. Unless you use remote ClipBook, disable it. Default XP Home: Manual Default XP Pro: Manual Safe Setting: Disabled Log on as: Local System account Dependencies: What service Network DDE DSDM needs to function properly: · None What other services require Network DDE DSDM to function properly: · Network DDE o ClipBook
________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 31 Revision 5: Sunday, August 31, 2003
Network Location Awareness (NLA) This service is required for use with the Internet Connection Sharing service (server only). Default XP Home: Manual Default XP Pro: Manual Safe Setting: Manual Log on as: Local System account Dependencies: What services Network Location Awareness (NLA) needs to function properly: · AFD Networking Support Environment · NetBIOS over TCP/IP o TCP/IP Protocol Driver IPSEC driver What other service require Network Location Awareness (NLA) to function properly: · Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS) NT LM Security Support Provider Manages local system security information on the computer. You need this service if you are running Message Queuing or Telnet server. Default XP Home: Manual Default XP Pro: Manual Safe Setting: Manual Log on as: Local System account Dependencies: What service NT LM Security Support Provider needs to function properly: · None What other services require NT LM Security Support Provider to function properly: · Message Queuing o Message Queuing Triggers · Telnet
________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 32 Revision 5: Sunday, August 31, 2003
Performance Logs and Alerts Collect performance data on a schedule and send the information to a log or trigger an alert. This may be a super geek tool, but I feel that the overhead associated with it is not worth the benefit. You decide. Default XP Home: Manual Default XP Pro: Manual Safe Setting: Disabled Log on as: NT AUTHORITY\NetworkService Dependencies: What service Performance Logs and Alerts needs to function properly: · None What other service require Performance Logs and Alerts to function properly: · None Plug and Play This service is the heart and soul of the Plug and Play environment. I do not recommend disabling this service, but if you want to, you are on your own. Take note: UPnP is NOT PnP. UPnP is for connectivity on networks via TCP/IP to devices, such as scanners or printers. Your sound card is PnP. Do NOT disable Plug and Play service. Default XP Home: Automatic Default XP Pro: Automatic Safe Setting: Automatic Log on as: Local System account Dependencies: What service Plug and Play needs to function properly: · None What other services require Plug and Play to function properly: · Fax Service · Logical Disk Manager o Logical Disk Manager Administrative Service · Logical Disk Manager Administrative Service · Messenger · Smart Card · Telephony o Fax Service o Remote Access Auto Connection Manager o Remote Access Connection Manager ________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 33 Revision 5: Sunday, August 31, 2003
·
Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS) Remote Access Auto Connection Manager Windows Audio
Portable Media Serial Number Retrieves serial numbers from portable music players connected to your computer. I have not really found a good reason to keep this service always running. I am not aware of anything that actually requires it. Disable it unless something of yours ceases to function properly, such as Windows Media Player, Microsoft's integration with "Digital Rights Management" and copy protection. Default XP Home: Automatic Default XP Pro: Automatic Safe Setting: Disabled Log on as: Local System account Dependencies: What service Portable Media Serial Number needs to function properly: · None What other service require Portable Media Serial Number to function properly: · None Print Spooler Queues up print jobs for later printing. This service is required if you have printers, even if they are network printers. If this does not fit your needs, disable it. You will save about 3.8 MB by making this service go away. Your printers will still be "installed" if you disable this service, but not visible in the printers folder. After restarting Print Spooler, they will reappear and be available for use. I place this service into manual mode and only start it up when printing is required. In manual mode, the service will not automatically start at boot time. Default XP Home: Automatic Default XP Pro: Automatic Safe Setting: Automatic Log on as: Local System account (with permission to interact with desktop) Dependencies: What service Print Spooler needs to function properly: · Remote Procedure Call (RPC) What other services require Print Spooler to function properly: · Fax Service · TCP/IP Printer Server ________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 34 Revision 5: Sunday, August 31, 2003
Protected Storage Allows for the saving of local passwords or even web sites information (AutoComplete). This service is set to Automatic by default. Due to security reasons, I recommend leaving this "feature" disabled to make things all that much more difficult to steal vital information if you do not "save" it. On the other hand, you may need this service to manage private keys for encryption purposes. If so, leave this service on automatic to ensure the "higher" security settings you choose work. If you disable this service, you will no longer have any of your passwords saved, no matter how many times you click the box. If you enjoy having your passwords saved in applications like Outlook or Dial up networking or you are connecting to the internet via a domain controller/server that requires authentication, set this service to Automatic. Default XP Home: Automatic Default XP Pro: Automatic Safe Setting: Automatic Log on as: Local System account (with permission to interact with desktop) Dependencies: What service Protected Storage needs to function properly: · Remote Procedure Call (RPC) What other service require Protected Storage to function properly: · None QoS RSVP Provides traffic control on a network using IPSEC and applications that support QoS, and have an adapter that supports it. The QoS Packet Driver installs by default on any TCP/IP connections. I recommend uninstalling it if it is not needed on your network. As far as I can tell, you also need an ACS Server (Provided with Windows 2000 Server and Advanced Server) for the QoS Packet Scheduler and Applications to request the needed bandwidth. Since my network is not straining under any load, this is rather pointless. You may require this service to be placed on Automatic if you use Windows Media Player or NetMeeting. Take note: Some people (as I did before I completed extensive research on this) reported that QoS uses 20% of your bandwidth and does not allow any activity, regardless. This is false. For more information, please view this KB article from Microsoft (I normally do not post links to them, but this warrants it): http://support.microsoft.com/default.aspx?scid=kb;EN-US;q316666 Regardless, if you uninstall the packet scheduler, no "bandwidth" is still reserved. Default XP Home: Manual Default XP Pro: Manual Safe Setting: Disabled Log on as: Local System account ________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 35 Revision 5: Sunday, August 31, 2003
Dependencies: What services QoS RSVP needs to function properly: · AFD Networking Support Environment · Remote Procedure Call (RPC) · NetBIOS over TCP/IP o TCP/IP Protocol Driver IPSEC driver What other service require QoS RSVP to function properly: · None Remote Access Auto Connection Manager Creates a connection to a network when a program requests a remote address. This service may be required for your internet connection. If things cease to function after disabling this service, put it to automatic. Note: you may require this service for some direct cable or DSL providers and connections, depending on how they implement their logon process. If your Dial-up, cable or DSL internet access no longer functions properly with this service disabled, place this service into automatic. If you use a hardware gateway or router, this service is not required. Default XP Home: Manual Default XP Pro: Manual Safe Setting: Manual Log on as: Local System account Dependencies: What services Remote Access Auto Connection Manager needs to function properly: · Remote Access Connection Manager o Telephony Plug and Play Remote Procedure Call (RPC) · Telephony o Plug and Play o Remote Procedure Call (RPC) What other service require Remote Access Auto Connection Manager to function properly: · None Remote Access Connection Manager Creates a network connection. This service is required if you use Internet Connection Sharing. If things cease to function after disabling this service, put it to automatic. Note: you may require this service for some direct cable or DSL providers and connections, depending on how they implement their logon process. If your Dial-up, cable or DSL internet access no longer functions ________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 36 Revision 5: Sunday, August 31, 2003
properly with this service disabled, place this service into automatic. If you use a hardware gateway or router, this service is not required. Default XP Home: Manual Default XP Pro: Manual Safe Setting: Manual Log on as: Local System account Dependencies: What services Remote Access Connection Manager needs to function properly: · Telephony o Plug and Play o Remote Procedure Call (RPC) What other services require Remote Access Connection Manager to function properly: · Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS) · Remote Access Auto Connection Manager Remote Desktop Help Session Manager Manages and controls Remote Assistance. If you do not want or need to use this feature, disable it. In an idle state, this service sucks up 3.4 MB to 4 MB of RAM. Default XP Home: Manual Default XP Pro: Manual Safe Setting: Disabled Log on as: Local System account Dependencies: What service Remote Desktop Help Session Manager needs to function properly: · Remote Procedure Call (RPC) What other service require Remote Desktop Help Session Manager to function properly: · None
________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All Rights Reserved. Page 37 Revision 5: Sunday, August 31, 2003
Remote Procedure Call (RPC) This service is rather vital. Practically everything depends on this service to be running. This is also the only service that you cannot disable via the Services MMC. Previously, if you disabled this service in Windows 2000, your computer would become unbootable. What I am trying to tell you is leave this service on automatic and absolutely DO NOT disable it in msconfig. If, for whatever reason, the service became disabled and you can no longer boot your system, please read the information here for a way to fix it: http://www.blkviper.com/AskBV/2k4.htm Default XP Home: Automatic Default XP Pro: Automatic Safe Setting: Automatic Log on as: Local System account (and cannot be changed) Dependencies: What service Remote Procedure Call (RPC) needs to function properly: · None What other services require Remote Procedure Call (RPC) to function properly: · Background Intelligent Transfer Service · COM+ Event System o System Event Notification · COM+ System Application · Cryptographic Services · Distributed Link Tracking Client · Distributed Transaction Coordinator o Message Queuing Message Queuing Triggers · Error Reporting Service · Fax Service · Help and Support · Human Interface Device Access · IIS Admin o FTP Publishing Service o Simple Mail Transport Protocol (SMTP) o World Wide Web Publishing Service · Indexing Service · IPSEC Services · Logical Disk Manager o Logical Disk Manager Administrative Service · Logical Disk Manager Administrative Service · Message Queuing o Message Queuing Triggers · Messenger ________________________________________________________________________ © 2001-2003 Black Viper of http://www.blackviper.com All