Copy of Vista Services Disabled

7/31/2019 Copy of Vista Services Disabled

1/44

Name Short Name Executable Name

Application Experience AeLookupSvc svchost.exe

Application Information AppInfo svchost.exe

Application Layer

Gateway ServiceALG alg.exe

Application

ManagementAppMgmt svchost.exe

Background Intelligent

Transfer ServiceBITS svchost.exe

Base Filtering Engine BFE svchost.exe

Block Level Backup

Engine Service wbengine wbengine.exe

Certificate Propagation CertPropSvc svchost.exe

Windows Vista services that

One of the most effective ways to secure a Windows workstati

specifies whether you can safely disable the service, and outli

here won't be available in other versions of Vista) in a corporasafely disabling each service:

Yes = You can disable the service without causing any proble

Maybe = The computer's role dictates whether you should o

No = The service is critical to proper Windows operation and


2/44

CNG Key Isolation KeyIso lsass.exe

COM+ Event System EventSystem svchost.exe

COM+ System

ApplicationCOMSysApp dllhost.exe

Computer Browser Browser svchost.exe

Cryptographic Services CryptAvc svchost.exe

DCOM Server Process

LauncherDcomLaunch svchost.exe

Desktop Window

Manager Session

Manager

UxSms svchost.exe

DFS Replication DFSR DFSR.exe

DHCP Client Dhcp svchost.exe


3/44

Diagnostic Policy

ServiceDPS svchost.exe

Diagnostic Service Host WdiServiceHost svchost.exe

Diagnostic System Host WdiSystemHost svchost.exe

Distributed Link

Tracking ClientTrkWks svchost.exe

Distributed Transaction

CoordinatorMSDTC msdtc.exe

DNS Client Dnscache svchost.exe

Extensible

Authentication ProtocolEapHost svchost.exe

Fax Fax fxssvc.exe

Function Discovery

Provider HostfdPHost svchost.exe

Function Discovery

Resource PublicationFDResPub svchost.exe

Group Policy Client gpsvc svchost.exe

Health Key and

Certificate

Management

hkmsvc svchost.exe


4/44

Human Interface Device

Accesshidserv svchost.exe

IKE and AuthIP IPsecKeying Modules

IKEEXT svchost.exe

Interactive Services

DetectionUI0Detect UI0Detect.exe

Internet Connection

Sharing (ICS)SharedAccess svchost.exe

IP Helper iphlpsvc svchost.exe

IPsec Policy Agent PolicyAgent svchost.exe

KtmRm for Distributed

Transaction

Coordinator

KtmRm svchost.exe

Link-Layer Topology

Discovery Mapperlltdsvc svchost.exe

Microsoft .NET

Framework NGEN

v2.0.50727_X64

clr_optimization_v2.0.50727

_X64mscorsvw.exe

Microsoft .NET

Framework NGEN

v2.0.50727_X86

clr_optimization_v2.0.50727_X86

mscorsvw.exe

Microsoft iSCSI Initiator

ServiceMSiSCSI svchost.exe

Microsoft Software

Shadow Copy Providerswprv svchost.exe


5/44

Multimedia Class

SchedulerMMCSS svchost.exe

Net.Tcp Port Sharing

ServiceNetTcpPortSharing SMSSvcHost.exe

Netlogon Netlogon lsass.exe

Network Access

Protection Agentnapagent svchost.exe

Network Connections Netman svchost.exe

Network List Service netprofm svchost.exe

Network Location

AwarenessNlaSvc svchost.exe

Network Store

Interface Servicensi svchost.exe

Offline Files CscService svchost.exe

Parental Controls WPCSvc svchost.exe

Peer Name Resolution

ProtocolPNRPsvc svchost.exe

Peer Networking

Grouping

p2psvc svchost.exe

Peer Networking

Identity Managerp2pimsvc svchost.exe

Performance Logs &

Alertspla svchost.exe

Plug and Play PlugPlay svchost.exe


6/44

PnP-X IP Bus

EnumeratorIPBusEnum svchost.exe

PNRP Machine Name

Publication Service

PNRPAutoReg svchost.exe

Portable Device

Enumerator ServiceWPDBusEnum svchost.exe

Print Spooler Spooler spoolsv.exe

Problem Reports and

Solutions Control PanelSupport

wercplsupport svchost.exe

Program Compatibility

Assistant ServicePcaSvc svchost.exe

Protected Storage ProtectedStorage lsass.exe

Quality Windows Audio

Video ExperienceQWAVE svchost.exe

ReadyBoost EMDMgmt svchost.exe

Remote Access Auto

Connection Manager

RasAuto svchost.exe

Remote Access

Connection ManagerRasMan svchost.exe

Remote Procedure Call

(RPC)RpcSs svchost.exe


7/44

Remote Procedure Call

(RPC) LocatorRpcLocator locator.exe

Remote Registry RemoteRegistry svchost.exe

Routing and Remote

AccessRemoteAccess svchost.exe

Secondary Logon seclogon svchost.exe

Security Accounts

Manager

SamSs lsass.exe

Security Center wscsvc svchost.exe

Server LanmanServer svchost.exe

Shell Hardware

DetectionShellHwDetection svchost.exe

SL UI Notification

ServiceSLUINotify svchost.exe

Smart Card SCardSvr svchost.exe

Smart Card Removal

PolicySCPolicySvc svchost.exe

SNMP Trap SNMPTRAP snmptrap.exe

Software Licensing slsvc SLsvc.exe

SSDP Discovery SSDPSRV svchost.exe

Superfetch SysMain svchost.exe


8/44

System Event

Notification ServiceSENS svchost.exe

Tablet PC Input Service TabletInputService svchost.exe

Task Scheduler Schedule svchost.exe

TCP/IP NetBIOS Helper lmhosts svchost.exe

Telephony TapiSrv svchost.exe

Terminal Services TermService svchost.exe

Terminal Services

ConfigurationSessionEnv svchost.exe

Terminal ServicesUserMode Port

Redirector

UmRdpService svchost.exe

Themes Themes svchost.exe

Thread Ordering Server THREADORDER svchost.exe

TPM Base Services TBS svchost.exe

UPnP Device Host upnphost svchost.exe

User Profile Service ProfSvc svchost.exe


9/44

Virtual Disk vds vds.exe

Volume Shadow Copy VSS vssvc.exe

WebClient WebClient svchost.exe

Windows Audio AudioSrv svchost.exe

Windows Audio

Endpoint BuilderAudioEndpointBuilder svchost.exe

Windows Backup SDRSVC svchost.exe

Windows CardSpace idsvc infocard.exe

Windows Color System WcsPlugInService svchost.exe

Windows Connect Now -

Config Registrarwcncsvc svchost.exe

Windows Defender WinDefend svchost.exe

Windows Driver

Foundation - User-

mode Driver

Framework

wudfsvc svchost.exe

Windows Error

Reporting ServiceWerSvc svchost.exe

Windows Event

CollectorWecsvc svchost.exe

Windows Event Log Eventlog svchost.exe

Windows Firewall MpsSvc svchost.exe


10/44

Windows Image

Acquisition (WIA)stisvc svchost.exe

Windows Installer msiserver msiexec

Windows Management

InstrumentationWinmgmt svchost.exe

Windows Media Center

Extender ServiceMcx2Svc svchost.exe


Receiver ServiceehRecvr ehRecvr.exe


Scheduler Service

ehSched ehsched.exe


Service Launcherehstart svchost.exe

Windows Media Player

Network Sharing

Service

WMPNetworkSvc wmpnetwk.exe

Windows Modules

InstallerTrustedInstaller TrustedInstaller.exe

Windows Presentation

Foundation Font Cache

3.0.0.0

FontCache3.0.0.0 PresentationFontCache.exe

Windows Remote

Management (WS-

Management)

WinRM svchost.exe

Windows Search Wsearch SearchIndexer.exe

Windows Time W32Time svchost.exe

Windows Update wuaserv.exe svchost.exe


11/44

WinHTTP Web Proxy

Auto-Discovery ServiceWinHttpAutoProxySvc svchost.exe

Wired AutoConfig dot3svc svchost.exe

WLAN AutoConfig Wlansvc svchost.exe

WMI Performance

AdapterwmiApSrv WmiApSrv.exe

Workstation LanmanWorkstation svchost.exe

Copyright 2007 C

For more downloads and a free TechRepublic mem


12/44

Description Impact if disabled

Processes application compatibility cache requests for

applications as they are launched.

Facilitates the running of interactive applications with

additional administrative privileges.

Users will be unable to launch applications with the

additional administrative privileges they may require to

perform desired user tasks. These tools include

regedit.

Provides support for application-level protocol plug-ins

and enables network/protocol connectivity.

Programs that rely on this service, such as MSN

Messenger and Windows Messenger will not function.

Processes installation, removal, and enumeration

requests for Active Directory IntelliMirror group policy

programs.

Users will be unable to install, remove, or enumerate

any IntelliMirror programs.

Transfers data between clients and servers in the

background.

Any applications that depend on BITS, such as

Windows Update or MSN Explorer, will be unable to

automatically download programs and other

information.

The Base Filtering Engine (BFE) is a service that

manages firewall and Internet Protocol security (IPsec)

policies and implements user mode filtering.

Significantly reduces the security of the system. It will

also result in unpredictable behavior in IPsec

management and firewall applications.

Engine to perform block-level backup and recovery of

data as opposed to file-level backups.

Block-level backups will not function, but file-level

backups will still operate.

Propagates certificates from smart cards. Services that use smart cards will not operate.

can be disabled

ion is to turn off unnecessary services. This reference sheet lists the Windows Vista services, describes each servic

es the ramifications of disabling it. The list assumes the machine is running Windows Vista Ultimate (some of the

te network environment and that the company is not using smart cards. The list offers one of the following three

ms.

r should not disable the service -- read the special considerations for further information.

should not be disabled.


13/44

The CNG key isolation service is hosted in the LSA

process. The service provides key process isolation to

private keys and associated cryptographic operations

as required by the Common Criteria. The service stores

and uses long-lived keys in a secure process complying

with Common Criteria requirements.

Services that depend on cryptographic keys, including

Wired and Wireless AutoConfig and Extensible

Authentication Protocol, will not operate.

Allows management of Component Services by

providing automatic distribution of events to

subscribing COM components.

System Event Notification stops working, which means

that logon and logoff notifications will not take place.

Other applications, such as DFS Replication and

Background Intelligent Transfer Service, will not work

correctly.

Manages the configuration and tracking of Component

Object Model (COM)+-based components.

A number of other services, including RPC, will not

function.

Maintains an up-to-date list of computers on your

network and supplies the list to programs that request

it. The Computer Browser service is used by Windows-

based computers that need to view network domains

and resources.

Your computer will be unable to locate other Windowscomputers on the network

Provides four management services: Catalog Database

Service, which confirms the signatures of Windows files

and allows new programs to be installed; Protected

Root Service, which adds and removes Trusted Root

Certification Authority certificates from this computer;

Automatic Root Certificate Update Service, which

retrieves root certificates from Windows Update andenables scenarios such as SSL; and Key Service, which

helps enroll this computer for certificates.

The associated management services will not function

properly.

Provides launch functionality for DCOM services.

A whole lot of services will not function. DCOM Server

Process Launcher's list of services that depend on it is

very long.

Provides Desktop Window Manager startup and

maintenance services. This service enables Windows

Vista's Aero Glass display.

Aero Glass will not work.

Replicates files among multiple PCs keeping them in

sync. On the client, it is used to roam folders between

PCs; on servers, it is used to provide high availability

and local access across a wide area network (WAN).

File replication won't occur and the files on the server

will become out of date.

Allows the system to automatically obtain IP

addressing information, WINS server information,

routing information, and so forth; is required to update

records in Dynamic DNS.

The system will be unable to obtain an IP address,

WINS information, and the like, from a DHCP server

and will need to be configured with a static address.


14/44

The Diagnostic Policy Service enables problem

detection troubleshooting and resolution for Windows

components during installation.

Application installation diagnostics will no longer

function

The Diagnostic Service Host service enables problem

detection troubleshooting and resolution for Windows

components.

Some system diagnostics will no longer function.

Enables problem detection troubleshooting andresolution for Windows components.

System diagnostics will not not function.

Maintains links between NTFS files within a computer

or across computers in a network.

Link tracking will be unavailable. Users on other

computers won't be able to track links on this

computer.

Coordinates transactions that span multiple resource

managers, such as databases, message queues, and file

systems.

Distributed transactions will not occur. This can affect

Personal Web Server and SQL Server.

Resolves and caches DNS names, allowing the system

to communicate with canonical names rather thanstrictly by IP address.

The system will be unable to resolve a name and will

be able to communicate only via IP address. A client

may be unable to communicate with its domain

controller.

The Extensible Authentication Protocol (EAP) service

provides network authentication in such scenarios as

802.1x wired and wireless VPN and Network Access

Protection (NAP). EAP also provides application

programming interfaces (APIs) that are used by

network access clients, including wireless and VPN

clients during the authentication process.

The computer is prevented from accessing networks

that require EAP authentication, including 802.1x.

Enables you to send and receive faxes utilizing faxresources available on this computer or on the

network.

You won't be able to send faxes from your computer.

Host process for Function Discovery providers.Your computer won't be able to automatically discover

some printers and other network-based resources.

Publishes this computer and resources attached to this

computer so they can be discovered over the network.

The computer's network resources will no longer be

published and they will not be discovered by other

computers on the network.

The service is responsible for applying settingsconfigured by administrators for the computer and

users through the Group Policy component.

Group Policy settings will not be applied and

applications and components will not be manageablethrough Group Policy. Any components or applications

that depend on the Group Policy component might not

be functional.

Provides X.509 certificate and key management

services for the Network Access Protection Agent

(NAPAgent). This service is required for IPSec, SSH,

HTTPS, Smartcard services and more.

Enforcement technologies that use X.509 certificates

may not function properly without this service.


15/44

Enables generic input access to Human Interface

Devices (HID), which activates and maintains the use of

predefined hot buttons on keyboards, remote controls,

and other multimedia devices.

Hot buttons controlled by this service will no longer

function.

The IKEEXT service hosts the Internet Key Exchange

(IKE) and Authenticated Internet Protocol (AuthIP)

keying modules. These keying modules are used for

authentication and key exchange in Internet Protocol

security (IPsec). Some VPN software needs this.

Might result in an IPsec failure and might compromise

the security of the system. It is strongly recommended

that you have the IKEEXT service running.

Enables user notification of user input for interactive

services, which enables access to dialogs created by

interactive services when they appear.

Notifications of and access to new interactive service

dialogs will not function.

Provides network address translation addressing name

resolution and/or intrusion prevention services for a

home or small office network.

You will not be able to share your connection to the

Internet.

Provides automatic IPv6 connectivity over an IPv4

network.IPv6 services will not be available.

Internet Protocol security (IPsec) supports network-

level peer authentication, data origin authentication,

data integrity, data confidentiality (encryption), and

replay protection. This service enforces IPsec policies

created through the IP Security Policies snap-in or the

command-line tool "netsh ipsec."

You may experience network connectivity issues if your

policy requires that connections use IPsec. Remote

management of Windows Firewall is not available

when this service is not running.

Coordinates transactions between Microsoft

Distributed Transaction Coordinator (MSDTC) and the

Kernel Transaction Manager (KTM).

If you are using DTC, you must run this service.

Creates a Network Map consisting of PC and device

topology (connectivity) information and metadata

describing each PC and device.

The Network Map will not work.

Microsoft .NET Framework - 64-bit application support.The system will be unable to run 64-bit .NET-based

applications.

Microsoft .NET Framework - 32-bit application support. The system will be unable to run 32-bit .NET-basedapplications.

Manages Internet SCSI (iSCSI) sessions from this

computer to remote iSCSI target devices.The system will be unable to access iSCSI targets.

Manages software-based volume shadow copies taken

by the Volume Shadow Copy service.

Software-based volume shadow copies cannot be

managed.


16/44

Enables relative prioritization of work based on system-

wide task priorities. This is intended mainly for

multimedia applications.

Windows audio will not function.

Provides ability to share TCP ports over the net.tcp

protocol. This is a part of the .NET framework.

.NET-based applications that use net.tcp will not

function.

Maintains a secure channel between this computer andthe domain controller for authenticating users and

services.

Users logging in from the Vista workstation may not be

able to authenticate to the domain.

Enables Network Access Protection (NAP) functionality

on client computers.Network access protection will be disabled.

Manages the network and dial-up connections for the

system, including network status notification and

configuration.

Network configuration will not be possible; new

connections can't be created and services that need

network information may fail.

Identifies the networks to which the computer has

connected; collects and stores properties for these

networks; and notifies applications when these

properties change.

You will be unable to list the networks to which you are

connected via the system tray icon.

Collects and stores network configuration and location

information and notifies applications when this

information changes. This service is a part of ICS.

Services such as ICS & ICF will not function.

This service delivers network notifications (e.g.,

interface addition/deleting, etc.) to user mode clients.Your computer will be unable to connect to a network.

The Offline Files service performs maintenance

activities on the Offline Files cache, responds to user

logon and logoff events, implements the internals ofthe public API, and dispatches interesting events to

those interested in Offline Files activities and changes

in cache state.

Offline files will not be available.

This service enables Windows Parental Controls on the

system.Parental controls will not work.

Enables Serverless Peer Name Resolution over the

Internet.

Some Peer to Peer and Collaborative applications such

as Windows Meetings may not function.

Provides Peer Networking Grouping services.Some Peer to Peer and Collaborative applications such


Provides Identity service for Peer Networking.Some Peer to Peer and Collaborative applications such


Collects performance data for the computer or other

computers and writes it to a log or displays it on the

screen.

Performance information will no longer be logged or

displayed.

Enables a computer to recognize and adapt to

hardware changes with little or no user input.

The system will be unstable and incapable of detecting

hardware changes.


17/44

The PnP-X bus enumerator service manages the virtual

network bus. It discovers network-connected devices

using the SSDP/WS discovery protocols and gives them

presence in PnP.

Presence of NCD devices will not be maintained in PnP.

All pnpx based scenarios will stop functioning.

This service publishes a machine name using the Peer

Name Resolution Protocol. Configuration is managed

via the netsh context 'p2p pnrp peer.'

Some Peer to Peer and Collaborative applications such


Enforces group policy for removable mass-storage

devices. Enables applications such as Windows Media

Player and Image Import Wizard to transfer and

synchronize content using removable mass-storage

devices.

Portable devices may not function properly or you may

have difficulty blocking access to portable devices.

Manages all local and network print queues and

controls all printing jobs.Printing on the local machine will be unavailable.

Provides support for viewing sending and deletion of

system-level problem reports for the Problem Reportsand Solutions control panel.

The sending of error reports to Microsoft will not

function.

Provides support for the Program Compatibility

Assistant.The Program Compatibility Assistant will not function.

Protects sensitive information such as private keys

from exposure except to allowed persons and services.Protected information will be inaccessible.

Quality Windows Audio Video Experience (qWave) is a

networking platform for Audio Video (AV) streaming

applications on IP home networks. qWave enhances AV

streaming performance and reliability by ensuring

network quality-of-service (QoS) for AV applications. It

provides mechanisms for admission control, runtime

monitoring, and enforcement application feedback and

traffic prioritization.

Some streaming audio/video capabilities will not work.

Provides support for improving system performance

using ReadyBoost.

The performance improvements provided by

ReadyBoost will not function.

Detects unsuccessful attempts to connect to a remote

network or computer and provides alternative

methods for connection.

Users will need to manually connect to other systems.

Manages dial-up and virtual private network (VPN)

connections from this computer to the Internet or

other remote networks.

The operating system may not function properly.

Allows processes to communicate internally and across

the network with each other.The system will not boot. Don't disable this service.


18/44

Provides RPC name services similar to DNS services for

IP.

Systems that are running third-party utilities looking

for RPC information will be unable to find it. OS

components do not use this service, but programs such

as Exchange do.

Provides a mechanism to remotely manage the system

registry.

Remote systems will be unable to connect to the local

registry. Hfnetchk uses this mechanism. Disabling it can

affect the patch utility's operation.

Enables multiprotocol LAN-to-LAN, LAN-to-WAN,

virtual private network (VPN), and network address

translation (NAT) routing services for clients and

servers on this network.

Routing and Remote Access services will be

unavailable.

Enables starting processes under alternate credentials.

If this service is stopped, this type of logon access will

be unavailable.

Users will be unable to use the Run As feature to

elevate privileges.

Stores account information for local security accounts,

which, when started, allows other services to access

the SAM.

Services that rely on requests to the SAM database will

not function properly. Group Policy objects may not

operate properly.

Monitors system security settings and configurations.Security center notifications are disabled. Security

services still operate.

Allows the sharing of local resources, such as files and

printers, as well as named pipe communication.

Resources can't be shared, RPC requests will be denied,

and named pipe communication will fail.

Provides notifications for AutoPlay hardware events.CD-ROMs and other devices will not automatically

function.

Provides Software Licensing activation and notification.Once Vista is activated, this service isnt always

needed.

Manages access to smart cards read by this computer. This computer will be unable to read smart cards.

Allows the system to be configured to lock the user

desktop upon smart card removal.This computer may be unable to read smart cards.

Receives trap messages generated by local or remote

Simple Network Management Protocol (SNMP) agents

and forwards the messages to SNMP management

programs running on this computer.

Programs on the system that gather SNMP data will

not function.

Enables the download installation and enforcement of

digital licenses for Windows and Windows applications.

If the service is disabled, the operating system and

licensed applications may run in a reduced function

mode.

Used to locate UPnP devices on your home network.

Used in conjunction with Universal Plug and Play

Device Host, it detects and configures UPnP devices on

your home network.

Your computer will be unable to located uPnP devices

on the network.

Maintains and improves system performance over time

by improving the performance of foreground

applications over background applications.

SuperFetch will not run and applications will all run

with similar priority.


19/44

Required to record entries in the event logs; notifies

COM+ subscribers about logon and power-related

events.

Certain notifications will no longer work. For example,

synchronization won't work, as it depends on

connectivity information and Network

Connect/Disconnect and Logon/Logoff notifications.

Enables Tablet PC pen and ink functionality. Tablet ink functionality will not operate.

Enables a user to configure and schedule automated

tasks on this computer.Tasks will not be run at their scheduled times.

Required for software distribution in a Group Policy

(may be used to distribute patches) and provides

support for NetBIOS over TCP/IP and NetBIOS name

lookups.

NetBIOS over TCP/IP clients, including Netlogon and

Messenger, might stop responding. Disabling may also

affect the ability to share resources.

Provides Telephony API (TAPI) support for clients using

programs that control telephony devices and IP-based

voice connections.

The function of all dependent programs will be

impaired.

Allows users to connect interactively to a remote

computer; Remote Desktop, Fast User Switching,

Remote Assistance, and Terminal Server depend on

this service.

May make your computer unreliable. To prevent

remote use of this computer, clear the check boxes in

the Remote tab of the System properties control panel

item.

Terminal Services Configuration service (TSCS) is

responsible for all Terminal Services and Remote

Desktop related configuration and session

maintenance activities that require SYSTEM context.

These include per-session temporary folders, TS

themes, and TS certificates.

You will be unable to configure terminal services on

this computer.

Allows the redirection of Printers/Drives/Ports for RDP

connections.

Some Terminal Services operations will not work,

including port/drive/printer redirection.

Provides user experience theme management. Provides user experience theme management

Provides ordered execution for a group of threads

within a specific period of time.

Unknown, but general advice is to leave this service

enabled.

Enables access to the Trusted Platform Module (TPM),

which provides hardware-based cryptographic services

to system components and applications.

Applications will be unable to use keys protected by

the TPM.

Used in conjunction with SSDP Discovery Service, it

detects and configures UPnP devices on your home

network.

Your computer will be unable to located uPnP deviceson the network.

Responsible for loading and unloading user profiles.

Users will no longer be able to successfully log on or

log off; applications may have problems getting to

users' data and components registered to receive

profile event notifications will not receive them.


20/44

Provides management services for disks volumes file

systems and hardward array objects, such as

subsystems, luns, controllers, etc.

Disk management tools will not operate properly.

Manages and implements volume shadow copies used

for backup and other purposes.

Shadow copies will be unavailable for backup and the

backup may fail.

Enables Windows-based programs to create, access,and modify Internet-based files.

These functions will not be available.

Manages audio devices for Windows-based programs. Audio devices and effects will not function properly.

Manages audio devices for the Windows Audio service. Audio devices and effects will not function properly.

Provides Windows Backup and Restore capabilities. Windows Backup will not work.

Securely enables the creation, management, and

disclosure of digital identities.Some smartcard services will not work.

The WcsPlugInService service hosts third-partyWindows Color System color device model and gamut

map model plug-in modules. These plug-in modules are

vendor-specific extensions to the Windows Color

System baseline color device and gamut map models.

Disable this extensibility feature and the Windows

Color System will use its baseline model processing

rather than the vendor's desired processing. This might

result in inaccurate color rendering.

Acts as a Registrar; issues network credential to

Enrollee.

Windows Connect Now - Config Registrar will not

function properly.

Scans your computer for unwanted software schedule

scans and gets the latest unwanted software

definitions.

Your computer will not be protected against spyware.

Manages user-mode driver host processes.Unknown, but general advice is to leave this service

enabled.

Collects, stores, and reports unexpected application

crashed to Microsoft.

Error Reporting will occur only for kernel faults and

some types of user mode faults.

Manages persistent subscriptions to events from

remote sources that support WS-Management

protocol. This includes Windows Vista event logs,

hardware, and IPMI-enabled event sources. The servicestores forwarded events in a local Event Log.

Event subscriptions cannot be created and forwarded

events cannot be accepted.

Allows event log messages to be viewed in Event log to

assist in problem resolution.

Administrators won't be able to view logs, including

the security log, increasing the difficulty of diagnosing

problems and detecting security breaches.

Helps protect your computer by preventing

unauthorized users from gaining access to it through

the Internet or a network.

Your computer will not be protected from outside

threats.


21/44

Provides image acquisition services for scanners and

cameras.

Programs that require images, such as Windows Movie

Maker, won't function properly.

Adds, modifies, and removes applications provided as a

Windows Installer (*.msi) package.

Users cant install programs or make use of

Add/Remove programs.

Provides system management information; required toimplement performance alerts using Performance Logs

and Alerts.

System management and performance information will

be unavailable.

Allows Windows Media Center Extender devices to

locate and connect to the computer.

Other devices will not be able to connect to the

computer.

Windows Media Center Service for TV and FM

broadcast reception.TV and FM reception will not work.

Starts and stops recording of TV programs within

Windows Media Center.

You will be unable to record programs.

Starts Windows Media Center Scheduler and Windows

Media Center Receiver services at startup if TV is

enabled within Windows Media Center.

Media center software will not launch at startup.

Shares Windows Media Player libraries to other

networked players and media devices using Universal

Plug and Play.

You will be unable to share Media Player libraries.

Enables installation, modification, and removal of

Windows updates and optional components.

Install or uninstall of Windows updates might fail for

this computer.

Optimizes performance of Windows Presentation

Foundation (WPF) applications by caching commonly

used font data.

Applications that use Windows Presentation

Foundation will suffer degraded performance.

Windows Remote Management (WinRM) service

implements the WS-Management protocol for remote

management. WS-Management is a standard web

services protocol used for remote software and

hardware management.

You will be unable to remotely manage some aspects

of this Vista computer.

Provides content indexing and property caching forfiles, e-mail, and other content (via extensibility APIs).

The service responds to file and e-mail notifications to

index modified content.

Windows Explorer will not be able to display virtual

folder views of items and will revert to slower item-by-

item searches.

Uses NTP to keep computers in the domain

synchronized.Time synchronization won't take place.

Enables automatic updates to Windows Vista and other

programs. Updates are automatically downloaded and

installed.

Automatic updates will not take place.


22/44

WinHTTP implements the client HTTP stack and

provides developers with a Win32 API and COM

Automation component for sending HTTP requests and

receiving responses. In addition, WinHTTP provides

support for auto-discovering a proxy configuration via

its implementation of the Web Proxy Auto-Discovery

(WPAD) protocol.

Proxy servers will not be automatically discovered.

Performs IEEE 802.1X authentication on Ethernet

interfaces.802.1X authentication will not work.

Automatically configures WiFi (802.11) network

adapters.

You will have to manually configure wireless

networking.

Provides performance library information from

Windows Management Instrumentation (WMI)

providers to clients on the network. This service runs

only when Performance Data Helper is activated.

WMI performance statistics will not be gathered.

Provides network connections and communications

using the Microsoft Network services.

The computer will be unable to connect to remote

Microsoft Network resources, including other

computers and network printers.

ET Networks, Inc. All rights reserved.

bership, please visit http://techrepublic.com.com/2001-6240-0.html


23/44

Special notesDefault

StatusStartup Type Log On As

Started Automatic Local System

Although safe to disable, this is not recommended

since you need to boot into safe mode to enable again.Started Manual Local System

Only enable when using the Windows firewall or

another firewall. Failure to do so can result in a

significant security hole.

Manual Local Service

Keep enabled in a corporate environment. Manual Local System

Enable this service if you use Automatic Updates or the

Microsoft File Transfer Manager.Started As Needed Local System

Many other services depend on this one, including

Internet Connection Sharing, Routing and Remote

Access, IPsec Policy Agent, IKE and AuthIP IPsec Keying

Modules, and Windows Firewall.

Started Automatic Local Service

Manual Local System

Enable only if you use smart cards. Manual Local System

e's function,

services listed

possibilities for


24/44

Manual Local System

Technically, disabling this service will not result in

system instability, but since keeping your system

patched is critical, we do not indicate that this service

is safe to disable.


Manual Local System

Enable this service if you need to share files with otherWindows computers.

Automatic Local System

Required if you use the Automatic Updates Windows

service; also used by other Windows services, such as

Task Manager.

Started Automatic Network Service


If you revert to something other than the new Aero

Glass interface, you can disable this service. Reverting

to a different interface can have positive performance

implications.


If you are not on a network, this service is safe to

disable.Manual Local System

You can disable this service if you do not use DHCP. Started Automatic Local Service


25/44

Can go either way on this one. If disabled,

troubleshooting can be a little more difficult.Started Automatic Local Service

Can go either way on this one. If disabled,

troubleshooting can be a little more difficult.Manual Local Service

Can go either way on this one. If disabled,troubleshooting can be a little more difficult.

Started Manual Local System

In previous versions of this guide, we recommended

that this service be disabled. That is no longer the case

since more people are accessing files on other

computers.


Most desktops run neither Personal Web Server or SQL

Server.Manual Network Service

Stopping this service will result in the inability for the

computer to resolve names to IP addresses. Started Automatic Network Service

If you need access to an 802.1x-enabled network, do

not disable this service.Manual Local System

Manual Network Service

Started Manual Local Service


This service cannot be set to Disabled in any version of

Windows Vista.Started Automatic Local System

Manual Local System


26/44

Required for some "hot buttons" on newer keyboards.

Can be safely enabled if these buttons don't work with

this service disabled.

Manual Local System

If you're using a VPN client, verify whether you needthis service.


Manual Local System

Disabled Local System

Most networks do not use IPv6. Started Automatic Local System


Started As Needed Network Service


Manual Local System

Manual Local System

Enable only if you use iSCSI in your environment. Manual Local System

Leave set at Manual if you intend to use Windows

Backup.Started Manual Local System


27/44


Disabled Local Service

Manual Local System


Started Manual Local System


Enable if this computer has Internet Connection

Sharing enabled or if you are using the Internet

Connection Firewall.




If you have kids at home and want to lock things down,

keep this service enabled.Manual Local Service







28/44

If you use media center capabilities, enable this

service.Manual Local System


Leave enabled unless you know you won't use portable

devices.Started Automatic Local System

Disable this service if you don't have a printer. Started Automatic Local System

Manual Local System


Manual Local System



Manual Local System

This service is run on demand by the Remote Access

Manager.Started Manual Local System



29/44


Some programs require this functionality to operate. Manual Local Service

Better yet, don't install this service at all. Disabled Local System


If you use don't use DHCP to obtain an IP address, this

service can be disabled.


Started As Needed Local Service

This service must be enabled on Windows Vista

computers that share files or printers.Started Automatic Local System

Much easier to leave this enabled, and not much of a

security risk.Started Automatic Local System


If you're using a smart card reader, enable this service. Manual Local Service

If you're using a smart card reader, enable this service. Manual Local System






30/44

Leave enabled for laptops so that power notifications

are passed to the user.Started Automatic Local System

If you don't have a tablet PC, you don't need this

service.



For small networks, this service may be essential if you

share files with others. For larger networks with central

file servers, keep disabled on desktops.


Only needed for modem/fax modem use. Started Manual Network Service

Necessary if you plan to allow remote desktop. Started Automatic Network Service

Necessary if you plan to allow remote desktop. Manual Local System

Necessary if you plan to allow remote desktop. Manual Local System







31/44

Manual Local System

Enable this service if you use Windows Backup on this

desktop.Started Manual Local System


Even though it can be disabled, without this service,

you will get no sound.Started Automatic Local Service


Most organizations use other methods to back up data. Manual Local System

If you use smartcards, leave this service enabled. Manual Local System




Manual Local System






32/44

This service is required for some scanners and

cameras. If you don't have a scanner or a camera, you

can disable this service.


Manual Local System


Leave enabled if you use media center features of

Vista.Disabled Local Service


Vista.Manual Network Service


Vista.



Vista.As Needed Local Service


Vista.Manual Network Service

Although safe to disable, Windows updates may not

work.Started Manual Local System





Although safe to disable, you shouldn't. Started As Needed Local System


33/44


Manual Local System

Enable this service if you're using wireless networking.

Disable if you're not using wireless.Manual Local System

Manual Local System



34/44

RecommendationSafe to

disable

Enabled Yes

Enabled Yes

Enabled Maybe

Enabled Yes

Enabled Yes

Enabled Yes

Disabled Yes

Disabled Yes


35/44

Enabled Yes

Enabled No

Enabled Yes

Enabled Yes

Enabled No

Enabled No

Disabled Yes

Enabled Yes

Enabled Maybe


36/44

Enabled Yes

Enabled Yes

Enabled Yes

Enabled Yes

Disabled Yes

Enabled No

Disabled Yes

Disabled Yes

Disabled Yes

Disabled Yes

Enabled No

Enabled Yes


37/44

Disabled Maybe

Disabled Yes

Enabled Yes

Disabled Yes

Disabled Yes

Enabled Yes

Enabled Yes

Disabled Yes

Enabled No

Enabled No

Disabled Yes

Disabled Yes


38/44

Enabled No

Disabled Yes

Enabled No

Disabled Yes

Enabled No

Enabled Yes

Disabled Maybe

Enabled No

Disabled Yes

Disabled Yes

Disabled Yes

Disabled Yes

Disabled Yes

Disabled Yes

Enabled No


39/44

Disabled Yes

Disabled Yes

Enabled Yes

Enabled Maybe

Disabled Yes

Enabled Yes

Enabled Yes

Disabled Yes

Enabled Yes

Enabled Yes

Enabled Maybe

Enabled No


40/44

Enabled No

Disabled Maybe

Disabled Yes

Disabled Yes

Enabled Yes

Enabled Yes

Disabled Yes

Enabled Yes

Enabled Yes

Disabled Yes

Disabled Yes

Disabled Yes

Enabled No

Disabled Yes

Enabled Yes


41/44

Disabled Yes

Disabled Yes

Disabled Yes

Disabled Yes

Disabled Yes

Disabled Yes

Disabled Yes

Disabled Yes

Disabled Yes

Enabled No

Enabled Yes

Disabled Yes

Enabled No


42/44

Enabled Yes

Disabled Yes

Disabled Yes

Enabled Yes

Enabled Yes

Disabled Yes

Disabled Yes

Enabled Yes

Enabled Yes

Enabled Yes

Enabled No

Disabled Yes

Disabled Yes

Enabled No

Enabled Yes


43/44

Enabled Yes

Enabled Yes

Enabled No

Disabled Yes

Disabled Yes

Disabled Yes

Disabled Yes

Disabled Yes

Enabled Yes

Enabled No

Enabled Yes

Enabled Yes

Enabled Yes

Enabled Yes


44/44

Disabled Yes

Disabled Yes

Disabled Maybe

Enabled Yes

Enabled Yes

Documents

Copy of Vista Services Disabled