Wow!
Terrific post.
Nicely laid out.
Very informative and very useful.
Thank you.
DCR
"Chad Harris" <msftneedstogetoutvistainfo.net> wrote in message Please excuse that I didn't use your Sim Sum font. It was not my cup of tea. I do know some killer places for Dim Sum brunch though.
A whole hell of a lot of them. Many services are for things you aren't using or won't ever use. Welcome to MSFT Vista. Also they still default security vulnerabilities in the age of UAC just as they defaulted Telnet in XP. Welcome to the Redmond campus. Take a look at the explanations and see if you need them running:
To back up the default services in Vista (I haven't found a machine yet that needs a good number of them) after checking that out early on during the first few builds:
Open regedit, go to :
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet
Right click on the Services key and click Export and save the registry file.
Windows Key + R>Type services.msc in run box>enter:
http://www.tweakvista.com/article38662.aspx PART ONE
http://www.tweakvista.com/article38664.aspx PART TWO
Vista Services Guide
http://members.rushmore.com/~jsky/id31.html
Windows Vista Services Tweak Guide v1.0
http://www.msfn.org/board/index.php?act=ST&f=67&t=87443
Disable the following services to improve performance and decrease RAM usage:
Base Filtering Engine
Disable if you don't use the Windows Firewall
Diagnostic Policy Service
Distributed Link Tracking Client
Function Discovery Provider Host
Function Discovery Resource Publication
Human Interface Device Access
Disable if you don't use/need hotkeys on your keyboard.
IKE and AuthIP IPSec Keying Modules
Disable to improve network performance and decrease RAM usage.
Disabling will have a negative impact on network security.
Internet Connection Sharing
Disable if you don't need to share your internet connection.
IP Helper
Disable to improve network performance and decrease RAM usage.
Will also disable IPv6 connectivity over IPv4. Might be useful in the future.
IPSec Policy Agent
Disable to improve network performance and decrease RAM usage.
Disabling will have a negative impact on network security.
KtmRm for Distributed Transaction Coordinator
Disable if you don't use MSDTC and/or KTM.
Messenger Sharing Folders USN Journal Reader service
This service is only available if Messenger Live is installed.
Disable if you don't use Messenger Live's sharing folders.
Microsoft Software Shadow Copy Provider
Disable if you don't use MS Shadow Copy.
Disabling will have a negative impact on system redundancy.
Net.Tcp Port Sharing Service
Disable if you don't use the Net.Tcp protocol (from .NET framework).
Disabling will make .NET applications using this protocol not to function properly.
Network List Service
Disable if you aren't connected to a LAN with multiple computers or if you don't share files or printers through your LAN.
Network Location Awareness
Disable if you aren't connected to a LAN with multiple computers or if you don't share files or printers through your LAN.
Offline Files
Disable if you only use local profiles and aren't connected to a domain.
Portable Device Enumerator Service
Disable if you don't need to syncronize data with removable storage (such as mp3 players. This will not affect third party applications such as iTunes, only applications using this service, e.g. Windows Media Player).
Program Compatibility Assistant Service
Disable if you don't care about compatibility issues. (Running applications in compatibility mode will still function.)
ReadyBoost
Disable if you don't use this feature.
Remote Access Connection Manager
Disable if you don't use dial-up connections and/or VPN-networks.
Routing and Remote Access
Disable if you don't need to route network data within a LAN or WAN.
Secondary Logon
Disable if you don't need to login two users at once.
Security Center
Disable if you can take care of the system security manually.
Server
Disable if you don't share files and/or printers through LAN.
Shell Hardware Detection
Disable to remove autoplay functionality on removable media.
SL UI Notification Service
Disable. You can manually run this if it's needed for activation or other software licensing issues.
Tablet PC Input Service
Disable if you don't have a Tablet PC.
TCP/IP NetBIOS Helper
Disable. Totally useless if you don't use NetBIOS (NetBT).
Telephony
Disable if you don't use dial-up connections.
Terminal Services
Disable if you don't use Remote Desktop.
Disabling will improve system security.
UPnP Device Host
Disable if you don't need to host UPnP devices.
WebClient
Windows Defender
Disable if you don't want to use it. Though, consider using third party anti-malware application if you disable it.
Windows Error Reporting Service
Disable if you don't use error reporting.
Windows Firewall
Disable if you don't use the Windows Firewall. Though, consider using third party firewall (hardware, software or router w/ firewall).
Windows Image Aquisition (WIA)
Disable if you don't use a scanner and/or digital cameras.
Windows Media Center Extender Service
Disable if you don't use Media Center extensions.
Windows Search
Disable if you don't want to use the advanced windows search feature with indexing (Normal search will still function, but is alot slower).
Windows Time
Disable if you don't want the clock to syncronize automatically. Waste of resources. Update clock manually.
WinHTTP WebProxy Auto-Discovery Service
Disable if you don't use applications which use the WPAD protocol (most applications don't). Manually enable if you need it.
Virtual Disk
Set as manual if you don't use Disk Management in the Computer Management console.
You can manually start this service at any time if you need to use Disk Management.
Volume Shadow Copy
Disable if you don't use MS Shadow Copy.
Disabling will have a negative impact on system redundancy.
If you don't use the Aero theme disable the following services:
Application Experience
Desktop Window Manager Session Manager
If you don't use themes at all, disable the following services:
Application Experience
Desktop Window Manager Session Manager
Windows Themes
Digital ID Management Service - Listens for Digital ID related events and invokes the registered Providers to perform their tasks. The order that the Providers are invoked is specified by the dependency settings. If this service is stopped or disabled, this computer and all logged on users will be unable to use the automated functionality. This sounds like a fancy service, but your probably don't have a use for it unless you use any DRM technologies.
Distributed Link Tracking Client - Maintains links between NTFS files within a computer or across computers in a network.
Group Policy Client - The service is responsible for applying settings configured by administrators for the computer and users through the Group Policy component. If the service is stopped or disabled, the settings will not be applied and applications and components will not be manageable through Group Policy. Any components or applications that depend on the Group Policy component might not be functional if the service is stopped or disabled. Are you using any of the new account restrictions in Windows Vista, if not, and if this computer is not on a enterprise network, disable this service to free up some bytes.
IKE and AuthIP IPSec keying modules - IKE and AuthIP IPSec keying modules. Unless you are doing crazy VPN stuff, home users have little use for this service.
Infrared monitor service - Supports infrared devices installed on the computer and detects other devices that are in range. Still have any infrared device sitting around? Yeah right!, disable this unless you are still using any legacy devices that require infrared. If so, consider upgrading sometime in the future to this thing called Blue tooth.
Network Access Protection Agent - Allows windows clients to participate in NAP. If you have no use for NAP or don't know what it is, disable this, you probably don't need it.
Peer Name Resolution Protocol - Enables Serverless Peer Name Resolution over the Internet. DNS lookups without a DNS server? Possibly, but still no use for it.
Peer Networking Identity Manager - Provides Identity service for Peer Networking. P2P service that performance users don't need. Unless you are using the new P2P networking features.
Pen Service - Tablet PC Pen Input Service. This service is running by default on my laptop which is not a tablet PC!
PnP-X IP Bus Enumerator Service - The PnP-X bus enumerator for network connected devices. If you do not have any devices that use this feature (I don't know of any, if any of you do, post a comment!) consider disabling it.
Remote Registry - Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. I do not understand why Microsoft always decides to have this service started by default in Windows. This service is really only useful for system administrators in enterprise environments. Although my faith in Microsoft security is growing, for home users and most power users this service is just waiting to be exploited by the latest virus/Trojan. It provide no useful functionality to us so just disable it.
Software Licensing Service - This service provides licensing technology APIs in Windows. Don't use any software that needs this? Not many do right now. Disable it.
SSDP Discovery Service - Discovers networked devices and services that use the SSDP discovery protocol, such as UPnP devices. Also announces SSDP devices and services running on the local computer. If this service is stopped, SSDP-based devices will not be discovered. If this service is disabled, any services that explicitly depend on it will fail to start. Do you have any UPnP devices? No, then disable this.
UPnP Device Host - Allows UPnP devices to be hosted on this computer. If this service is stopped, any hosted UPnP devices will stop functioning and no additional hosted devices can be added. If this service is disabled, any services that explicitly depend on it will fail to start. Do you have any UPnP devices? No, then disable this as well.
WebClient - Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start. This service is used for things like web folder and WEB DAV. If you are like me and don't use these services, then disable them.
Windows Error Reporting Service - Enables error reporting and solution delivery for application failures (crashes and hangs). If this service is stopped, error reporting might not work correctly. This service has always been a favorite for power users to disable. I'm not going to lie, it will give you a slight performance gain if you disable it since less overhead = more resources for your apps. However, Windows Vista is in Beta! Why wouldn't you want Microsoft to hear about the problems you are having. Don't you want them to have a chance to be fixed?
Windows Image Acquisition (WIA) - Provides image acquisition services for scanners and cameras. Not used? disable it.
Windows Management Instrumentation - Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. This service is used a lot in the enterprise environment in scripting events on computers. In the home area, there is no use for it and can be disabled. If in the future you ever have any problems with installing programs, try re-enabling this service again since some, not all, tend to use it.
Good luck,
CH