WinXPproSP2 - Services

[ErikAlbert]

I'm planning to change some service settings in winXPproSP2.
I realize that this is already done by most members, but never by me.
I'm not lazy, so I prepared it nicely and most work has be done by me.

My new computer
- is a standalone home computer (no network)
- has no wireless connections of any kind
- has a cable modem for internet connection (no dialup)
- has no fax facility.

The access path to see these services in winXPproSP2 is :
Start/Control Panel/Performance and Maintenance/Administrative Tools/Services

The list is COMPLETE and contains the correct service names.
Keep also in mind that service names can be different on other computers, due to changes in Windows Version or service packs.
Some 3rd party softwares create also additional services, but this one is PURE winXPproSP2.
Column "1" = Default settings RIGHT AFTER installing winXPproSP2 without any other installation.
Column "2" = Changed settings (blank=unchanged).
A=Automatic, D=Disabled, M=Manual

--- ---------------------------------------------------- ------------ - -
Nr. WinXPproSP2 Service Name............................ Main ServObj 1 2
--- ---------------------------------------------------- ------------ - -
01. Alerter -------------------------------------------- ALRSVC.DLL.. D
02. Application Layer Gateway Service ------------------ ALG.EXE..... M
03. Application Management ----------------------------- APPMGMTS.DLL M
04. Automatic Updates ---------------------------------- WUAUSERV.DLL A
05. Background Intelligent Transfer Service ------------ QMGR.DLL.... M
06. ClipBook ------------------------------------------- CLIPSRV.EXE. D
07. COM+ Event System ---------------------------------- ES.DLL...... M
08. COM+ System Application ---------------------------- ES.DLL...... M
09. Computer Browser ----------------------------------- BROWSER.DLL. A
10. Cryptographic Services ----------------------------- CRYPTSVC.DLL A
11. DCOM Server Process Launcher ----------------------- ............ A
12. DHCP Client ---------------------------------------- DHCPCSVC.DLL A
13. Distributed Link Tracking Client ------------------- TRKWKS.DLL.. A
14. Distributed Transaction Coordinator ---------------- MSDTC.EXE... M
15. DNS Client ----------------------------------------- DNSRSLVR.DLL A
16. Error Reporting Service ---------------------------- ERSVC.DLL... A
17. Event Log ------------------------------------------ EVENTVWR.EXE A
18. Fast User Switching Compatibility ------------------ SHSVCS.DLL.. M
19. Help and Support ----------------------------------- HELPSVC.EXE. A
20. HTTP SSL ------------------------------------------- W3SSL.DLL... M
21. Human Interface Device Access ---------------------- HIDSERV.DLL. D
22. IMAPI CD-Burning COM Service ----------------------- IMAPI.EXE... M
23. Indexing Service ----------------------------------- CISVC.EXE... M
24. IPSEC Services ------------------------------------- ............ A
25. Logical Disk Manager ------------------------------- DMSERVER.DLL A
26. Logical Disk Manager Administrative Service -------- DMADMIN.EXE. M
27. Messenger ------------------------------------------ MSGSVC.DLL.. D
28. MS Software Shadow Copy Provider ------------------- DLLHOST.EXE. M
29. Net Logon ------------------------------------------ ............ M
30. NetMeeting Remote Desktop Sharing ------------------ MNMSRVC.EXE. M
31. Network Connections -------------------------------- NETMAN.DLL.. M
32. Network DDE ---------------------------------------- NETDDE.EXE.. D
33. Network DDE DSDM ----------------------------------- NETDDE.EXE.. D
34. Network Location Awareness (NLA) ------------------- MSWSOCK.DLL. M
35. Network Provisioning Service ----------------------- XMLPROV.DLL. M
36. NT LM Security Support Provider -------------------- ............ M
37. Performance Logs and Alerts ------------------------ SMLOGSVC.EXE M
38. Plug and Play -------------------------------------- SERVICES.EXE A
39. Portable Media Serial Number Service --------------- MSPMSNSV.DLL M
40. Print Spooler -------------------------------------- SPOOLSV.EXE. A
41. Protected Storage ---------------------------------- PSTOREC.DLL. A
42. QoS RSVP ------------------------------------------- RSVP.EXE.... M
43. Remote Access Auto Connection Manager -------------- RASMANS.DLL. M
44. Remote Access Connection Manager ------------------- SESSMGR.EXE. M
45. Remote Desktop Help Session Manager ---------------- SESSMGR.EXE. M
46. Remote Procedure Call (RPC) ------------------------ RPCSS.DLL... A
47. Remote Procedure Call (RPC) Locator ---------------- ............ M
48. Remote Registry ------------------------------------ ............ A
49. Removable Storage ---------------------------------- NTMSSVC.DLL. M
50. Routing and Remote Access -------------------------- MPRDIM.DLL.. D
51. Secondary Logon ------------------------------------ SECLOGON.DLL A
52. Security Accounts Manager -------------------------- SAMLIB.DLL.. A
53. Security Center ------------------------------------ WSCSVC.DLL.. A
54. Server --------------------------------------------- ............ A
55. Shell Hardware Detection --------------------------- SHSVCS.DLL.. A
56. Smart Card ----------------------------------------- SCARDSVR.EXE M
57. SSDP Discovery Service ----------------------------- SSDPSRV.DLL. M
58. System Event Notification -------------------------- SENS.DLL.... A
59. System Restore Service ----------------------------- SRSVC.DLL... A
60. Task Scheduler ------------------------------------- SCHEDSVC.DLL A
61. TCP/IP NetBIOS Helper ------------------------------ LMHSVC.DLL.. A
62. Telephony ------------------------------------------ TAPISRV.DLL. M
63. Telnet --------------------------------------------- ............ D
64. Terminal Services ---------------------------------- TERMSRV.DLL. M
65. Themes --------------------------------------------- UXTHEME.DLL. A
66. Uninterruptible Power Supply ----------------------- UPS.EXE..... M
67. Universal Plug and Play Device Host ---------------- UPNPHOST.DLL M
68. Volume Shadow Copy --------------------------------- VSSVC.EXE... M
69. WebClient ------------------------------------------ WEBCLNT.DLL. A
70. Windows Audio -------------------------------------- AUDIOSRV.DLL A
71. Windows Firewall/Internet Connection Sharing (ICS) - FWCFG.DLL... A
72. Windows Image Acquisition (WIA) -------------------- WIASERVC.DLL M
73. Windows Installer ---------------------------------- MSIEXEC.EXE. M
74. Windows Management Instrumentation ----------------- WMISVC.DLL.. A
75. Windows Management Instrumentation Driver Extensions ............ M
76. Windows Time --------------------------------------- W32TIME.DLL. A
77. Wireless Zero Configuration ------------------------ WZCSVC.DLL.. A
78. WMI Performance Adapter ---------------------------- WMIAPSRV.EXE M
79. Workstation ---------------------------------------- ............ A
--- ---------------------------------------------------- ------------ - -

These are supposed to be SAFE settings, unless I made a mistake in the last column.
For people, who never bothered, this list might be a start.
I will print and keep that list in my installation file to remember it forever.

If necessary, I will change the original list, based on member's posts on condition
that it is applicable on my computer.
Other members, who are interested, can create their own list.

Critiques, corrections, comments are very welcome of course.
Thanks in advance. :)

[WSFuser]

seems like a good config, for me tho, id also disable

Application Layer Gateway Service
Distributed Link Tracking Client
Distributed Transaction Coordinator
DNS Client
IMAPI CD-Burning COM Service
Security Center
Windows Firewall/Internet Connection Sharing (ICS)

i based my config from this page (http://www.tweakhound.com/xp/security/page_3.htm)

[ErikAlbert]

-{ Quote: "seems like a good config, for me tho, id also disable

Application Layer Gateway Service
Distributed Link Tracking Client
Distributed Transaction Coordinator
DNS Client
IMAPI CD-Burning COM Service
Security Center
Windows Firewall/Internet Connection Sharing (ICS)

i based my config from this page (http://www.tweakhound.com/xp/security/page_3.htm)" }-
Many thanks. Yes I know that website too and some others as well.
I just wasn't sure enough.
Some websites disable even more than TweakHound.

[Alec]

Seems like a good list, although I would probably leave DNS Client on. It just provides and manages a local DNS cache which is definitely more efficient than doing a DNS lookup every time. I would say that it might even make a noticeable performance difference, depending upon your ISP's DNS server response times. Probably not a huge, biggie either way.

[Franklin]

Eric,this fellas guide is the best.Will explain most!
http://www.bold-fortune.com/forums/index.php?showtopic=1093

[ErikAlbert]

-{ Quote: "Eric,this fellas guide is the best.Will explain most!
http://www.bold-fortune.com/forums/index.php?showtopic=1093" }-
Thanks Franklin, I will study that one too. I have still time for this, because new computer isn't ready yet.
I only want to get rid of these settings once and for all, because many posts talk about some of these services, but not all of them and this list is complete.

[Mrkvonic]

Hello,
My advice - leave them as they are.
Mrk

[ErikAlbert]

-{ Quote: "Hello,
My advice - leave them as they are.
Mrk" }-
In this case I don't agree with you. I'm not putting winXPproSP2 on a strong diet like some members do.
Most softwares have settings, which can be changed by the user and the software is supposed to act according these settings. Otherwise what is the purpose of the settings ?
I agree with you that a wrong service setting can cause some problems in one or more other programs sooner or later, that's because the user didn't know what he was doing and I'm one of them.

BUT there are websites enough, published by people with experience and in general they use the same settings for the same service. They wouldn't publish these service settings, if they caused problems on every computer world-wide.
Some of these websites exaggerate too much, at least for less-knowledgeable users, but there are always professionals who like to go to the limit, for them it's more a game "How far can I go?". That's not what I want. :)

[Lamehand]

It maybe not be the best advice for everybody but i have disabled automatic
updates also.
The reason is i want to stay in control of what i update, so i use technet and pick out what i need.

I don't know if it is possible to be selective with automatic updates in what you
update, i've never used it.Is this possible?

Abe

[Mrkvonic]

-{ Quote: "In this case I don't agree with you. I'm not putting winXPproSP2 on a strong diet like some members do.
Most softwares have settings, which can be changed by the user and the software is supposed to act according these settings. Otherwise what is the purpose of the settings ?
I agree with you that a wrong service setting can cause some problems in one or more other programs sooner or later, that's because the user didn't know what he was doing and I'm one of them.

BUT there are websites enough, published by people with experience and in general they use the same settings for the same service. They wouldn't publish these service settings, if they caused problems on every computer world-wide.
Some of these websites exaggerate too much, at least for less-knowledgeable users, but there are always professionals who like to go to the limit, for them it's more a game "How far can I go?". That's not what I want. :)" }-

Hello,
First, You are going to buy a pc with 3Ghz processor and 1-2Gb RAM, there is no reason whatsoever to slimdiet your XP. You can run 2 VMs, 1 Matlab, 1 Cygwin, and some more simultaneously plus 50 processes and you will not feel any slowdown.
Second, all the online guides for tweaking are meant for - single pc, standalone, no networking, usually not even a printer, no gaming, no p2p. If you fall into this category, then maybe some of the tweaking is good for you. But otherwise, it's a pure flexibility kill.
Third, in 3 months time, you will install something. And then it may not work properly, and you will wonder why and how, and you will forget it was this or that service that you disabled.
Fourth, don't count on publishers of tweak guides to rely on worldwide success. Tweaking is meant only for those who know 100% what they do and what each little change can, may or will cause, otherwise it's crippling a perfectly good horse. And no need. You will have a monster pc, no need to slim down the Windows.
Mrk

[lotuseclat79]

Hi Erik,

Contrary to what Alec recommends about DNS Client service, if you have a very large Hosts file, it is essential to Disable or put DNS Client into Manual status because when you have a very large Hosts file, bootup and ISP login can take up to 3 minutes (esp. for dialup accounts).

This is a very well known side-effect of very large Hosts files, and consequent action to avoid the problem.

-- Tom

[WSFuser]

-{ Quote: "It maybe not be the best advice for everybody but i have disabled automatic
updates also.
The reason is i want to stay in control of what i update, so i use technet and pick out what i need.
I don't know if it is possible to be selective with automatic updates in what you
update, i've never used it.Is this possible?
Abe" }-
if u set Automatic Updates to only download but not install updates, u can select "custom" whne u do install them and select which updates u want to install.
-{ Quote: "Hello,
First, You are going to buy a pc with 3Ghz processor and 1-2Gb RAM, there is no reason whatsoever to slimdiet your XP. You can run 2 VMs, 1 Matlab, 1 Cygwin, and some more simultaneously plus 50 processes and you will not feel any slowdown.
Second, all the online guides for tweaking are meant for - single pc, standalone, no networking, usually not even a printer, no gaming, no p2p. If you fall into this category, then maybe some of the tweaking is good for you. But otherwise, it's a pure flexibility kill.
Third, in 3 months time, you will install something. And then it may not work properly, and you will wonder why and how, and you will forget it was this or that service that you disabled.
Fourth, don't count on publishers of tweak guides to rely on worldwide success. Tweaking is meant only for those who know 100% what they do and what each little change can, may or will cause, otherwise it's crippling a perfectly good horse. And no need. You will have a monster pc, no need to slim down the Windows.
Mrk" }-
i dont believe all online guides are so strict and solely meant for "single pc, standalone, no networking, usually not even a printer, no gaming, no p2p". i know that blackvipers site had several service configs depending on ur needs.

also tweaking guides will usually tell u what settings do and how they can affect things. theyre not all aimed at extremists. some tips can be safely used for newbies.

and lastly, i dont think u should avoid teaking ur computer just because its so powerful. there is always room for improvement and Windows is a testiment to that.

[Notok]

Leave enabled:
Cryptographic Services
Distributed Link Tracking Client
Human Interface Device Access
IPSEC Services
Secondary Logon
Themes

If you use an MP3 player or anything, leave "Portable Media Serial Number Service" enabled


Disable:
Fast User Switching Compatibility
Indexing Service
Remote Procedure Call (RPC) Locator
Server
TCP/IP NetBIOS Helper
WebClient
Workstation

The ones you had listed here as "Manual" will get enabled anyway, boot time will slow as it turns each of them on.

[Lamehand]

Thanks WSFuser i will try this out.

Greetings

[ErikAlbert]

-{ Quote: "Disable:
Server
Workstation
" }-
Why do I have to disable these, because my computer is a standalone computer ?

[WSFuser]

-{ Quote: "Why do I have to disable these, because my computer is a standalone computer ?" }-
yes but only disable "server". i havent yet found any info/site recommending that you disable workstation.

[Lamehand]

I have found an "old" printout from blackviper's site from 2003.
He states about the workstation service:

Quote: 'Used to connect local computer to remote computers.Examples may include local network connectivity and File and Print sharing.Many services depend on Workstation to be functioning.Leave it on automatic for safe configurations': end Quote.

So i think it shouldn't be disabled, you could get into trouble.

Greetings.

[ErikAlbert]

Although I started this thread, I'm getting second thoughts about it.
What bothers me the most is that alot of individuals published their opinion on the internet concerning disabling services, except Microsoft himself and that's the only one I would really trust, because Microsoft CREATED winXPproSP2.
Upto now, I couldn't find any similar website that handles all these services, published by Microsoft.

I don't really trust all these individuals, who were most probably never involved in the development of winXPproSP2.
How can they be so sure about anything and sometimes, they even admit it.

What I'm going to do for tweaking winXPproSP2 safely is using tools, that were developped and/or approved by Microsoft only.
What isn't tweaked by Microsoft, won't be tweaked by me or any other 3rd party software on my computer.
It's too risky and certainly for a newbie like me.

So I removed all disablings in the last column of my original post.
If I ever notice that one of these services are disabled by MS Tweaking Tools, I will adjust my original post.

[dog [away]]

-{ Quote: "What I'm going to do for tweaking winXPproSP2 safely is using tools, that were developped and/or approved by Microsoft only.
What isn't tweaked by Microsoft, won't be tweaked by me or any other 3rd party software on my computer.
It's too risky and certainly for a newbie like me." }-If you don't play and discover what does what, dependencies etc. How will you grow your knowledge level and understanding? Sure there's tons of info available and it should be used as a resource, but the real understanding/knowledge begins hands on. Hacking your software to meet your needs is what it's all about to me ... I don't want the cookie cutter config someone else has decided on.

Personally, I'm extreme with tweaks ... it's the only way to learn IMO.

[Alec]

Well, I think you're being overly cautious. There really isn't too much damage you can do by enabling and disabling these services, as long as you use a tool such as the Services Admin Tool to make the changes and not by editing the Registry directly. As long as you know the system defaults, you can pretty much always reset things back to "as they should be" if you find something that doesn't work for you. As you, yourself, seemingly implied in your first post... many of these services are highly dependent upon personal circumstances. In many cases, Microsoft enables something by default because they have no idea whether the ultimate end-user will be deploying the OS on a solitary, non-connected PC or on a PC that's part of LAN and on which the user wants to share files and printers. They have no idea if the user will want Terminal Services and Remote Desktop administration... or not. They probably should ask such questions as part of the OS install process, but it would probably just confuse most people. Anyway, I thought I would include the following links to Microsoft articles, since you seemed to want some of their "official" commentary.

System Services for the Windows Server 2003 Family and Windows XP Operating Systems (http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/management/svrxpser_7.mspx)

Windows XP Professional Product Documentation - Default settings for services (http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sys_srv_default_settings.mspx?mfr=true)

Windows Server 2003 - Default settings for services (http://technet2.microsoft.com/WindowsServer/en/Library/2b1dc6cf-2e34-4681-9aa6-8d0ffba2d3e31033.mspx)

Service overview and network port requirements for the Windows Server system (http://support.microsoft.com/?kbid=832017)

[WSFuser]

i agree with dog [away]. nothing ventured, nothing gained.

also its unlikely Microsoft will offer huge tips on optimizing XP. they have setup XP for the best overall compatibility on all configurations. it wont necessarily be the fastest nor most secure setup.

[TOMxEU]

-{ Quote: "Other members, who are interested, can create their own list." }-
Well, here is mine settings (1 (http://img301.imageshack.us/img301/9670/capture040420060911105zm.jpg), 2 (http://img301.imageshack.us/img301/5797/capture040420060911156kb.jpg), 3 (http://img301.imageshack.us/img301/4786/capture040420060911195rv.jpg), 4 (http://img301.imageshack.us/img301/213/capture040420060911217gk.jpg)). I have dialup DSL, so I need "Network Connections" and "Remote Access Connection Manager". The result is 11 processes (http://img206.imageshack.us/img206/4059/sstartup4in.png) running after startup.

DNS Client (http://www.theeldergeek.com/dns_client.htm) is used to leak, unless the firewall is configured to block DNS (DNS test (http://www.firewallleaktester.com/leaktest14.htm)).
DCOM Server Process Launcher (http://www.theeldergeek.com/dcom_server_process_launcher.htm) - runs Microsoft Installer, Windows Defragmenter, etc.
Windows Management Instrumentation (http://www.theeldergeek.com/windows_management_instrumentation.htm) - required by MS aplications, some tabs settings.

[Notok]

-{ Quote: "Why do I have to disable these, because my computer is a standalone computer ?" }-Correct. If you're not using File & Printer Sharing, there's no need for these. Workstation is also one of, if not the, most exploited service, so if you don't need it - turn it off.

-{ Quote: "If you don't play and discover what does what, dependencies etc. How will you grow your knowledge level and understanding? Sure there's tons of info available and it should be used as a resource, but the real understanding/knowledge begins hands on. Hacking your software to meet your needs is what it's all about to me ... I don't want the cookie cutter config someone else has decided on." }-I agree completely. It's also not like you're removing the services.. if something breaks you can turn them back on quite easily.

-{ Quote: "What bothers me the most is that alot of individuals published their opinion on the internet concerning disabling services, except Microsoft himself and that's the only one I would really trust, because Microsoft CREATED winXPproSP2." }-That's because if they published one custom setup for a standard environment, they'd have to publish a thousand of them for every one else as well, then they'd have to provide tech support for when everyone gets something wrong. The reason that they put everything in and turned it all on is to make it compatible for everyone, with a minimum of needed support. Because they could be held legally liable for any advice that they give you, they're only ever going to tell you the things that apply to everyone.

Microsoft also isn't really in the business of educating users on how to use their software, they leave that to 3rd party individuals and companies. There are books published by Microsoft Press, however. You may want to pick up Windows Security Inside Out. That book has a section on understanding services and disabling them, but it lines up perfectly with the information you already have. The book goes over all the basics and a little more, though, and makes a good reference book.

-{ Quote: "What I'm going to do for tweaking winXPproSP2 safely is using tools, that were developped and/or approved by Microsoft only.
What isn't tweaked by Microsoft, won't be tweaked by me or any other 3rd party software on my computer.
It's too risky and certainly for a newbie like me.

So I removed all disablings in the last column of my original post.
If I ever notice that one of these services are disabled by MS Tweaking Tools, I will adjust my original post." }-Just use services.msc (in the Administrative Tools as "Services"), it won't let you do anything that would cause major problems, and if it won't let you stop the service while it's running then don't disable it either. I think it bares repeating Dog's sentiments.. you're not going to learn if you don't play with these things. Everyone that I've known that has any level of real computer knowledge obtained that knowledge by not being afraid to break their system.. and they did so very frequently. The guys that only know what they learned from reading only know how computers are supposed to work, not how they actually work, and certainly not how to fix them when they don't work like they're supposed to. To learn how these things work in the real world, you just have to gather the facts, learn from others' experience, and try things out for yourself.


-{ Quote: "I don't really trust all these individuals, who were most probably never involved in the development of winXPproSP2.
How can they be so sure about anything and sometimes, they even admit it." }-There's no one that knows everything about Windows, not even anyone at Microsoft, and everyone's system is different so there's no absolute certainties. Even if someone at MS did publish something like this, they wouldn't be able to account for every 3rd party program out there, and that has more to do with how your system will behave with services disabled than anything to do with how they were programmed. If all you used was Windows (with no other software), you could get by without any services at all (http://www.sysinternals.com/blog/2005/07/running-windows-with-no-services.html), but MS will only really be able to tell you about their own software. In fact, you should read that link to put the whole conversation in perspective, as they showed MS guys something they thought was impossible.