| Service |
Description |
Dependencies |
Startup Type |
| Alerter: |
Notifies selected users and computers of administrative alerts. If the service is stopped, programs that use administrative alerts will not receive them. If this service is disabled, any services that explicitly depend on it will fail to start. *If you are connected to a network, set it to Automatic. This service will notify your System Administrator of problems occurring within the network which may aid them in fixing the problem. |
Workstation |
Disabled Home user: Automatic Networked computer: |
| Application Layer Gateway Service |
Provides support for 3rd party protocol plug-ins for Internet Connection Sharing and the Internet Connection Firewall. |
None |
Disabled Not using XP's firewall or connection sharing: Automatic Using XP's firewall or connection sharing: |
| Application Management |
Provides software installation services such as Assign, Publish, and Remove. *Disabling this service may prevent configuration or removal of some software applications. |
None |
Manual All users: |
| Ati HotKey Poller |
*This allows an assortment of ATI hotkeys to be available. ATIMMC requires this to be in either Manual or Automatic to function. Disable if not needed. |
None |
Disabled |
| Automatic Updates |
Enables the download and installation of critical Windows updates. If the service is disabled, the operating system can be manually updated at the Windows Update web site. *I prefer manually updating my system as Microsoft doesn't always know what is good for my machine. Manual and Automatic update via Windows Update web site Requires Cryptographic Services to be running. |
None |
Disabled Go to Windows Update Site often. Automatic XP will notify you of available updates. |
| Background Intelligent Transfer Service |
Uses idle network bandwidth to transfer data. *If you have disabled "Automatic Updates" service, you won't need this service running. e.g. Your "Automatic Updates" service sends information to Microsoft Windows Update server about the present patches and fixes you have already installed. The updater server reports back that you have updates to perform. This is all done in the background. |
Remote Procedure Call (RPC) Workstation |
Disabled If Auto Updates is disabled. |
| ClipBook |
Enables ClipBook Viewer to store information and share it with remote computers. If the service is stopped, ClipBook Viewer will not be able to share information with remote computers. If this service is disabled, any services that explicitly depend on it will fail to start. *I've had no problems with any application on my computer with having this service set to Manual. If you are on a network of computers, your system Administrator should know if you require this service. |
Network DDE |
Disabled Manual if unsure. |
| COM+ Event System |
Supports System Event Notification service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start. *Required for System Event Notification. If you disable this service, you will find DCOM will create an event log noting this service is not running. To figure out if you need this service running or not, take a peek at your "X:\Program Files\ComPlus Applications" folder for any COM+ applications installed in there. If not, it's probably safe to Disable this service. *BootVis requires COM+ Event System & Task Scheduler if you want to take advantage of the system optimization features. Without these services you will add a couple of seconds to your bootup times. BootVis deals with prefetch settings and prefetching only occurs at bootup. |
Remote Procedure Call (RPC) |
Disabled Manual if unsure. |
| Computer Browser |
Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start. *This service is not required by a home computer. you will still be able to browse your Network workgroup and mapped network shares if disabled. |
Server Workstation |
Disabled |
| Cryptographic Services |
Provides three management services: Catalogue Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enrol this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. *Windows Updates service set to Manual or Automatic will require this service. Windows Media Player requires this service for some of its features to function. |
Remote Procedure Call (RPC) |
Automatic You won't have to remember to turn it on when necessary. Disabled Power User setting |
| DHCP Client |
Manages network configuration by registering and updating IP addresses and DNS names. *If your Internet Service Provider, (ISP) supplies a Dynamic IP Address when ever your machine requires a connection to the Net, set this to Automatic. If your Internet Service Provider, (ISP) has given you a Static IP, you can disable this service. Test it out and see if you are unsure. |
AFD Networking Support Environment NETBios Over Tcpip TCP/IP Protocol Driver |
Disabled Static IP address Automatic Dynamic IP address |
| Distributed Link Tracking Client |
Maintains links between NTFS files within a computer or across computers in a network domain. *e.g. If I create a file and store it on my computer and then create a shortcut to the file and then later on move the file to another computer on the network, this service tracks the change and lets the shortcut know of the new location. |
Remote Procedure Call (RPC) |
Disabled |
| Distributed Transaction Coordinator |
Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will not occur. If this service is disabled, any services that explicitly depend on it will fail to start. *Message Queuing requires this service. |
Remote Procedure Call (RPC) Security Accounts Manager |
Disabled |
| DNS Client |
Resolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start. *Required if using IPSEC. If multiple domains are used within a network, set to Automatic. |
TCP/IP Protocol Driver |
Disabled |
| EPSON Printer Status Agent2 |
Lets you know when you are running out of ink. *When you start to run out of ink, can you tell the difference? I can. |
None |
Disabled |
| Error Reporting Service |
Allows error reporting for services and applications running in non-standard environments. *This one is up to you. If you get a error while working in one of your applications, a dialogue box pops up and asks if you would like to tell Microsoft your problems. All pertinent information on the error will be logged and sent to Microsoft. Waste of my time if you ask me. |
Remote Procedure Call (RPC) |
Disabled |
| Event Log |
Enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped. |
None |
Automatic |
| Fast User Switching Compatibility |
Provides management for applications that require assistance in a multiple user environment. |
Terminal Services |
Automatic for a multiple user computer. Disabled for a single user computer |
| Fax |
Enables you to send and receive faxes, utilizing fax resources available on this computer or on the network. *This service isn't installed by default but is available off the Windows XP installation CD. I send faxes very infrequently but I still want it available on this computer. I set it to Manual on my system. |
Plug and Play Print Spooler Remote Procedure Call (RPC) Telephony |
Disabled No Fax Manual Fax available on demand |
| FTP Publishing Service |
Used to provide a FTP server on your network. *If you aren't running a server from your machine, you won't need this. |
IIS Admin |
Disabled |
| Help and Support |
Enables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. *This service is required for Microsoft Online Help documents. Attempting to access Help and Support after disabling this service will change the startup type to Automatic on this service. |
Remote Procedure Call (RPC) |
Disabled |
| Human Interface Device Access |
Enables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices. If this service is stopped, hot buttons controlled by this service will no longer function. If this service is disabled, any services that explicitly depend on it will fail to start. *Some peripherals require this service. Internet keyboards with volume and play control buttons, scanners with fax or copy buttons. I don't have any of these kinds of peripherals so mine is disabled. |
Remote Procedure Call (RPC) |
Disabled |
| IIS Admin |
Usually used in conjunction with local web site or FTP servers. *Not installed by default. Crackers use this as a leak on your system. Leave Disabled if you don't need it. |
Remote Procedure Call (RPC) Security Accounts Manager |
Disabled |
| IMAPI CD-Burning COM Service |
Manages CD recording using Image Mastering Applications Programming Interface (IMAPI). If this service is stopped, this computer will be unable to record CDs. If this service is disabled, any services that explicitly depend on it will fail to start. *XP comes with burning software that allows drag & drop burning. If you have software installed that already has this feature, you can Disable it. Disabling this service can give you an improvement in burning speed as well. (So I've heard) |
None |
Disabled |
| Indexing Service |
Indexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language. *This is a resource hog. Either Disable it or even better, uninstall it using the Add/Remove Programs icon in the Control Panel. |
Remote Procedure Call (RPC) |
Disabled |
| Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS) |
Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network. *Not very configurable. Kind of a lame excuse for a firewall. It's better than nothing. |
Application Layer Gateway Service Network Connections Network Location Awareness (NLA) Remote Access Connection Manager |
Disabled if you run a 3rd party firewall application Automatic if you want to use the XP Firewall |
| IPSEC Services |
Manages IP security policy and starts the ISAKMP/Oakley (IKE) and the IP security driver. *You might be on that rare domain that requires this service. Test out Disabling this service. |
IPSEC Driver Remote Procedure Call (RPC) TCP/IP Protocol Driver |
Disabled |
| Logical Disk Manager |
Detects and monitors new hard disk drives and sends disk volume information to Logical Disk Manager Administrative Service for configuration. If this service is stopped, dynamic disk status and configuration information may become out of date. If this service is disabled, any services that explicitly depend on it will fail to start. *If needed, a Manual setting will allow this service to start and stop when not needed. |
Plug and Play Remote Procedure Call (RPC) |
Manual |
| Logical Disk Manager Administrative Service |
Configures hard disk drives and volumes. The service only runs for configuration processes and then stops. *Required by the MMC Console for dynamic volumes. |
Logical Disk Manager Plug and Play Remote Procedure Call (RPC) |
Manual |
| Machine Debug Manager |
Manages local and remote debugging for Visual Studio debuggers. *If you don't want to be dealing with the dialogue box asking you if you wish to debug the scrip on this, (not mine) page, Disable this service. |
Remote Procedure Call (RPC) |
Disabled |
| Messenger |
Transmits net send and Alerter service messages between clients and servers. This service is not related to Windows Messenger. If this service is stopped, Alerter messages will not be transmitted. If this service is disabled, any services that explicitly depend on it will fail to start. *Only set this to Automatic if you're connected to a Windows 2000/XP domain or network. |
NetBIOS Interface Plug and Play Remote Procedure Call (RPC) Workstation |
Disabled |
| Message Queuing |
*May be used on some domains. Not installed by default. Not available on XP Home. |
Distributed Transaction Coordinator Message Queuing Access Control NT LM Security Support Provider Reliable Multicast Protocol driver Remote Procedure Call (RPC) Server |
| Message Queuing Triggers |
Not necessary on the average home PC |
Message Queuing |
Disabled |
| MS Software Shadow Copy Provider |
Manages
software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is
stopped, software-based volume shadow copies cannot be managed. If this service is disabled,
any services that explicitly depend on it will fail to start. *Microsoft Backup requires this
service. |
Remote
Procedure Call (RPC) |
Manual Disabled and test |
| Net Logon |
Supports
pass-through authentication of account logon events for computers in a domain. |
Workstation |
Disabled |
| NetMeeting Remote Desktop Sharing |
Enables
an authorized user to access this computer remotely by using NetMeeting over a corporate
intranet. If this service is stopped, remote desktop sharing will be unavailable. If this
service is disabled, any services that explicitly depend on it will fail to start. *This could
be a security hole. |
None |
Disabled |
| Network Connections |
Manages
objects in the Network and Dial-Up Connections folder, in which you can view both local area
network and remote connections. *Disable this service if you aren't on the Net with your
machine. |
Remote
Procedure Call (RPC) |
Automatic |
| Network DDE |
Provides network transport and security for Dynamic Data Exchange (DDE) for programs running on the same computer or on different computers. If this service is stopped, DDE transport and security will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. *Unless you use ClipBook remotely, Disable this service. |
Network DDE DSDM |
Disabled |
| Network DDE DSDM |
Manages Dynamic Data Exchange (DDE) network shares. If this service is stopped, DDE network shares will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. *Unless you use ClipBook remotely, Disable this service. |
None |
Disabled |
| Network Location Awareness (NLA) |
Collects and stores network configuration and location information, and notifies applications when this information changes. *Internet Connection Sharing Service, (server only) requires this server to be running. Disabled unless running ICS/ICF. |
AFD
Networking Support Environment TCP/IP Protocol Driver |
Disabled |
| NT LM Security Support Provider |
Provides security to remote procedure call (RPC) programs that use transports other than named pipes. |
None |
Disabled |