First; you must select the service you wish to disable. In the image below, I have right-clicked on Ewido security suite. Highlighted in blue is Properties
In this picture I have opted to disable Ewido Security. You see Disabled highlighted here in blue:
In order for your chosen setting to take effect immediately, you have to click on a link in the upper left hand corner. So now I click on the Stop link. The Ewido Security service is now disabled.
If you don't click on the corresponding link in the upper left the new setting does not take effect until the next time you start or restart your PC.
The options in the top left corner also allow you to alter services' settings without having to go through right-click >> Properties. However, these options modify service settings for this Windows session only. The service will revert to its previous setting on the next boot up.
If you have reason to believe the service is not functioning even though it is set to Automatic, you can click on the Restart link and hope it fires back up.
Please note that you can also choose to start or stop a service for this Windows session through the right-click Properties route.
As the image above shows you can push a Stop button for a service pre-set to Automatic.
If the service is pre-set to Manual, the Start button can be selected.
Services pre-set to Disabled do not, for some reason, come with a Start button option.
- Alerter
Alerter notifies users and computers of administrative alerts. People on a Windows NT PC can use this service to send each other little popup window messages. If you use Alerter then leave it.
Otherwise disable Alerter.
- Application Layer Gateway Service (ALG)
Application Layer Gateway Service is a Component of Internet Connection Sharing and Internet Connection Firewall or a third party firewall i.e. . It's necessary if you use Internet Connection Sharing (ICS) so multiple computers can use one Internet connection and share files over a network.
If you haven't upgraded to SP2 on Windows XP you need it to run the Windows firewall.
If you've upgraded to SP2 it's not required to run the Windows firewall.
Unless you're on a network you can disable Application Layer Gateway Service.
If you use a third party firewall leave it on automatic.
If you use SP2 firewall on a stand alone PC, you can disable it.
* Note: I recommend against using the Windows firewall and instead using a router or third party firewall like if you're on a stand-alone PC and/or connect to other computers on a network.
I have it disabled on my SP2 cable connected PC and I have had no problems.
Check out this thread for some interesting discussion of ALG.
- Application Management
Application Management is required for modifying programs i.e. removing them through Add/Remove Programs. It also provides software installation services such as Assign and Publish.
Since you sometimes install and uninstall software programs I suggest you set this service to Manual
Network administrators might want to disable Application Management to prevent employees from adding programs they shouldn't.
- Automatic Updates
Automatic Updates
enables the automatic download and installation of critical Windows updates. It takes care of the all important Windows Update process for you.
If you disable it, you have to get your updates manually. That means going to the Microsoft update site two or three times a week and putting up with an annoying little red icon in your system tray nagging at you to turn on automatic updates.
I'm going to buck the trend here and say set it for Automatic.
Why complicate things? Most people don't care about the more arcane privacy and technical considerations of Microsoft's automatic update service.
Sure, some updates can cause problems but how is the average person going to know to pick and choose between updates?
Power users and Administrators can set it for Manual or Disabled and pick and choose updates as they wish.
- Background Intelligent Transfer Service
Background Intelligent Transfer Service (BITS)transfers files silently using idle network bandwidth. You can't get Windows updates automatically without enabling this service.
MSN Explorer requires it to download programs and information.
Again, I believe that the average user should leave it. If you're an advanced user disable it and re-enable it whenever you check at the Windows update site.
It is another potential security risk just like automatic updates.
It gets knocked for being another built-in Windows security risk just like automatic updates. It's busy connecting to the internet whenever it wants and you have no idea what it's doing or what info about you it's relaying to Microsoft (or anyone else for that matter).
It's potential risk must be weighed however, against the real security risks of not getting critical Windows updates. We know for a fact that delaying or refusing (critical) updates puts your PC security at risk and that trumps any possible privacy violations inherent in the automatic update function.
As with Automatic updates, power users and administrators set it for Disabled or Manual.
Everybody else set it for Automatic.
- ClipBook
ClipBook merely facilitates sharing material you copy to it with people on remote computers - a LAN (Network). If you disable Clipbook you won't be able to share your material with people on the LAN.
This is a service you can safely disable.
If you do share Clipbook content with others set it to Manual or Automatic.
- COM+ Event System Service
COM+ Event System Service provides support to the System Event Notification Service (SENS) which monitors network, logon/logoff, and power/battery events.
It's a support file which is of no or little use to most people.
I recommend disabling it. I've had it disabled for a while now with no difficulties.
- COM+ System Application Service
Manages the configuration and tracking of Component Object Model (COM)+-based components. In other words it basically manages the COM+ Event System. It's a support file you probably have no use for. If you disable it and check your logs (which you probably never will) you will see it entered as not running.
As with COM+ Event System Service. I recommend disabling it.
*I have read here and there that these two COM services are best set to Automatic or Manual but I've disabled them both without incident.
If you're in doubt, set them for Manual.
- Computer
Browser Service
Computer
Browser Service is not related to browsing websites on the net. If you're on a network and need to see the network domains and resources and keep track of other computers on the network, you may need this service. It keeps a list of computers on a network and supplies that list to computers designated as browsers.
If you're on a LAN set it to Automatic.
If you're on a stand-alone computer disable it.
- Cryptographic Services
Cryptographic Services helps protect data from being viewed or modified and helps provide a secure means of communication over otherwise insecure channels i.e. the internet.
It provides three management services: Catalog Database Service which verifies the signatures of Windows files,
Protected Root Service which adds and removes Trusted Root Certification Authority certificates for the current user - the person using the PC, and
Key Service which enrolls this (Your) computer for certificates (used to authenticate the identity of the computer or user that owns the certificate)
An example of Cryptographic services is the window that pops up when you install a driver telling you it isn't digitally signed meaning the sender of the data, or driver in this case, isn't properly identified.
If you are passing certificates for networking then leave it. If you are on a large a large corporate network where connections are managed through authentication, it's redundant and you (or your network manger) should disable it.
All other users should set it for Manual.
You’ll be flooded with uncertified driver notifications if you disable it.
- DCOM Server Process Launcher
DCOM Server Process Launcher is a new service since XP SP2. It was introduced as part of the security upgrade SP2 was supposed to provide Windows XP.
The Windows Firewall Service cannot start if the DCOM Server Process Launcher service is disabled.
The built-in Windows defragmenter will not run if DCOM Server Process Launcher is disabled nor will the Windows Firewall.
Set it for Automatic if it isn't already.
- DHCP Client Service
DHCP Client Service Manages network configuration by registering and updating IP addresses and DNS (Domain Name System (or Service or Server), an Internet service that translates domain names into IP addresses) names.
If you've enable Internet Connection sharing you need it.
Set it for Automatic if your ISP (Internet Service Provider) assigns you a dynamic IP address every time you connect to the internet.
Some Cable/DSL internet connections require it to connect to the internet.
I know I do.
- Distributed Link Tracking Client
Distributed Link Tracking Client maintains the connection between files linked on remote (unconnected) NTFS (New Technology File System) volumes (hard drives).
Unless you are accessing network file systems and databases you should disable this service.
It's necessary if you frequently create files on one computer, link to those files on another computer, and then move the original files around the network.
- Distributed
Transaction
Coordinator
Distributed
Transaction
Coordinator co-ordinates interactions across multiple resource managers i.e. a database server or file-access system. It's closely linked to Distributed Link Tracking Client and is useless for home users.
Set it for Disabled.
- DNS Client
DNS Client resolves and caches Domain Name System (DNS) name(s) and optimizes the performance of DNS name resolution by storing previously resolved names in memory.
In other words it helps DNS translate computer host names (name by which a device attached to a network is identified) to IP addresses. You can disable DNS Client and the computer can still resolve DNS names using the network's DNS servers instead of the cache.
DNS Client is required for IPSEC (Internet Protocol security).
*Note: According to The Elder Geek you should restart DNS Client if you get a 'DNS Resolver Failed To Flush The Cache' message.
- Error Reporting Service
Error Reporting Service gives you those little windows asking you to send data about your PC errors to Microsoft. The data winds up at a crash analysis center and is used to detect larger trends in Windows functionality. If a trend becomes outstanding Microsoft issues a patch or update for it.
Sometimes a crash analyst will tell you what the problem is within a minute or two of receiving the error report.
It's happened a couple of times with me. Once when I was experiencing system freezes. The analyst told me the problem was related to a Symantec driver. I uninstalled the offending Symantec program, reinstalled it, and solved the problem.
The other time a crash analyst pointed me to some updates for Office which fixed my problem with Outlook.
Some people say you should disable this service because of the potential privacy risk.
I understand that concern but I believe the concrete good done by sending error reports outweighs the potential privacy concerns.
Set it for Automatic.
- Event Log
The Event Log service catalogues log messages issued by Windows-based programs and components in the Event Viewer which you can access through the Microsoft Management Console.
This service can be disabled by the average user.
I've had it disabled for months now. I find I can troubleshoot fine without it.
Some administrators/power users may prefer to work with the info it provides and want to leave it on.
- Fast User Switching
Compatibility
Fast User Switching
Compatibility enables speedy transition between users on the same computer with different accounts. The neat thing is that the programs being used by the switching users keep running even though their account is logged off.
If you work in a fast paced office environment sharing a computer or computers with many individuals leave it running.
Average home users should disable Fast User Switching
Compatibility.
- Help and Support Service
The Help and Support Service allows you to access the troubleshooting and maintenance tools and info in the Help and Support Center.
I find this service is redundant and less than straightforward to use.
Some experts recommend leaving it on automatic. I much prefer googling the problem or query.
Save system resources where you can. Use Google or go to a tech support forum when you need problem solving help.
Help and Support is a prime candidate for being disabled.
- Human Interface Device Access
Human Interface Device Access
enables the use of predefined "hot buttons" on keyboards, remote controls, and related devices. Not all hotkeys are managed by this service. Some are built into the OS itself. Control C, for example, to copy and Control V to paste continue to function even if this service is disabled.
I recommend disabling it and seeing how much hotkey functionality you retain.
My guess is you can probably disable it. If you do lose functionality then set it for Automatic.
- HTTP SSL
HTTP SSL was added with SP2.
HTTP SSL is Hypertext Transfer Protocol (HTTP) secured through Secure Sockets Layer (SSL), a security protocol developed by Netscape for transmitting private documents via the Internet.
If you buy, or do other businesses online, you need this service. HTTP SSL is required when visiting sites that employ HTTPS for security i.e. banks and e-commerce sites.
Set it for Manual and it will initiate when you need it.
- IMAPI CD-Burning COM Service
IMAPI CD-Burning COM Service enables CD burning. If you burn a lot OF CDs set it for Manual.
If you rarely burn CDs, disable it and restart it when you want to burn a CD.
If you don't have a CD burner installed, disable it.
- Indexing Service
Indexing Service is just that. It records and catalogues the content of your hard drive(s) and others on a LAN making it easier for you to locate when you run a search for it.
The extra gain in speed finding content is offset by the continuous use of system resources. It's overly efficient and starts up at random. If you're on a network you probably don't need it since you know where on the network the data you need is located already.
Uninstall it through the Add/Remove programs Add/Remove Windows Components applet which you access on the left hand side of the Add/Remove Programs pane. Then disable it.
- Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS)
(known as Internet Connection Sharing on Windows 2000)
This runs the Windows Firewall. It's a basic one way protection firewall but it's better than nothing. It's good at blocking most inbound threats but allows all outbound traffic which means it won't catch trojans phoning home.
If you've got nothing else you should set this for Automatic.
Even better disable it and get a third party firewall like the popular free or Kerio firewall
.
Internet Connection Firewall/Internet Connection Sharing also provides NAT (network address translation), addressing and name resolution services for all computers on home or small-office networks through dial-up or broadband connections.
If you are on a network set it for Automatic.
- IPSEC Services
IPSEC stands for Internet Protocol security. IPSEC manages IP security policy and starts the ISAKMP (Internet Security Association and Key Management Protocol)/Oakley (IKE) security protocol and the IP security driver.
Very few domains require this service.
Disable it and see what happens. If problems arise, restart it and set it to Automatic.
- Logical Disk Manager
Logical Disk Manager detects new hard drives monitors your hard drive(s) and sends volume (hard drive) information to the Logical Disk Manager Administrative Service for configuration. In other words it allows you (the administrator) to manage your hard drive(s) i.e. create partitions.
How often do you partition your hard drive or add a new one?
Set it for Manual.
- Logical Disk Manager Administrative Service
Allows you to manage your hard drive(s). Works along with Logical Disk Manager. It stops itself when it's job is done.
Set it for Manual
- Machine Debug Manager.
This is the service that continuously throws popup windows at you asking if you would like to debug the script on the page you are viewing.
I don't know why Microsoft doesn't disable this service by default. Most people don't know or care about script debugging. They just want to read the content of the page they're viewing.
This service is a waste of everybody's time. Disable it.
- Messenger
Messenger is not to be confused with Windows Messenger person to person instant messaging program.
This Messenger enables communication over a LAN. It's a proven security liability. Close this door to your PC.
Disable it.
* Note: If you use Spy Sweeper make sure to enable the Messenger service shield. *
- Message Queuing
Allows various applications to communicate on a LAN and with computers that are offline.
Message Queuing is not part of Windows XP Home.
If you use this service, set it for Automatic. Disable it if you don't use it.
- MS Software Shadow Copy Provider
MS Software Shadow Copy Provider takes pictures of your disk and uses them to retrieve data you want to restore. If you use the Microsoft Backup utility then set it for Manual. Otherwise disable it.
- Net Logon
Unnecessary unless you log on to a domain. If you're not on a domain i.e. you are on a stand-alone home computer you should disable it.
- NetMeeting Remote Desktop Sharing
This service allows someone using NetMeeting to access your PC on a remote computer.
Can you say "asking for trouble?" I knew you could.
Disable it.
There are better more secure tools available to do this kind of work.
If you really need assistance from someone you trust then restart it and disable it immediately afterwards.
- Network Connections
Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections. This service allows you to manage your network i.e. configure and create new connections, and to connect to the internet via dialup.
Set it for Automatic if you are on a network or a dialup connection.
Otherwise you can disable it.
I've read on (very rare) occasion) that you need this service to connect to the internet. I have it set for Disabled and have no problem connecting to the internet. I wonder whether the author is speaking only of dialup connections. He doesn't say if he is.
- Network DDE Service
Network DDE Service allows Dynamic Data Exchange (a feature of Windows that allows two programs to share data or send commands directly to each other. It's largely been replaced by OLE, COM, and OLE Automation) between computers and between applications on the same computer.
Unless you use Clipbook I suggest you disable Network DDE Service.
- Network DDE DSDM Service
Manages Dynamic Data Exchange between network shares - a computer on a network used by members of the network as a centralized storage to keep files (i.e. documents, spreadsheets, etc).
Also related to Clipbook.
Not on a network and don't use Clipbook? Disable it.
- Network Location Awareness (NLA)
If you aren't using XPs firewall or ICS, you do not need the NLA
service.
Set it for Disabled.
- NT LM Security Support Provider
Provides security to remote procedure call (RPC) programs that use transports other than "named pipes" (a computer programming term for a method of passing information from one computer process to other processes using a channel, or "pipe" that is given a specific name.)
It also provides support for Telnet and Message Queuing
Disable this service unless you are on a LAN and using a PC with a Windows operating system predating Windows 2000.
- Network Provisioning Service
This service is used with domain controllers and XML (Extensible Markup Language) configuration files; home users on standalone computers should set it for Disabled.
It may be necessary in a domain environment (LAN) so disable it and re-enable it to see whether your network requires Network Provisioning.
- Peer Name Resolution Protocol (PNRP)
This service is disabled (or removed) upon installation of Windows XP SP2. PNRP is rarely needed and used primarily by IPv6 - a new internet protocol designed to replace the current IPv4.
- Office Source Engine
Office Source Engine comes as part of Microsoft Office 2003 and gets copied to your drive during installation of Office. It supports installation, updating and repairing Office. Upon installation Office Source Engine copies set up files to disk for easy future access should they be needed for repair or reinstallation of Office. Whenever Office is repaired these files are referenced by Windows Installer. This saves you having to insert the original installation media/CD every time you need to fix Office.
Upon completion of the Office installation process you are asked whether you want to keep or remove these cached files. If you have them removed you will have to use the Office CD to effect repairs to Office.
If you use the Windows Disk Cleanup utility you will have the option to remove the office cache of setup files. It is best not to remove these files since they make it easier to get updates for Office. They save you having to insert the Office CD in order to download the updates.
Office Source Engine is also required for Dr. Watson error reports. If you don't know what Dr. Watson error reporting is and don't use Office 2003, then you should set this for Manual or Disabled.
No Windows user I know has ever used Dr. Watson error reporting to any great extent.
Most people will never use, or benefit from, Dr. Watson unless they are asked by a Microsoft support professional to generate and send a Dr. Watson error report to a Microsoft support professional.
Set Ofice Source Engine for Manual.
Performance Logs and Alerts.
This service monitors and records computer performance and displays it on screen.
Unless you are a power user or administrator with a specific reason for perusing these logs I would disable it.
It's a waste of system resources.
There are better, more user friendly ways to track system performance.
- Plug and Play
Plug and Play sets up your new hardware for you. It automatically discovers and identifies and configures devices you attach to your PC. If you disable Plug and Play your PC will be unstable and you will not be able to add, and get the proper drivers for, new hardware.
- Portable Media Serial Number
Retrieves the serial number of any portable media player connected to your computer. This service gets the serial number embedded in portable media players. I recommend disabling this service although there is a slight chance you will be unable to download some protected content if you do.
If you do disable this service and encounter problems downloading your music then re-enable it. Better still, set it for automatic and eliminate any potential problems.
Obviously, if you don't use a portable media player then disable it.
- Print Spooler
the Print Spooler Loads files to memory for later printing. It's simple. If you want to print something off, you need this service. If you do a lot of printing, set it for Automatic. If you don't have a printer attached to your PC or print infrequently I would disable it or set it to Manual.
- Protected Storage
Protected Storage acts as a vault for private data i.e. passwords and encrypted data.
It's tied directly into Windows handy auto-complete service which fills in password and username fields in forums and other online accounts.
I use it frequently so I have it set for automatic. Setting it for automatic and using auto-complete does carry security risks so make sure you are behind a good firewall and use a top notch Antivirus.
If you don't use proper security software then disable the Protected Storage service.
It's also required for enabling password protection of user accounts and other areas containing sensitive data on a computer.
If you share your PC or your PC is not located in a secure area, you should password protect sensitive data and important programs i.e. your email suite and AV. So set it for Automatic and choose a good password.
- QoS RSVP
Installed by default in any Network connection, QoS (Quality of Service) RSVP (Resource Reservation Setup Protocol)is a LAN related service designed to maximize bandwidth use efficiency by delivering/redirecting bandwidth to where it is needed most by providing more bandwidth to applications performing critical or priority operations.
It's a good idea that hasn't really caught on. Most networks don't use QoS based applications. If you don't run QoS based applications or need bandwidth redirect then disable it.
If you're on a stand alone PC, disable it.
- Remote Access Auto Connection Manager
Manages your dial-up and VPN (virtual private network) connection to the LAN and internet. Provides one click access to the network.
If you stop this service you will have to set up network connections manually.
Depending on your IP you may need this service to connect to the internet. Set it for Manual or Disabled. If you lose your connection, re-enable it.
- Remote Access Connection Manager Service
Creates a network connection.
The Internet Connection Sharing service requires Remote Access Connection Manager Service so check to see if it's running if you are having problems with your network connection(s).
May be required for your internet connection.
Set it for Manual, Automatic if you encounter problems.
- Remote Desktop Help Session Manager(sometimes called the autodial service)
This is a good idea if you need technical assistance from someone you trust on a remote computer. If you are unable to have a tech come to your home and look at your PC, you can sometimes arrange for someone to look at your PC using this service.
At all times this service should be disabled unless you are getting remote assistance from someone you trust.
It's just a huge security risk that doesn't need to be there
- Remote Procedure Call (RPC)
Microsoft says RPC provides the endpoint mapper and other miscellaneous RPC services. RPC is a mystery. I have yet to see someone lay down a definitive explanation of RPC.
All we know is that it permits communication between processes across networks and with each other on your home PC.
One thing you can take to the bank though is that your computer will simply cease to function if you disable it.
Leave it and forget it.
- Remote Procedure Call (RPC) Locator Service
Microsoft says it manages the RPC name service database.
It's related to RPC so I say leave it at the default setting - Manual.
- Remote Registry
This one's related to Remote Desktop Help Session Manager. It allows someone on a remote computer to modify your registry.
Set it for Disabled and re-enable it only if you need remote help with your registry. It's a huge security risk otherwise.
If you're on a network and need to access other (clients') PCs then set it for automatic.
- Removable Storage Service
Microsoft doesn't even give a description of this service. It appears to manage and catalogue removable media, drives, & libraries.
It may be necessary for things like zip drives, tape drives (not CD\DVD\ & Floppy Drives) and GDI (Graphical Device Interface) objects i.e. Graphics Pens.
Disable and see what happens. If problems arise, re-enable. Set it for Manual or Automatic depending on your requirements.
- Routing and Remote Access Service (RRAS)
RRAS is an add-on service for Windows NT (New Technology) Server 4.0 ( acts as a server in a network). RRAS combines remote access support with network routing functionality and integrates network routing services with remote access services and performs the routing operations necessary to connect LAN or WAN network segments.
These remote access services should be disabled unless you're on a LAN or WANs (wide-area network - covers a large geographic space).
If your PC is on a network and you want to use it in various network configurations for routing purposes or you want it available for remote access purposes, or if it uses ICS, set RRAS to Automatic.
It's usually disabled by default because client computers don't typically accept incoming connections.
- Script Blocking Service
This is not a Microsoft service. It is installed by Symantec.
If you use Norton AV leave it. Symantec is not easy to get rid of once you uninstall it. It's possible this service may still be (listed as) running even if you have removed Norton from your system. In this case disable it and reboot your PC.
- Secondary Logon
Enables starting processes under alternate (Run As)credentials. You ever wonder what "Run as..." in the right click menu (right click on a program shortcut) actually means? This service allows someone with limited rights to the PC to run an application as though they had administrator's or users' rights.
I know this can be a convenient feature but I recommend disabling this service unless you share the PC with someone you really trust.
Anyone who figures out the password could wreak havoc on your system.
If you don't share your PC with anyone then disable it.
- Security Accounts Manager Service
is related to Secondary Logon and stores information related to security accounts for users of the PC. If you use Group Policy Editor, (gpedit.msc)
Set it for Disabled if you're a single user (only you use the PC) .
Set it for Automatic if you use Group Policy Editor, (gpedit.msc) or your group policy settings will not work.
- Security Center
Monitors your computer's automatic updates and other security settings, your security software (AV and Firewall) status and configuration.
If you use third party security software like McAfee and Symantec you will not need this service since their software takes over the functions of Security Center. Even so I recommend setting it for Automatic since there's no such thing as too much security and a redundant layer of oversight of your computer's security is a good thing.
It pops up a little balloon if your AV is not working. Security Center also gives you useful links if you do need to improve your security status, i.e. a link to a page where you can get downloads security software for extended trial periods.
If you're on top of things you don't need this service. Power users and security oriented people who keep track of their system status and know what to do if something goes amiss can disable Security Center.
- Server Service
Server Service enables sharing of local files and printers with other computers on LANs.
If you're not on a network you should disable it. The fewer "sharing" services running the better.
- Shell Hardware Detection
Bit of a mystery this one. It appears to make AutoPlay work for connected devices like digital cameras, CD/DVDs and memory cards and some laptops when inserted into their docking station.
- Smart Card Service
Manages access to Smart Cards (little electronic data storage units the size and shape of a credit card). If you don't use Smart Cards set this one for Disabled.
- Smart Card Helper Service
Perfoms the same function as Smart Card Service except that Smart Card Service helper supports legacy cards that don't support Plug and Play.
If you don't use a Smart Card, set it for Disabled.
- SSDP Discovery Service
This one is necessary for UPnP (Universal Plug and Play - a networking architecture/technology that provides compatibility between networking equipment software, peripherals made by the 800+ vendors who are part of the UPnP Forum vendors )devices to work on your PC and network. It works in tandem with Universal Plug and Play Device Host. SSDP Discovery Service essentially detects and configures UPnP devices so that they work on networks.
If you don't use UPnP devices disable this service.
For more on UPnP see this Microsoft article visit the UPnP forum.
- System Event Notification
Monitors various things on your PC like logons, network events and power dips, surges and problems.
If you're using a laptop leave it on Automatic since you need to keep track of your Laptop's power status.
Your average PC user can set it for Disabled.
- System Restore Service
System Restore is a built in Windows XP feature which allows you to undo changes to your PC that made it unstable or less functional. It backs up your system configuration by taking a snapshot of it every day or two and kicks in automatically whenever you install new software.
If you've been infected with malware, deleted something you shouldn't have or installed a program that has gummed up the works etc., System Restore brings your PC back to a state where it was functional before the mishap. It doesn't, as a rule work for repairing boot errors but it provides good cover against most other problems
We had to use it just recently when the IE beta 2 disabled some important professional software on one of our PCs.
On another occasion someone accidentally deleted all the sites in the restricted sites box. On both occasions System Restore rescued the situation.
System Restore is criticized for being a resource hog. But I think the peace of mind that comes with being able to fix problems is a fair trade off. System restore also consumes about 12% of your drive by default but that is just a fraction of the space available on most hard drives. Some people say disable it but I'm going to recommend setting it for Automatic.
- Task Scheduler Service
Task Scheduler Service allows you to schedule various tasks like running a virus scan, defragging your disk, doing a disk cleanup etc.
If you're not the most interested PC user or just plain forget to do routine PC related tasks then I recommend using this service. Set it for Automatic.
If you can, or like to, take care of routine PC tasks then disable it.
- TCP/IP NetBIOS Helper Service
This is another service related to networking. TCP (Transmission Control Protocol/Internet Protocol) is a series of communications protocols used to connect hosts (remote PCs) on the Internet. NetBIOS (Network Basic Input Output System) is a program that allows applications on different computers to communicate within a local area network (LAN). TCP/IP NetBIOS Helper Service enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution.
This service is fast becoming stone age. Hardly any network uses TCP/IP NetBIOS Helper Service. If your network doesn't employ NetBios or WINS disable this service.
If you're not sure whether your network requires this service, disable it and if you encounter difficulty restart it.
- Telephony
Provides Telephony API (a set of routines, protocols, and tools for building software applications) support for programs that control telephony devices & IP based voice connections on the local computer &, through the LAN, on servers that are also running the service.
Telephony is the science of converting voice and other audio sounds into electrical signals, transmitting these signals between two separate points over wire, fiber or radio and turning them back into intelligible audible sound upon receipt.
This service is essential for dial-up networking and internet connections.
It may be required for cable/dsl connections as well. If your on cable/dsl connection, disable it to find out whether your connection needs it. I'm on cable and I have it disabled.
Other services may be dependent on Telephony. If other services are dependent and you disable it you will get this window :
- Telnet
Yet another remote access feature you just don't need. Telnet has been a major security risk for years. Microsoft finally saw the problem and reset the default setting for Telnet to Disabled with SP2.
It allows remote users access to, and run programs on, your PC. If you know what you're doing and trust the other person you can set Telnet for Automatic and disable it afterwards.
In all other cases disable it.
Telnet is not available on Windows XP Home.
If want to use Telnet you have to first add the user accounts you wish to use this service to the TelnetClients group which you do through the user manager (lusrmgr.msc). Then you need to create a group called TelnetClients. After you create the group you can add the user to the group. You will also need to set a password on the account since Windows XP default settings do not allow the use of blank for remote connections.
- Terminal Services Service
Allows different users to interact on a remote computer. Remote Desktop, Fast User Switching, Remote Assistance, and terminal Server all depend on Terminal Services.
Unless you use these services you should disable Terminal Services.
Set it for Manual if you do need it.
- Themes Service
Lets you change the themes in Windows XP. Right click on your Desktop, select Properties and you will find a little drop down menu offering several different themes for Windows XP. If you like changing the themes around once in a while and/or if you want the XP look then set it for Automatic or Manual.
Disabling Themes will increase system performance but you'll lose the XP look.
-
Uninterruptible Power Supply Service
This service manages UPS connected to the computer. Some USB connected UPS' don't need this service. It depends on how your USP connects to your PC.
If you use a UPS set this service for Automatic.
- Universal Plug and Play Device Host Service
Provides support for UPnP devices. It detects and configures UPnP devices. Works together with SSDP Discovery Service. You might need this to play some (multiplayer) games.
Otherwise this service should be disabled or set to Manual.
- Upload Manager Service
Manages file transfers between clients and servers on networks. This service is all about getting updates and support for drivers on network computers.
It works the same as does on a stand alone computer. It's like a BigFix for networks.
Basically, the data is uploaded from the network computer(s) to the Microsoft Driver Feedback server and the Driver Feedback Server then searches the net for updates and support information for the driver(s).
The Uploader Service is widely being replaced by FTP (File transfer Protocol).
As far as I know it's not even available on Windows XP Home now.
Set it for Disabled if you see it in the Services list unless you're on a network that still uses Upload Manager.
- Volume Shadow Copy Service
Volume Shadow Copy Service works with the Microsoft Backup Utility. If you use it then set it for Manual. If you don't, then set it for Disabled.
- WebClient Service
Enables Windows based programs to create access and modify internet-based files.
It sounds like you might need it to do stuff online. But I've had it disabled for a while and had no problems at all.
Disable it and if it turns out you need it, restart it.
- Webroot Spy Sweeper Engine
This runs Spy Sweeper the popular spyware scanner form Webroot.Don't touch it.
- Windows Audio Service
Manages audio devices for Windows programs. This service controls all audio on your PC.
Set it for automatic.>
- Windows Defender Service
Windows Defender is Microsoft's anti-spyware program.
Leave it.
- Windows Firewall/Internet Connection Sharing (ICS)
See Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS)
- Windows Image Acquisition (WIA) Service
Provides image acquisition services for scanners and cameras. Disable this and depending on your scanner, web cam or camera you might not be able to scan, run a web cam or use your camera. You won't be able to use Windows Movie Maker.
I'd set it for Manual
- Windows Installer Service
It's responsible for installation, removal, repair and modification of all applications installed using the .msi installation files (and there's a lot of them).
Windows Installer is a compnont built-in to Windows 2000, Windows XP and other newer versions of Windows. It is also available as a service pack addon for Windows 95, Windows 98 and Windows NT4.
Windows installer standardized Windows based application installation frameworks. It largely supplanted third party inst allervendors such as InstallShield and Wise whose frameworks were used by software companies to install their prgrams into Windows systems. Today these companies base their installation framewroks on Windows Installer.
Set it for Manual. It will start when needed.
* Note: I found on my PC that I had to start the Windows Installer in order to repair Office 2003.
If you have difficulty installing or repairing programs with Windows Installer set for Manual, go into Services (Start >> Run >> type services.msc) and start the Windows Installer service.
- Windows Management Instrumentation (WMI) Service
This one basically provides the management interface for the entire Windows XP operating system. You can't use Windows without it. Disable it and your PC becomes inoperable it.
Set it for Automatic.
- Windows Management Instrumentation Driver Extensions
This is just an extension of WMI. Specifically it provides systems management information to & from drivers.
Unlike WMI you can set this one to Manual.
- Windows Time Service
Uses NTP (Network Time Protocol) to keep the time on PCs in a network synchronized. Windows will by default once a week attempt to synchronize with a Network/Internet server in order to keep the PC in time. (Pun intended). If you want to synchronize your clock to a time server and don't want to do this yourself set it for Automatic and let Windows have a go. If you don't require time checking set this to Manual & disable automatic synchronization - Double click on the time on the Taskbar (bottom right), select the Internet Time tab and uncheck "Automatically synchronize with an Internet time server".
Every one else should disable Windows Time Service.
- Wireless Zero Configuration Service
Automatically configures wireless 802.11 network adapters. Set it for Automatic if you need to configure your wireless network, Disabled if you don't.
- WMI Performance Adapter Service
Runs only in conjunction with Performance Data Helper.
If you don't need information about your computer's performance, disable it. It's not really necessary to keep this service running.
- Workstation Service
Creates and maintains connections between network computers and remote servers. If you're not on a LAN then disable it.
*Note: I’ve seen a couple help sites that say you have to set it for automatic but I've had it disabled forever and my PC works very well.
Related Links:
