User Guides Windows XP Services tweak and collection of tweaks

How to do it
There are basically two ways that are safe to turn these off. Way number one is in your msconfig (Start then Run then msconfig then click ok). When you open the msconfig you will see a tab named "Services" click on that and decide on what you want to disable. The other way is your services policy editor (Start then Run then services.msc /s then click ok). Either way you will be able to disable them. Below is the list of services, what each is and recommendation to turn them off or on.
Before you continue with this create a restore point. If something goes wrong this will be the easiest way to return the unit back to the way it was.

It is inadvisable to disable a service without being aware of the consequences, always start by setting the service to manual, reboot and test for any problems.
A service set to manual may be automatically restarted if another service is dependent on it.
A service set to disabled will not restart even if it's required to boot the machine!
-------------------------------------------------------------------------------------------------------------------
The Services
-------------------------------------------------------------------------------------------------------------------

6to4
IPv6 is designed to solve many of the problems of the current version of IP (known as IPv4) with regard to address depletion, security, auto configuration, extensibility, and more.
Recommend: Automatic

Alerter
Notifies users of administrative alerts. Not required under normal circumstances.
Recommend: Disabled.

Application Layer Gateway Service
Provides support for 3rd party plug-ins for Internet Connection Sharing/Internet Connection Firewall. Required if using Internet Connection Sharing / Internet Connection Firewall (zone alarm, etc) to connect to the Internet.
Recommend: Automatic

Application Management
Used for Assign, Publish and Remove software services. If you can not modify your software installation of certain applications, put this service in to Automatic.
Recommend: Automatic

ASP.NET State Service
Provides support for out of process session state. If this service is stopped then the requests will be not be processes. If this services is disabled, any service that explicitly depends on it will fail to start.
Recommend: Automatic if you use asp.net programming

Automatic Updates
Used to check up to see if there is any critical or otherwise updates available for download. Take note: Manual update via Windows Update web site Requires Cryptographic Services to be running.
Recommend: Automatic

Background Intelligent Transfer
Service Used to transfer asynchronous data via http1.1 servers.
Recommend: Disabled

BrSplService
Brother Spooling Service
Recommend: Leave Alone if you have a brother printer.
ClipBook
Used to store information (cut/paste) and share it with other computers.
Recommend: Disabled
COM+ Event System
You will receive, in the Event Log, a entry from "DCOM" complaining about not having this service running if Disabled. Required for System Event Notification. Required if you want to run BootVis with the "optimize system" option.
Recommend: Disabled

COM+ System Application
You will receive, in the Event Log, a entry from "DCOM" complaining about not having this service running if Disabled. Required for System Event Notification.
Recommend: Disabled

Computer Browser
Maintains a listing of computers located on the network. This service is not needed on a standalone system. If u have a home network then do not disable.
Recommend: Disabled

Content Monitoring Tool
Hot deals content updated notifier. This is what it says when you check the service. Says it has no dependencies. I'm still trying to figure out what installs it I think its Kazaa though.
Recommended: Disable

Creative Service for CDROM Access
This service only exists for those of us with Creative soundcards and software. I found it nothing but annoying and later I uninstalled all non-driver related Creative software entirely. If you use their Disk Detector (for some bizarre reason) leave it. Otherwise, disable it. A word of warning, Creative installs Disk Detector by default and sets it to Automatic. Make sure to disable it in the Creative menu first before killing it here.
Recommend: Disable

Cryptographic Services
Mainly, it confirms signatures of Windows files. You may always get a dialog box complaining about uncertified drivers if this is Disabled. Required for Windows Update to function in manual mode.
Recommend: Automatic

DefWatch
This service is installed with Norton. Virus Definitions Daemon. Unless you do not want your Virus Scanner to work properly, keep this going.
Recommend: Automatic

DHCP Client
Receives a Dynamic IP address from your DHCP server. Required for ICS/internet client and also if you run IPSEC, disable on a standalone system or one that has a static IP address.
Recommend: Automatic

Directway Webcast
Part of a satellite network. Need to be enabled to use this service. no dependancies. Dependant on QoS RSVP, IPSEC, and Upload Manager.
Recommend: Automatic

Diskeeper
Controls the Diskeeper service.
This service exists only for those of us who use the Diskeeper defragmentation software as opposed to the Windows pre-installed defragmenter. Set this to Manual.
Recommend: Disable

Distributed Link Tracking Client
Maintains links with NTFS files within your computer or across a domain.
Recommend: Disabled
Distributed Transaction Coordinator
Takes care of transactions that span multiple resources. Required if using Message Queuing.
Recommend: Disabled

DNS Client
Resolves DNS names and Active Directory domain controller functions. This service is not needed, but if it makes you happy to have it running, go ahead. Required if using IPSEC.
Recommend: Disabled

Error Reporting Service
Calls home to MS when application errors occurs. A waste of memory and resources.
Recommend: Disabled

Event Log
Allows Event Log messages from applications to be viewed in Event Viewer. Always helpful to check out the Event Log to see what problems with applications are popping up that is "hidden" from the normal user. Windows Management Instrumentation also Requires Event Log Service to be running.
Recommend: Automatic

Fast User Switching Compatibility
Unless you have many users on a system (more than 3), you probably do not even need this service to be running.
Recommend: Disabled

Fax Service
Not installed by default, but if needed, you may install it later off of the WinXP CD.
Recommend: Leave not installed or Disabled

FTP Publishing Service
Not installed by default, but if needed, you may install it later off of the WinXP CD. Used to provide a FTP server on your network.
Recommend: Leave not installed or Disabled

Help and Support
Required for MS online help documents.
Recommend: Automatic / manual

(HID) Human Interface Device Access
Used for specific peripherals.
Recommend: Automatic

IIS Admin
Not installed by default, but if needed, you may install it later off of the WinXP CD. Usually used in conjunction with local web site or FTP servers.
Recommend: Leave not installed or Disabled unless you really want it.

IMAPI CD-Burning COM Service
Used for that cool "drag and drop" CD burn capability. You will need this service to burn CD's.
Recommend: Automatic

Indexing Service
This has always and forever been a major resource hog. Remove the function via the "Add/Remove Programs" icon in the control panel (Windows Setup Programs.)
Recommend: Disabled or even better, uninstalled
InteractiveLogon
This service is installed with Windows XP PowerToys. Uses 1.4 MB to 2 MB EACH! This service will fire off at least 2 (system and user) instances of this process.
Recommend: Disable

Internet Connection - Firewall (ICF)
Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network.
Recommend: Automatic

Internet Connection Sharing (ICS)
Used to allow multiple computers on your network to access the Internet via only one account.
Recommend: Disabled

IPSEC Services
May be required on some domains, but the "average" user will not need this.
Recommend: Disabled

Logical Disk Manager
Vital to run the Disk Management MMC console for dynamic volumes.
Recommend: Disabled

Logical Disk Manager Administrative Service
Vital to run the Disk Management MMC console for dynamic volumes.
Recommend: Disabled

Machine Debug Manager Service
Manages local and remote debugging for Visual Studio debuggers
Recommend: Disable unless you use a visual studio like VB 6 enterprise or .NET.
Media Manager Indexer
Part of MS Visual InterDev, Media Manager is an easy media file management system that works in conjunction with Windows Explorer. The Media Manager Indexer is a program that indexes all the information about your media files and puts it into a database. Depends on Remote procedure call. If you don't use this feature then disable it.
Recommend: Automatic

Message Queuing
Not installed by default, but if needed, you may install it later off of the WinXP CD. May be used on some domains, but the "average" home user will never need this service.
Recommend: Leave not installed or Disabled

Message Queuing Triggers
Not installed by default, but if needed, you may install it later off of the WinXP CD. Required if you use Message Queuing service.
Recommend: Leave not installed or Disabled

Messenger
Sends messages between clients and servers. Not needed under normal "home" conditions.
This has nothing to do with MSN Messenger.
Recommend: Disabled

MS Software Shadow Copy Provider
Used in conjunction with the Volume Shadow Copy Service. MS Backup uses these services. You will receive, in the Event Log, a entry complaining about not having this service running if Disabled.
Recommend: Disabled

Net Login
Used for logging onto a Domain Controller.
Recommend: Disabled

NetMeeting Remote Desktop Sharing
Enables a user to access your computer using NetMeeting.
Recommend: Disabled

Network Connections
Required for managing network connectivity. Set to Disabled if you have no network or you do not toy with the configurations a lot.
Recommend: Automatic

Network DDE
Unless you use remote ClipBook, Disable it.
Recommend: Disabled

Network DDE DSDM
Same as above.
Recommend: Disabled

Network Location Awareness (NLA)
Required for use with the Internet Connection Sharing Service (server only.)
Recommend: Disabled

NT LM Security Support Provider
Not needed unless you are running Message Queuing or Telnet server.
Recommend: Disabled unless needed.

Nvidia Driver Helper Service
If a system is using an Nvidia 3-D graphics processor video card with the latest XP drivers from Nvidia, your users may notice that their systems take a long time to shut down. They may be encountering a problem caused by a service called Nvidia Driver Helper Service. This service has problems closing properly, yet doesn't provoke Windows XP to display the Wait, End Task, Or Cancel dialog box. The service isn't really necessary, so you can change its Startup Type setting from Automatic to Manual or Disable in the Services console.
Recommend: Disable

Performance Logs and Alerts
Collects performance data on a schedule and sends the information to a log or triggers an alert.
Recommend: Disabled

Plug and Play
The heart and soul of the Plug and Play environment. I do not recommend to disable this service, but if you want to, you are on your own. Take note: UPnP is NOT related to PnP. UPnP is used for connectivity on networks via TCP/IP to devices, such as scanners or printers. Your sound card is PnP. Do NOT Disable Plug and Play service.
Recommend: Automatic

Portable Media Serial Number
Retrieves serial numbers from portable music players connected to your computer.
Recommend: Disabled

Print Hardware Detection
This is installed by HP printers. I wouldn't recommend disabling this service unless you don't use your printer. At all.
Recommend: Automatic

Print Spooler
Queues up print jobs for later printing. This service is Required if you have printers, even if they are network printers
Recommend: Automatic

Protected Storage
Allows for the saving of local passwords or even web sites information (AutoComplete.) If you enjoy having your passwords saved in applications like Outlook or Dial up networking, set this service to Automatic.
Recommend: Automatic

QoS RSVP
Provides traffic control on a network using IPSEC and applications that support QoS, plus have an adapter that supports it. The QoS Packet Driver is installed by default on any TCP/IP connections. I have also read that this adds about 20% overhead to your network bandwidth.
Recommend: Disabled

Remote Access Auto Connection Manager
Creates a connection to a network when a program requests a remote address.
Recommend: Automatic

Remote Access Connection Manager
Creates a network connection. This service is Required if you use Internet Connection Sharing. This service may also be Required for your Internet connection.
Recommend: Automatic

Remote Desktop Help Session Manager
Manages and controls Remote Assistance.
Recommend: Disabled

Remote Procedure Call (RPC)
This service is rather Vital. Just about everything depends on this service to be running. This is also the only service that you can not disable via the Services MMC.
Recommend:Automatic.

Remote Procedure Call (RPC) Locator
Manages the RPC name service database.
Recommend: Automatic.

Remote Registry Service
This is one of those not needed services.
Recommend: Disabled

Removable Storage
Used for managing removable media. Disable this service if you do not have items like tape backup devices, etc.
Recommend: Disable

RIP Listener
Not installed by default, but if needed, you may install it later off of the WinXP CD.
Recommend: Leave not installed or Disabled

Routing and Remote Access
Not installed by default, but if needed, you may install it later off the WinXP CD
Recommend: Leave not installed or Disabled

Script blocking Service
Script Blocking stops script-based viruses A script is a list of instructions that can be executed without user interaction. Scripts can be opened with text editors or word processing programs, so they are very easy to change. Script Blocking detects Visual Basic and Java script-based viruses without the need for specific virus definitions. It monitors the scripts for virus-like behavior and alerts you if it is found. Installed by Norton Anti Virus
Recommend: Automatic

Secondary Logon
Enables starting processes under alternate credentials.
Recommend: Disabled

Security Accounts Manager
Like Protected Storage, it saves security information for local users. This service is Required for IIS Admin.
Recommend: Disabled unless needed.

Server
Used for file and print sharing from your computer or if you use Message Queuing. Workstation is needed to connect to another computer that has the files you are looking for.
Recommend: Automatic

Shell Hardware Detection
Used for the auto play of devices like memory cards, etc. Also, set to Automatic if you are experiencing problems
with laptop docking stations.
Recommend: Automatic

Simple Mail Transport Protocol (SMTP)
Not installed by default, but if needed, you may install it later off of the WinXP CD. Supports the use of a local (outbound) e-mail server.
Recommend: Leave not installed or Disabled

Smart Card
Supports the use of a Smart Card for local or network computer authentication. If you do not have a "Smart Card," you do not need this service running.
Recommend: Disabled

Smart Card Helper
Supports the use of a Smart Card for local or network computer authentication. If you do not have a "Smart Card," you do not need this service running.
Recommend: Disabled

SNMP Service
Not installed by default, but if needed, you may install it later off of the WinXP CD. Supports the use of networking equipment that use SNMP as a mode of management.
Recommend: Leave not installed or Disabled

SNMP Trap Service
Not installed by default, but if needed, you may install it later off of the WinXP CD. Supports the use of networking equipment that use SNMP as a mode of management.
Recommend: Leave not installed or Disabled

SSDP Discovery Service
Used to locate UPnP devices on your home network. Used in conjunction with Universal Plug and Play Device Host, it detects and configures UPnP devices on your home network. Take note: UPnP is NOT related to PnP.

UPnP
UPnP is used for connectivity on networks via TCP/IP to devices, such as scanners or printers. Your sound card is PnP. Do NOT Disable Plug and Play service.
Recommend: Disabled

Symantec Event Manager
The NAV Event Manager receives information from all registered events. It is the middleman that ensures that the information is then sent to the Log Viewer to be processed and displayed as part of the Activity Log Report
Recommend: Automatic (You can disable this and have Norton fucntion fine.)

Symantec Password Service
Added to NAV 2003 is the option to enable password protection for accessing Options. This provides another layer that a virus or hacker would need to go through to disable modules in NAV, such as Auto-Protect or Email Scanning. It also allows administrators to control who can change options in the program.
Recommend: Automatic (This isn't an essental service and you can
disable it if you wish.)

Symantec Proxy Services
Proxy Services, for example, Symantec Email Proxy is required to manage Norton AntiVirus (NAV) email scanning feature.
Recommend: Automatic

System Event Notification
Used in conjunction with COM+ Event System, this service notifies particular services when system events, such as logon and power events occurs. You will receive, in the Event Log, a entry complaining about not having this service running if Disabled.
Recommend: Disabled

System Restore Service
Creates system snap shots or restore points for returning to at a later time. This is the OTHER service that is a massive resource hog.
Recommend: Automatic if resources are not an issue

Task Scheduler
This service is used to schedule maintenance, MS Backup sessions or maybe even Auto Update. Some third party software may require this service to be active for automated functions, such as Virus Scanners, system maintenance tools, and Automatic patch/driver lookups.
Recommend: Disabled / manual

TCP/IP NetBIOS Helper
Service Legacy support for NetBios over TCP/IP. If your network does not use NetBios, disable this function.
Recommend: Disabled

TCP/IP Printer
Server Not installed by default, but if needed, you may install it later off of the WinXP CD. Used for setting up a local UNIX print server. If you do not need this function, leave it uninstalled.
Recommend: Leave not installed or Disabled

Telephony
Controls telephony devices on the local computer. This service is Required for dial-up modem connectivity.
Recommend: Disabled, Automatic if you require dial-up connectivity

Telnet
Allows remote login to the local computer via the telnet function.
Recommend: Disabled

Terminal Services
Allows remote login to the local computer. This service is Required for
Fast User Switching, Remote Desktop and Remote Assistance.
Recommend: Disabled

Themes
Used to display all those pretty new XP themes and colors on your desktop. If you are memory conscious and do not care about the "new" XP look, disable this service to save RAM.
Recommend: Disabled, unless you like the new xp look. (I personally have it enabled and i do keep changing themes.. ;) so your call)

Contd.....
 
  • Like
Reactions: 1 person

soulweaver

Nice is Free
Patron
Sep 2, 2005
483
673
233
Contd....

Uninterruptible Power Supply

Windows Update also has a "patch" for this service. (not that patches are unique in MS OSes :p)

Recommend: Disabled

Universal Plug and Play Device Host

Used in conjunction with SSDP Discovery Service, it detects and configures UPnP devices on your home network. Take note: UPnP is NOT related to PnP. UPnP is used for connectivity on networks via TCP/IP to devices, such as scanners or printers. Your sound card is PnP. Do NOT Disable Plug and Play service.

Recommend: Disabled

Upload Manager

As with BITS, this service manages file transfers between clients and servers on the network. This service is NOT required for basic File and Print sharing.

Recommend: Disabled

Volume Shadow Copy

Used in conjunction with the MS Software Shadow Copy Provider Service. MS Backup uses these services. You will receive, in the Event Log, a entry complaining about not having this service running if Disabled.

Recommend: Disabled

WAN Miniport ATW

Required if you use AOL for internet. If you don't use AOL then uncheck this.

Recommend: Automatic

WebClient

For security reasons, I recommend for this service to be Disabled.

Recommend: Disabled

Windows Audio

This service is Required if you wish to hear any audio at all. If your computer does not have a sound card, Disable this service.

Recommend: Automatic

Windows Image Acquisition (WIA)

Used for some scanners and cameras.

Recommend: Automatic

Windows Installer

This service is required for software applications that install using MSI files.

Recommend: Automatic

Windows Management Instrumentation

This service is Required if you want to see the "Dependencies" tab in service configuration and you want everything to go smoothly.

Recommend: Automatic

Windows Management Instrumentation Driver Extension

Not as vital as Windows Management Instrumentation, but I recommend leaving this service.

Recommend: Automatic

Windows Time

Automatically sets your clock by contacting a server on the Internet. Great idea if your network is always connected to the Internet, but otherwise, the Event Log fills up with "can not find server" messages.

Recommend: Disabled

Wireless Zero Configuration

Automatic configuration for wireless network devices. If you do not have any wireless network devices in use, Disable this service.

Recommend: Disabled

WMDM PMSP Service

Retrieves the serial number of any portable music player connected to your computer

Recommend: Disable

WMI Performance Adapter

Another service not needed.

Recommend: Disabled

Workstation

Used to connect local computer to remote computers. Examples: Internet connectivity and local File and Print sharing. Many services depend on Workstation to be functioning. Leave it on Automatic.

Recommend: Automatic

World Wide Web Publishing Service

Not installed by default, but if needed, you may install it later off of the WinXP CD. Used for setting up a local web server.

Recommend: Leave it Uninstalled or Disabled.

MISCELLANEOUS TWEAKS

-------------------------------------------------------------------------------------------------------------------

Quote:

Startup Apps

If you want to control which programs Windows loads at startup there are a few places to check.

First, check the Startup folder under Start, Programs. Second, check the following registry keys:

HKEY_CURRENT_USER\Software\m*croshit\Windows\CurrentVersion\Run

HKEY_LOCAL_MACHINE\SOFTWARE\m*croshit\Windows\CurrentVersion\Run

Third, you can run the following command to review all of the above, plus .INI files:

msconfig

-------------------------------------------------------------------------------------------------------------------

Unload DLLs

Windows does not unload dll files a program has used after it has been closed, to speed up a possible restart of the program.

Use Regedit to edit: HKEY_LOCAL_MACHINE\Software\m*croshit\Windows\CurrentVersion\explorer Add the DWORD value named: AlwaysUnloadDLL and set it to 1

-------------------------------------------------------------------------------------------------------------------

Memory Tweaks

warning: be careful with these ones as you need a large amount of system ram to do most of them

There are 3 tweaks you can make to change how XP uses memory.

Open Regedit and Find HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\

Disable Paging Executive:

XP pages data from RAM memory to the hard drive. We can stop this happening and keep more data in RAM, resulting in better performance. Users with a large amount of RAM (256MB+) should use this setting. The setting we change to disable the ’Paging Executive’, is DisablePagingExecutive. Changing the value of this key from 0 to 1 will de-activate memory paging.

System Cache Boost:

Changing the value of the key LargeSystemCache from 0 to 1 will tell XP to allocate all but 4MB of system memory to the file system cache, allowing the XP Kernel to run in memory. The 4MB of memory left is used for disk caching, if more is needed, XP allocates more. Generally, this tweak improves performance by a fair bit but can, in some intensive applications, degrade performance. As with the previous tweak, you should have at least 256MB of RAM before attempting to enable LargeSystemCache.

Input/Output Performance:

This improves performance of large file transfers. If this entry does not appear in the registry, you will have to create a REG_DWORD value called IoPageLockLimit. The data for this value is in number of bytes, and defaults to Zero which equates to 512KB on machines that have the value. Most people using this tweak have found maximum performance in the 8 to 16 megabyte range, so you will have to play around with the value to find the best performance. The value is measured in bytes, so if you want, 12MB allocated, it’s 12 * 1024 * 1024, or 12582912. As with all these memory tweaks, you should only use this if you have 256MB or more of RAM.

-------------------------------------------------------------------------------------------------------------------

Modify Shutdown Time For Services To Close

Often times when XP is shutting down a dialog appears saying the system is waiting for a service to close. This tweak will reduce (or increase) the amount of time that expires before this warning appears. In some cases it may be desirable to allow the service more time, but most often a shorter delay is desirable. The lower the number entered the quicker the task will end.

[Start] [Run] [Regedit]

Registry Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control

Modify/Create the Value Name [WaitToKillServiceTimeout] according to the Value Data listed below.

Data Type: REG_SZ [String Value] // Value Name: WaitToKillServiceTimeout

Value Data: [Default = 20,000 (expressed in milliseconds) Modify to preference.]

Exit Registry and Reboot

-------------------------------------------------------------------------------------------------------------------

Disable the Windows XP Startup Screen

(more of a cosmetic thing to see what goes on in the background when u boot up ur winxp machine)

If you've ever wondered what goes on behind the Windows Startup Screen when your computer boots, this will disable the screen and allow you to see what's really happening.

Click [Start] and right click on [My Computer]

Select [Properties]

Select the [Advanced] tab

In the [Startup and Recovery] section, click [Settings]

In the [System Startup] section, click [Edit] to open the boot.ini file in Notepad

You will see a line that looks similar to the one below

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="m*croshit Windows XP Professional" /fastdetect

To disable the Startup Screen change to line to read as below. The change is shown in red.

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="m*croshit Windows XP Professional" /fastdetect /sos

Note: There is a space between 'fastdetect' and '/sos'

Close Notepad, clicking [Yes] when Notepad asks if you want to save your changes.

Click [OK] [Apply] and [OK] to exit System Properties

Reboot computer and the Startup Screen will be gone.
 

KingKrool

Skilled
Mar 16, 2005
3,556
71
136
I recommend leaving Windows Installer as manual start-up

I second the motion.

Also, msconfig is not a good tool for the purpose (and therefore you very correctly introduce the more useful services.msc). Msconfig has a very stupid option - Disable all. There is no use for such a function as using it is almost guaranteed to crash your computer beyond all recovery.
 

Striker10

Skilled
Mar 25, 2005
2,436
61
138
www.techenclave.com
KingKrool said:
I second the motion.
Also, msconfig is not a good tool for the purpose (and therefore you very correctly introduce the more useful services.msc). Msconfig has a very stupid option - Disable all. There is no use for such a function as using it is almost guaranteed to crash your computer beyond all recovery.
I second that :D ... yes msconfig is not the tool to be used for configuring the services . even BlackViper says that :)