List of services running on fresh Windows XP installation

Windows Services are like the stage hands in the theater. You don’t really know they are there, but you would miss them if they were not.

These background processes take care of various housekeeping roles in your Windows XP system. Not every service is necessary and stopping some from running will help both your system performance and possibly security.

I recently installed a fresh copy of Windows XP. Prior to doing anything on the system I took a snapshot of the services that were installed and running. They are presented here.

Let’s take a look at each one and decide whether or not we need them to perform the day to day functions on our Windows XP system.

The decision to enable or disable service can involve some risk. If you disable a critical component, you may loose functionality in your system. In most cases, you can boot into safe-mode and reenable the service. Proceed with some caution

• Application Layer Gateway Services

This services allows Windows applications to manipulate firewall rules and share your Internet connection. If you are running internet aware applications such as MSN Messenger, you should leave this enabled. Otherwise, disable it.

• Automatic Updates

The Automatic Update service will connect to Windows servers and download patches to your operating system. If you like full control over what is installed in your system, you should disable this service. If you trust that Microsoft will install compatible well tested patches then leave this service enabled.

• COM+ Event System
• Cryptographic Services
• DCOM Server Process Launcher

This service is required by the Windows XP Firewall and RPC.

• DHCP Client

The DHCP client service communicates with an upstream server to request a dynamic IP address. If you are connecting to the Internet and do not want to manage your IP addresses, leave this client enabled.

If you only have one computer and are willing to setup a static IP address, you can disable this service.

• Distributed Link Tracking Client

This service maintains the link between shortcuts and the underlying file. Best to leave this alone.

• DNS Client

The DNS client is responsible for resolving domain names. That is turn friendly names like www.faster-windows.com into an IP address that allows the computers to connect. Unless your computer is not going to be connected to a local network or the Internet, this service must be enabled.

• Error Reporting Service

“The Error Reporting Service collects, stores, and reports unexpected application errors or closures to Microsoft. It also authorizes error reporting for services and applications that run in non-standard environments. This service provides Microsoft product groups with efficient and effective information to debug driver and application faults.”

When an application crashes unexpectedly and displays a dialog asking to send information to Microsoft, it is this service doing the job.
If you do not want to send any error information to Microsoft, disable this service.

• Event Log

The Event Log service provides a repository of system events. This repository is updated by the operating system and various Windows applications. The Event Log is a useful place to look when applications are working properly or if you suspect their is a problem in your system. It’s best to leave this service enabled.

• Fast User Switching Compatibility

This service helps poorly written applications work under a multi-user environment. Windows XP has the ability to allow you to “switch away” from one login environment to another. If your daughter wants to hop on the computer and you are in the middle of something you do not need to logout. She can just switch to a different user.
If you are the only user of this system, you can disable this service.

• Help and Support

Much of the Windows Help database is based on the network. This service allows interaction between the Windows Help data and your computer. If you prefer to look for your own help (like on this website) disable the service.

• IPSEC Services

Provides security features for network communications. Leave this enabled.

• Logical Disk Manager

Provides the ability to detect the installation and removal of hard drives. If you have any dynamic disks, such as USB external hard disks do not disable this service.

• Network Connections

If you are connecting to the Internet, leave this enabled.

• Network Location Awareness (NLA)

Another core network service. Leave it enabled.

• Plug and Play

The plug and play service allows Windows XP to detect the addition or removal of hardware with little input from you. When you plug in a USB camera, the Plug and Play service works to make sure it’s setup and configured properly. You should generally leave this service enabled.

• Print Spooler

The Print Spooler service manages all local and network print queues and controls all print jobs. If you want to print or send a fax you need this service enabled.

• Protected Storage

Protected Storage provides a secure location to store private data. If you need to connect to the Internet with encryption using SSL (say to your bank) you need to leave this service running.

• Remote Procedure Call

Do not disable this service

• Remote Registry

The Remote Registry service allows a client computer with the appropriate permissions to view and edit the system registry on another Windows computer. Unless you are a system administrator or your computer is part of a managed corporate network you do not need this service.

• Secondary Logon

This service allows you to run an application using a login different then your own. It provides the RunAs feature of Windows XP. For example, if you are running as a Power User and need to run an application as an Administrator, you can use RunAs to specify the Administrator account and run the application under those credentials.

• Security Accounts Manager

Do not disable this service

• Security Center

The Security Center service was introduced in Windows XP SP2. It provides a centralized monitor for various security related sub-systems. These include the Windows Firewall, Anti-Virus protection and Windows Update. If you disable this service the sub-systems will continue to work. You will not have a central monitor application to manages these sub-systems.

• Server

This service allows for communication between other Windows computers over a network. Disabling it will prevent file, printer and pipe sharing over a network. It will not impede access to the Internet.

• Shell Hardware Detection

This service monitors and notifies the system of auto play events such as inserting a CD or DVD into your system. It allows you to define a particular action in response to an auto play event. For example, you can configure Windows Media Player to begin importing music when a CD is inserted.

• SSDP Discovery Service

“The Universal Plug and Play host service that is included with Windows XP supports peer-to-peer Plug and Play functionality for network devices. The UPnP specification is designed to simplify device and network service installation and management. The Universal Plug and Play host service uses the Simple Service Discovery Protocol (SSDP) to locate and identify UPnP network devices.” If you are not connecting to any UPnP devices you do not need this service. Some UPnP devices include printers, remote media servers.

• System Event Notification
• System Restore Service
• Task Scheduler

The Task Scheduler is used to setup application that run at a specific time. For example, you may want to run your backup program or disk defragmenter once a week. You would do it with the Task Scheduler. Few third party applications actually use the scheduler, most implement their own. If you don’t have any specific tasks you want to schedule, disable it until you do.

• TCP/IP NetBIOS Helper

If you are running a local Windows XP network, this service provides share and logon access between machines. If you are not, than you do not need this service.

• Terminal Services

This service provides the ability for remote desktop access to your computer. This is handy if you want to control your Windows XP over the network via VPN. Otherwise you can turn this off.

• Themes

Themes provides the “skin” that makes Windows XP look fancier then Windows 2000 and Windows 95. If you like the look, leave it enabled. If you want some performance gains. Disable it.

• WebClient

The WebClient service allows applications to access documents on the Internet. The service extends the network capability of Windows by allowing applications to access files on the Internet through the use of WebDAV.

If you think you will be publishing Websites or access files via WebDAV you should leave this enabled. If you didn’t understand any of what I just said, you should disable it.

• Windows Audio

If you listen to music on your Windows XP system, keep this service enabled.

• Windows Firewall/Internet Connection

This service provides the ability for your Windows XP system to share an Internet connection with other local system. It also provides firewall functions to limit the type of traffic allowed into and out of your machine. Disabling this may be considered controversial but I still tend to turn it off. Here’s my rationale.

My Windows XP system is one of three other computers in my house. These computers do not share their connection through this computer. Instead, all the network traffic passes through a router. This router also has it’s own firewall which protects my systems by limiting the types of traffic coming into the Internet.

The best analogy for this is the router firewall is like a lock on my house. Only certain people are allowed in and out. The Firewall service is like a lock on a room in my house, limiting who has access to my “room” even further.

I tend to like to keep my network connections simple.

• Windows Management Instrumentation

Provides information about the operating system to applications. If it is disabled, most applications will fail to run.

• Windows Time

The Windows Time service provides Windows XP with the ability to synchronize it’s clock from the Internet. While not necessary, I generally leave this on as it’s a “good-thing-to-do.”

• Wireless Zero Configuration

This service manages the automatic configuration of wireless network adapters. If you are using a wireless network adapter leave this service enabled.

• Workstation

The Workstation service manages all non web network connections. If you are doing anything beside browsing the world-wide-web (www) then leave this service enabled.

As you can see, there are a number of services installed by default. If you wish to disable them you should disable one at a time and judge whether or not you see a performance boost. There is a tutorial on disabling unused Windows XP services here.

Bookmark this link in case you run into problems in the future. You may find that you will eventually have an application that fails to run because one of these services were disabled. The information here might help you track down which one.