Windows Vista: Disabling Services

[Slimy]

I am not responsible for what you do to your Vista installation.

I suggest we use this thread to suggest to each other which services can be turned off, because we do not need them. This is a work in progress. I did not follow this post 100% and neither should you. Change services according to your computer config. If you do not have one of these services, chances are you already disabled the option in 'Turn Windows features on or off' or you are running a different edition of Windows Vista. Setting an Automatic service to Disabled will make sure it will not start when you boot up. Setting a Manual service to Disabled has no effect on performance and will only stop Vista from launching the service when it the OS believes it is needed.

Note: the default options are for Vista Ultimate. Some are obviously different.

A good application for saving presets of your services is: http://p-nand-q.com/download/pserv_cpl.html

Start > services.msc > Enter

Winkey + R > services.msc > Enter

Application Experience - Default: Automatic (Started)

- Safe: Leave as is

Application Information - Default: Manual (Started)

- Safe: Leave as is

Application Layer Gateway Service - Default: Manual

- Used for certain software services | If this service is started already, leave on Manual (Safe) | If it is not, set to Disabled

Application Management - Default: Manual

- If you don't "deploy software through Group Policy", Set to Disabled

Background Intelligent Transfer Service - Default: Automatic (Delayed Start) (Started)

- Safe: Leave as is (unless you don't use Windows Update)

Base Filtering Engine - Default: Automatic (Started)

- Disabling this service reduces security of the OS (needed for firewall, some unusual protocols, remote access, and internet connection sharing), Safe: Leave as is

Block Level Backup Engine Service - Default: Manual

- Since this service is on manual and does not start, it may be needed at some point, but it isn't a critical service

Certificate Propagation - Default: Manual

- If you don't use Smart Cards, Safe: Set to Disabled

CNG Key Isolation - Default: Manual

- This service may be needed if you are on Wired/Wireless Lan Autoconfig Since and will be using EAP (Extensible Authentication Protocol), Otherwise: Set to Disabled

COM+ Event System - Default: Automatic (Started)

- Responsible for many things including the Backup and Restore Center, Safe: Leave as is

COM+ System Application - Default: Manual

- Since this service is on manual and does not start, it may be needed at some point, but it isn't a critical service

Computer Browser - Default: Automatic

- If you aren't on a network, Safe: Set to Disabled

Cryptographic Services - Default: Automatic (Started)

- Needed for some connections/websites (Microsoft/Windows Update?), confirms signatures of windows files, Safe: Leave as is

DCOM Server Process Launcher - Default: Automatic (Started)

- Safe: Leave as is

Desktop Window Manager Session Manager - Default: Automatic (Started)

- If you don't use the advanced Aero Glass transparency interface, Safe: Set to Disabled

DFS Replication - Default: Manual

- If you aren't on a network, Safe: Set to Disabled

DHCP Client - Default: Automatic (Started)

- Typically needed for most Internet Connections (maybe not if you have a static IP), Safe: Leave as is

Diagnostic Policy Service - Default: Automatic (Started)

- If you don't care for Windows finding solutions to problems (including fixing internet connection problems in vista and ie7), Safe: Set to Disabled

Diagnostic Service Host - Default: Manual

- If you don't care for Windows finding solutions to problems, Safe: Set to Disabled

Diagnostic System Host - Default: Manual (Started)

- If you don't care for Windows finding solutions to problems, Safe: Set to Disabled

Distributed Link Tracking Client - Default: Automatic (Started)

- If you don't have links between NTFS Files, Safe: Set to Disabled

Distributed Transaction Coordinator - Default: Manual

- Since this service is on manual and does not start, it may be needed at some point, but it isn't a critical service (Set to Disabled)

DNS Client - Default: Automatic (Started)

- Needed once in a while, Safe: Leave as is

Extensible Authentication Protocol - Default: Manual

- Disabling this service reduces security of the OS (needed for firewall, some unusual protocols, remote access, and internet connection sharing), Safe: Leave as is

Fax - Default: Manual

- If you don't use a fax or a scanner, Safe: Set to Disabled

Function Discovery Provider Host - Default: Manual (Started)

- If not on a network (needed for certain uncommon network components), Safe: Set to Disabled

Function Discovery Resource Publication - Default: Automatic (Started)

- If not on a network (needed for certain uncommon network components), Safe: Set to Disabled

Group Policy Client - Default: Automatic (Started)

- Safe: Leave as is (can technically be disabled if not used, will look into possible problems later)

Health Key and Certificate Management - Default: Manual

- Safe: Set to Disabled

Human Interface Device Access - Default: Manual

- If you don't use the extra buttons on your keyboard or use the software for it, Safe: Set to Disabled

IKE and AuthIP IPsec Keying Modules - Default: Automatic

- Safe: Set to Disabled

Infrared Monitor service - Default: Automatic (Started)

- If you don't have/use infrared, Safe: Set to Disabled

Interactive Services Detection - Default: Manual

- Since this service is on manual and does not start, it may be needed at some point, but it isn't a critical service (Set to Disabled)

Internet Connection Sharing (ICS) - Default: Disabled

- Possibly not needed (will look into), Safe: Leave as is

IP Helper - Default: Automatic (Started)

- If you don't want IPv6 support, Safe: Set to Disabled

IPsec Policy Agent - Default: Automatic (Started)

- Possibly not needed (will look into), Safe: Leave as is

KtmRM for Distributed Transaction Coordinator - Default: Automatic (Delayed Start)

- Possibly not needed (will look into), Safe: Leave as is

Link-Layer Topology Discovery Mapper - Default: Manual

- Since this service is on manual and does not start, it may be needed at some point, but it isn't a critical service

Microsoft .Net Framework NGEN v.20.50727_X64/X86 - Default: Manual

- Safe: Leave as is

Microsoft iSCSI Initiator Service - Default: Manual

- If you don't use iSCSI, Safe: Set to Disabled

Microsoft Software Shadow Copy Provider - Default: Manual

- Since this service is on manual and does not start, it may be needed at some point, but it isn't a critical service

Multimedia Class Scheduler - Default: Automatic (Started)

- Needed for Windows Audio, Safe: Leave as is

Net.Tcp Port Sharing Service - Default: Disabled

- Safe: Leave as is

Netlogon - Default: Manual

- Since this service is on manual and does not start, it may be needed at some point, but it isn't a critical service (Set to Disabled)

Network Access Protection Agent - Default: Manual

- Safe: Set to Disabled

Network Connections - Default: Manual (Started)

- Unless you aren't using the internet, Safe: Leave as is

Network List Service - Default: Automatic (Started)

- Unless you aren't using the internet, Safe: Leave as is

Network Location Awareness - Default: Automatic (Started)

- Unless you aren't using the internet, Safe: Leave as is

Network Store Interface Service - Default: Automatic (Started)

- Unless you aren't using the internet, Safe: Leave as is

Offline Files - Default: Automatic (Started)

- Unless you use them, Safe: Set to Disabled

Parental Controls - Default: Manual

- Unless you use them, Safe: Set to Disabled

Peer Name Resolution Protocol - Default: Manual

- Unless you use Windows Meetings, Safe: Set to Disabled

Peer Networking Grouping - Default: Manual

- Unless you use such applications, Safe: Set to Disabled

Peer Networking Identity Manger - Default: Manual

- Safe: Set to Disabled

Performance Logs & Alerts - Default: Manual

- Needed for many features of Windows, Safe: Leave as is

Plug and Play - Default: Automatic (Started)

- Unless you don't connect various devices often, Safe: Leave as is

PnP-X IP Bus Enumerator - Default: Manual

- Since this service is on manual and does not start, it may be needed at some point, but it isn't a critical service (Set to Disabled)

PNRP Machine Name Publication Service - Default: Manual

- Safe: Set to Disabled

Portable Device Enumerator Service - Default: Automatic (Started)

- If you do not own a portable device, Safe: Set to Disabled

Print Spooler - Default: Automatic (Started)

- If no printer (including virtual ones) is present on the computer, Safe: Set to Disabled

Problem Reports and Solutions Control Panel Support - Default: Manual

- If you don't use it, Safe: Set to Disabled

Program Compatibility Assistant Service - Default: Automatic (Started)

- If you don't use the Program Compatibility Assistant, Safe: Set to Disabled

Protected Storage - Default: Manual

- If you don't save passwords, Safe: Set to Disabled

Quality Windows Audio Video Experience - Default: Manual

- If you don't need it, Safe: Set to Disabled

ReadyBoost - Default: Automatic (Started)

- If you don't use USB drives as a memory boost, Safe: Set to Disabled

Remote Access Auto Connection Manager - Default: Manual

- If you won't be connecting to your computer remotely, Safe: Set to Disabled

Remote Access Connection Manger - Default: Manual (Started)

- If you won't be connecting to your computer remotely, Safe: Set to Disabled

Remote Procedure Call (RPC) - Default: Automatic (Started)

- Vital, Safe: Leave as is

Remote Procedure Call (RPC) Locator - Default: Manual

- Possibly not needed (will look into), Safe: Leave as is

Remote Registry - Default: Manual

- Recommended: Set to Disabled

Routing and Remote Access - Default: Disabled

- Typically not needed, Safe: Leave as is

Secondary Logon - Default: Automatic (Started)

- If you are only running vista with one user, Safe: Set to Disabled

Security Accounts Manager - Default: Automatic (Started)

- If you don't use Global Policy Editor, Safe: Set to Disabled

Security Center - Default: Automatic (Delayed Start) (Started)

- If you don't use the Security Center, Safe: Set to Disabled

Server - Default: Automatic (Started)

- If you don't plan to send files or print them over a network, Safe: Set to Disabled

Shell Hardware Detection - Default: Automatic (Started)

- If you don't use Autoplay, Safe: Set to Disabled

SL UI Notification Service - Default: Manual

- Not required on most setups (needed for Tablet Input Panel) but may break the control panel, Safe: Leave as is

Smart Card - Default: Manual

- If you don't use Smart Cards, Safe: Set to Disabled

Smart Card Removal Policy - Default: Manual

- If you don't use Smart Cards, Safe: Set to Disabled

SNMP Trap - Default: Manual

- If not on a network with SNMP, Safe: Set to Disabled

Software Licensing - Default: Automatic (Started)

- Needed for the Control Panel and other parts of Windows to function (Tablet Input Panel for Tablets), Safe: Leave as is

SSDP Discovery - Default: Automatic (Started)

- If you don't have such devices, Set to Disabled

Superfetch - Default: Automatic (Started)

- Safe: Leave as is

System Event Notification Service - Default: Automatic (Started)

- Typically not needed (event log may display an error if disabled) Safe: Leave as is

Table PC Input Service - Default: Automatic (Started)

- If you don't have a tablet PC, Safe: Set to Disabled

Task Scheduler - Default: Automatic (Started)

- Needed for various Windows and 3rd Party Programs, Safe: Leave as is

TCP/IP NetBIOS Helper - Default: Automatic (Started)

- If you won't be sharing files between computers, Set to Disabled

Telephony - Default: Manual (Started)

- Needed for dial-up and certain DSL connections, Safe: Leave as is

Terminal Services - Default: Automatic (Started)

- If you don't plan to administer remote computers, Safe: Set to Disabled

Terminal Services Configuration - Default: Manual

- If you don't plan to administer remote computers, Safe: Set to Disabled

Terminal Services UserMode Port Redirector - Default: Manual

- If you don't plan to administer remote computers, Safe: Set to Disabled

Themes - Default: Automatic (Started)

- If you are using Windows Classic, Safe: Set to Disabled

Thread Ordering Server - Default: Manual

- Safe: Leave as is

TPM Base Services - Default: Manual

- Used for hardware certificates, Safe: Leave as is

UPnP Device Host - Default: Automatic (Started)

- If you don't use UPnP, Safe: Set to Disabled

User Profile Service - Default: Automatic (Started)

- Safe: Leave as is

Virtual Disk - Default: Manual

- Since this service is on manual and does not start, it may be needed at some point, but it isn't a critical service

Volume Shadow Copy - Default: Manual

- Needed for some integrated backups, since this service is on manual and does not start, it may be needed at some point, but it isn't a critical service

WebClient - Default: Automatic (Started)

- If you don't use web folders, Safe: Set to Disabled

Windows Audio - Default: Automatic (Started

- Safe: Leave as is

Windows Audio Endpoint Builder - Default: Automatic (Started)

- Safe: Leave as is

Windows Backup - Default: Manual

- If you don't use it, Safe: Set to Disabled, Recommended: Leave as is

Windows CardSpace - Default: Manual

- If you don't use it, Safe: Set to Disabled

Windows Color System - Default: Manual

- Safe: Leave as is

Windows Connect Now - Config Registrat - Default: Manual

- Safe: Set to Disabled

Windows Defender - Default: Automatic (Started)

- If you don't use it, Safe: Set to Disabled, Recommended: Leave as is

Windows Driver Foundation - User-mode Driver Framework - Default: Manual

- Safe: Leave as is

Windows Error Reporting Service - Default: Automatic

- If you don't use it, Safe: Set to Disabled, Recommended: Leave as is

Windows Event Collector - Default: Manual

- Safe: Leave as is

Windows Event Log - Default: Automatic (Started)

- Safe: Leave as is

Windows Firewall - Default: Automatic (Started)

- If you don't use it, Safe: Set to Disabled, Recommended: Leave as is

Windows Image Acquisition (WIA) - Default: Manual

- If you don't have a scanner/camera, Safe: Set to Disabled

Windows Installer - Default: Manual

- Safe: Leave as is

Windows Management Instrumentation - Default: Automatic (Started)

- Safe: Leave as is

Windows Media Center Extender Service - Default: Disabled

- Safe: Leave as is

Windows Media Center Receiver Service - Default: Manual

- If you don't use it, Safe: Set to Disabled

Windows Media Center Scheduler Service - Default: Manual

- If you don't use it, Safe: Set to Disabled

Windows Media Center Service Launcher - Default: Automatic (Delayed Start) (Started)

- If you don't use it, Safe: Set to Disabled

Windows Media Player Network Sharing Service - Default: Manual

- If no portable device is owned, Set to Disabled

Windows Modules Installer - Default: Manual

- Certain Windows Updates require it, Safe: Leave as is

Windows Presentation Foundation Font Cache 3.0.0.0 - Default: Manual

- Safe: Leave as is

Windows Remote Management (WS-Management) - Default: Manual

- If you don't plan to administer remote computers, Safe: Set to Disabled

Windows Search - Default: Automatic (Started)

- If you don't use it, Safe: Set to Disabled, Recommended: Leave as is

Windows Time - Default: Automatic (Started)

- If you don't plan to sync the clock with a server, Safe: Set to Disabled

Windows Update - Default: Automatic (Delayed Start) (Started)

- If you don't use it, Safe: Set to Disabled, Recommended: Leave as is

WinHTTP Web Proxy Auto-Discovery Service - Default: Manual

- Almost always not needed, Safe: Set to Disabled

Wired/WLAN AutoConfig - Default: Manual

- If you don't use it, Safe: Set to Disabled

WMI Performance Adapter - Default: Manual

- Safe: Leave as is

Workstation - Default: Automatic (Started)

- Unless you are having a major lag during boot time or if you plan on being on a LAN, Safe: Leave as is

Please inform me about mistakes, what you have found and what you would change :)

Edited May 6, 2007 by Slimy

[Meshuggah]

let me start off by asking, what services have you disabled yourself? I look at that list and there is just so much to start to look through

[Slimy]

I was considering doing that and showing everyone what I disable, but there really is no point. Everyone uses their computer for different things and therefore uses different services. The point of this thread is for anyone to be able to go through the list making their own decisions for each service, based on how they use their computer :)

[IbSta]

I love you...made my life so much easier then having to read each service description.

[Byron_Hinson]

Good list - some items I don't have to begin with though, like Infrared - so I'd assume they are only installed if you have infrared on your PC anyway.

[Aero Ultimate]

You could add my At-A-Glance screenshot of how I've set up my services - it turned out very safe and stable for me :)

Those who don't want to read through the entire post for the recommended settings can determine with a simple look at the screenshot if it's safe to turn off that service.

The list is sorted alphabetically by startup type - the first group is "Automatic", the second is "Disabled" and the third is "Manual".

[scratch42069]

There are some services that don't appear if you don't have the hardware for it, like infrared. I don't have that one either so one less thing for me to disable. I've safely disabled things like Fax, Print Spooler and anything Smart Card related but everything else I've left alone.

[Slimy]

There are some services that don't appear if you don't have the hardware for it, like infrared.

Hmm, I didn't know that. I just assumed everything was installed just in case you would be making a hardware upgrade...

I guess my list isn't as complete as I thought it was :pinch:

[IbSta]

they are part of the "core components" you can uninstall them from add remove programs - windows components.

[Slimy]

You could add my At-A-Glance screenshot of how I've set up my services - it turned out very safe and stable for me :)

Those who don't want to read through the entire post for the recommended settings can determine with a simple look at the screenshot if it's safe to turn off that service.

The list is sorted alphabetically by startup type - the first group is "Automatic", the second is "Disabled" and the third is "Manual".

What language is that screenshot in? German?

How many languages is Vista RTM currently available in?

[Aero Ultimate]

What language is that screenshot in? German?

How many languages is Vista RTM currently available in?

Yes, it's German. I'd say that the Rtm is currently avaiable in English, German and Japanese, just like the RCs, and other languages will take a while to appear. Translating an entire OS takes its time.

[Julius Caro]

In SIMO spain (about 2 weeks ago) they had build 5840 almost (if not) completely in Spanish.

I didn't like how they translated some things, but it was okay.

I don't think the Spanish is gonna take long. :)

[Gowcra]

woot!

[Jaron]

Very useful. This thread should be sticky.

[cropcircles]

Great list Slimy. Much appreciated and Fast.

[M118LR]

Using Home basic gives you the same thing and you have nothing to turn off.

[Slimy]

Alright, I just did some quick cleaning up. I need more input on what you guys find, the list is getting there but I still think progress can be made!

[RobNyc]

But it depends how your running vista too legally or illegally.

[Lasker]

anyone know which services depend "Help and Support" in the taskbar? it does not work in mine now :(

[ZonoBurk]

Thanks Slimy. I've booked marked this for reference when I get Vista the end of this month.

[offroadaaron]

if services are on manual they do not really need to be disabled seeing as they are not active until something needs to use that service therefore not using any resources. Microsoft have actually done a great job on minimizing it down to only what is needed for a typical system, not much needs to be changed.

[Aero Ultimate]

anyone know which services depend "Help and Support" in the taskbar? it does not work in mine now :(

Go to the Services control panel, right-click on the?"Help and Support" service and select "Properties". On the last tab you can see what services this one depends on. Check that they're not deactivated.

[aydc]

Thanks for the list, Slimy. It's been really useful. I've turned off everything possible. I only have the necessary things to make my system work and connect to the internet. I didn't see much performance difference, but boot time is a lot shorter.

I want to post my settings here to discuss and to give people an idea what can be safely turned off, but I don't know how I can do it easily. How can I export my services settings as a list so I can copy and paste here?

[Lighthalzen]

This should be pinned! & Thanks!

[Daniel F. Administrators]

cheers slimy im now down to 59 ;)