I am not affiliated with Microsoft in any way aside from being a typical end user. You use this guide at your own risk. By reading this word: balls you agree to buy me a consumable liquid in beerbong format.
This guide assumes:
I run Vista Ultimate 64-bit. I purchased Vista for two reasons: leading edge and DirectX 10. Have I ever considered re-installing XP? Yes, when I first got Vista. Do I regret paying for this wonderful OS? No. After I tweaked and customized it these inhibitions have disappeared.
The first part of my guide will focus on Vista's plethora of services. I will later dive into Local Security Policies, then possibly tweaks within Windows' applets.
The majority of this services guide is derived from the TechRepublic document titled "Windows Vista services that can be disabled". I recommend TechRepublic, AnandTech, and DailyTech for anyone hunting for good reliable sites to expand their tech knowledge.
Here's the link to TechRepublic's complete spreadsheet (I only picked ~60 services, they have all ~130):
http://downloads.techrepublic.com.com/download.aspx?docid=296633
I added my personal notes to the services below offering my insight, suggestions, and anticipated results. However, keep in mind that I don't know everything. If something sounds amiss or you know something is incorrect, please do some research or give me a link and I'll edit my guide accordingly.
Services are in spoiler tags to reduce the thread size.
Name: Application Experience
Name: Application Management
Name: Block Level Backup Engine Service
Name: Certificate Propagation
Name: Computer Browser
Name: Desktop Window Manager Session Manager
Name: DFS Replication
Name: Diagnostic Policy Service
Name: Diagnostic Service Host
Name: Diagnostic System Host
Name: Distributed Transaction Coordinator
Name: Extensible Authentication Protocol
Name: Fax
Name: Function Discovery Provider Host
Name: Function Discovery Resource Publication
Name: Internet Connection Sharing (ICS)
Name: IP Helper
Name: IPsec Policy Agent
Name: KtmRm for Distributed Transaction Coordinator
Name: Link-Layer Topology Discovery Mapper
Name: Microsoft iSCSI Initiator Service
Name: Microsoft Software Shadow Copy Provider
Name: Netlogon
Name: Network List Service
Name: Network Location Awareness
Name: Offline Files
Name: Parental Controls
Name: Performance Logs & Alerts
Name: Print Spooler
Name: Problem Reports and Solutions Control Panel Support
Name: ReadyBoost
Name: Remote Access Auto Connection Manager
Name: Remote Registry
Name: Server
Name: SL UI Notification Service
Name: Smart Card
Name: Smart Card Removal Policy
Name: Superfetch
Name: Tablet PC Input Service
Name: Task Scheduler
Name: Telephony
Name: Volume Shadow Copy
Name: WebClient
Name: Windows Backup
Name: Windows CardSpace
Name: Windows Defender
Name: Windows Error Reporting Service
Name: Windows Image Acquisition (WIA)
Name: Windows Media Center Extender Service
Name: Windows Media Center Receiver Service
Name: Windows Media Center Scheduler Service
Name: Windows Media Center Service Launcher
Name: Windows Media Player Network Sharing Service
Name: Windows Remote Management (WS-Management)
Name: Windows Search
Name: Windows Update
Name: WinHTTP Web Proxy Auto-Discovery Service
Name: WLAN AutoConfig
Name: Workstation
This guide assumes:
- You understand basic computer operations
- You understand the difference between a workgroup and a domain
- You are a home user
- You understand what services are
I've been a computer nerd since I was 11 years old, did my first install at 12 (jumped from 4mb to 12mb RAM, and yes it made a world of difference). Went to a polytech college immediately after I graduated. Undertook 2 years of technical training. I never took the official cert tests but we were trained for CCNA, CCNP, the certification formerly known as MCSE, ISA, some NetWare, DataComm, other menial crap. When school was over I got a job as tier-2 IT support. Worked at that for 2 years, deeply involved in AD on 2k, a lot of troubleshooting Windows XP but moreso the apps we ran on it. I then got shoed into a role of IP Telephony and now focus on VoIP technologies, applications, and implementations.
I run Vista Ultimate 64-bit. I purchased Vista for two reasons: leading edge and DirectX 10. Have I ever considered re-installing XP? Yes, when I first got Vista. Do I regret paying for this wonderful OS? No. After I tweaked and customized it these inhibitions have disappeared.
The first part of my guide will focus on Vista's plethora of services. I will later dive into Local Security Policies, then possibly tweaks within Windows' applets.
The majority of this services guide is derived from the TechRepublic document titled "Windows Vista services that can be disabled". I recommend TechRepublic, AnandTech, and DailyTech for anyone hunting for good reliable sites to expand their tech knowledge.
Here's the link to TechRepublic's complete spreadsheet (I only picked ~60 services, they have all ~130):
http://downloads.techrepublic.com.com/download.aspx?docid=296633
I added my personal notes to the services below offering my insight, suggestions, and anticipated results. However, keep in mind that I don't know everything. If something sounds amiss or you know something is incorrect, please do some research or give me a link and I'll edit my guide accordingly.
Services are in spoiler tags to reduce the thread size.
Spoiler:
Name: Application Experience
- Short Name: AeLookupSvc
- Executable Name: svchost.exe
- Description: Processes application compatibility cache requests for applications as they are launched.
- Default Status: Started
- Startup Type: Automatic
- Fly's Notes: I'm iffy on this one. I'm not sure what happens in the background for application compatibility... vendor software may use this without our knowledge to enable some features. Disable if you want peak performance but if you have any compatibility problems with software, I'd look to re-enable this first and foremost in your troubleshooting.
Name: Application Management
- Short Name: AppMgmt
- Executable Name: svchost.exe
- Description: Processes installation, removal, and enumeration requests for Active Directory IntelliMirror group policy programs.
- Impact if Disabled: Users will be unable to install, remove, or enumerate any IntelliMirror programs. Keep enabled in a corporate environment.
- Startup Type: Manual
- Fly's Notes: Group Policy Objects (GPOs) aren't used unless your computer is on a domain. Local Policies are used if you're in a workgroup. Disable this if you're not on a domain.
Name: Block Level Backup Engine Service
- Short Name: wbengine
- Executable Name: wbengine.exe
- Description: Engine to perform block-level backup and recovery of data as opposed to file-level backups.
- Impact if Disabled: Block-level backups will not function, but file-level backups will still operate.
- Startup Type: Manual
- Fly's Notes: I'm not sure the difference is critical. Most people just copy files to an external drive or optical disc for backups; depending on the software used for this, it may revert to file-level anyways. The worst that might happen is your files will backup slower if you're moving a large amount of smaller files.
Name: Certificate Propagation
- Short Name: CertPropSvc
- Executable Name: svchost.exe
- Description: Propagates certificates from smart cards.
- Impact if Disabled: Services that use smart cards will not operate.
- Special Notes: Enable only if you use smart cards.
- Startup Type: Manual
- Fly's Notes: I've never even seen a smart card. Most home users won't need this service.
Name: Computer Browser
- Short Name: Browser
- Executable Name: svchost.exe
- Description: Maintains an up-to-date list of computers on your network and supplies the list to programs that request it. The Computer Browser service is used by Windows-based computers that need to view network domains and resources.
- Impact if Disabled: Your computer will be unable to locate other Windows computers on the network
- Special Notes: Enable this service if you need to share files with other Windows computers.
- Startup Type: Automatic
- Fly's Notes: Home users with only 1 computer won't need this. Remote file sharing (accessing files on a computer in someone else's house) will usually rely on other protocols and services, unaffected by this one.
Name: Desktop Window Manager Session Manager
- Short Name: UxSms
- Executable Name: svchost.exe
- Description: Provides Desktop Window Manager startup and maintenance services. This service enables Windows Vista's Aero Glass display.
- Impact if Disabled: Aero Glass will not work.
- Special Notes: If you revert to something other than the new Aero Glass interface, you can disable this service. Reverting to a different interface can have positive performance implications.
- Default Status: Started
- Startup Type: Automatic
- Fly's Notes: I'm an Aero user, I left this on.
Name: DFS Replication
- Short Name: DFSR
- Executable Name: DFSR.exe
- Description: Replicates files among multiple PCs keeping them in sync. On the client, it is used to roam folders between PCs; on servers, it is used to provide high availability and local access across a wide area network (WAN).
- Impact if Disabled: File replication won't occur and the files on the server will become out of date.
- Special Notes: If you are not on a network, this service is safe to disable.
- Startup Type: Manual
- Fly's Notes: DFS is not as popular as it probably should be. It's primarily a corporate technology, home users will usually stick with standard folder shares. If you don't know what DFS is and/or you set up your home network, you can disable this.
Name: Diagnostic Policy Service
- Short Name: DPS
- Executable Name: svchost.exe
- Description: The Diagnostic Policy Service enables problem detection troubleshooting and resolution for Windows components during installation.
- Impact if Disabled: Application installation diagnostics will no longer function.
- Special Notes: Can go either way on this one. If disabled, troubleshooting can be a little more difficult.
- Default Status: Started
- Startup Type: Automatic
- Fly's Notes: I hate this shit. I'd prefer to troubleshoot myself, rather than have Vista tell me "there's a problem with this program but I can't fix it, click here to search Microsoft's website!".
Name: Diagnostic Service Host
- Short Name: WdiServiceHost
- Executable Name: svchost.exe
- Description: The Diagnostic Service Host service enables problem detection troubleshooting and resolution for Windows components.
- Impact if Disabled: Some system diagnostics will no longer function.
- Special Notes: Can go either way on this one. If disabled, troubleshooting can be a little more difficult.
- Startup Type: Manual
- Fly's Notes: See above.
Name: Diagnostic System Host
- Short Name: WdiSystemHost
- Executable Name: svchost.exe
- Description: Enables problem detection troubleshooting and resolution for Windows components.
- Impact if Disabled: System diagnostics will not not function.
- Special Notes: Can go either way on this one. If disabled, troubleshooting can be a little more difficult.
- Default Status: Started
- Startup Type: Manual
- Fly's Notes: See above above.
Name: Distributed Transaction Coordinator
- Short Name: MSDTC
- Executable Name: msdtc.exe
- Description: Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems.
- Impact if Disabled: Distributed transactions will not occur. This can affect Personal Web Server and SQL Server.
- Special Notes: Most desktops run neither Personal Web Server or SQL Server.
- Startup Type: Manual
- Fly's Notes: As above, home computers aren't typically web nor SQL servers. Safe to disable.
Name: Extensible Authentication Protocol
- Short Name: EapHost
- Executable Name: svchost.exe
- Description: The Extensible Authentication Protocol (EAP) service provides network authentication in such scenarios as 802.1x wired and wireless VPN and Network Access Protection (NAP). EAP also provides application programming interfaces (APIs) that are used by network access clients, including wireless and VPN clients during the authentication process.
- Impact if Disabled: The computer is prevented from accessing networks that require EAP authentication, including 802.1x.
- Special Notes: If you need access to an 802.1x-enabled network, do not disable this service.
- Startup Type: Manual
- Fly's Notes: EAP and PEAP are subset security protocols used in some corporate scenarios. I can't imagine them being used on many home networks. Ethernet is 802.3, anyone familiar with trunking on Cisco's IOS will know that 802.1q replaced 802.10 which was previously the LAN security standard of choice. 802.10 is legacy and this service should not affect wired computers.
Name: Fax
- Short Name: Fax
- Executable Name: fxssvc.exe
- Description: Enables you to send and receive faxes utilizing fax resources available on this computer or on the network.
- Impact if Disabled: You won't be able to send faxes from your computer.
- Startup Type: Manual
- Fly's Notes: I suspect this refers to Windows' built-in fax program... if you use a third-party program for e-faxing, it should still work with this disabled. The Telephony service is more important in the case of a third-party fax program.
Name: Function Discovery Provider Host
- Short Name: fdPHost
- Executable Name: svchost.exe
- Description: Host process for Function Discovery providers. Your computer won't be able to automatically discover some printers and other network-based resources.
- Default Status: Started
- Startup Type: Manual
- Fly's Notes: If you have a network printer (which is very different than a printer connected to a computer on the network), you may want to leave this on. I've not been a fan of Microsoft's auto-discovery methods, so until they have something as smooth as CDP I tend to leave stuff like this disabled.
Name: Function Discovery Resource Publication
- Short Name: FDResPub
- Executable Name: svchost.exe
- Description: Publishes this computer and resources attached to this computer so they can be discovered over the network.
- Impact if Disabled: The computer's network resources will no longer be published and they will not be discovered by other computers on the network.
- Default Status: Started
- Startup Type: Automatic
- Fly's Notes: I don't host stuff on my computer. If you're the same, disable this. If you share files within your network it may be advantageous to leave this on.
Name: Internet Connection Sharing (ICS)
- Short Name: SharedAccess
- Executable Name: svchost.exe
- Description: Provides network address translation addressing name resolution and/or intrusion prevention services for a home or small office network.
- Impact if Disabled: You will not be able to share your connection to the Internet.
- Startup Type: Disabled
- Fly's Notes: If you have a router, or are the only computer on your network, disable this. If other computers connect through your computer to reach the Internet, leave this on. Keep in mind that is a very rare and oddball configuration.
Name: IP Helper
- Short Name: iphlpsvc
- Executable Name: svchost.exe
- Description: Provides automatic IPv6 connectivity over an IPv4 network.
- Impact if Disabled: IPv6 services will not be available.
- Special Notes: Most networks do not use IPv6.
- Default Status: Started
- Startup Type: Automatic
- Fly's Notes: The world will have to shift to IPv6 sooner or later, but it's been in the works for about 6 years so it doesn't seem to be moving very fast. I left this on for shits & giggles.
Name: IPsec Policy Agent
- Short Name:PolicyAgent
- Executable Name: svchost.exe
- Description: Internet Protocol security (IPsec) supports network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and replay protection. This service enforces IPsec policies created through the IP Security Policies snap-in or the command-line tool "netsh ipsec."
- Impact if Disabled: You may experience network connectivity issues if your policy requires that connections use IPsec. Remote management of Windows Firewall is not available when this service is not running.
- Default Status: Started
- Startup Type: Automatic
- Fly's Notes: IPSec is rare in home networks. This is safe to disable.
Name: KtmRm for Distributed Transaction Coordinator
- Short Name: KtmRm
- Executable Name: svchost.exe
- Description: Coordinates transactions between Microsoft Distributed Transaction Coordinator (MSDTC) and the Kernel Transaction Manager (KTM).
- Impact if Disabled: If you are using DTC, you must run this service.
- Default Status: Started
- Startup Type: As Needed
- Fly's Notes: If you disabled DTC earlier, disable this as well.
Name: Link-Layer Topology Discovery Mapper
- Short Name: lltdsvc
- Executable Name: svchost.exe
- Description: Creates a Network Map consisting of PC and device topology (connectivity) information and metadata describing each PC and device.
- Impact if Disabled: The Network Map will not work.
- Startup Type: Manual
- Fly's Notes: I don't like this. I am well aware of what's in the computers on my network, I don't need Vista to spend processor cycles regurgitating the same to me. I disabled this and my network connection remains.
Name: Microsoft iSCSI Initiator Service
- Short Name: MSiSCSI
- Executable Name: svchost.exe
- Description: Manages Internet SCSI (iSCSI) sessions from this computer to remote iSCSI target devices.
- Impact if Disabled: The system will be unable to access iSCSI targets.
- Special Notes: Enable only if you use iSCSI in your environment.
- Startup Type: Manual
- Fly's Notes: I have not used iSCSI much. This is probably safe to disable; remote access methods should still encapsulate in other protocol frames so I wouldn't suspect this to cause any troubles if turned off.
Name: Microsoft Software Shadow Copy Provider
- Short Name: swprv
- Executable Name: svchost.exe
- Description: Manages software-based volume shadow copies taken by the Volume Shadow Copy service.
- Impact if Disabled: Software-based volume shadow copies cannot be managed.
- Special Notes: Leave set at Manual if you intend to use Windows Backup.
- Default Status: Started
- Startup Type: Manual
- Fly's Notes: Shadow Copy is pretty god damn sweet, I must say. We use it on our file servers at work. I see no need for it at home though, but again I don't do backups regularly. If you do, you may want to read up on this feature to see if you like it - otherwise disable this service.
Name: Netlogon
- Short Name: Netlogon
- Executable Name: lsass.exe
- Description: Maintains a secure channel between this computer and the domain controller for authenticating users and services.
- Impact if Disabled: Users logging in from the Vista workstation may not be able to authenticate to the domain.
- Startup Type: Manual
- Fly's Notes: Most home networks are not domains. This is safe to disable. MSTSC still works.
Name: Network List Service
- Short Name: netprofm
- Executable Name: svchost.exe
- Description: Identifies the networks to which the computer has connected; collects and stores properties for these networks; and notifies applications when these properties change.
- Impact if Disabled: You will be unable to list the networks to which you are connected via the system tray icon.
- Default Status: Started
- Startup Type: Automatic
- Fly's Notes: I disabled the systray network icon so I turned this off as well. More MS autodiscovery crap.
Name: Network Location Awareness
- Short Name: NlaSvc
- Executable Name: svchost.exe
- Description: Collects and stores network configuration and location information and notifies applications when this information changes. This service is a part of ICS.
- Impact if Disabled: Services such as ICS & ICF will not function.
- Special Notes: Enable if this computer has Internet Connection Sharing enabled or if you are using the Internet Connection Firewall.
- Default Status: Started
- Startup Type: Automatic
- Fly's Notes: I don't use the Windows firewall so I disabled this.
Name: Offline Files
- Short Name: CscService
- Executable Name: svchost.exe
- Description: The Offline Files service performs maintenance activities on the Offline Files cache, responds to user logon and logoff events, implements the internals of the public API, and dispatches interesting events to those interested in Offline Files activities and changes in cache state.
- Impact if Disabled: Offline files will not be available.
- Default Status: Started
- Startup Type: Automatic
- Fly's Notes: Offline files isn't terribly common on home systems. You would have had to manually set it up to start with, so if you don't recall that term then disable this.
Name: Parental Controls
- Short Name: WPCSvc
- Executable Name: svchost.exe
- Description: This service enables Windows Parental Controls on the system.
- Impact if Disabled: Parental controls will not work.
- Special Notes: If you have kids at home and want to lock things down, keep this service enabled.
- Startup Type: Manual
- Fly's Notes: Fucked with my pr0n. I killed this one fast.
Name: Performance Logs & Alerts
- Short Name: pla
- Executable Name: svchost.exe
- Description: Collects performance data for the computer or other computers and writes it to a log or displays it on the screen.
- Impact if Disabled: Performance information will no longer be logged or displayed.
- Startup Type: Manual
- Fly's Notes: If you haven't used Vista's Performance Monitor... get out from under your rock, it fucking rules. If you can't comprehend what Vista's Performance Monitor is telling you then disable this.
Name: Print Spooler
- Short Name: Spooler
- Executable Name: spoolsv.exe
- Description: Manages all local and network print queues and controls all printing jobs.
- Impact if Disabled: Printing on the local machine will be unavailable.
- Default Status: Started
- Startup Type: Automatic
- Fly's Notes: Disable if you have no printer.
Name: Problem Reports and Solutions Control Panel Support
- Short Name: wercplsupport
- Executable Name: svchost.exe
- Description: Provides support for viewing sending and deletion of system-level problem reports for the Problem Reports and Solutions control panel.
- Impact if Disabled: The sending of error reports to Microsoft will not function.
- Startup Type: Manual
- Fly's Notes: Up to you. If you always say "Don't send error report" then you may as well disable this.
Name: ReadyBoost
- Short Name: EMDMgmt
- Executable Name: svchost.exe
- Description: Provides support for improving system performance using ReadyBoost.
- Impact if Disabled: The performance improvements provided by ReadyBoost will not function.
- Default Status: Started
- Startup Type: Automatic
- Fly's Notes: ReadyBoost, ReadyBoost, ReadyBoost... oh the potential you had. I'll stick with real RAM thanks very much.
Name: Remote Access Auto Connection Manager
- Short Name: RasAuto
- Executable Name: svchost.exe
- Description: Detects unsuccessful attempts to connect to a remote network or computer and provides alternative methods for connection.
- Impact if Disabled: Users will need to manually connect to other systems.
- Startup Type: Manual
- Fly's Notes: Home users often won't use RAS but instead MSTSC or something like Citrix for accessing remote systems. This will not affect Internet browsing.
Name: Remote Registry
- Short Name: RemoteRegistry
- Executable Name: svchost.exe
- Description: Provides a mechanism to remotely manage the system registry.
- Impact if Disabled: Remote systems will be unable to connect to the local registry. Hfnetchk uses this mechanism. Disabling it can affect the patch utility's operation.
- Special Notes: Some programs require this functionality to operate.
- Startup Type: Manual
- Fly's Notes: Iffy. I'm not sure what programs would require remote registry access, but if you're paranoid you can disable this to close one more security hole.
Name: Server
- Short Name: LanmanServer
- Executable Name: svchost.exe
- Description: Allows the sharing of local resources, such as files and printers, as well as named pipe communication.
- Impact if Disabled: Resources can't be shared, RPC requests will be denied, and named pipe communication will fail. This service must be enabled on Windows Vista computers that share files or printers.
- Default Status: Started
- Startup Type: Automatic
- Fly's Notes: Solo computers on a network can safely disable this.
Name: SL UI Notification Service
- Short Name: SLUINotify
- Executable Name: svchost.exe
- Description: Provides Software Licensing activation and notification.
- Impact if Disabled: Once Vista is activated, this service isn’t always needed.
- Startup Type: Manual
- Fly's Notes: Left mine on, but I paid for Vista. May want to disable if you're not in the same boat.
Name: Smart Card
- Short Name: SCardSvr
- Executable Name: svchost.exe
- Description: Manages access to smart cards read by this computer.
- Impact if Disabled: This computer will be unable to read smart cards.
- Special Notes: If you're using a smart card reader, enable this service.
- Startup Type: Manual
- Fly's Notes: Again, smart cards are rare on home systems.
Name: Smart Card Removal Policy
- Short Name: SCPolicySvc
- Executable Name: svchost.exe
- Description: Allows the system to be configured to lock the user desktop upon smart card removal.
- Impact if Disabled: This computer may be unable to read smart cards.
- Special Notes: If you're using a smart card reader, enable this service.
- Startup Type: Manual
- Fly's Notes: See above.
Name: Superfetch
- Short Name: SysMain
- Executable Name: svchost.exe
- Description: Maintains and improves system performance over time by improving the performance of foreground applications over background applications.
- Impact if Disabled: SuperFetch will not run and applications will all run with similar priority.
- Default Status: Started
- Startup Type: Automatic
- Fly's Notes: SuperFetch has some strong advantages. I disabled it because it always seemed to tax my CPU & RAM even when Vista should be idle. I may give this another chance down the road but personally I'll upgrade to 4gb before I do.
Name: Tablet PC Input Service
- Short Name: TabletInputService
- Executable Name: svchost.exe
- Description: Enables Tablet PC pen and ink functionality.
- Impact if Disabled: Tablet ink functionality will not operate.
- Special Notes: If you don't have a tablet PC, you don't need this service.
- Default Status: Started
- Startup Type: Automatic
- Fly's Notes: Not sure why they left this on by default, but for most of us it can be disabled.
Name: Task Scheduler
- Short Name: Schedule
- Executable Name: svchost.exe
- Description: Enables a user to configure and schedule automated tasks on this computer.
- Impact if Disabled: Tasks will not be run at their scheduled times.
- Default Status: Started
- Startup Type: Automatic
- Fly's Notes: Disable if you have no tasks scheduled (note that some anti-virus or anti-spyware programs may rely on this for their scheduled scans).
Name: Telephony
- Short Name: TapiSrv
- Executable Name: svchost.exe
- Description: Provides Telephony API (TAPI) support for clients using programs that control telephony devices and IP-based voice connections.
- Impact if Disabled: The function of all dependent programs will be impaired.
- Special Notes: Only needed for modem/fax modem use.
- Default Status: Started
- Startup Type: Manual
- Fly's Notes: The broadband world mostly won't need this. VoIP applications like Skype will continue to run if this service is disabled, since those apps use TCP-encapsulated frames and not POTS signals.
Name: Volume Shadow Copy
- Short Name: VSS
- Executable Name: vssvc.exe
- Description: Manages and implements volume shadow copies used for backup and other purposes.
- Impact if Disabled: Shadow copies will be unavailable for backup and the backup may fail.
- Special Notes: Enable this service if you use Windows Backup on this desktop.
- Default Status: Started
- Startup Type: Manual
- Fly's Notes: Read the notes on the service "Microsoft Software Shadow Copy Provider" above. You should disable both of these or neither, do not disable one or the other.
Name: WebClient
- Short Name: WebClient
- Executable Name: svchost.exe
- Description: Enables Windows-based programs to create, access, and modify Internet-based files.
- Impact if Disabled: These functions will not be available.
- Default Status: Started
- Startup Type: Automatic
- Fly's Notes: This is stuff like... when you import an image from your camera using Vista's inherent software, it may ask if you want to upload the image to the web. If you use that kind of feature then leave this on; I disabled it as I'm not keen on these integration methods.
Name: Windows Backup
- Short Name: SDRSVC
- Executable Name: svchost.exe
- Description: Provides Windows Backup and Restore capabilities.
- Impact if Disabled: Windows Backup will not work.
- Special Notes: Most organizations use other methods to back up data.
- Startup Type: Manual
- Fly's Notes: Many home users do their own backups by copying or burning files. Windows Backup kinda creates images for backup purposes. Depending on your backup methods this may or may not be good to disable.
Name: Windows CardSpace
- Short Name: idsvc
- Executable Name: infocard.exe
- Description: Securely enables the creation, management, and disclosure of digital identities.
- Impact if Disabled: Some smartcard services will not work.
- Special Notes: If you use smartcards, leave this service enabled.
- Startup Type: Manual
- Fly's Notes: I'm not sure if vCards rely on this service, but for most of us you can safely disable this.
Name: Windows Defender
- Short Name: WinDefend
- Executable Name: svchost.exe
- Description: Scans your computer for unwanted software schedule scans and gets the latest unwanted software definitions.
- Impact if Disabled: Your computer will not be protected against spyware.
- Default Status: Started
- Startup Type: Automatic
- Fly's Notes: Ad-Aware FTW.
Name: Windows Error Reporting Service
- Short Name: WerSvc
- Executable Name: svchost.exe
- Description: Collects, stores, and reports unexpected application crashed to Microsoft.
- Impact if Disabled: Error Reporting will occur only for kernel faults and some types of user mode faults.
- Default Status: Started
- Startup Type: Automatic
- Fly's Notes: This is further to the "Send error report / Don't send error report" thing mentioned earlier.
Name: Windows Image Acquisition (WIA)
- Short Name: stisvc
- Executable Name: svchost.exe
- Description: Provides image acquisition services for scanners and cameras.
- Impact if Disabled: Programs that require images, such as Windows Movie Maker, won't function properly.
- Special Notes: This service is required for some scanners and cameras. If you don't have a scanner or a camera, you can disable this service.
- Startup Type: Manual
- Fly's Notes: If you manually copy movies / images from your digital recorder or camera, or don't have a scanner, you should be able to safely disable this.
Name: Windows Media Center Extender Service
- Short Name: Mcx2Svc
- Executable Name: svchost.exe
- Description: Allows Windows Media Center Extender devices to locate and connect to the computer.
- Impact if Disabled: Other devices will not be able to connect to the computer.
- Special Notes: Leave enabled if you use media center features of Vista.
- Startup Type: Disabled
- Fly's Notes: If you use Vista's Media Centre (only on Ultimate and Home Pro versions I think) and want things like your Xbox360 or PS3 to be able to remotely access VMC, leave this on.
Name: Windows Media Center Receiver Service
- Short Name: ehRecvr
- Executable Name: ehRecvr.exe
- Description: Windows Media Center Service for TV and FM broadcast reception.
- Impact if Disabled: TV and FM reception will not work.
- Special Notes: Leave enabled if you use media center features of Vista.
- Startup Type: Manual
- Fly's Notes: If you use VMC and rely on OTA-HD or FM radio signals, leave this on.
Name: Windows Media Center Scheduler Service
- Short Name: ehSched
- Executable Name: ehsched.exe
- Description: Starts and stops recording of TV programs within Windows Media Center.
- Impact if Disabled: You will be unable to record programs.
- Special Notes: Leave enabled if you use media center features of Vista.
- Startup Type: Manual
- Fly's Notes: If you use VMC at all, leave this on.
Name: Windows Media Center Service Launcher
- Short Name: ehstart
- Executable Name: svchost.exe
- Description: Starts Windows Media Center Scheduler and Windows Media Center Receiver services at startup if TV is enabled within Windows Media Center.
- Impact if Disabled: Media center software will not launch at startup.
- Special Notes: Leave enabled if you use media center features of Vista.
- Startup Type: As Needed
- Fly's Notes: If you use VMC at all, leave this on.
Name: Windows Media Player Network Sharing Service
- Short Name: WMPNetworkSvc
- Executable Name: wmpnetwk.exe
- Description: Shares Windows Media Player libraries to other networked players and media devices using Universal Plug and Play.
- Impact if Disabled: You will be unable to share Media Player libraries.
- Special Notes: Leave enabled if you use media center features of Vista.
- Startup Type: Manual
- Fly's Notes: I'm not familiar with this feature of VMC but it sounds neat. I don't use VMC so I turned this off.
Name: Windows Remote Management (WS-Management)
- Short Name: WinRM
- Executable Name: svchost.exe
- Description: Windows Remote Management (WinRM) service implements the WS-Management protocol for remote management. WS-Management is a standard web services protocol used for remote software and hardware management.
- Impact if Disabled: You will be unable to remotely manage some aspects of this Vista computer.
- Startup Type: Manual
- Fly's Notes: Paranoid users can close this pontential security hole. I disabled it as I don't remotely manage my computer.
Name: Windows Search
- Short Name: Wsearch
- Executable Name: SearchIndexer.exe
- Description: Provides content indexing and property caching for files, e-mail, and other content (via extensibility APIs). The service responds to file and e-mail notifications to index modified content.
- Impact if Disabled: Windows Explorer will not be able to display virtual folder views of items and will revert to slower item-by-item searches.
- Default Status: Started
- Startup Type: Automatic
- Fly's Notes: This is another full-time service that was taxing my hard drive during Vista's idle time. I don't search my drive enough that an index is feasible. If your drive is a mash of disorganized files then this may be a good idea, but file-by-file searches are still relatively quick.
Name: Windows Update
- Short Name: wuaserv.exe
- Executable Name: svchost.exe
- Description: Enables automatic updates to Windows Vista and other programs. Updates are automatically downloaded and installed.
- Impact if Disabled: Automatic updates will not take place.
- Special Notes: Although safe to disable, you shouldn't.
- Startup Type: Started As Needed
- Fly's Notes: Cracked users can disable this.
Name: WinHTTP Web Proxy Auto-Discovery Service
- Short Name: WinHttpAutoProxySvc
- Executable Name: svchost.exe
- Description: WinHTTP implements the client HTTP stack and provides developers with a Win32 API and COM Automation component for sending HTTP requests and receiving responses. In addition, WinHTTP provides support for auto-discovering a proxy configuration via its implementation of the Web Proxy Auto-Discovery (WPAD) protocol.
- Impact if Disabled: Proxy servers will not be automatically discovered.
- Default Status: Started
- Startup Type: Manual
- Fly's Notes: AutoProxy is handy for corporate environments but is better handled by NOC hardware. Most homes don't have a proxy and can safely disable this. I am not sure of how common WinHTTP is in the world's applications but I would suspect it's not very widespread... it sounds like a back alley to jump from layer 3 to layer 6/7.
Name: WLAN AutoConfig
- Short Name: Wlansvc
- Executable Name: svchost.exe
- Description: Automatically configures WiFi (802.11) network adapters.
- Impact if Disabled: You will have to manually configure wireless networking.
- Startup Type: Manual
- Fly's Notes: If you have no wireless card then you can disable this.
Name: Workstation
- Short Name: LanmanWorkstation
- Executable Name: svchost.exe
- Description: Provides network connections and communications using the Microsoft Network services.
- Impact if Disabled: The computer will be unable to connect to remote Microsoft Network resources, including other computers and network printers.
- Default Status: Started
- Startup Type: Automatic
- Fly's Notes: If your computer is alone on the network, you can safely disable this.
