List of Windows XP Services

[Neo]

6to4
IPv6 is designed to solve many of the problems of the current version of IP (known as IPv4) with regard to address depletion, security, auto configuration, extensibility, and more.
Recommend: Automatic

Alerter
Notifies users of administrative alerts. Not required under normal circumstances.
Recommend: Disabled.

Application Layer Gateway Service
Provides support for 3rd party plug-ins for Internet Connection Sharing/Internet Connection Firewall. Required if using Internet Connection Sharing / Internet Connection Firewall (zone alarm, etc) to connect to the Internet.
Recommend: Automatic

Application Management
Used for Assign, Publish and Remove software services. If you can not modify your software installation of certain applications, put this service in to Automatic.
Recommend: Automatic

ASP.NET State Service
Provides support for out of process session state. If this service is stopped then the requests will be not be processes. If this services is disabled, any service that explicitly depends on it will fail to start.
Recommend: Automatic if you use asp.net programming

ATI Hotkey POLLER
This service is installed if you update to the latest ATI video card drivers. It provides the ability to hot key your display settings for what ever reason you would need this feature. I do not change them often, so there is no point in having this service "always running."
Recommend: Disable

ATI Smart
This service is installed if you update to the latest ATI video card drivers. It provides the ability to test your particular configuration for compatibility issues and stability issues. The location is also in the ATI display properties control panel. After testing once, I have found no reason to continue to have this service in memory.
Recommend: Disable

ATI X10 Device Network Service
This service is required for the remote control to work with your system. If you do not use the remote control then you can disable this service. If you do use the remote control then keep this on Automatic.
Recommend: Automatic (if you want to use the remote)

Automatic Updates
Used to check up to see if there is any critical or otherwise updates available for download. Take note: Manual update via Windows Update web site Requires Cryptographic Services to be running.
Recommend: Automatic

Background Intelligent Transfer
Service Used to transfer asynchronous data via http1.1 servers.
Recommend: Disabled

BrSplService
Brother Spooling Service
Recommend: Leave Alone if you have a brother printer.

C-DILLACDAC11BA
"C-Dilla" is the name of a company that was purchased by Macrovision. The previous company, and now Macrovision, use the C-Dilla technology to provide software activation services and CD Key verification services for anti-piracy reasons. This technology is now sold by Macrovision as SafeCast and is bundled with many products. It also increases the ammount of popups you receive on your computer.
Recommend: Disable (spyware/adware)

ClipBook
Used to store information (cut/paste) and share it with other computers.
Recommend: Disabled

COM+ Event System
You will receive, in the Event Log, a entry from "DCOM" complaining about not having this service running if Disabled. Required for System Event Notification. Required if you want to run BootVis with the "optimize system" option.
Recommend: Disabled

COM+ System Application
You will receive, in the Event Log, a entry from "DCOM" complaining about not having this service running if Disabled. Required for System Event Notification.
Recommend: Disabled

Compaq Advisor
Compaq Advisor is an application that makes Compaq Presario PCs smarter. Compaq Advisor provides relevant and timely information about: Your PC's functionality, Recommended enhancements for your PC, Offers related to your computing interests, Proactive notification of potential product or service issues. This service is quite annoying.
Recommend: Disable

Computer Browser
Maintains a listing of computers located on the network. This service is not needed on a standalone system.
Recommend: Disabled

Content Monitoring Tool
Hot deals content updated notifier. This is what it says when you check the service. Says it has no dependencies. I'm still trying to figure out what installs it I think its Kazaa though.
Recommended: Disable

Creative Service for CDROM Access
This service only exists for those of us with Creative soundcards and software. I found it nothing but annoying and later I uninstalled all non-driver related Creative software entirely. If you use their Disk Detector (for some bizarre reason) leave it. Otherwise, disable it. A word of warning, Creative installs Disk Detector by default and sets it to Automatic. Make sure to disable it in the Creative menu first before killing it here.
Recommend: Disable

Crypkey License
This service is installed if you use "Swish" (swishzone.com). It is required to start up the program, otherwise an error about writing to a memory location pops up. Set this to Disabled until you need it. Note: If set to "Manual," this service will NOT start on it's own (thus the error message).
Recommend: Disable

Cryptographic Services
Mainly, it confirms signatures of Windows files. You may always get a dialog box complaining about uncertified drivers if this is Disabled. Required for Windows Update to function in manual mode.
Recommend: Automatic

DefWatch
This service is installed with Norton. Virus Definitions Daemon. Unless you do not want your Virus Scanner to work properly, keep this going.
Recommend: Automatic

DHCP Client
Receives a Dynamic IP address from your DHCP server. Required for ICS/internet client and also if you run IPSEC, disable on a standalone system or one that has a static IP address.
Recommend: Automatic

Directway Webcast
Part of a satellite network. Need to be enabled to use this service. no dependancies. Dependant on QoS RSVP, IPSEC, and Upload Manager.
Recommend: Automatic

Diskeeper
Controls the Diskeeper service.
This service exists only for those of us who use the Diskeeper defragmentation software as opposed to the Windows pre-installed defragmenter. Set this to Manual.
Recommend: Disable

Distributed Link Tracking Client
Maintains links with NTFS files within your computer or across a domain.
Recommend: Disabled

Distributed Transaction Coordinator
Takes care of transactions that span multiple resources. Required if using Message Queuing.
Recommend: Disabled

DNS Client
Resolves DNS names and Active Directory domain controller functions. This service is not needed, but if it makes you happy to have it running, go ahead. Required if using IPSEC.
Recommend: Disabled

Error Reporting Service
Calls home to Microsoft when application errors occurs. A waste of memory and resources.
Recommend: Disabled

Event Log
Allows Event Log messages from applications to be viewed in Event Viewer. Always helpful to check out the Event Log to see what problems with applications are popping up that is "hidden" from the normal user. Windows Management Instrumentation also Requires Event Log Service to be running.
Recommend: Automatic

Fast User Switching Compatibility
Unless you have many users on a system (more than 3), you probably do not even need this service to be running.
Recommend: Disabled

Fax Service
Not installed by default, but if needed, you may install it later off of the WinXP CD.
Recommend: Leave not installed or Disabled

FTP Publishing Service
Not installed by default, but if needed, you may install it later off of the WinXP CD. Used to provide a FTP server on your network.
Recommend: Leave not installed or Disabled

Help and Support
Required for Microsoft online help documents.
Recommend: Automatic

(HID) Human Interface Device Access
Used for specific peripherals.
Recommend: Automatic

IIS Admin
Not installed by default, but if needed, you may install it later off of the WinXP CD. Usually used in conjunction with local web site or FTP servers.
Recommend: Leave not installed or Disabled unless you really want it.

IMAPI CD-Burning COM Service
Used for that cool "drag and drop" CD burn capability. You will need this service to burn CD's.
Recommend: Automatic

Indexing Service
This has always and forever been a major resource hog. Remove the function via the "Add/Remove Programs" icon in the control panel (Windows Setup Programs.)
Recommend: Disabled or even better, uninstalled

Intel ® NMS
Intel ® NIC management service. Component that controls the Intel NIC cards.
Recommend: Automatic

InteractiveLogon
This service is installed with Windows XP PowerToys. Uses 1.4 MB to 2 MB EACH! This service will fire off at least 2 (system and user) instances of this process.
Recommend: Disable

Internet Connection - Firewall (ICF)
Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network.
Recommend: Automatic

Internet Connection Sharing (ICS)
Used to allow multiple computers on your network to access the Internet via only one account.
Recommend: Disabled

IPSROBOT.LK Services
May be required on some domains, but the "average" user will not need this.
Recommend: Disabled

LEXBCE SERVER
Installed by Lexmark USB printer you may get the error"microsoft activesync causing instant pc reboot upon USB connection." This is caused by this service.
Recommend: Disable

Logical Disk Manager
Vital to run the Disk Management MMC console for dynamic volumes.
Recommend: Disabled

Logical Disk Manager Administrative Service
Vital to run the Disk Management MMC console for dynamic volumes.
Recommend: Disabled

Machine Debug Manager Service
Manages local and remote debugging for Visual Studio debuggers
Recommend: Disable unless you use a visual studio like VB 6 enterprise or .NET.

McAfee Firewall
This service is only for those that use McAfee Firewall software. It's best to set this to Manual and then open it when you plan on using the internet, otherwise it just eats memory. Be sure to disable automatic startup within Firewall itself before resetting the service configuration.
Recommend: Disable

McShield
Installed by, McAfee on Access Scanner. This service is also only for those that use McAfee Virus Scan software. McAfee usually runs a large number of unecessary processes in the background, even when not connected to the internet or when McAfee is closed. It's best to set this to Manual and then open McAfee Virus Scan when you plan on using the internet or are handling potentially hazardous files. Recommend: Disable

Media Manager Indexer
Part of MS Visual InterDev, Media Manager is an easy media file management system that works in conjunction with Windows Explorer. The Media Manager Indexer is a program that indexes all the information about your media files and puts it into a database. Depends on Remote procedure call. If you don't use this feature then disable it.
Recommend: Automatic

Message Queuing
Not installed by default, but if needed, you may install it later off of the WinXP CD. May be used on some domains, but the "average" home user will never need this service.
Recommend: Leave not installed or Disabled

Message Queuing Triggers
Not installed by default, but if needed, you may install it later off of the WinXP CD. Required if you use Message Queuing service.
Recommend: Leave not installed or Disabled

Messenger
Sends messages between clients and servers. Not needed under normal "home" conditions.
This has nothing to do with MSN Messenger.
Recommend: Disabled

MS Software Shadow Copy Provider
Used in conjunction with the Volume Shadow Copy Service. MS Backup uses these services. You will receive, in the Event Log, a entry complaining about not having this service running if Disabled.
Recommend: Disabled

Net Login
Used for logging onto a Domain Controller.
Recommend: Disabled

NetMeeting Remote Desktop Sharing
Enables a user to access your computer using NetMeeting.
Recommend: Disabled

Network Connections
Required for managing network connectivity. Set to Disabled if you have no network or you do not toy with the configurations a lot.
Recommend: Automatic

Network DDE
Unless you use remote ClipBook, Disable it.
Recommend: Disabled

Network DDE DSDM
Same as above.
Recommend: Disabled

Network Location Awareness (NLA)
Required for use with the Internet Connection Sharing Service (server only.)
Recommend: Disabled

Norton AntiVirus Auto-Protect Service
The Auto-Protect options enable you to customize the automatic protection feature of NAV. This feature works continuously in the background to find and repair viruses
Recommend: Automatic

Norton Unerase protection
UnErase Wizard helps you recover files that are deleted from the standard Windows Recycle Bin. Although UnErase Wizard can recover files that were not first protected with Norton Protection, enable Norton Protection to ensure the successful recovery of all deleted files. You can search for a deleted file by its file name and by words that you think the file may contain. This is especially useful if you cannot remember the file name, but you do remember its contents. This service is almost useless, its a waste of resources and space.
Recommend: Disable

NT LM Security Support Provider
Not needed unless you are running Message Queuing or Telnet server.
Recommend: Disabled unless needed.

Nvidia Driver Helper Service
If a system is using an Nvidia 3-D graphics processor video card with the latest XP drivers from Nvidia, your users may notice that their systems take a long time to shut down. They may be encountering a problem caused by a service called Nvidia Driver Helper Service. This service has problems closing properly, yet doesn't provoke Windows XP to display the Wait, End Task, Or Cancel dialog box. The service isn't really necessary, so you can change its Startup Type setting from Automatic to Manual or Disable in the Services console.
Recommend: Disable

Performance Logs and Alerts
Collects performance data on a schedule and sends the information to a log or triggers an alert.
Recommend: Disabled

Plug and Play
The heart and soul of the Plug and Play environment. I do not recommend to disable this service, but if you want to, you are on your own. Take note: UPnP is NOT related to PnP. UPnP is used for connectivity on networks via TCP/IP to devices, such as scanners or printers. Your sound card is PnP. Do NOT Disable Plug and Play service.
Recommend: Automatic

PML Driver HPZ12
All in One office jet 6110xi installed with the All In One printers. So far as I can tell this is needed for these printers.
Recommend: Automatic

Portable Media Serial Number
Retrieves serial numbers from portable music players connected to your computer.
Recommend: Disabled

Print Hardware Detection
This is installed by HP printers. I wouldn't recommend disabling this service unless you don't use your printer. At all.
Recommend: Automatic

Print Spooler
Queues up print jobs for later printing. This service is Required if you have printers, even if they are network printers
Recommend: Automatic

Protected Storage
Allows for the saving of local passwords or even web sites information (AutoComplete.) If you enjoy having your passwords saved in applications like Outlook or Dial up networking, set this service to Automatic.
Recommend: Automatic

QoS RSVP
Provides traffic control on a network using IPSROBOT.LK and applications that support QoS, plus have an adapter that supports it. The QoS Packet Driver is installed by default on any TCP/IP connections. I have also read that this adds about 20% overhead to your network bandwidth.
Recommend: Disabled

Remote Access Auto Connection Manager
Creates a connection to a network when a program requests a remote address.
Recommend: Automatic

Remote Access Connection Manager
Creates a network connection. This service is Required if you use Internet Connection Sharing. This service may also be Required for your Internet connection.
Recommend: Automatic

Remote Desktop Help Session Manager
Manages and controls Remote Assistance.
Recommend: Disabled

Remote Procedure Call (RPC)
This service is rather Vital. Just about everything depends on this service to be running. This is also the only service that you can not disable via the Services MMC.
Recommend:Automatic.

Remote Procedure Call (RPC) Locator
Manages the RPC name service database.
Recommend: Automatic.

Remote Registry Service
This is one of those not needed services.
Recommend: Disabled

Removable Storage
Used for managing removable media. Disable this service if you do not have items like tape backup devices, etc.
Recommend: Disable

RIP Listener
Not installed by default, but if needed, you may install it later off of the WinXP CD.
Recommend: Leave not installed or Disabled

Routing and Remote Access
Not installed by default, but if needed, you may install it later off the WinXP CD
Recommend: Leave not installed or Disabled

Script blocking Service
Script Blocking stops script-based viruses A script is a list of instructions that can be executed without user interaction. Scripts can be opened with text editors or word processing programs, so they are very easy to change. Script Blocking detects Visual Basic and Java script-based viruses without the need for specific virus definitions. It monitors the scripts for virus-like behavior and alerts you if it is found. Installed by Norton Anti Virus
Recommend: Automatic

Secondary Logon
Enables starting processes under alternate credentials.
Recommend: Disabled

Security Accounts Manager
Like Protected Storage, it saves security information for local users. This service is Required for IIS Admin.
Recommend: Disabled unless needed.

Server
Used for file and print sharing from your computer or if you use Message Queuing. Workstation is needed to connect to another computer that has the files you are looking for.
Recommend: Automatic

Shell Hardware Detection
Used for the auto play of devices like memory cards, etc. Also, set to Automatic if you are experiencing problems
with laptop docking stations.
Recommend: Automatic

Simple Mail Transport Protocol (SMTP)
Not installed by default, but if needed, you may install it later off of the WinXP CD. Supports the use of a local (outbound) e-mail server.
Recommend: Leave not installed or Disabled

Smart Card
Supports the use of a Smart Card for local or network computer authentication. If you do not have a "Smart Card," you do not need this service running.
Recommend: Disabled

Smart Card Helper
Supports the use of a Smart Card for local or network computer authentication. If you do not have a "Smart Card," you do not need this service running.
Recommend: Disabled

SNMP Service
Not installed by default, but if needed, you may install it later off of the WinXP CD. Supports the use of networking equipment that use SNMP as a mode of management.
Recommend: Leave not installed or Disabled

SNMP Trap Service
Not installed by default, but if needed, you may install it later off of the WinXP CD. Supports the use of networking equipment that use SNMP as a mode of management.
Recommend: Leave not installed or Disabled

Speed Disk
This is installed by Norton System Works. Speed Disk is supposed to deccrease the ammount of time it takes to boot and run windows applications. Windows builtin degrag does a better job than this program. This service is required to run Speed Disk.
Recommend: Disable

SSDP Discovery Service
Used to locate UPnP devices on your home network. Used in conjunction with Universal Plug and Play Device Host, it detects and configures UPnP devices on your home network. Take note: UPnP is NOT related to PnP. UPnP is used for connectivity on networks via TCP/IP to devices, such as scanners or printers. Your sound card is PnP. Do NOT Disable Plug and Play service.
Recommend: Disabled

Symantec Event Manager
The NAV Event Manager receives information from all registered events. It is the middleman that ensures that the information is then sent to the Log Viewer to be processed and displayed as part of the Activity Log Report
Recommend: Automatic (You can disable this and have Norton fucntion fine.)

Symantec Password Service
Added to NAV 2003 is the option to enable password protection for accessing Options. This provides another layer that a virus or hacker would need to go through to disable modules in NAV, such as Auto-Protect or Email Scanning. It also allows administrators to control who can change options in the program.
Recommend: Automatic (This isn't an essental service and you can disable it if you wish.)

Symantec Proxy Services
Proxy Services, for example, Symantec Email Proxy is required to manage Norton AntiVirus (NAV) email scanning feature.
Recommend: Automatic

System Event Notification
Used in conjunction with COM+ Event System, this service notifies particular services when system events, such as logon and power events occurs. You will receive, in the Event Log, a entry complaining about not having this service running if Disabled.
Recommend: Disabled

System Restore Service
Creates system snap shots or restore points for returning to at a later time. This is the OTHER service that is a massive resource hog.
Recommend: Automatic if resources are not an issue

Task Scheduler
This service is used to schedule maintenance, MS Backup sessions or maybe even Auto Update. Some third party software may require this service to be active for automated functions, such as Virus Scanners, system maintenance tools, and Automatic patch/driver lookups.
Recommend: Disabled

TCP/IP NetBIOS Helper
Service Legacy support for NetBios over TCP/IP. If your network does not use NetBios, disable this function.
Recommend: Disabled

TCP/IP Printer
Server Not installed by default, but if needed, you may install it later off of the WinXP CD. Used for setting up a local UNIX print server. If you do not need this function, leave it uninstalled.
Recommend: Leave not installed or Disabled

Telephony
Controls telephony devices on the local computer. This service is Required for dial-up modem connectivity.
Recommend: Disabled, Automatic if you require dial-up connectivity

Telnet
Allows remote login to the local computer via the telnet function.
Recommend: Disabled

Terminal Services
Allows remote login to the local computer. This service is Required for Fast User Switching, Remote Desktop and Remote Assistance.
Recommend: Disabled

Themes
Used to display all those pretty new XP themes and colors on your desktop. If you are memory conscious and do not care about the "new" XP look, disable this service to save RAM.
Recommend: Disabled, unless you like the new xp look.

Uninterruptible Power Supply
Windows Update also has a "patch" for this service.
Recommend: Disabled

Universal Plug and Play Device Host
Used in conjunction with SSDP Discovery Service, it detects and configures UPnP devices on your home network. Take note: UPnP is NOT related to PnP. UPnP is used for connectivity on networks via TCP/IP to devices, such as scanners or printers. Your sound card is PnP. Do NOT Disable Plug and Play service.
Recommend: Disabled

Upload Manager
As with BITS, this service manages file transfers between clients and servers on the network. This service is NOT required for basic File and Print sharing.
Recommend: Disabled

Volume Shadow Copy
Used in conjunction with the MS Software Shadow Copy Provider Service. MS Backup uses these services. You will receive, in the Event Log, a entry complaining about not having this service running if Disabled.
Recommend: Disabled

WAN Miniport ATW
Required if you use AOL for internet. If you don't use AOL then uncheck this.
Recommend: Automatic

WebClient
For security reasons, I recommend for this service to be Disabled.
Recommend: Disabled

Windows Audio
This service is Required if you wish to hear any audio at all. If your computer does not have a sound card, Disable this service.
Recommend: Automatic

Windows Image Acquisition (WIA)
Used for some scanners and cameras.
Recommend: Automatic

Windows Installer
This service is required for software applications that install using MSI files.
Recommend: Automatic

Windows Management Instrumentation
This service is Required if you want to see the "Dependencies" tab in service configuration and you want everything to go smoothly.
Recommend: Automatic

Windows Management Instrumentation Driver Extension
Not as vital as Windows Management Instrumentation, but I recommend leaving this service.
Recommend: Automatic

Windows Time
Automatically sets your clock by contacting a server on the Internet. Great idea if your network is always connected to the Internet, but otherwise, the Event Log fills up with "can not find server" messages.
Recommend: Disabled

Wireless Zero Configuration
Automatic configuration for wireless network devices. If you do not have any wireless network devices in use, Disable this service.
Recommend: Disabled

WMDM PMSP Service
Retrieves the serial number of any portable music player connected to your computer
Recommend: Disable

WMI Performance Adapter
Another service not needed.
Recommend: Disabled

Workstation
Used to connect local computer to remote computers. Examples: Internet connectivity and local File and Print sharing. Many services depend on Workstation to be functioning. Leave it on Automatic.
Recommend: Automatic

World Wide Web Publishing Service
Not installed by default, but if needed, you may install it later off of the WinXP CD. Used for setting up a local web server.
Recommend: Leave it Uninstalled or Disabled.