• Embed Doc
  • Copy Link
  • Readcast
  • Collections
  • 3
    CommentGo Back
Download
 
Version 1.0June 15, 2005
 
Windows XP services that can be disabled
By Scott Lowe
One of the most effective ways to secure a Windows workstation is to turn off unnecessary services. This reference sheet lists the Windows XP SP 2services, describes each service's function, specifies whether you can safely disable the service, and outlines the ramifications of disabling the service.The list assumes the machines is running Windows XP SP2 in a corporate network environment. The list offers one of the following three possibilities forsafely disabling each service:
•
 
YES
= You can disable the service without causing any problems.
•
 
MAYBE
= The computer's role dictates whether you should or should not disable the service--read the
special considerations 
for furtherinformation.
•
 
NO
= The service is critical to proper Windows operation and should not be disabled.
Service Description SafelyDisable?Ramifications if disabled SuggestedsettingSpecialConsiderations
Alerter
Notifies selected users and computers ofadministrative alerts
Yes
Programs that use administrativealerts will not receive them.
DisableApplicationLayerGateway
Provides support for application-levelprotocol plug-ins and enablesnetwork/protocol connectivity
Maybe
Programs that rely on this service,such as MSN Messenger andWindows Messenger will notfunction.
Enable
Only enable when usingthe Windows firewall oranother firewall. Failureto do so can result in asignificant security hole.
ApplicationManagement
Processes installation, removal, andenumeration requests for Active DirectoryIntelliMirror group policy programs
Yes
Users will be unable to install,remove, or enumerate anyIntelliMirror programs.
DisableAutomaticUpdates
Enables the download and installation ofcritical Windows updates
Yes
The operating system cannotautomatically install updates, butcan still be manually updated at theWindows Update Web site.
Enable
Automatic updates helpkeep your computercurrent. If you do disablethe service, performregular, manual updates.
BackgroundIntelligentTransfer
Transfers data between clients andservers in the background
Yes
Features such as Windows Updatewill not work properly.
Disable
Enable this services ifyou enable AutomaticUpdates.
Page 1
Copyright ©2005 CNET Networks, Inc. All rights reserved.For more downloads and a free TechRepublic membership, please visithttp://techrepublic.com.com/2001-6240-0.html 
 
 
Windows XP services that can be disabled 
Service Description Safely Ramifications if disabled Suggested SpecialDisable? setting Considerations
ClipBook
Enables ClipBook Viewer to storeinformation and share it with remotecomputers
Yes
ClipBook Viewer will not be able toshare information with remotecomputers.
DisableCOM+ EventSystem/System Application
Allows management of ComponentServices by providing automaticdistribution of events to subscribing COMcomponents
No
System Event Notification stopsworking, which means that logonand logoff notifications will not takeplace. Other applications, such asVolume Snapshot service, will notwork correctly.
EnableComputerBrowser
Maintains an up-to-date list of computerson your network, and supplies the list toprograms that request it. The ComputerBrowser service is used by Windows-based computers that need to viewnetwork domains and resources.
Yes
Your computer will be unable tolocate other Windows computers onthe network
Enable
Enable this service, if youneed to share files withother Windowscomputers.
Cryptographicservices
Provides three management services:Catalog Database Service, whichconfirms the signatures of Windows files;Protected Root Service, which adds andremoves Trusted Root CertificationAuthority certificates from this computer;and Key Service, which helps enroll thiscomputer for certificates
No
The associated managementservices will not function properly.
Enable
Required if you use theAutomatic UpdatesWindows service; Alsoused by other Windowsservices, such as TaskManager.
DHCP Client
Allows the system to automatically obtainIP addressing information, WINS serverinformation, routing information, and soforth; is required to update records inDynamic DNS
Maybe
The system will be unable to obtainan IP address, WINS information,and the like, from a DHCP serverand will need to be configured witha static address.
Enable
You can disabled thisservice if you do not useDHCP.
Page 2
Copyright ©2005 CNET Networks, Inc. All rights reserved.For more downloads and a free TechRepublic membership, please visithttp://techrepublic.com.com/2001-6240-0.html 
 
Windows XP services that can be disabled 
Service Description Safely Ramifications if disabled Suggested SpecialDisable? setting Considerations
DistributedLink TrackingClient
Ensures that shortcuts and OLE linkscontinue to work after the target file isrenamed or moved by maintaining links inthe file system
Yes
Link tracking will be unavailable.Users on other computers won't beable to track links on this computer.
DisableDistributedTransactionCoordinator
Coordinates transactions that spanmultiple resource managers, such asdatabases, message queues, and filesystems
Yes
Distributed transactions will notoccur.
DisableDNS Client
Resolves and caches DNS names,allowing the system to communicate withcanonical names rather than strictly by IPaddress
No
The system will be unable toresolve a name and will be able tocommunicate only via IP address. Aclient may be unable tocommunicate with its domaincontroller.
Enable
Stopping this service willresult in the inability forthe computer to resolvenames to IP addresses.
ErrorReporting
Collects, stores, and reports unexpectedapplication crashes to Microsoft
Yes
Error Reporting will occur only forkernel faults and some types ofuser mode faults.
DisableEvent Log
Allows event log messages to be viewedin Event log to assist in problemresolution
No
Administrators won't be able to viewlogs, including the security log,increasing the difficulty ofdiagnosing problems and detectingsecurity breaches.
EnableFast UserSwitchingCompatibility
Enables management for applicationsthat require assistance in a multiple userenvironment
Yes
Fast User Switching will beunavailable.
Disable
Doesn't work in domainenvironments anyway.
Help andSupport
Enables Help and Support Center to runon this computer
Yes
The Help and Support Center willbe unavailable.
EnablePage 3
Copyright ©2005 CNET Networks, Inc. All rights reserved.For more downloads and a free TechRepublic membership, please visithttp://techrepublic.com.com/2001-6240-0.html 
of 00

Leave a Comment

You must be to leave a comment.
Submit
Characters: ...
littleredrabbit

Thanks, This article helped alot , But, to have access to Automatic Updates I had to leave Background Intelligent Transfer and Event Log Enabled. But I disabled everything else according to this article, and man, is my computer running faster. It's running faster than the day I bought it. Thanks to whoever uploaded this! My computer is like new! God Bless.

reply06 / 11 / 2009
bboyse

Hoi, i will like to arrive like you, more then...more better...anyway, i just a little boy learning, ciao,

reply06 / 29 / 2008
peekaboo2

helpful doc - thanks!

reply06 / 27 / 2007
You must be to leave a comment.
Submit
Characters: ...