| Service Name |
Description and Purpose |
Recommended Setting |
| Alerter |
Notifies selected users and computers of administrative alerts. Normal users won't need this. |
Disabled |
| Application Layer Gateway Service |
Enables support for programs that need Internet Connection Sharing. Zonealarm is one such program. If you use a software firewall or a third party plugin that requires internet connection, you will need this service. |
Automatic |
| Application Management |
You need this service to change/remove software services and program installations. |
Automatic (Manual setting possible but may cause certain installation tasks to fail) |
| Automatic Updates |
Windows XP update won't function without this service. If you use Windows Update server, you must have this service set to automatic. This does not mean that Automatic Updates are turned on. This is just the base service. |
Automatic |
| Background Intelligent Transfer |
Enables data transfer from HTTP1.1 servers. Windows Update website may refuse to function if this is disabled. |
Manual (set to Automatic if the update website reports error) |
| ClipBook |
Enable sharing of clipboard information with other computers. Highly unnecessary. |
Disabled |
| COM+ Event System |
Base service for System Event Notification. Average users don't need this, but it is useful for advanced users trying to track down an error in their systems. The Event Log will report an error if this service is disabled, don't worry. |
Disabled |
| COM+ System Application |
Used in conjunction with COM+ Event System service. If you have disabled that one, this service is useless. |
Disabled |
| Computer Browser |
Provides a list of computers in your network. Unless your machine is a part of a separate network system (such as in your office on-campus or a home network of several machines) you won't need this. |
Disabled |
| Cryptographic Services |
Used to check certifications of Windows drivers. If you have this service disabled, you will end up getting frustrating amounts of uncertified driver warnings and Windows Update may refuse to launch. |
Automatic |
| DCOM Server Process Launcher |
Base service for DCOM functionality. Added with Service Pack 2. If you want to use Windows XP defragger, you need this one set to Automatic. If you are a resource maniac you can elect to set this one to Manual but be warned that you will have to start this service by hand as it won't launch when set to Manual. |
Automatic (Manual if you don't mind launching it yourself when you need it) |
| DHCP Client |
Connects to your DHCP server and obtains a Dynamic IP address. Internet Connection Sharing systems need this. If your machine uses a static IP or is a standalone system, you may disable this service. |
Automatic |
| Distributed Link Tracking Client |
Keeps the links of NTFS files on your machine and NTFS files in your domain intact. Pretty much useless unless you use active links to files on other machines in your local area network (who does?). |
Disabled |
| Distributed Transaction Coordinator |
Manages the transactions with files on several different sources. Required only if you use Message Queuing (MSMQ) service. |
Disabled |
| DNS Client |
Service used to resolve DNS names and use domain controller functions. If you are using IP Security Policy service (IPSEC), keep this, otherwise disable it. |
Disabled |
| Error Reporting Service |
Service to report application errors to Microsoft. Sounds way more useful than it actually is. Don't waste your resources on this one. |
Disabled |
| Event Log |
Provides access to application messages in Event Viewer. This one's useful if you'd like to figure out what is going on during the startup process of XP. This process is also a requirement for Windows Management Instrumentation service. |
Automatic |
| Fast User Switching Compatibility |
If you share the same machine with multiple users, this process will enable user switching without logging out. Not recommended unless there is a queue of family members behind you waiting to check their emails. |
Disabled |
| Fax Service |
This one is not installed by default. It's available on the XP installation CD. Install it only if you need it. |
User discretion |
| FTP Publishing Service |
This one is not installed by default either. It resides on the XP CD. If you want to use your machine as an FTP server on your network, you will need this service. |
User discretion |
| Help and Support |
Your key to Microsoft online help documentation. If you disable this one you will end up getting numerous warnings and errors whenever you try to do anything remotely connected to the Microsoft online help system. Save yourself some headache and leave it on. |
Automatic |
| HTTP SSL |
Coming with Service Pack 2, this is the service for secure hypertext transfer protocol (HTTPS) using Secure Socket Layer (SSL)technology. If disabled this will cause SSL dependent services/applications fail. |
Automatic |
| Human Interface Device (HID) Access |
Enables access to several peripheral devices including but not limited to USB devices, such as USB mice, USB keyboards, etc. |
Automatic |
| IIS Admin |
You won't normally see this as it's not installed by default. If needed, it's on the XP CD. Used for administration of local web and FTP servers. |
User discretion |
| IMAPI CD-Burning COM Service |
If you are using the drag and drop CD burning feature of Windows XP, keep this on. Not necessary if you do all your burning through third party applications. |
Automatic |
| Indexing Service |
Claimed to be very helpful for local searches but for that it consumes a HUGE amount of resources. This is the very first service to be disabled or even removed from the machine (via the Add/Remove Programs -> Add/Remove Windows Components in the Control Panel). |
DISABLED |
| Internet Connection Firewall (ICF) |
Small changes with SP2, as this one is now listed as Windows Firewall/Internet Connection Sharing (ICS). Windows Firewall and Internet Connection Sharing Service. You need this if you are utilizing services that require this service running. If you use another firewall and don't need ICS service you may try to disable this. Just like Automatic Updates, running this service does not necessarily mean that the Windows Firewall is active. I'd recommend to keep this on even if you don't use the Firewall. |
Automatic |
| Internet Connection Sharing (ICS) |
See above. Allows all computers on your local network to access the Internet via a single account. |
see above |
| IPSEC Services |
IP Security Protocol. Required for some advanced user services. If you don't know what IP security protocol is good for, you don't need this service. |
Disabled |
| Logical Disk Manager |
If you are dealing with dynamic volumes, you need this to open the Disk Management MMC console. |
Disabled |
| Logical Disk Manager Administrative Service |
Part of the service above. |
Disabled |
| Message Queuing |
This is not installed by default. Finds very limited usage in hands of a normal user. I say disable. If you absolutely need this service, you will have to start a couple of other services required for this one (like Distributed Transaction Coordinator service). |
User discretion |
| Message Queuing Triggers |
If you use Message Queuing service, you will need this one too. |
see above |
| Messenger |
This one's often confused with MSN Messenger. This is NOT MSN MESSENGER service. This one merely sends messages between clients and servers. Chances are you won't EVER need this one. Then again, if you uninstall the application XP will bug you, so just disable and forget about it. |
Disabled |
| MS Software Shadow Copy Provider |
Backup Service utilizes this one. If you use Volume Shadow Copy Service, enable this one too. If you disable this one you may see a warning in the Event Log, never mind that. |
Disabled |
| Net Logon |
Service to log on to a Domain Controller. Useless if your machine is not part of a domain (such as student machines domain at a college). |
Disabled |
| NetMeeting Remote Desktop Sharing |
Allows remote access to your computer using NetMeeting. Unless you really need this, don't activate this service. |
Disabled |
| Network Connections |
Service to network connectivity management. Not used in a standalone machine. If you do not mess with network settings often you can disable this one (you will have to remember to turn it back on if you need to change the smallest something pretaining to network settings). Won't hurt to leave it on though. |
Automatic |
| Network DDE |
Part of ClipBook service, hence useless as well. |
Disabled |
| Network DDE DSDM |
Ditto. |
Disabled |
| Network Location Awareness (NLA) |
Not needed unless your machine is the server that runs the Internet Connection Sharing Service in your network. |
Disabled |
| NT LM Security Support Provider |
Use this only if your machine is a Message Queuing Server or a Telnet server. Otherwise disable. |
Disabled |
| Nvidia Driver Helper Service |
Now, this one's not a native XP service but since there are many users that have problems with this service I decided to add it here. If your system has an Nvidia 3-D graphics card installed you will find this one among your services. If you experience system hangs during shutdowns or shutdowns taking minutes, this service is most probably the culprit. Doesn't matter what anyone else claims, YOU DON'T NEED THIS. |
Disabled |
| Performance Logs and Alerts |
Service that collects performance data on a set schedule and logs the information. It can invoke alerts if set to do so. Useful for a few people. I am not among them. |
Disabled |
| Plug and Play |
If there are a handful of services that you should NOT disable, this is one of them. If you choose to do so, you can still disable this but Windows XP will be clueless most of the time thereafter. Leave this on Automatic. |
Automatic |
| Portable Media Serial Number |
If you connect a portable media device (read: music player) to your machine, this service logs its serial number. That way you will end up owning a nice list of numbers to look at and wonder, why? |
Disabled |
| Print Spooler |
Used for print queuing. If you have a printer installed in Windows XP (local or network) set this to Automatic. |
Automatic |
| Protected Storage |
This service saves local passwords and AutoComplete entries. If you want your passwords saved in applications, so you won't have to type them again (e.g. Dialup Network dialog) use this service. The information is secure but if you're a security freak better leave this alone. |
Automatic |
| QoS RSVP |
QoS packet driver service for controlling the traffic on a network. The network must use IPSEC protocol and run applications that support QoS, plus have an adapter that supports it. Hopefully you got it by now: YOU DON'T NEED THIS unless absolutely necessary. For some odd reason this service is installed by default if you setup any TCP/IP connection. So, you have this running. Disable it. |
Disabled |
| Remote Access Auto Connection Manager |
If a program asks for a remote address this service connects your machine to the requested network automatically. Normally you don't need this. If an application complains about not being able to connect to some network, enable this. Otherwise you can keep it disabled. |
Manual would be a good choice here |
| Remote Access Connection Manager |
Used in conjunction with the service above to create a network connection. This service is required if you use Internet Connection Sharing. If you lose your internet connectivity when you disable this service, turn it back on. Otherwise you may leave it disabled. |
Manual would be a good starting point |
| Remote Desktop Help Session Manager |
Remote Assistance tasks need this service to function properly. If you do not use remote help, disable it. |
Disabled |
| Remote Procedure Call (RPC) |
If there is one service that you MUST have, this is it. It's the heart of XP and pretty much everything depends on this service. That's the main reason why you cannot disable it here. If you want to disable this one, uninstall Windows XP while you're at it, cuz it won't function without this service anyway. |
Automatic. DON'T TOUCH IT! |
| Remote Procedure Call (RPC) Locator |
Service for the RPC name service database. Part of the RPC family, meaning leave it on Automatic. Look somewhere else if you have to disable a service. |
Automatic |
| Remote Registry Service |
If for some reason you want someone to gain access to your local registry, this is the service you need to get running. That also leaves your machine 100% vulnerable. Disable it. |
Disabled |
| Removable Storage |
You may disable this service if you do not use removable storage devices. |
Disable |
| RIP Listener |
This is another service that is not installed by default. RIP is Routing Information Protocol, which teaches your machine different routes on a network. Unless you are a system admin that needs different access routes in a specific network, you don't need this. |
User discretion |
| Routing and Remote Access |
Use this to allow routing services to local area works and wide area networks. Activate if necessary. |
Disabled |
| Secondary Logon |
Service necessary to start processes under alternate credentials. Could never find a good use for this one. |
Disabled |
| Security Accounts Manager |
Stores security information for local users (see also Protected Storage). IIS Admins need this one, normal users don't. |
Disabled |
| Server |
Service to enable file and print sharing from your computer. Message Queuing needs this service too. If you only need access other machines on your local network, Workstation service will be sufficient. Activate this if you want your machine to serve files to others or if the printer is physically connected to your machine. |
Automatic |
| Shell Hardware Detection |
Manages the Autoplay function. This is especially good when you connect an external card reader or a USB storage device to access the files inside. |
Automatic |
| Simple Mail Transport Protocol (SMTP) |
Again, not installed by default. Needed only if you want to use your machine as an outbound e-mail server. |
User discretion |
| Smart Card |
Enables Smart Card authentication of a local or network computer. Not needed unless you use a Smart Card to accomplish that task. |
Disabled |
| Smart Card Helper |
No Smart Card, no Helper service. Period. |
Disabled |
| SNMP Service |
Another service not installed by default. If you happen to possess a networking equipment that uses SNMP as a mode of management you will find a use for this service. |
User discretion |
| SNMP Trap Service |
Part of the service above. Not installed by default. |
see above |
| SSDP Discovery Service |
Used in conjunction with Universal Plug and Play Device Host. This service detects and configures UPnP devices on your network over TCP/IP. Normally you won't find much use for this one. |
Disabled |
| System Event Notification |
If you use COM+ Event System activate this service to obtain a list of system events. If you notice warnings in the Event Log due to disabling this service, do not worry. Normally you do not need this service. |
Disabled |
| System Restore Service |
This service creates restore points. If this service is on, and you use it to create a restore point, you can go back to that point anytime. It's a good idea to use this service when experimenting with the Services. Be aware though that System Restore Service is a close second to Indexing Service when it comes to consuming resources. If you are not in the habit of taking unnecessary risks with your XP system , you may very well live with this service disabled. Then again, the fact that you're reading this list warrants the use of this service :) |
Disabled but only if you are okay with that |
| Task Scheduler |
Service to setup automated tasks at scheduled times. Needed if you use programs that perform regular automatic updates. |
Manual |
| TCP/IP NetBIOS Helper |
Service Legacy support for networks using NetBios over TCP/IP. It's unlikely that you will need this one. However if your network specifically uses NetBios, this will be the service needed. |
Disabled |
| TCP/IP Printer |
Not installed by default. The purpose of this service is to create and setup a local UNIX print server. |
User discretion |
| Telephony |
Provides Telephony API support for telephony devices on the local computer. Required for dial-up modem connectivity. If you are using another method for connection (ADSL, Cable Modem, T1 etc), disable it. |
Disabled, Automatic if you use dialup |
| Telnet |
Makes your machine a telnet server and allows others to connect to and run programs on your machine. Not needed. |
Disabled |
| Terminal Services |
Service to manage remote logins to your machine. You need this service if you use Fast User Switching, Remote Desktop, and Remote Assistance. |
Disabled |
| Themes |
Manages the look of Windows XP. If you are like me, who wants to keep the old 98 look, disable it. If you like the new desktop themes, annoyingly candybar-ish menus and colored taskbar etc, keep this on Automatic. |
Disabled, Automatic if you love the new XP look |
| Uninterruptible Power Supply |
If you own a UPS, you need this. Otherwise disable. |
Disabled |
| Universal Plug and Play Device Host |
Used in parallel with the SSDP Discovery Service, this service is used to setup and configure Universal PnP devices on your network. This has nothing to do with the PnP service. You can very well disable this one whereas YOU SHOULD NOT DISABLE the PnP service. |
Disabled |
| Volume Shadow Copy |
Part of the MS Software Shadow Copy Provider Service. Backup function uses these services. You can safely disable this one if you use another backup option. |
Disabled |
| WebClient |
Enables Windows programs create/access/modify web-based files. You accessing those files means someone else might access your machine as well. In other words, this service will leave your machine more vulnerable to web-based attacks. Disable. |
Disabled |
| Windows Audio |
Backbone of the Windows sound system. If you disable this you won't hear any sounds. Keep on Automatic. |
Automatic |
| Windows Image Acquisition (WIA) |
Used to acquire images from scanners and cameras. Most programs have their own routines to do this but if you need to access the scanner directly from Windows XP, use this service. |
Manual |
| Windows Installer |
Required for all installations through MSI files. MSI is the file type that the Windows Installer uses. Office application is a good example of an MSI file. A great number of third party applications use MS Installer, so you will need this. |
Automatic |
| Windows Management Instrumentation |
Activates the dependencies in service configurations. Disabling this may cause some serious headache. |
Automatic
|
| Windows Management Instrumentation Driver Extension |
Retrieves Windows Management Instrumentation information from removable devices. Accompanies WMI service. If you use the previous one, activate this one too. |
Automatic |
| Windows Service Pack Installer update service |
Enables Windows update to finish up the post-reboot tasks. If you use Automatic Updates or Manual Windows Update, leave this on. |
Automatic |
| Windows Time |
Date and time synchronization service for all machines on a network. Neat idea although I never really found it that useful. |
Disabled |
| Wireless Zero Configuration |
Automatic configuration for 802.11 (b, g, and a) wireless network devices. If you have one of those, use this service, otherwise disable it. |
Disabled |
| WMI Performance Adapter |
Provides access to the performance library information from WMI providers. Absolutely useless. |
Disabled |
| Workstation |
Service used in conjunction with Server service. Use this to connect your computer to a remote computer. File and Print Sharing depends on this service. Unless you have a standalone machine, leave this one on Automatic. |
Automatic |
| World Wide Web Publishing Service |
Last but not least another service not installed by default. Service to setup a local web server on your machine. |
User discretion.
|
