Win32 Services consists of three parts: service applications, service control programs, and service control managers. Where the service control manager maintains the service data in the registry, the service control program is a module that controls the service application, which is a bridge between the control service application with the service manager. The service application is the host program of the service, and he is an executable code for one or more services. We can find it in the Control Panel - Management Tool - Services. You can modify their current status and start-up mode. It has three ways: "Auto" is when the computer is started or when it is required. "Manual" is a "Net Start" command to be turned off through the "Net Start" command in the command prompt, "disabled" refers to no longer started before changing the start-up mode. In many serves, many of them are interdependent, so we can't stop a service, otherwise it is likely to cause the system's abnormal situation, but some services have no effect on us, but also occupy With our valuable system resources, there are many programs that we cannot use, which can be closed, thus achieving the purpose of saving resources. ● Alert (alarm) ◎ Notification Select the user and computer system management alert. If you stop this service, the program that uses the system management alert will not receive a notification. All services that are dependent on it will not be able to start. General household computers do not need to transmit or receive alert (Administrative Alerts), unless your computer is used on a local area network ◎ ISTATION ◎ Suggestion: Debugue ● Application Layer Gateway Service ◎ Provide Internet Sharing and Internet Online firewall Third-party communication protocol plug-in support If you don't use Internet Online Sharing (ICS) to provide multiple computers for Internet access and Internet Board firewall (ICF) software you can turn off ◎ INTERNECTION FIREWALL (ICF) / Internet Connection Sharing (ICS) ◎ Suggestions: Disabled ● Application Management (Application Management) ◎ A new effective software management scheme based on MSI file format starting from Win2000 - application management component service, not only can be managed Installation, deletion, you can also use this service to modify, repair the existing application, monitor file recovery, and the basic failure by recovery. ◎ Suggestions: Manual ● Updates (Windows Update) ◎ Enable the download and installation of important Windows updates. If this service is deactivated, you can update the operating system from the Windows Update website. Allow Windows to automatically check and download update patches to Microsoft Servers automatically check and download Update Patches ◎ Suggestions: Debugue ● Background Intelligent Transfer Service ◎ Use idle network bandwidth to transfer data. Things to transfer materials in the background of VIA HTTP1.1, such as Windows Update is one of this is one of the works: Remote Procedure Call (RPC) and Workstation ◎ Suggestions: Debugue ● Clipbook ◎ Enable Scrapbook Detection To store information and share with remote computers. If this service is stopped, the scrapbook checker will not be able to share information with remote computer. Any service that is clearly refined will not be started. Share the information in the scrapbook and other computer, the general home computer does not use ◎ dependent: NetWork DDE ◎ Suggestion: Debugue ● EVENT SYSTEM (COM Event System) ◎ Support "System Event Notification Service (SENS)", It allows events to automatically disperse into COM components.
If the service is stopped, SENS will close and cannot provide login and logout notifications, and any obvious service cannot be started. Some programs may use COM components, like Bootvis's Optimize System applications, such as DCOM displayed in the event check: Remote Procedure Call (RPC) and System Event Notification ◎ Suggestions: Manual ● COM System Application ◎ Manage COM Components Setting and tracking. If this service is stopped, most of the COM components will not be able to run smoothly. Any service that is clearly dependent on it will not be able to start. If the DCOM displayed in the event is not enabled ◎ Reprical: Remote Procedure Call (RPC) ◎ Suggestion: Manual ● Computer Browser (Computer Browser) ◎ Maintaining the list of updated on the network and supplies this manifest to a browser computer. If this service is stopped, this list will not be updated or maintained. If this service is deactivated, all services that are dependent on it will not be launched. The general family is not required, unless your computer is on the local area network, but is it necessary to open this slow speed on a large local area? ◎ Server and Workstation ◎ Suggestions: Disabled ● Cryptographic Services ◎ Provide three management services: confirm that Windows file authentication; new and remove the trusted root certificate authentication certificate; and assist register this computer Once the voucher. If this service is stopped, these management services will not work correctly. Any service that is clearly refined will not be started. Simply put is a certification of Windows Hardware Quality Lab (WHQL) Microsoft, if you have automatic updates, then you may need this ◎ Reproduction: Remote Procedure Call (RPC) ◎ Suggestion: Manual ● DHCP Client (DHCP client) ◎ Manage network settings through login and updating IP addresses and DNS names. People who use DSL / Cable, ICS and IPsec need this to specify dynamic IP, if the system is not in any network, or there is no DHCP service in the network, then it can be set to deactivate. ◎ Dependent: AFD network support environment, NetBT, Symtdi, TCP / IP Protocol Driver and NetBIOS over TCP / IP ◎ Suggestion: Manual ● Distributed Link Tracking Client (Distributed Connection Tracking Client) ◎ Maintenance Computer or in different computers in the network The connection between NTFS files. For most users, they can be closed, except for special users. ◎ Remote Procedure Call (RPC) ◎ Recommendation: Disabled ● Distributed Transaction Coordinator (Distributed Exchange Coordinator) ◎ Coordinating information exchange across multiple resource administrators, such as database, message queue, and archive system. If this service is stopped, these transactions will not occur. Any obvious service will not be launched. As mentioned above, the general family is not only used by computer, unless you enable message queuing ◎ Reproduction: Remote Procedure Call (RPC) and Security Accounts Manager ◎ Suggestions: Debugue ● DNS Client (DNS Client) ◎ Resolution and Quick A domain name system (DNS) name of this computer is obtained.
If this service is stopped, this computer will not be able to resolve the DNS name and look for the location of the Active Directory domain control station. All services that are dependent on it will not be able to start. As mentioned above, additional IPsec requires ◎ dependency: TCP / IP Protocol Driver ◎ Suggestion: Manual ● Error Reporting Service (Error Reporting Service) ◎ Allows an error report to execute services and applications in non-standard environments. Microsoft's application error report service, there is nothing to use for most users, but also for pirated users, it is recommended to stop. ◎ Reproduction: Remote Procedure Call (RPC) ◎ Suggestions: Disable
● Event log (Event Record) ◎ Enable Windows-based programs and components issued by components can be viewed in the event checker. This service cannot be stopped. Allow event messages to be displayed on the event checker. ◎ Relays: Windows Management Instrumentation ◎ Suggest: Auto ● Fast User Switching Compatibility ◎ Provides application management in multi-user environments. Also as is the switching user function in the logan screen, it is generally not to stop, otherwise many features cannot be implemented. ◎ Dependence: Terminal Services ◎ Suggestions: Manual ● Help and support (Help and Support) ◎ Microsoft provides services that can support and help files. If this service is stopped, the instructions and support centers will not be used. Its dependency service will not be started. If you don't use it, it will be closed, and there is not much person in reality that there is no need, unless there is special needs, otherwise it is recommended to stop. ◎ Remote Procedure Call (RPC) ◎ Suggestion: Debugue ● Human Interface Device Access ◎ Enable universal input access to the ergonomic interface device (HID), HID device starts and maintains this keyboard, remote control, and others The use of fast-defined fines on multimedia devices. If this service is stopped, this service control is no longer played, and any service that is clearly referred to in its will not be launched. If there is no HID device, you can deactivate ◎ Reprical Procedure Call (RPC) ◎ Suggestion: Manual ● IMAPI CD-Burning COM Service ◎ Use Image Mastering Applications Programming Interface (IMAPI) to manage CD burning. If this service is stopped, this computer will not be able to burn the disc. Any service that explicitly rely on its will not be activated. XP integrated CD-R and CD-RW drives drag and drop the burning function, but unfortunately, you can turn it off, you can also speed up NERO's open speed. If you are not used to using third-party software, please keep it. ◎ Suggestions: Debate ● INDEXING Service (indexing service) ◎ Native and remote computer index content and file properties; quick file access is available through elastic query language. Simply put, you can speed up the speed of search, but I should be very few people and remote computers to search, unless special work ◎ dependent: Remote Procedure Call (RPC) ◎ Suggestion: Disable ● Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS) ◎ Provides network address translation, addressing, and name resolution services for your home network or small office network and services to prevent interference. If you don't use Internet Online Sharing (ICS) or XP's Internet Online Firewall (ICF) you can turn off ◎ Application Layer Gateway Service, Network Connections, Network Location Awareness (NLA), Remote Access Connection Manager ◎ Suggestions : Deactivate ● IPSec Services ◎ Manage IP security principles and launch Isakmp / Oakley (IKE) and IP security drivers. Assist in the protection of data transmitted via network. IPsec is an important link to provide security in the virtual private network (VPN), while VPN allows organizations to secure data via the Internet.
Perhaps it is needed on some domains, but most of the general users are not needed ◎ dependency: IPsec Driver, Remote Procedure Call (RPC), TCP / IP Protocol Driver ◎ Suggestion: Manual ● Logical Disk Manager (Logical Disk Management Member) ◎ Detect and monitor new hard drive disks, and transfer disk area information to logical disk management system management services for setting. If this service is stopped, dynamically disk status and setting information may be outdated. Any service that is clearly refined will not be started. Disk administrators used to dynamically manage disks, such as display disk accessible space, etc., etc., using Microsoft Management Console (MMC), the function of the Microsoft Management Console (MMC) Auto ● Logical Disk Manager Administrative Service (Logical Disk Administrator System Management Service) ◎ Sets the hard disk disk and disk area, and the service only executes the setup program and stops. Using Microsoft Management Console (MMC) The function of the main control is used ◎ dependent: Plug and play, Remote Procedure Call (RPC), Logical Disk Manager ◎ Suggestions: Manual ● Messenger ◎ In Client and Server Transport Network Transfer and "Alerter] service SMS. This service has nothing to do with Windows Messenger. If this service is stopped, the Alerter message will not be transferred. All services that are dependent on it will not be able to start. For example, the function of transmitting the prompt information between the network, NET Send features, if you don't want to be haar, it can be closed. ◎ NetBIOS Interface, Plug and Play, Remote Procedure Call (RPC), Workstation ◎ Suggestion: Deactivation ● MS Software Shadow Copy Provider ◎ Managing Disk Area Shadow Copy Services The shadow replication of software-based disk area. If you stop this service, you cannot manage the shadow copy of the software-oriented disk area. Any service that is clearly refined will not be started. As mentioned above, things used to backup, such as the MS Backup program requires this service, but most people do not use this feature. ◎ Reder: Remote Procedure Call (RPC) ◎ Suggestions: Disabled ● NET LOGON ◎ PASS-THROUGH verification of the account login event on the network on the network. General household computers are unlikely to use the login network to review this service. ◎ Workstation ◎ Suggestions: Debugue ● Netmeeting Remote Desktop Sharing (Netmeeting Remote Desktop Sharing) ◎ Enable authorized users can use NetMeeting to access this computer through the company's proximal internal networks, by remote access to this computer. If this service is stopped, the remote desktop sharing feature will not be available. Any service that relies on its will not be started. As mentioned above, let the user can share the computer's control power to other users on the Internet, if you pay attention to security, don't want to open the door, turn it off. ◎ Suggestions: Deactivate ● Network Connections ◎ Manage objects in the network and dial-up connection data clips, you can view the local area network and remote connections in this data clip.
Control your network connection ◎ Reder: Remote Procedure Call (RPC), Internet Connection SHARING (ICF) ◎ Suggestion: Manual ● Network DDE (Network DDE) ◎ The Dynamic Data Exchange (DDE) is the same Or procedures performed on different computers provide network transmission and security. If this service is stopped, DDE transfer and security will not be available. Any service that is clearly refined will not be started. The average person does not use ◎ dependent: NetWork DDE DSDM, CLIPBOOK ◎ Suggestion: Deactivation ● Network DDE DSDM ◎ Information Dynamic Data Exchange (DDE) network sharing. If this service is stopped, DDE network sharing will not be available. Any service that is clearly refined will not be started. The average person does not use ◎ dependent: NetWork DDE ◎ Suggestion: Deactivate ● Network Location Awareness (NLA) ◎ Collect and store network settings and location information, and notify the application when this information is changed. If you do not use ICF and ICS, you can turn it ◎ Dependent: AFD network support environment, TCP / IP Procotol Driver, Internet Connection FireWall (ICF) / Internet Connection Sharing (ICS) ◎ Suggestion: Disabled ● NT LM Security Support Provider (NTLM Security Support Provider) ◎ Provide security for remote procedure calls (RPC) programs that do not use named pipes. If you don't use Message Queuing or Telnet Server, it is closed, and the general user is not used. ◎ Depending on: Telnet ◎ Suggestions: Deactivate ● Performance logs and alerts ◎ Collect performance data from this unit or remote computer based on pre-set parameters, and then write data into records. If this service is stopped, performance information will not be collected. Any service that is clearly refined will not be started. Nothing value service. ◎ Suggestions: Deactivation ● Plug and play (plug and play) ◎ Enable computers to identify and adapt to hardware changes, stop or deactivate this service, will cause system unstable. As the name suggests is a PNP environment, and the PNP environment is required in the general computer, so don't close it. ◎ interdependent: Logical Disk Manager, Logical Disk Manager Administrative Service, Messenger, Smart Card, Telephony, Windows Audio ◎ suggestions: Automatic ● Portable Media Serial Number ◎ Retrieves the serial number of any portable music player connected to your computer via a networked computer again Get the number of music dials, this thing is not worth the value, don't consider it! ◎ Suggestions: Deactivation ● Print Spooler ◎ Load the file to be printed later. You can optimize printing, there is a certain help for the printing function. If there is no printer, it can be closed. ◎ Reder: Remote Procedure Call (RPC) ◎ Recommendation: Deactivate ● Protected Storage (protected storage device) ◎ Provide protected storage area to store important data to prevent unauthorized services, processing, or users take.
Services used to store passwords on your computer, like Outlook, Dial Programs, Other Applications, etc. The flow control installation function gives the program that can identify QoS and control small program items. The service used to retain 20% bandwidth. If your NIC does not support 802.1p or no ACS Server on your computer, then don't say more, close it. ◎ Depending: AFD network support environment, TCP / IP Procotol Driver, Remote Procedure Call (RPC) ◎ Suggestion: Debugue ● Remote Access Auto Connection Manager (Remote Access Auto Online Administrator) ◎ When the program refers to the remote DNS or NetBIOS name or At the address, the connection of the remote network is established. Some DSL / Cable suppliers may need to use this to process login programs ◎ Reder: Remote Access Connection Manager, Telephony ◎ Suggestion: Manual ● Remote Access Connection Manager (Remote Access Connection Management) ◎ Establishing Network Connection, Asahi, in Network Connection It is important to have a very important meaning, of course, if the network is not used, it can be turned off. ◎ Dependence: Telephony, Internet Connection Shanager ◎ Remote Access Auto Connection Manager ◎ Suggestion: Manual ● Remote Desktop Help Session Manager ◎ Manage and control remote assistance. If this service is stopped, remote assistance will not be available. Please refer to the "Dependency" tab in the Content Dialog before stopping this service. As mentioned above, the management and control remote assistance, for ordinary users, this is not used, it can be turned off, I can close ◎ Remote Procedure Call (RPC) ◎ Suggestion: Debugue ● Remote Procedure Call (RPC) (Remote Procedure Call, RPC ◎ Provide endpoint corresponding procedures and other RPC services. Many programming equipment requires this service, which is very complicated, so don't close it unless a senior user. ◎ Dependence: Too much, I am limited to the space unique. ◎ Suggestions: Auto ● Remote Procedure Call (RPC) Locator (Remote Procedure Call Location Program) ◎ Manage RPC Name Service Database. There are very few uses on the general computer, there is nothing special requirements, you can try ◎ dependent: Workstation ◎ Suggestions: deactivate ● Remote Registry (remote login service) ◎ Enable remote service to operate the remote computer. If this service is stopped, login can only be modified by the user on this computer. Any service that is clearly refined will not be started. Based on security, if there is no special demand, it is recommended to close it unless you need to remotely help modify your login settings.
◎ Remote Procedure Call (RPC) ◎ Suggestions: Deactivation ● Removable Storage (Removal Storage Device) ◎ Unless you have a ZIP disk drive or a USB mobile hardware or TAPE backup device, you can try it off Nowadays, there are many devices in this area. It is recommended to keep ◎ Reproduction: Remote Procedure Call (RPC) ◎ Suggest: Auto ● Routing and Remote Access (Route and Remote Access) ◎ Provide a routing service from companies to LAN and WAN networks. Provide dial-up online to the network or VPN service, general users can not be used, can be turned off: Remote Procedure Call (RPC), NetBiosGroup ◎ Suggestion: Debugue ● Secondary Logon ◎ Enable the starting program under other certifications. If this service is stopped, such login access will not be used. Any service that is clearly refined will not be started. Allow multiple users to handle programs, implementation, etc. ◎ Suggestions: Auto ● Security Accounts Manager (Security Account Administrator) ◎ Save the security information of this unit. Managing accounts and group principles (gpedit.msc) applications, although many people don't know it, they are not small. ◎ Reder: Remote Procedure Call (RPC), Distributed Transaction Coordinator ◎ Suggest: Auto ● Server (Server) ◎ Provides files, print, and named pipes for this computer through the network. These features will not be used if you stop this service. All services that are dependent on it will not be able to start. Simple is to share the sharing of files and print unless you have any other computer sharing, otherwise it is ◎ dependent: Computer Browser ◎ Suggestion: Debugue ● Shell Hardware Detection ◎ Provide notifications for automatic play hardware events. Generally used on mobile storage or CD devices, on the DVD device, this is a more annoying thing, you can try to close. ◎ Reder: Remote Procedure Call (RPC) ◎ Suggestions: Disabled ● Smart Card (Smart Card) ◎ Manage the access to the smart card read by this computer. If this service is stopped, this computer will not be able to read smart cards. Any service that is clearly refined will not be started. If you don't use Smart Card, you can turn it ◎ dependent: Plug and play ◎ Suggestion: Deactivate ● Smart Card Helper ◎ Enable support for the old version of the old version of the computer to be read. If this service is stopped, this computer will not support the old SMART Card. Any service that is clearly refined will not be started. If you don't use Smart Card, you can turn it off ◎ Suggestion: Debugue ● SSDP Discovery Service ◎ Enable searches for generic plug and playing devices on your home network. Universal Plug and Play, UPnP enables the computer to find and use the device on the network, search the device via TCP / IP via the network connection, a scanner, a digital camera or a printer on the network. They are all functions that use UPnP, which is not available based on security. But now the digital devices are very popular, users need to keep ◎ IV: Universal PLUG AND Play Device Host ◎ Suggestion: Debugue ● System Event Notification ◎ Track system events such as Windows login, network, and power events.
Notify these events of the COM event system subscriber. It is especially important to the server. ◎ Depending: COM Event System ◎ Suggestion: Auto ● System Restore Service ◎ Execute system restore function. To stop the service, close the system from my computer-attribute-system restore, I feel that the resources are more wasteful, and you can turn off. ◎ Reder: Remote Procedure Call (RPC) ◎ Suggestion: Deactivate ● Task Scheduler ◎ Let the user can set the automatic work plan on this computer and execute. If this service is stopped, these work will not be executed when they set. Any service that is clearly refined will not be started. Set automatic work plan, like some timing disk scan, viral timing scan, update, etc., but usually use, you can close ◎ Dependence: Remote Procedure Call (RPC) ◎ Suggestion: Manual ● TCP / IP NetBIOS Helper (TCP / IP NetBIOS Assist Procedure) ◎ Enable NetBIOS over TCP / IP (NetBt)] service and support for NetBIOS name resolution. If your network does not use NetBIOS or WINS, you can close it, for users who don't know about the network, otherwise it may cause your network to have problems. ◎ Application: AFD Network Support Environment, NetBT ◎ Suggestions: Deactivation ● Telephony (Phone Voice) ◎ Connect to the server and the server that is executing this service, controlling the phone voice device and IP voice connection, providing a phone Voice API (TAPI) support. General Dial-up Modem or Some DSL / Cable may be used ◎ dependent: Plug and Play, Remote Procedure Call (RPC), Remote Access Connection Manager, Remote Access Auto Connection Manager ◎ Suggestion: Manual ● Telnet (remote login) ◎ Enable one Remote users to log in to this computer and execute the application, and support a variety of TCP / IP Telnet clients, including Unix Basic and Windows Basic Computers. If the service is stopped, the remote user may not access the application. Any other service explicitly in this service will fail. Allow remote users to log in to this computer with Telnet, the average person will not use BBS, which is unrelated to BBS, security, reason, if there is no special demand, it is recommended to close ◎ dependent: NT LM Security Support Provider , Remote Procedure Call (RPC), TCP / IP Protocol Driver ◎ Suggestions: Deactivation ● Terminal Services ◎ Allow multi-user users to connect to the same computer, desktop, and applications to remote computers. Restoring Remote Desktop (including system administrator's RD), fast switching users, remote assistance, and terminal servers. Remote desktop or remote assistance features, it is not necessary to turn off, and the current service has also led to a number of network servers security issues. ◎ Reproduction: Remote Procedure Call (RPC), Fast User Switching Compatibility, InteractiveLogon ◎ Suggestions: Debugue ● Themes ◎ Provides user theme management. Many people use a set theme to create a personalized system, but if not used, it can be turned off.
◎ Suggestions: Auto ● Uninterruptible Power Supply (constant power supply system) ◎ Managing Uninterruptible Power Supply (UPS) connected to this computer. Uninterruptible Power Supply (UPS) Is the average person useful? Unless you have this feature, otherwise it is closed ◎ Suggestion: Debugue ● Universal plug and play device host Host (plug and play) ◎ Provide support for host universal plug and playing device. Used to detect installing Universal Plug and Play, UPNP devices, like digital cameras or printers, now there are now many devices need this. ◎ STP Discovery Service ◎ Suggest: Auto ● Volume Shadow Copy ◎ Manage and execute disk image replication for backup and other purposes. If this service is stopped, mirror replication will not be used for backup, and the backup may fail. Any service that is clearly refined will not be started. As mentioned above, things used to backup, such as the MS Backup program requires this service ◎ Reproduction: Remote Procedure Call (RPC) ◎ Suggestion: Debugue ● WebClient ◎ Enable Windows-based procedure to establish, access, and modify The Internet-based file. If this service is stopped, these features will not be available. Any service that is clearly refined will not be started. Using WebDAV to load files or files to all web services, security reasons, you can try to close ◎ Dependent: WebDav Client Redirector ◎ Suggestions: Debugue ● Windows Audio ◎ Manage the audio device for Windows as the main program. If this service is stopped, the audio device and the effect will not function properly. Any service that is clearly refined will not be started. If you don't have a sound card, you can shut him, but now the personal computer will not have a sound card? ◎ Depending: Plug and Play, Remote Procedure Call (RPC) ◎ Recommendation: Auto ● Windows Image Acquisition (WINDOWS Image Acquisition Procedure) ◎ Provide image capture services for scanners and digital cameras. If the scanner and the digital camera have supported WIA function, you can see the icon directly, no other drivers, so the user without the scanner and digital camera is greatly closed ◎ Reprical: Remote Procedure Call RPC) ◎ Suggestions: Disabled ● Installer (Windows Installer) ◎ Install, repair, and removal of software based on instructions contained in the .msi file. It is a system service that assists users to properly install, set, track, upgrade, and remove software programs, manage applications, standard formats, and track, such as archive groups, login projects, and shortcuts. Many software installations need to be used, so it is recommended to keep it, otherwise it will encounter a lot of trouble. ◎ Reder Procedure Call (RPC) ◎ Recommendation: Auto ● Management Instrumentation (WMI) ◎ Provides public interface and object model to access management information about operating systems, devices, applications, and services. If this service has stopped, most Windows software will not work properly. All services that are contained in it will not be able to start.
