There are many services in Windows 2000 / XP we often use, what is these services do? What do we need? Don't you need it? Here I am a presentation to everyone.
Win32 Services consists of 3 parts: Service Applications, Service Control Programs, and Service Control Manager. Where the service control manager maintains the service data in the registry, the service control program is a module that controls the service application, which is a bridge between the control service application with the service manager. The service application is the host program of the service, and he is an executable code for one or more services. We can find it in the Control Panel - Management Tool - Services. You can modify their current status and start-up mode. It has three ways: "Auto" is when the computer is started or when it is required. "Manual" is that the "Net Start" command can be turned off through the "NET Stop" command in the command prompt, "disabled" means that before changing the start-up method, not starting.
In many serves, many of them are interdependent, so we can't stop a service, otherwise it is likely to cause the system's abnormal situation, but some services have no effect on us, but also occupy With our valuable system resources, there are many programs that we cannot use, which can be closed, thus achieving the purpose of saving resources.
Alert (alarm)
Notify the selected user and computer system management alert. If you stop this service, the program that uses the system management alert will not receive a notification. All services that are dependent on it will not be able to start. General household computers do not need to transfer or receive a warning of computer system management, unless your computer is used on a local area network.
Depending: Workstation
Suggestion: deactivation
Application Layer Gateway Service
Provide Internet access and Internet online firewall support If you don't use Internet Online Sharing (ICS) to provide multiple computers for Internet access and Internet online firewall (ICF) software you can turn off
Depending on: Internt Connection FireWall (ICF) / Internet Connection Sharing (ICS)
Suggestion: deactivation
Application Management (Application Management)
A new effective software management scheme based on Win2000-based MSI file-based MSI file-application management component service, not only can manage software installation, deletion, but also use this service to modify, repair existing applications, monitor files Rehabilitation and basic failure by recovery.
Suggest: manual
Automatic Updates
Enable the download and installation of important Windows updates. If this service is deactivated, you can update the operating system from the Windows Update website. Allow Windows to automatically check and download update patches to Microsoft Servers automatically check and download update patches
Suggestion: deactivation
Background Intelligent Transfer Service, INTELLIGENT TRANSFER
Use idle network bands to transfer data. Things to transfer materials in the background of VIA HTTP1.1, such as Windows Update is one of the works
Dependence: Remote Procedure Call (RPC) and Workstation
Suggestion: deactivation
CLIPBOOK (Scrapbook)
Enable the Scrapbook Tester to store information and share it with remote computer. If this service is stopped, the scrapbook checker will not be able to share information with remote computer. Any service that is clearly refined will not be started. Share the information in the scrapbook and other computer, and the general home computer is not used.
Depending: NetWork DDE Suggestions: Disabled
COM Event System (COM Event System)
Support "System Event Notification Service (SENS)", which allows events to automatically disperse to COM components. If the service is stopped, SENS will close and cannot provide login and logout notifications, and any obvious service cannot be started. Some programs may use COM components, like the Optimize System apps of Bootvis, such as the DCOM displayed in the event check is not enabled.
Depending: Remote Procedure Call (RPC) and System Event Notification
Suggest: manual
COM System APPLICATION
Manage the settings and tracking of COM components. If this service is stopped, most of the COM components will not be able to run smoothly. Any service that is clearly dependent on it will not be able to start. If the DCOM shown in the event check is not enabled
Dependence: Remote Procedure Call (RPC)
Suggest: manual
Computer Browser (Computer Browser)
Maintain a list of updated on your network and provide this list to your computer. If this service is stopped, this list will not be updated or maintained. If this service is deactivated, all services that are dependent on it will not be launched. The general family is not required, unless your computer is on the local area network, but is it necessary to open this slow speed on a large local area?
Dependent: Server and Workstation
Suggestion: deactivation
Cryptographic Services
Provide three management services: Confirm that Windows file authentication; new and remove the trusted root certification authorization certificate from this computer; and assist the registration of this computer to obtain credentials. If this service is stopped, these management services will not work correctly. Any service that is clearly refined will not be started. Simply put is a certification of Windows Hardware Quality Lab (WHQL) Microsoft, if you have automatic updates, then you may need this
Dependence: Remote Procedure Call (RPC)
Suggest: manual
DHCP Client (DHCP client)
Manage network settings through login and updating IP addresses and DNS names. People who use DSL / Cable, ICS and IPsec need this to specify dynamic IP, if the system is not in any network, or there is no DHCP service in the network, then it can be set to deactivate.
Depending on: AFD network support environment, NetBT, Symtdi, TCP / IP Protocol Driver and NetBIOS over TCP / IP
Suggest: manual
Distributed Link TRACKING Client (Distributed Connection Tracking Client)
Maintenance of the connection between NTFS files in different computers in the computer or in the network. For most users, they can be closed, except for special users.
Dependence: Remote Procedure Call (RPC)
Suggestion: deactivation
Distributed Transaction Coordinator (Distributed Switch Coordinator)
Coordinate information exchange across multiple resource administrators, such as databases, message queues, and archive systems. If this service is stopped, these transactions will not occur. Any obvious service will not be launched. As mentioned above, general families are not very unless you are using, unless you enable Mersses Queuing
Depending: Remote Procedure Call (RPC) and Security Accounts Manager Suggestions: Disabled
DNS Client (DNS client)
Resolution and quickly obtain this computer's domain name system (DNS) name. If this service is stopped, this computer will not be able to resolve the DNS name and look for the location of the Active Directory domain control station. All services that are dependent on it will not be able to start. As mentioned above, additional IPsec needs to be used
Depending: TCP / IP Protocol Driver
Suggest: manual
Error Reporting Service
Allows an error report to execute services and applications in non-standard environments. Microsoft's application error report service, there is nothing to use for most users, but also for pirated users, it is recommended to stop.
Dependence: Remote Procedure Call (RPC)
Suggestion: deactivation
EVENT log (event record file)
Event messages issued by enabling Windows-based programs and components can be viewed in the event checker. This service cannot be stopped. Allow event messages to be displayed on the event checker.
Depending on: Windows Management Instrumentation, WINDOWS MANAGEMENT INSTRUN
Suggest: Automatic
Fast User Switch Compatibility
Provide application management in a multi-user environment. Also as is the switching user function in the logan screen, it is generally not to stop, otherwise many features cannot be implemented.
Dependent: Terminal Services
Suggest: manual
Help and support
Microsoft provides services that can support descriptions and help files. If this service is stopped, the instructions and support centers will not be used. Its dependency service will not be started. If you don't use it, it will be closed, and there is not much person in reality that there is no need, unless there is special needs, otherwise it is recommended to stop.
Dependence: Remote Procedure Call (RPC)
Suggestion: deactivation
Human Interface Device Access
Enable universal input access to the ergonomic interface device (HID), the HID device starts and maintained for this keyboard, remote control, and the use of the faster than the other multimedia devices. If this service is stopped, this service control is no longer played, and any service that is clearly referred to in its will not be launched. If there is no HID device, you can stop
Dependence: Remote Procedure Call (RPC)
Suggest: manual
IMAPI CD-Burning COM Service
Manage CD burn using Image Mastering Applications Programming Interface (IMAPI). If this service is stopped, this computer will not be able to burn the disc. Any service that explicitly rely on its will not be activated. XP integrated CD-R and CD-RW drives drag and drop the burning function, but unfortunately, you can turn it off, you can also speed up NERO's open speed. If you are not used to using third-party software, please keep it.
Suggestion: deactivation
INDEXING Service (Index Service)
The index content and file properties of this unit and the remote computer; quick file access is available through the elastic query language. Simply put, you can speed up the search speed, but I want to make a few people and remote computers to search, unless special work.
Dependence: Remote Procedure Call (RPC)
Suggestion: deactivation
Internet Connection FireWall (ICF) / Internet Connection Sharing (ICS)
Provide network address translation, addressing, and name resolution services for your home network or small office network, and prevent interference services. If you don't use Internet Online Sharing (ICS) or XP Internet Online Firewall (ICF) you can turn off dependence: Application Layer Gateway Service, Network Connections, Network Location Awareness (NLA), Remote Access Connection Manager
Suggestion: deactivation
IPsec Services (IP Security Services)
Manage IP security principles and launch Isakmp / Oakley (IKE) and IP security drivers. Assist in the protection of data transmitted via network. IPsec is an important link to provide security in the virtual private network (VPN), while VPN allows organizations to secure data via the Internet. Perhaps it is needed on some domains, but most of the usual users are not needed.
Depending: IPsec Driver, Remote Procedure Call (RPC), TCP / IP Protocol Driver
Suggest: manual
Logical Disk Manager (Logical Disk Administrator)
Detect and monitor new hard disk disks, and transfer disk area information to logical disk management system management services for settings. If this service is stopped, dynamically disk status and setting information may be outdated. Any service that is clearly refined will not be started. Disk administrators used to dynamically manage disks, such as display disk accessible space, etc., etc.
Depending: Plug and Play, Remote Procedure Call (RPC), Logical Disk Manager Administrative Service
Suggest: Automatic
Logical Disk Manager Administrative Service (Logical Disk Administrator System Management Service)
Set the hard disk disk and disk area, the service only performs the setup program and stops. Using the Microsoft Management Console (MMC) The function of the main control station is used
Depending: Plug and Play, Remote Procedure Call (RPC), Logical Disk Manager
Suggest: manual
Messenger (Letter Service)
Transfer network transfer between the client and the server and "Alerter] service SMS. This service has nothing to do with Windows Messenger. If this service is stopped, the Alerter message will not be transferred. All services that are dependent on it will not be able to start. For example, the function of transmitting the prompt information between the network, NET Send features, if you don't want to be haar, it can be closed.
Depending on: NetBIOS Interface, Plug and Play, Remote Procedure Call (RPC), Workstation
Suggestion: deactivation
MS Software Shadow Copy Provider
Managing the shadow of the software-oriented disk area shadow replication based on the shadow replication service of the disk area. If you stop this service, you cannot manage the shadow copy of the software-oriented disk area. Any service that is clearly refined will not be started. As mentioned above, things used to backup, such as the MS Backup program requires this service, but most people do not use this feature.
Dependence: Remote Procedure Call (RPC)
Suggestion: deactivation
Net logon
Pass-through authentication of account login events on the network support. General household computers are unlikely to use the login network to review this service.
Depending: Workstation
Suggestion: deactivation
Netmeeting Remote Desktop Sharing (Netmeeting Remote Desktop Sharing) Let the licensed user can use NetMeeting to access this computer by remote access to the company's proximal internal network. If this service is stopped, the remote desktop sharing feature will not be available. Any service that relies on its will not be started. As mentioned above, let the user can share the computer's control power to other users on the Internet, if you pay attention to security, don't want to open the door, turn it off.
Suggestion: deactivation
Network Connections
Managing objects in the network and dial-up connection data clips, you can view local area networks and remote connections in this data clip. Control your network connection
Depending on: Remote Procedure Call (RPC), Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS)
Suggest: manual
NetWork DDE (Network DDE)
Network transmission and security for programs executed on the same or different computers for Dynamic Data Exchange (DDE). If this service is stopped, DDE transfer and security will not be available. Any service that is clearly refined will not be started. The average person seems to be used
Depending: Network DDE DSDM, Clipbook
Suggestion: deactivation
NetWork DDE DSDM (Network DDE DSDM)
Information Dynamic Data Exchange (DDE) network sharing. If this service is stopped, DDE network sharing will not be available. Any service that is clearly refined will not be started. The average person seems to be used
Depending: Network DDE
Suggestion: deactivation
NetWork location awareness (NLA)
The network settings and location information is collected and stored, and the application is notified when this information is changed. If you don't use ICF and ICS, you can turn it off.
Dependent: AFD Network Support Environment, TCP / IP Procotol Driver, Internet Connection FireWall (ICF) / Internet Connection Sharing (ICS)
Suggestion: deactivation
NT LM Security Support Provider (NTLM Security Support Provider)
Provides security for remote procedure call (RPC) programs that do not use named pipes. If you don't use Message Queuing or Telnet Server, it is closed, and the general user is not used.
Depending: Telnet
Suggestion: deactivation
Performance logs and alerts (Performance Record Files and Warnings)
Based on pre-set parameters, collect performance data from this unit or remote computer, and then write data into records. If this service is stopped, performance information will not be collected. Any service that is clearly refined will not be started. Nothing value service.
Suggestion: deactivation
Plug and Play (plug and play)
Enable computers to identify and adapt to hardware changes, stop or deactivate this service, will cause system unstable. As the name suggests is a PNP environment, and the PNP environment is required in the general computer, so don't close it.
Depending: Logical Disk Manager, Logical Disk Manager Administrative Service, Messenger, Smart Card, Telephony, Windows Audio
Suggest: Automatic
Portable Media Serial Number
Retrieves The Serial Number of any Portable Music Player Connected to your computer re-acquired music dial number through the networked computer, this thing is not worth it, don't consider it! Suggestion: deactivation
Print Spooler (Print Multiking Buffer Processor)
Load the archive to be printed later. You can optimize printing, there is a certain help for the printing function. If there is no printer, it can be closed.
Dependence: Remote Procedure Call (RPC)
Suggestion: deactivation
Protected Storage (protected storage)
Provide protected storage areas to store important data to prevent unauthorized services, processing, or users from accessing. Services used to store your computer, like Outlook, Dial Programs, Other Applications, etc.
Dependence: Remote Procedure Call (RPC)
Suggest: Automatic
QoS RSVP (QoS license control, RSVP)
Provide network signal and regional traffic control installation function to identify QoS program and control small program items. The service used to retain 20% bandwidth. If your NIC does not support 802.1p or no ACS Server on your computer, then don't say more, close it.
Depending: AFD network support environment, TCP / IP Procotol Driver, Remote Procedure Call (RPC)
Suggestion: deactivation
Remote Access Auto Connection Manager (Remote Access Auto Online Administrator)
Establish a connection between the remote network when the program refers to the remote DNS or NetBIOS name or address. Some DSL / Cable suppliers may need to use this to process login programs
Depending: Remote Access Connection Manager, Telephony
Suggest: manual
Remote Access Connection Manager (Remote Access Connection Management)
Establish a network connection, as the name suggestions, accounts for important significance in the network connection, of course, if the network is not used, it can be turned off.
Depend: Telephony, Internet Connection FireWall (ICF) / Internet Connection Sharing (ICS), Remote Access Auto Connection Manager
Suggest: manual
Remote Desktop Help Session Manager
Manage and control remote assistance. If this service is stopped, remote assistance will not be available. Please refer to the "Dependency" tab in the Content Dialog before stopping this service. If the management and control of the management and control of the above, this is not used for ordinary users, it can be turned off.
Dependence: Remote Procedure Call (RPC)
Suggestion: deactivation
Remote Procedure Call (RPC) (Remote Process Call, RPC)
Provide end-point correspondence and other RPC services. Many programming equipment requires this service, which is very complicated, so don't close it unless a senior user.
Depending on: Too much, I am limited to the space, I can't mention one by one.
Suggest: Automatic
Remote Procedure Call (RPC) Locator (Remote Process Call Location)
Manage RPC Name Service Database. There are very few uses on the general computer, there is nothing special requirements, you can try it.
Depending: Workstation
Suggestion: Deactivation Remote Registry (remote login service)
Enable remote services to operate remote computers. If this service is stopped, login can only be modified by the user on this computer. Any service that is clearly refined will not be started. Based on security, if there is no special demand, it is recommended to close it unless you need to remotely help modify your login settings.
Dependence: Remote Procedure Call (RPC)
Suggestion: deactivation
REMOVABLE Storage (Removal)
Unless you have a ZIP disk drive or a USB mobile hardware or TAPE backup device, you can try it, now you have a lot of equipment, it is recommended to keep
Dependence: Remote Procedure Call (RPC)
Suggest: Automatic
Routing And Remote Access (Routing and Remote Access)
Provide a routing service from companies that connect to a local area network and a wide area network. Provide a dial-up online to the network or a VPN service, the general user can not be used, can be closed
Dependence: Remote Procedure Call (RPC), NetBiosGroup
Suggestion: deactivation
Secondary Logon
Enable the starter under other certifications. If this service is stopped, such login access will not be used. Any service that is clearly refined will not be started. Allow multiple user handles, implementation, etc.
Suggest: Automatic
Security Accounts Manager (Security Account Administrator)
Save the security information of the native account. Managing accounts and group principles (gpedit.msc) applications, although many people don't know it, they are not small.
Rest: Remote Procedure Call (RPC), Distributed Transaction Coordinator
Suggest: Automatic
Server (server)
The sharing of files, printing, and naming pipes is provided through the network. These features will not be used if you stop this service. All services that are dependent on it will not be able to start. Simply put is the sharing of files and printed, unless you have a sharing with other computers, otherwise it is closed.
Computer Browser
Suggestion: deactivation
Shell Hardware Detection
Provide notifications for automatic play hardware events. Generally used on mobile storage or CD devices, on the DVD device, this is a more annoying thing, you can try to close.
Dependence: Remote Procedure Call (RPC)
Suggestion: deactivation
Smart Card
Manage this computer to read the access to the smart card. If this service is stopped, this computer will not be able to read the smart card. Any service that is clearly refined will not be started. If you don't use Smart Card, you can turn off
Depending: Plug and Play
Suggestion: deactivation
Smart Card Helper (Smart Card Assist Procedure)
Enable support for the old version of the old version of the computer to read the support. If this service is stopped, this computer will not support the old SMART Card. Any service that is clearly refined will not be started. If you don't use Smart Card, you can turn off
Suggestion: deactivation
SSDP Discovery Service
Enable searches for generic plug and playing devices on your home network. Universal Plug and Play, UPnP enables the computer to find and use the device on the network, search the device via TCP / IP via the network connection, a scanner, a digital camera or a printer on the network. They are all functions that use UPnP, which is not available based on security. But now the digital equipment is very popular, and users need can retain
Depending: Universal Plug and Play Device Host
Suggestion: deactivation
System Event Notification (System Event Notifications)
Track system events such as Windows login, network, and power events. Notify these events of the COM event system subscriber. It is especially important to the server.
Depending: COM EVENT SYSTEM
Suggest: Automatic
System Restore Service
Execute the system restore function. To stop the service, close the system from my computer-attribute-system restore, I feel that the resources are more wasteful, and you can turn off.
Dependence: Remote Procedure Call (RPC)
Suggestion: deactivation
Task Scheduler
Let users set up automatic work plans on this computer and execute. If this service is stopped, these work will not be executed when they set. Any service that is clearly refined will not be started. Set automatic work plan, like some timing disk scan, virus timing scan, update, etc., but usually very small, you can close
Dependence: Remote Procedure Call (RPC)
Suggest: manual
TCP / IP NetBIOS Helper (TCP / IP NetBIOS Assist Program)
Enable NetBIOS over TCP / IP (NetBt)] service and support for NetBIOS name resolution. If your network does not use NetBIOS or WINS, you can close it, for users who don't know about the network, otherwise it may cause your network to have problems.
Dependent: AFD network support environment, NetBT
Suggestion: deactivation
Telephony (phone speech)
Connect to this unit and the server that is being executed by a local area network to control the service voice device and IP voice connection, providing a telephone voice API (TAPI) support. General dial modem or some DSL / Cable may be used
Dependence: Plug and Play, Remote Procedure Call (RPC), Remote Access Connection Manager, Remote Access Auto Connection Manager
Suggest: manual
Telnet
Enable a remote user to log in to this computer and perform an application, and support a variety of TCP / IP Telnet clients, including UNIX is basically and based on Windows. If the service is stopped, the remote user may not access the application. Any other service explicitly in this service will fail. Allow remote users to log in to this computer with Telnet, the average person will misunderstand the use of BBS, which is independent, and the BBS is not related to the reason. If there is no special demand, it is recommended to close.
Depending: NT LM Security Support Provider, Remote Procedure Call (RPC), TCP / IP Protocol Driver
Suggestion: deactivation
TERMINAL SERVICES (Terminal Services)
Allow multiple users to connect to the same computer, desktop, and applications to remote computers. Restoring Remote Desktop (including system administrator's RD), fast switching users, remote assistance, and terminal servers. Remote desktop or remote assistance features, it is not necessary to turn off, and the current service has also led to a number of network servers security issues.
Depend: Remote Procedure Call (RPC), Fast User Switch Compatibility, InteractiveLogon
Suggestion: deactivation
Themes
Provide user theme management. Many people use a set theme to create a personalized system, but if not used, it can be turned off. Suggest: Automatic
Uninterruptible Power Supply (constant power supply system)
Manage Uninterruptible Power Supply (UPS) connected to this computer. Uninterruptible Power Supply (UPS) Is the average person useful? Otherwise it is closed unless your power supply has this feature.
Suggestion: deactivation
Universal Plug and Play Device Host
Provides support for host universal plug and playing devices. Used to detect installing Universal Plug and Play, UPNP devices, like digital cameras or printers, now there are now many devices need this.
Depending: SSDP Discovery Service
Suggest: Automatic
Volume Shadow Copy
Manage and execute disk mirroring for backup and other purposes. If this service is stopped, mirror replication will not be used for backup, and the backup may fail. Any service that is clearly refined will not be started. As mentioned above, things used to backup, such as MS Backup programs need this service
Dependence: Remote Procedure Call (RPC)
Suggestion: deactivation
WebClient
Enable Windows-based programs to establish, access, and modify the Internet-based file. If this service is stopped, these features will not be available. Any service that is clearly refined will not be started. Use WebDAV to load files or files to all web services, security reasons, you can try to close
Depending: WebDav Client Redirector
Suggestion: deactivation
Windows Audio
Manage audio devices for Windows as the main program. If this service is stopped, the audio device and the effect will not function properly. Any service that is clearly refined will not be started. If you don't have a sound card, you can shut him, but now the personal computer will not have a sound card?
Depending on: Plug and Play, Remote Procedure Call (RPC)
Suggest: Automatic
Windows Image Acquisition (WIA) (Windows image acquisition)
Provide image capture services for scanners and digital cameras. If the scanner and digital camera have support WIA function, you can see the icon directly, no other driver, so the user without the scanner and digital camera is more close.
Dependence: Remote Procedure Call (RPC)
Suggestion: deactivation
Windows Installer (Windows Installer)
Install, repair, and removal software based on an indication included in the .msi file. It is a system service that assists users to properly install, set, track, upgrade, and remove software programs, manage applications, standard formats, and track, such as archive groups, login projects, and shortcuts. Many software installations need to be used, so it is recommended to keep it, otherwise it will encounter a lot of trouble.
Dependence: Remote Procedure Call (RPC)
Suggest: Automatic
Windows Management Instrumentation (WMI)
Provide common interfaces and object models to access management information about operating systems, devices, applications, and services. If this service has stopped, most Windows software will not work properly. All services that are contained in it will not be able to start. As mentioned above, it is a service providing a standard infrastructure to monitor and manage system resources. You must not move him.
Depending: Event Log, Remote Procedure Call (RPC) Suggestions: Automatic
Windows Management Instrumentation DRiver Extensions provides a system management information management driver. The extension of Windows Management Instrument, provides information, can be set to manual
Suggest: manual
Windows Time (Windows Time Set)
Maintain all clients and time synchronization processing on all clients and servers on the network. If this service is stopped, the date and time synchronization processing will not be possible. All dependent services will stop. The network is not too significant when calibration, and has a lot of resources, it can be closed.
Suggestion: deactivation
Wireless Zero Configuration
To provide automatic settings for the 802.11 adapter card, automatically configure the wireless network device, the meaning of the words is to say, unless you have a wireless network device, then you need to use this network zero management service, otherwise this is a bit for you. No.
Depending: NDIS Usermode I / O Protocol, Remote Procedure Call (RPC)
Suggestion: deactivation
WMI Performance Adapter
Provides efficacy link library information from WMIHIPERF providers. Not much for most users
Dependence: Remote Procedure Call (RPC)
Suggestion: deactivation
Workstation
Establish and maintain the client network from the remote server. These online will not be used if this service is stopped. All services that are dependent on it will not be able to start. Is some of the features necessary in the network connection
Dependess: Alerter, Background Intelligent Transfer Service, Computer Browser, Messenger, Net Logon, Remote Procedure Call (RPC) Locator
Suggest: Automatic
Many services in Windows can't be used. You can decide on your own needs, what you want to keep, which are closed, I believe that after your changes, system resources will increase
