Windows XP Services Tweak Guide

Windows XP, runs many background Services for a wide variety of tasks, e.g. Plug & Play support, Print Spooler & even Task Manager.

There are ways of optimizing the usage of these Services and configure your machine for improved performance and even security by modifying their respective Startup types, and in some cases disabling them altogether. This guide will take you through a multitude of different Services, how and what they work for

Before making any changes to your Services it would be a good idea to backup the current environment. You can do this by using the Backup utility in Start, All Programs, Accessories, System Tools, Backup.

Another alternative would be to simply backup you current Services & their settings. Click on Start, Run type in regedit & hit Enter. Expand to the following [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services]. Now select File then Export & save that registry branch with a specified name. Simply Double clicking on this file will prompt you as to whether or not you wish this information to be added to the registry in wish case select Yes & your previously saved settings will be restored.

Now that you’ve backed up your Service settings/Operating System we can move onto adjusting the Services themselves. Click on Start, Control Panel, Administrative Tools then Services.

Before adjusting any of these you’ll need to consider 2 things – Startup type & Dependencies. To cover these 2 just double click on any of the listed Services & select the General tab.

Most of these configurations are the same for both XP Home and Professional unless otherwise noted.

• Alerter

Notifies selected users and computers of administrative alerts.
This service is basically useless. You can leave it to Manual or set it to Disabled. Default: Manual

• Application Layer Gateway Service

Provides support for 3rd party protocol plugins for Internet Connection Sharing and the Internet Connection Firewall.
Unless you use the built-in firewall you can leave this on Manual. Default: Manual

• Application Management

Provides software installation services such as Assign, Publish, and Remove.
It's best to leave this on Manual to allow normal installing and uninstalling. Default: Manual

• Automatic Updates

Enables the download and installation of critical Windows updates.
If you're one of those odd ones that uses Automatic Updates then leave this on Automatic. For everyone else, I'm sorry to say, you've been betrayed. Even though you've turned off Automatic Updates under your System Properties menu this service is still running! Go ahead and set this to Disabled. If you want to switch download methods, then make sure to first turn off automatic updating under the System Properties menu before disabling. Default: Automatic

• Background Intelligent Transfer Service

Uses idle network bandwidth to transfer data.
This can set to either Manual or Disabled without problem in most cases. Default: Manual

• ClipBook

Enables ClipBook Viewer to store information and share it with remote computers. If the service is stopped, ClipBook Viewer will not be able to share information with remote computers.
Unless you actually do this (which almost no one does) just set it to Disabled. Default: Manual

• COM+ Event System

Supports SENS (System Event Notification Service), which provides automatic distribution of events to subscribing COM (Component Object Model) components.
While most everyone can leave set this to Manual, you might find it useful to set it to Automatic. Your computer won't suffer if you don't, so test it out and see for yourself. Default: Manual

• COM+ System Application

Manages the configuration and tracking of COM+ (Component Object Model) based components.
Manual is just fine, but you can try Automatic too. Default: Manual

• Computer Browser

Maintain an updated list of computers on the network and supplies this list to computers designated as browsers.
You can set this to Manual unless you need the rapid access for some strange reason. Default: Automatic

• Cryptographic Services

Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds & removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates.
Leave this set to Automatic for optimal security. Default: Automatic

• Creative Service for CDROM Access

This service only exists for those of us with Creative soundcards and software.
I found it nothing but annoying and later I uninstalled all non-driver related Creative software entirely. If you use their Disk Detector (for some bizarre reason) leave it. Otherwise, disable it. A word of warning, Creative installs Disk Detector by default and sets it to Automatic. Make sure to disable it in the Creative menu first before killing it here. Default: Automatic

• DHCP Client

Manages network configuration by registering and updating IP addresses and DNS names.
You should be able to set this to Manual without problem. However, if you find you have problems connecting to the internet after changing it, set it back to Automatic. Default: Automatic

• Diskeeper

Controls the Diskeeper service.
This service exists only for those of us who use the Diskeeper defragmentation software as opposed to the Windows pre-installed defragmenter. Set this to Manual. Default: Automatic

• Distributed Link Tracking Client

Maintains links between NTFS files within a computer or across computers in a network domain.
In most cases this can be set to Manual. If your drives are formatted with FAT32 you do not need it at all. However, if you are on an XP/2000 network or use NTFS 5.0 formatting then you might want to set it to Automatic so it can fix links and such. Default: Automatic

• Distributed Transaction Coordinator

Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems.
Set this to Manual. It's pretty much useless unless you fulfill the requirements above in which case you should still be able to set it to Manual without problems. Default: Manual

• DNS Client

Resolves and caches Domain Name System (DNS) names for this computer.
Unless you use a DNS server (check your Network Connections properties and see if any are specified) set this to Manual. Default: Automatic

• Error Reporting Service

Allows error reporting for services and applications running in non-standard environments.
If you enjoy sending your system errors to Microsoft Headquarters then set this to Manual. Otherwise, go to the System menu on the Control Panel, click Advanced, click Error Reporting and disable the service there first before setting it here to Disabled. Default: Automatic

• Event Log

Enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer.
Leave this set to Automatic! Don't even think about changing it. Default: Automatic

• Fast User Switching Compatibility

Provides management for applications that require assistance in a multiple user environment.
Allows you to quickly switch to another user account without having to close any programs -- a rather stupid service to be set to Automatic by default. If you are the only user on your computer, have only one account, or never need this fast switching ability, go to User Accounts on the Control Panel, go to Change the Way Users Log On or Off, and uncheck Use Fast User Switching. Click Apply options, then set it to Disabled here. Default: Manual

• Help and Support

Enables Help and Support Center to run on this computer.
Set this to Manual -- it will work the same and only take an extra second to load when you actually need it. Default: Automatic

• Human Interface Device Access

Enables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices.
This setting really depends upon the user. If your keyboard or whatnot uses its own drivers for hotkeys then you can Disable this service. If it uses default Windows drivers and you use these keys (such as the video play keys for Windows Media Player) then set this to Automatic. If you don't use those keys that often and really want the little extra bit of memory, you can set this to Manual and start the service from the configuration menu whenever you need it (which is what I do). Default: Automatic

• IMAPI CD-Burning COM Service

Manages CD recording using Image Mastering Applications Programming Interface (IMAPI).
If you use the Windows preinstalled CD-RW burning support (check the drive properties in the Hardware Manager to configure this) then set this to Automatic. If you, like me, use other burning software then set this to Manual or Disabled. Default: Manual or Automatic

• Indexing Service

Indexes contents & properties of files on local and remote computers; provides rapid access to files through flexible querying language.
Makes searches for specific document file extensions easier. In most cases you can Disable this without issue. It is a good idea to delete the catalogues that Windows has already created. To do this, open Computer Management from Administrative Tools. Expand Services and Applications, then System, go to the Directories folder and, on the right-hand side, delete each of the listed catalogued directories. Default: Manual

• Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS)

Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network.
Should you use either of these set this to Automatic. Otherwise you can set it to Manual or Disabled. Default: Manual (Home) or Automatic (Professional)

• IPSEC Services

Manages IP security policy and starts the ISAKMP/Oakley (IKE) and the IP security driver.
Most ISPs don't have support for this so most people can set it to Manual or Disabled without issue. However, for added security or if you're not sure, setting it to Automatic won't hurt anything as it may possibly add extra security and stops itself anyway after use.

• Logical Disk Manager

Detects and monitors new hard disk drives and sends disk volume information to Logical Disk Manager Administrative Service for configuration
You should be able to set this to Manual without any problems. Default: Manual (Home) or Automatic (Professional)

• Logical Disk Manager Administrative Service

Configures hard disk drives and volumes.
Set this to Manual. Default: Manual

• McAfee Firewall

This service is only for those that use McAfee Firewall software.
It's best to set this to Manual and then open it when you plan on using the internet, otherwise it just eats memory. Be sure to disable automatic startup within Firewall itself before resetting the service configuration. Default: Automatic

• McShield

McAfee on Access Scanner.
This service is also only for those that use McAfee Virus Scan software. McAfee usually runs a large number of unecessary processes in the background, even when not connected to the internet or when McAfee is closed. It's best to set this to Manual and then open McAfee Virus Scan when you plan on using the internet or are handling potentially hazardous files. Default: Automatic

• Messenger

Transmits netsend and Alerter service messages between clients and servers. This service is not related to Windows Messenger.
If you use Alerter set this to Manual. Otherwise, just set it to Disabled. Default: Automatic

• MS Software Shadow Copy Provider

Manages software-based volume shadow copies taken by the Volume Shadow Copy service.
For Professional users only. Set this to Manual. Default: Manual

• NetMeeting Remote Desktop Sharing

Enables an authorized user to access this computer remotely by using NetMeeting over a corporate intranet.
For extra security set this to Disabled. If you are one of the 1% that use this function leave it on Manual. Default: Manual

• Network Connections

Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections.
This is absolutely imperative for anyone that uses the internet as it controls your connection. I have been able to set this to Manual without much issue. However, every now and again Internet Explorer will freeze just after opening (when the dialer is supposed to pop up), requiring me to close it down and re-open it. This doesn't happen very often though, and since I, like most people, don't use the internet every time I am on my computer, it's nice to eliminate an extra service running in the background. Don't ever set this to Disabled unless you don't have the internet or want to prevent someone from connecting. I recommend trying it on Manual, and setting it to Automatic if you have connection issues. Default: Automatic

• Network DDE

Provides network transport and security for Dynamic Data Exchange (DDE) for programs running on the same computer or on different computers.
Unless your computer requires a DDE IPC connection (which most don't) go ahead and set this service to Disabled (or Manual). A few other services and applications may use Network DDE so make sure and check its dependencies first. Default: Manual

• Network DDE DSDM

Manages Dynamic Data Exchange (DDE) network shares.
If you use Network DDE above set this to Automatic (or Manual). Otherwise, set it to Disabled. Default: Manual

• Network Location Awareness (NLA)

Collects and stores network configuration and location information, and notifies applications when this information changes.
This service relates to shared connections and the like. Leave it on Manual unless you share a connection in which case it might be helpful to set it to Automatic. I have also read that setting it to Automatic is helpful if you use the built-in Internet Explorer firewall (though I personally have never tested this). Default: Manual

• NVIDIA Driver Helper Service

If you use a NVIDIA graphics card with Detonator drivers you will have this service. You can set it to Manual (or Disabled) without problem. Default: Automatic

• Performance Logs and Alerts

Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert.
Set this to Manual unless you have XP configured to record and log system events. If you do, then set to Automatic or no logs will be recorded. Default: Manual

• Plug and Play

Enables a computer to recognize and adapt to hardware changes with little or no user input.
Absolutely leave this set to Automatic to track hardware changes or you will regret it! Default: Automatic

• Portable Media Serial Number

Retrieves the serial number of any portable music player connected to your computer.
If you don't connect portable media devices (i.e. MP3 players) to your computer you can set this to Manual or Disabled. Even if you do, this can be set to Manual without problem in most cases (try it, and change to Automatic if there is a problem). Default: Automatic

• Print Spooler

Loads files to memory for later printing.
If you use a printer this must be set to Automatic. If set to Manual Windows will not be able to print. I myself don't print very often, and so I leave it on Manual and simply start the service before I print. This keeps another unwanted service from running needlessly in the background. Default: Manual

• Protected Storage

Provides protected storage for sensitive data, such as private keys, to prevent access by unauthorized services, processes, or users.
Leave this set to Automatic for maximum security. Default: Automatic

• QoS RSVP

Provides network signaling and local traffic control setup functionality for QoS-aware programs and control applets.
This saves connection bandwidth and gives it to QoS processes. This gives them more bandwidth than necessary, and so this service is best set to Disabled unless you use such applications. Default: Manual

• Remote Access Auto Connection Manager

Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address.
This is also imperative for internet usage. As I have stated before, since I and most others don't connect to the internet every session, this may be set to Manual. If you have issues, set it to Automatic. Default: Manual

• Remote Access Connection Manager

Creates a network connection.
Set this to the same setting as the Auto Connection Manager. Default: Manual

• Remote Desktop Help Session Manager

Manages and controls Remote Assistance.
If you use Remote Assistance (i.e. allowing tech support or the like modify your computer remotely) leave this on Manual. However, for security reasons, I highly recommend setting this to Disabled. Before doing so, make sure to change this setting in System Properties first by right-clicking on My Computer, clicking the Remote tab, and unchecking Remote Assistance and Remote Desktop. Default: Manual

• Remote Procedure Call (RPC)

Provides the endpoint mapper and other miscellaneous RPC services.
Another service that should be set to Automatic and nothing else; many services depend on it! Default: Automatic

• Remote Procedure Call (RPC) Locater

Manages the RPC name service database.
Leave this set to Manual. I would not recommend disabling it completely. Default: Manual

• Remote Registry

Enables remote users to modify registry settings on this computer.
For Professional users only. I highly recommend setting this to Disabled for security reasons unless your system administrator says otherwise. For stand-alone users set this to Disabled. Default: Manual

• Removable Storage

Manages removable media, drives, and libraries.
Don't be fooled; this does not apply to CDs, DVDs, or disks, only to tape devices and such. Thus this can be set to Disabled for most users. Default: Manual

• Routing and Remote Access

Offers routing services to businesses in local area and wide area network environments.
Stand-alone and XP Home users can set this Disabled for security reasons. Only set to Automatic if you are a business user who needs things routed remotely or share a network connection. Default: Manual

• Secondary Logon

Enables starting processes under alternate credentials.
This is necessary for computers with multiple users only; all others may set it to Disabled. If you are on a shared computer and need to be able to access certain administrative functions even if you are not the system administrator then set this to Manual. Default: Automatic

• Security Accounts Manager

Stores security information for local user accounts.
If you are the only user on a computer or have the same security settings for all users set this to Disabled. If you have modified any security settings for multiple users then set this to Manual. Default: Automatic

• Server

Supports file, print, and named pipe-sharing over the network for this computer.
As far as I can tell it is okay to set this to Manual, though I have read from various sources that leaving this on Automatic is recommended. I have had no issues with it thus far, so go ahead and set it to Manual unless you do share files or print remotely or if the new setting causes problems with remote sharing tasks. Default: Automatic

• Shell Hardware Detection

This provides support for docking a laptop or other related external hardware devices.
If you dock such devices leave this set to Automatic otherwise set it to Manual or Disabled. Default: Automatic

• Smart Card

Manages access to smart cards read by this computer.
Unless you use smart cards set this to Disabled. Default: Manual

• Smart Card Helper

Enables support for legacy non-plug and play smart-card readers used by this computer.
Set this to the same as above. Default: Manual

• SSDP Discovery Service

Enables discovery of UPnP devices on your home network.
This can be set to Manual in most PCs, even those that connect to such devices. For added security this may be set to Disabled, but make sure your computer does not require this service. Default: Manual

• System Event Notification

Tracks system events such as Windows logon, network, and power events.
Keep this on Automatic in order to prevent system errors. However, if you really want to eliminate another service from the background this may be set to Manual on most systems without issue. Default: Automatic

• System Restore Service

Performs system restore functions.
If you have the System Restore function enabled in the System Properties menu leave this set to Automatic otherwise Disable it. I myself have it set to Manual and have not seen any problems with function when I do restore. It is generally recommended to leave it set to Automatic though if you do use this service. Default: Automatic

• Task Scheduler

Enables a user to configure and schedule automated tasks on this computer.
Even if you don't have any tasks scheduled Windows seems to like this running, and so it is best left on Automatic. You can try setting it to Disabled at your own risk, but it's not recommended. Default: Automatic

• TCP/IP NetBIOS Helper

Enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution.
Most connections don't require this, and so it can be set to Disabled. If you're not sure, set it to Manual and see if the service starts after you have connected. Default: Automatic

• Telephony

Provides Telephony API (TAPI) support for programs that control telephony devices and IP based voice connections on the local computer and, through the LAN, on servers that are also running the service.
This is important for internet connection and is best left on Manual. Default: Manual

• Telnet

Enables a remote user to log on to this computer and run programs, and supports various TCP/IP Telnet clients, including UNIX-based and Windows-based computers.
For XP Professional users only. This is best set to Disabled for security reasons. Only leave on Manual if you need to allow remote users to access telnet through your Command Prompt. Default: Manual

• Terminal Services

Allows multiple users to be connected interactively to a machine as well as the display of desktops and applications to remote computers. The underpinning of Remote Desktop (including RD for Administrators), Fast User Switching, Remote Assistance, and Terminal Server.
Unless you use or will require the above services set this to Disabled for added security. Default: Manual

• Themes

Provides user experience theme management.
Controls background and personal theme settings. Leave this set to Automatic in all cases, unless, of course, you really want the extra memory disabling this provides. Default: Automatic

• Uninterruptible Power Supply

Manages an uninterruptible power supply (UPS) connected to the computer.
Set to Manual (or Automatic if problems arise) if you use a UPS (i.e. backup battery) or Disable if you don't. Default: Manual

• Universal Plug and Play Device Host

Provides support to host Universal Plug and Play devices.
Set this to the same setting as your SSDP Discovery Service. Default: Manual

• Upload Manager

Manages synchronous and asynchronous file transfers between clients and servers on the network.
I keep this on Manual, though most people should be able to set it to Disabled without problems. Default: Manual

• Volume Shadow Copy

Manages and implements Volume Shadow Copies used for backup and other purposes.
This can be set to Manual even if you use this function. Default: Manual

• WebClient

Enables Windows-based programs to create, access, and modify Internet-based files.
I have found that setting this to Manual is probably best even if Windows never really uses it. However, many others have set it to Disabled without problem and also reap a security benefit from doing so. One thing that is for sure is that it definately does not need to be Automatic. Default: Automatic

• Windows Audio

Manages audio devices for Windows-based programs. If this service is stopped, audio devices and effects will not function properly.
Leave this set to Automatic; it controls all sound and audio devices. Default: Automatic

• Windows Image Acquisition (WIA)

Provides image acquisition services for scanners and cameras.
Even if you don't use these devices it is best just to leave it set to Manual since certain applications use it and it will only start when needed. Default: Manual

• Windows Installer

Installs, repairs and removes software according to instructions contained in .MSI files.
Leave this set to Manual -- NEVER set it to Disabled. Default: Manual

• Windows Management Instrumentation

Provides a common interface and object model to access management information about operating system, devices, applications and services.
Leave this set to Automatic -- do NOT change it to anything else! Default: Automatic

• Windows Management Instrumentation Driver Extensions

Provides systems management information to and from drivers.
For XP Professional users only. This can be set to Manual without issue. I wouldn't recommend setting it to Disabled. Default: Manual

• Windows Time

Maintains date and time synchronization on all clients and servers in the network.
Every now and again when you connect to the internet Windows will synchronize your clock to the exact time on its servers. While some may like that idea it is really not necessary and is best set to Disabled. Before doing so, make sure its disabled in Date and Time Properties. Right-click on the time in the corner of your screen, select Adjust Date and Time, click the Internet Time tab, and uncheck the box. Then Disable the service like normal. Default: Automatic

• Wireless Zero Configuration

Provides automatic configuration for the 802.11 adapters.
If you use 802.11 adapters leave this on Automatic, otherwise Disable it (or set to Manual if you're unsure). Default: Automatic

• WMI Performance Adapter

Provides performance library information from WMI HiPerf providers.
Not really necessary and can be set to Disabled in most cases. Default: Automatic

• Workstation

Creates and maintains client network connections to the remote servers.
Absolutely necessary -- leave it set to Automatic! Default: Automatic

After completing your configuration restart your computer to let the changes take effect. Make sure to test as much as you can before proceeding further. If something ceases to work or works improperly, go back and find the service that relates to it and change it back to the default setting. Be sure you have all of that service's dependencies started and working. If you still can't find the problem, just double-click on the Registry backup we made earlier to restore the original settings.

Posted in: windows