Windows 2000/XP Service Overview (1)

For Windows 2000/XP, which we often use, there are many services, So what are these services? What do we need? What is not required?

The Win32 service program consists of three parts: service application, Service Control Program, and Service Control Manager. The Service Control Manager maintains service data in the registry. The Service Control Program is a module that controls service applications and serves as a bridge between control service applications and service managers. A service application is the main program of a service program. It is the executable code of one or more services. We can find it in Control Panel-management tools-service. You can modify their current status and startup mode. There are three ways to start them: "automatic" is enabled when the computer starts or needs to be started. "Manual" means you can use "Net" in a command prompt
The START and net stop commands are disabled. "disabled" means that the instance is not started before the startup mode is changed.

Many of them are mutually dependent among many service programs, so we cannot stop a service at will. Otherwise, the system may be abnormal, however, some services do not play any role for us and occupy our valuable system resources. In fact, many programs are not available and can be closed, to save resources.

Alert)

Notifies the selected user and Computer System Management alert. If you stop this service, programs that use system management alerts will not be notified. All services dependent on it cannot be started. Generally, home computers do not need to send or receive warnings managed by computer systems.
Alerts), unless your computer is on a Local Area Network
Dependency: Workstation
Suggestion: Disable

Application
Layer Gateway Service
Provides support for Internet online sharing and third-party communication protocol plug-ins of the internet online firewall if you do not use internet online sharing (ICS)
You can turn off the Internet access and internet online firewall (ICF) software for multiple computers.
Dependency: internt Connection Firewall (ICF)
/Internet Connection Sharing (ICS)
Suggestion: Disable

Application Management
(Application Management)

An all-new and effective software management solution based on MSI file format introduced from Win2000-application management component service, which can not only manage the installation and deletion of software, you can also use this service to modify and repair existing applications, monitor file recovery, and troubleshoot basic faults through recovery.

Suggestion: Manual

Automatic Updates
Enable download and installation of important windows updates. If you disable this service, you can manually
Update the operating system on the Windows Update Website. Allow Windows to go to Microsoft servers to automatically check and download the update Patch under Background automatic connection.

Suggestion: Disable

Background Intelligent Transfer Service

Use idle network bandwidth to transmit data. For example, Windows Update is one of the tasks of transferring data in the background through via http1.1.

Dependency: Remote Procedure Call (RPC) and workstation
Suggestion: Disable

Clipbook)

Enable the clipboard viewer to store information and share it with remote computers. If this service is stopped, the clipboard viewer cannot share information with a remote computer. Any service that explicitly depends on it cannot be started.
Share information in the clipboard with other computers.
Dependency: Network DDE
Suggestion: Disable

COM +
Event System (COM + Event System)
Supports "System Event Notification Service (SENS)", which automatically disperses events to COM components. If the service is stopped, sens
Will be disabled, and no logon or logout notifications are provided. Any services that depend on it obviously cannot be started. Some programs may use COM + components, such as the optimize system of bootvis.
Application. For example, the DCOM shown in the event check is not enabled.
Dependency: Remote Procedure Call (RPC) and System Event
Notification
Suggestion: Manual

COM + System Application
Manage COM +
Set and track components. If you stop this service, most COM + components cannot run smoothly. Any service that explicitly depends on it cannot be started. If the DCOM shown in the event check is not enabled

Dependency: Remote Procedure Call (RPC)
Suggestion: Manual

Computer Browser
(Computer Browser)

Maintain the updated computer list on the network and provide this list to the computer used as a browser. If you stop the service, the configuration will not be updated or maintained. If this service is disabled, all services dependent on it cannot be started.
Generally, you do not need a home computer unless your computer is used on a LAN, but is it necessary to slow down the local computer on a large lan?
Dependency: Server and workstation

Suggestion: Disable

Cryptographic Services
Three management services are provided: Confirm Windows File authentication;
From this computer to add and remove trusted root certificate authentication authorization creden;; and to assist in registering this computer to obtain creden
. If this service is stopped, these management services will not work properly. Any service that explicitly depends on it cannot be started. Simply put, Windows Hardware Quality Lab
(WHQL) a type of Microsoft authentication. If you use automatic updates, you may need this
Dependency: Remote Procedure Call
(RPC)
Suggestion: Manual

DHCP Client)
Log on to and update the IP address and DNS
Name to manage network settings. This is required by DSL/cable, ICS, and IPSec to specify the dynamic
IP address. If the system is not in any network, or the network does not have DHCP service, you can disable it.
Dependency: AFD network supports environment, netbt, symtdi, TCP/IP
Protocol Driver and NetBIOS over TCP/IP
Suggestion: Manual

Distributed Link
Tracking Client (Distributed Link tracing client)
Maintain NTFS in the computer or in different computers in the Network
Links between archives. For the vast majority of users, it can be closed, except for special users.
Dependency: Remote Procedure Call (RPC)

Suggestion: Disable

Distributed Transaction Coordinator (distributed exchange Coordinator)

Coordinates information exchange across multiple resource administrators, such as databases, message queues, and file systems. If the service is stopped, these transactions will not occur. Any service that obviously depends on it cannot be started. As mentioned above, it is generally not suitable for household computers unless you enable
Message Queuing
Dependency: Remote Procedure Call (RPC) and security accounts manager

Suggestion: Disable

DNS Client)
Resolve and quickly obtain the Domain Name System (DNS) of this computer)
Name. If you stop this service, the computer will not be able to resolve the DNS name and find the location of the Active Directory domain control site. All services dependent on it cannot be started.
As mentioned above, in addition, IPSec needs to be used
Dependency: TCP/IP protocol driver
Suggestion: Manual

Error Reporting Service

Allows error reporting for services and applications executed in non-standard environments. Microsoft's application Error Reporting Service is useless to most users and useless to pirated users. We recommend that you disable it.

Dependency: Remote Procedure Call (RPC)
Suggestion: Disable

Event Log (event record file)

Event messages sent from Windows-based programs and components can be viewed in the event viewer. This service cannot be stopped. Allows event messages to be displayed on the event viewer.

Dependency: Windows Management Instrumentation
Suggestion: automatic

Fast User
Switching Compatibility

Provides application management in a multi-user environment. In addition, it is recommended that you do not stop switching the User Function in the logout screen. Otherwise, many functions cannot be implemented.
Dependency: Terminal
Services
Suggestion: Manual

Help and Support

Microsoft provides services that support instructions and help files. If this service is stopped, you will not be able to use the instructions and support center. All its dependent services cannot be started.
If you do not use it, it turns out that not many people need it. We recommend that you stop it unless you have special requirements.
Dependency: Remote Procedure Call (RPC)

Suggestion: Disable

Human Interface Device Access
Enables ergonomic interface device (HID)
Common Input Access, hid
The device starts and maintains the use of shortcuts predefined on the keyboard, remote control, and other multimedia devices. If the service is stopped, the shortcut of the service control will no longer work, and any services explicitly dependent on it will not start. If there is no HID device, you can disable it.

Dependency: Remote Procedure Call (RPC)
Suggestion: Manual

Imapi CD-Burning COM
Service
Use Image Mastering Applications Programming Interface (imapi)
To manage the disc burning. If the service is stopped, the computer cannot burn the disc. Any service that explicitly depends on it cannot be started. XP integrated CD-R and CD-RW
The drag-and-drop burning function on the optical drive cannot match the burning software. turning it off can also speed up Nero enabling. If you are not used to third-party software, please keep it.
Suggestion: Disable

Indexing Service (Index Service)
Indexing content and file attributes of local and remote computers; quick file access through elastic query languages.
To put it simply, it can speed up your search, but I think few people should search for it with remote computers unless it is special work.
Dependency: Remote Procedure Call (RPC)

Suggestion: Disable

Internet Connection Firewall (ICF)/Internet connection
Sharing (ICS)

Provides network address translation, addressing and name resolution services and services to your home network or small office network to prevent interference. If you do not use Internet-based online sharing (ICS) or XP
You can disable the built-in internet online firewall (ICF ).
Dependency: Application Layer Gateway Service, Network
Connections, Network Location Awareness (NLA), Remote Access Connection Manager

Suggestion: Disable

IPSec services (IP Security Service)
Manage IP Security Principles and start
ISAKMP/Oakley (IKE) and IP Security Driver. Helps protect data transmitted over the network. IPSec is an important part of Virtual Private Network (VPN)
While VPN allows organizations to transmit data over the Internet securely. Some domains may be needed, but most users do not need it.
Dependency: IPSec
Driver, Remote Procedure Call (RPC), TCP/IP protocol driver
Suggestion: Manual

Logical Disk Manager (Logical Disk administrator)

Detects and monitors new hard disk and transfers Disk Area Information to the Logical Disk Management System for configuration. If the service is stopped, the dynamic disk status and settings may be out of date. Any service that explicitly depends on it cannot be started. The disk administrator is used to dynamically manage disks, such as displaying available disk space and usage.
Functions of the Microsoft Management Console (MMC) Console
Dependency: Plug and Play, Remote Procedure
Call (RPC), Logical Disk Manager Administrative Service
Suggestion: automatic

Logical Disk Manager Administrative Service (Logical Disk Administrator System Management Service)

Set the hard disk and disk area. The service only executes the setup program and then stops. Microsoft Management Console (MMC)

Dependency: Plug and Play, Remote Procedure Call (RPC), and Logical Disk Manager

Suggestion: Manual

Messenger)
Transmission over the network between the client and the server
"Alerter]" service text message. This service has nothing to do with Windows Messenger. If you stop this service, Alerter
Messages will not be transmitted. All services dependent on it cannot be started. For example, the net send function is used to send prompt messages between networks. If you do not want to be harassed, you can turn it off.

Dependency: NetBIOS interface, Plug and Play, Remote Procedure Call (RPC), and workstation

Suggestion: Disable

MS Software Shadow Copy Provider

Manage the disk area shadow replication service for software-based Disk Area shadow replication. If you stop this service, you cannot manage shadow replication in the software-based Disk Area. Any service that explicitly depends on it cannot be started. As mentioned above, what is used for backup, such
The MS backup program needs this service, but most people do not.
Dependency: Remote Procedure Call (RPC)

Suggestion: Disable
Net Logon
Supports pass-through for account logon events of computers on the network
Verify. Generally, a home computer is unlikely to use the logon Network review service.
Dependency: Workstation
Suggestion: Disable

NetMeeting Remote Desktop Sharing (NetMeeting Remote Desktop Sharing)

Allows authorized users to use NetMeeting
Remote access to the computer through the company's internal network. If this service is stopped, the Remote Desktop Sharing function will be unavailable. Any service that depends on it cannot be started.
As mentioned above, users can share control of computers with other users on the Internet or the Internet. if you pay attention to security and do not want to open a backdoor more, you can close it.
Suggestion: Disable

Network Connections (network connection)

Manage objects in the network and dial-up connection data folder, where you can view the local network and remote connection. Control your network connection
Dependency: Remote Procedure
Call (RPC), Internet Connection Firewall (ICF)/Internet Connection Sharing
(ICS)
Suggestion: Manual

Network DDE)
For Dynamic Data Exchange (DDE)
Provides network transmission and security for programs executed on the same or different computers. If this service is stopped, DDE transmission and security cannot be used. Any service that explicitly depends on it cannot be started. The average person does not seem to be able to use

Dependency: Network dde dsdm, Clipbook
Suggestion: Disable

Network dde dsdm (Network
Dde dsdm)
Information Dynamic Data Exchange (DDE) network sharing. If the service is stopped, the DDE network sharing will be unavailable. Any service that explicitly depends on it cannot be started.
The average person does not seem to be able to use
Dependency: Network DDE
Suggestion: Disable

Network Location Awareness
(NLA)
Collect and store network settings and location information, and notify the application when this information is changed. If you do not use ICF or ICS, you can disable it.

Dependency: AFD network supports environment, TCP/IP procotol driver, Internet Connection Firewall (ICF )/
Internet Connection Sharing (ICS)
Suggestion: Disable

Nt lm Security Support
Provider (NTLM security support provider)
Provides security for Remote Procedure Call (RPC) programs that do not use named pipe transmission. If message is not used
Queuing or telnet server will shut down, and generally users will not be able to use it.
Dependency: Telnet
Suggestion: Disable