Introduction to Windows2000/XP services

Introduction to Windows2000/XP services
For windows 2000/xp which we often use, there are many services, So what are these services? What do we need? What is not required? Here is an introduction. The Win32 service program consists of three parts: service application, Service Control Program, and Service Control Manager. The Service Control Manager maintains service data in the registry. The Service Control Program is a module that controls service applications and serves as a bridge between control service applications and service managers. A service application is the main program of a service program. It is the executable code of one or more services. We can find it in Control Panel-management tools-service. You can modify their current status and startup mode. There are three ways to start them: "automatic" is enabled when the computer starts or needs to be started. "Manual" can be opened by using the "net start" command and "net stop" command in the command prompt. "disabled" means that it will not be started until the startup mode is changed.
　　
Many of them are mutually dependent among many service programs, so we cannot stop a service at will. Otherwise, the system may be abnormal, however, some services do not play any role for us and occupy our valuable system resources. In fact, many programs are not available and can be closed, to save resources.
　　
---------------------------------------------- Alert (alarm)
Notifies the selected user and Computer System Management alert. If you stop this service, programs that use system management alerts will not be notified. All services dependent on it cannot be started. Generally, home computers do not need to send or receive warnings managed by computer systems (Administrative Alerts) unless your computer is used on a local area network.
Dependency: Workstation
Suggestion: Disable
　　
Application Layer Gateway Service
Third-party communication protocol plug-ins that provide Internet online sharing and internet online firewall support if you do not use internet online sharing (ICS) to provide Internet access for multiple computers and internet online firewall (ICF) you can turn off the software.
Dependency: Internt Connection Firewall (ICF)/Internet Connection Sharing (ICS)
Suggestion: Disable
　　
Application Management)
An all-new and effective software management solution based on msi file format introduced from win2000-application management component service, which can not only manage the installation and deletion of software, you can also use this service to modify and repair existing applications, monitor file recovery, and troubleshoot basic faults through recovery.
Suggestion: Manual
　　
　　
Automatic Updates
Enable download and installation of important Windows updates. If you disable this service, you can manually Update the operating system from the Windows Update Website. Allow Windows to go to Microsoft Servers to automatically check and download the update Patch under Background automatic connection.
Suggestion: Disable
　　
Background Intelligent Transfer Service
Use idle network bandwidth to transmit data. For example, Windows Update is one of the tasks of transferring data in the background through Via HTTP1.1.
Dependency: Remote Procedure Call (RPC) and Workstation
Suggestion: Disable
　　
ClipBook)
Enable the clipboard viewer to store information and share it with remote computers. If this service is stopped, the clipboard viewer cannot share information with a remote computer. Any service that explicitly depends on it cannot be started. Share information in the clipboard with other computers.
Dependency: Network DDE
Suggestion: Disable
　　
COM + Event System (COM + Event System)
The System Event Notification Service (SENS) is supported, which automatically disperses events to COM components. If the service is stopped, SENS will shut down and cannot provide logon and logout notifications. Any services that depend on it obviously cannot be started. Some programs may use COM + components, such as the optimize system application of BootVis. For example, the DCOM shown in the event check is not enabled.
Dependency: Remote Procedure Call (RPC) and System Event Notification
Suggestion: Manual
　　
COM + System Application
Manage the settings and tracking of COM + components. If you stop this service, most COM + components cannot run smoothly. Any service that explicitly depends on it cannot be started. If the DCOM shown in the event check is not enabled
Dependency: Remote Procedure Call (RPC)
Suggestion: Manual
　　
Computer Browser)
Maintain the updated computer list on the network and provide this list to the computer used as a browser. If you stop the service, the configuration will not be updated or maintained. If this service is disabled, all services dependent on it cannot be started. Generally, you do not need a home computer unless your computer is used on a LAN, but is it necessary to slow down the local computer on a large lan?
Dependency: Server and Workstation
Suggestion: Disable
　　
Cryptographic Services
Three management services are provided: Confirm Windows File authentication; add and remove trusted root certificate authentication authorization creden from this computer; and assist in registering this computer for obtaining creden. If this service is stopped, these management services will not work properly. Any service that explicitly depends on it cannot be started. Simply put, Windows Hardware Quality Lab (WHQL) is a type of Microsoft authentication. If you use Automatic update, you may need this
Dependency: Remote Procedure Call (RPC)
Suggestion: Manual
　　
DHCP Client)
Manage network settings by logging on to and updating the IP address and DNS name. All users who use DSL/Cable, ICS, and IPSEC need this to specify a dynamic IP address. If the system is not on any network, or the network does not have a DHCp service, you can set it to disabled.
Dependency: AFD network supports environment, NetBT, SYMTDI, TCP/IP Protocol Driver, and NetBios over TCP/IP
Suggestion: Manual
　　
Distributed Link Tracking Client (Distributed Link tracing Client)
Maintain connections between NTFS files on different computers in the computer or network. For the vast majority of users, it can be closed, except for special users.
Dependency: Remote Procedure Call (RPC)
Suggestion: Disable
　　
Distributed Transaction Coordinator (Distributed exchange Coordinator)
Coordinates information exchange across multiple resource administrators, such as databases, message queues, and file systems. If the service is stopped, these transactions will not occur. Any service that obviously depends on it cannot be started. As mentioned above, it is generally not suitable for household computers unless you enable Message Queuing.
Dependency: Remote Procedure Call (RPC) and Security Accounts Manager
Suggestion: Disable
　　
DNS Client)
Resolve and quickly obtain the Domain Name System (DNS) name of this computer. If you stop this service, the computer will not be able to resolve the DNS name and find the location of the Active Directory domain control site. All services dependent on it cannot be started. As mentioned above, in addition, IPSEC needs to be used
Dependency: TCP/IP Protocol Driver
Suggestion: Manual
　　
Error Reporting Service
Allows error reporting for services and applications executed in non-standard environments. Microsoft's application Error Reporting Service is useless to most users and useless to pirated users. We recommend that you disable it.
Dependency: Remote Procedure Call (RPC)
Suggestion: Disable Event Log (Event record file)
Event messages sent from Windows-based programs and components can be viewed in the event viewer. This service cannot be stopped. Allows event messages to be displayed on the event viewer.
Dependency: Windows Management Instrumentation
Suggestion: automatic
　　
Fast User Switching Compatibility
Provides application management in a multi-user environment. In addition, it is recommended that you do not stop switching the User Function in the logout screen. Otherwise, many functions cannot be implemented.
Dependency: Terminal Services
Suggestion: Manual
　　
Help and Support
Microsoft provides services that support instructions and help files. If this service is stopped, you will not be able to use the instructions and support center. All its dependent services cannot be started. If you do not use it, it turns out that not many people need it. We recommend that you stop it unless you have special requirements.
Dependency: Remote Procedure Call (RPC)
Suggestion: Disable
　　
Human Interface Device Access
Enables universal input access to the ergonomic interface device (HID), which enables and maintains the use of predefined shortcuts on this keyboard, remote control, and other multimedia devices. If the service is stopped, the shortcut of the service control will no longer work, and any services explicitly dependent on it will not start. If there is no HID device, you can disable it.
Dependency: Remote Procedure Call (RPC)
Suggestion: Manual
　　
Imapi cd-Burning COM Service
Use Image Mastering Applications Programming Interface (IMAPI) to manage the disc burning. If the service is stopped, the computer cannot burn the disc. Any service that explicitly depends on it cannot be started. XP integrated CD-R and CD-RW drive drag and drop burning function, but unfortunately not comparable to the burning software, turn off can also accelerate the speed of Nero, if not used to use third-party software, please keep.
Suggestion: Disable
　　
Indexing Service (Index Service)
Indexing content and file attributes of local and remote computers; quick file access through elastic query languages. To put it simply, it can speed up your search, but I think few people should search for it with remote computers unless it is special work.
Dependency: Remote Procedure Call (RPC)
Suggestion: Disable
　　
Internet Connection Firewall (ICF)/Internet Connection Sharing (ICS)
Provides network address translation, addressing and name resolution services and services to your home network or small office network to prevent interference. If you do not use Internet-based online sharing (ICS) or