Windows Vista Services Explained

Default: For space considerations, default shows Ultimate settings. For a full list of all defaults, check out the full services list.
Safe: Services that do not affect the user experience in any way. You should not even notice a difference when using these settings, but it is possible. Disables unnecessary services.
Tweaked: Many heavy and most likely unused services have been disabled. This is much lighter than 'Safe'. Aero disabled, but Themes left alone, as many people will blindly run this without reading what services are gone, and will be surprised/angry to see themes disappear.
Minimal: All services that are not necessary to every day use and windows update have been disabled. Themes is disabled, Aero is disabled, firewall disabled. This assumes you have your OWN firewall/AV software installed!

Note: If you want just an overview of all services, check out Services Overview

Too much to take in? Try out one of our registry files that will set up your computer to one of the below settings, or use it to set your services settings back to factory spec.

(A-P) | (P-W) | (W-Z)

Service Default 'Safe' Tweaked Minimal
Peer Networking Grouping
Description:
P2P grouping

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
Peer Name Resolution Protocol, Peer Networking Identity Manager

Required for:
None

Manual Manual Disabled Disabled
Peer Networking Identity Manager
Description:
P2P Identification services

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
Peer Name Resolution Protocol, PNRP Machine Name Publication Service, Peer Networking Grouping

Manual Manual Disabled Disabled
Performance Logs & Alerts
Description:
Performance logging. Kind of handy, but I have found no 'need' for it yet, especially since 90% of users do not use it, and the ones that do use it, know not to set it to default.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
None

Manual Manual Disabled Disabled
Service Default 'Safe' Tweaked Minimal
Plug and Play
Description:
Required for many(most) services.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
Fax , Windows Driver Foundation - User-mode Driver Framework, Smart Card, Telephony, Tablet PC Input Service, Windows Audio, Windows Modules Installer, Remote Access Auto Connection Manager, Virtual Disk, Windows Audio Endpoint Builder

Automatic* Automatic* Automatic* Automatic*
PnP-X IP Bus Enumerator
Description:
Manages Virtual Network bus.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Function Discovery Provider Host, Remote Procedure Call (RPC)

Required for:
Windows Media Center Extender Service

Manual Manual Disabled Disabled
PNRP Machine Name Publication Service
Description:
P2P naming

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
Peer Name Resolution Protocol, Peer Networking Identity Manager

Required for:
None

Manual Manual Disabled Disabled
Portable Device Enumerator Service
Description:
Manages removable storage devices to interface with WMP and image import. May be needed for MP3 players and Digital Cameras

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
None

Automatic Manual Disabled Disabled
Print Spooler
Description:
Same as always. Handles spooling of printer. If you disable it you will still be able to print but will need to always wait for print to complete to continue work. If you only print like one thing a month, or less, then there is no reason for this to constantly be taking up memory on your computer. However, I have chosen to recommend this to Automatic even for 'tweak' because it will cause your system to behave different than you are used to if you have never disabled this service, and many 'tweak' users will just go ahead and follow the recommendation without reading the warning.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
Fax

Automatic Automatic Automatic Disabled
Problem Reports and Solutions Control Panel Support
Description:
Allows you to send errors to Microsoft. This allows you to use the Control Panel problems/solutions item, which appears to be pretty useful if the need ever arises. However, it does require sending loads of data to microsoft, and in many cases, it will be doubtful that they will come up with any useful suggestion. Give it a try though. Do realize, when I have tested this, 14MB of computer information was transferred to MS, which contained unknown amounts of personally identifable information.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
None

Manual Manual Disabled Disabled
Program Compatibility Assistant Service
Description:
Compatibility with old windows software, I am guessing? I havn't seen any compatibility issues yet, and I have run several DOS,win95, and XP apps.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
None

Automatic Automatic Manual Disabled
Protected Storage
Description:
Allows you to have protected storage, like in your home folder. If you have multiple users accessing your computer, and you do not want them monkeying around with your files, then enable it. If you are just one user, I see no real need for it.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
None

Manual Manual Manual Disabled
Quality Windows Audio Video Experience
Description:
qWave. Streaming audio

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
None

Manual Manual Disabled Disabled
ReadyBoost
Description:
This is that fancy new Vista feature that enables you to use USB Flash Drives as a hard drive cache, and not extra memory as some people have stated. If you pull the drive out in the middle of using it, the computer will not crash, as no unique data is present on the drive. Check back soon for a benchmark of how this ends up performing, after I get a card that is fast enough to allow it. A large portion of existing flash drives are NOT fast enough to support this feature, meaning using your flash drive will actually be slower than just grabbing them from the hard drive. Windows will tell you when this is the case. So, before running out and buying a flash drive, do some research on random access speeds and flash drives to make sure your 200x ~14MB/s flash drive is actually worth anything or if its just marketing hype. The numbers they give are for sequential reads, not random.

Consequences of Stopping:
If you disable it control panel won't work any more.. Well, maybe if you disable readyboost, then kill the service, it will recover. I have not looked into it yet.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Software Licensing, Remote Procedure Call (RPC)

Required for:
None

Automatic Automatic Automatic Automatic
Remote Access Auto Connection Manager
Description:
Remote networking DNS lookup. Some internet providers may require it, but most do not. If your internet fails to work after disabling this, then set it back to Manual.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Telephony, Plug and Play, Remote Procedure Call (RPC), Remote Access Connection Manager

Required for:
None

Manual Manual Disabled Disabled
Service Default 'Safe' Tweaked Minimal
Remote Access Connection Manager
Description:
Manages dialup/VPN. If you do not need it: disable

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
Internet Connection Sharing (ICS), Routing and Remote Access, Remote Access Auto Connection Manager

Manual Manual Manual Disabled
Remote Procedure Call (RPC)
Description:
Remote procedure calls. Just about everything requires this.

Consequences of Stopping:
Your computer will be totally hosed.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher

Required for:
Network Location Awareness, IP Helper, Performance Logs & Alerts, Internet Connection Sharing (ICS), Base Filtering System, Windows Connect Now - Config Registrar, Microsoft Software Shadow Copy Provider, Windows Installer, Windows Firewall, Extensible Authentication Protocol, Remote Access Auto Connection Manager, Windows Media Center Receiver Service, Parental Controls, Protected Storage, Tablet PC Input Service, Windows Management Instrumentation, Windows Audio, DFS Replication, COM+ Event System, Quality Windows Audio Video Experience, Security Accounts Manager, System Event Notification Service, Wired AutoConfig, Offline Files, Routing and Remote Access, Fax , Group Policy Client, Windows Media Center Scheduler Service, IKE and AuthIP Ipsec Keying Modules, SL UI Notification Service, Windows Defender, Software Licensing, Security Center, Telephony, Server, Function Discovery Resource Publication, Terminal Services UserMode Port Redirector, PnP-X IP Bus Enumerator, Windows Backup, WLAN AutoConfig, Network List Service, Volume Shadow Copy, Superfetch, Windows Search, Remote Registry, Certificate Propagation, CNG Key Isolation, Shell Hardware Detection, Background Intelligent Transfer Service, Computer Browser, Health Key and Certificate Management, Windows Color System, Windows Update, COM+ System Application, Link-Layer Topology Discovery Mapper, Network Access Protection Agent, Distributed Transaction Coordinator, Program Compatibility Assistant Service, Windows Remote Management (WS-Management), Windows Media Center Extender Service, Windows Media Center Service Launcher, IPsec Policy Agent, Smart Card Removal Policy, Function Discovery Provider Host, ReadyBoost, Application Information, Terminal Services, Virtual Disk, Network Connections, Task Scheduler, Windows Image Acquisition (WIA), Cryptographic Services, Print Spooler, Distributed Link Tracking Client, User Profile Service, KtmRm for Distributed Transaction Coordinator, Portable Device Enumerator Service, Terminal Services Configuration

Automatic* Automatic* Automatic* Automatic*
Remote Procedure Call (RPC) Locator
Description:
Manages RPC names. I have found no real downside to disabling this.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
None

Manual Manual Manual Disabled
Remote Registry
Description:
You can modify your registry settings remotely. Most users will not need this for home use, so you can safely disable it. It does have its uses, but not a necessary part of any desktop. You may see this as a potential security hole, as if anyone got access to it, you are done for.

Consequences of Stopping:
Authenticated remote users will not be able to make registry changes.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
None

Manual Manual Disabled Disabled
Routing and Remote Access
Description:
Allows users to connect to this computer. It is disabled by default, and is not a needed service.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Base Filtering System, Remote Procedure Call (RPC), Remote Access Connection Manager

Required for:
None

Disabled Disabled Disabled Disabled
Secondary Logon
Description:
Support for secondary logon. Needed for some applications that need to run under a secondary logon account. Postgres comes to mind. Think of it as Window's version of su, except in Windows, you usually run yourself as an administrator all the time anyway.

Consequences of Stopping:
Programs utilizing secondary logon will fail to load. If you have security set high, and someone on a non-admin account wants to do something that requires admin privs, you will need to log them out and log in, instead of just using runas.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
None

Automatic Automatic Manual Disabled
Security Accounts Manager
Description:
Security Accounts Manager. Allows for group policy to be applied.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
Computer Browser, Server, Distributed Transaction Coordinator, KtmRm for Distributed Transaction Coordinator

Automatic Automatic Automatic Automatic
Security Center
Description:
That annoying little tray app that tells you when your computer isn't secure . If you disable this you need to take additional steps to keep it from annoying you

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Windows Management Instrumentation, Remote Procedure Call (RPC)

Required for:
None

Automatic (DS) Automatic (DS) Manual Disabled
Server
Description:
File/Print Sharing

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC), Security Accounts Manager

Required for:
Computer Browser

Automatic Automatic Manual Disabled
Shell Hardware Detection
Description:
Autoplay notifications, etc. Sometimes, I am annoyed by the autoplay detections, and would rather just go access it directly from my computer or wherever. If you enjoy these popups/functionaly, leave it on automatic.

Consequences of Stopping:
When you insert a CD, flash drives, etc, Windows will not come up with a dialog asking you how to open it/automatically open it
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
Windows Image Acquisition (WIA)

Automatic Automatic Automatic Disabled
SL UI Notification Service
Description:
Software Licensing activation

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
Network Location Awareness, DCOM Server Process Launcher, Software Licensing, Remote Procedure Call (RPC), Network List Service, Network Store Interface Service

Required for:
None

Manual Manual Manual Disabled
Service Default 'Safe' Tweaked Minimal
Smart Card
Description:
Supports smart cards on your pc for authentication. I have not seen many computers utilizing this (some laptops), so if you enjoy this feature, then leave it enabled. However, it is likely that you do not even have a smartcard slot..

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
Plug and Play

Required for:
None

Manual Manual Disabled Disabled
Smart Card Removal Policy
Description:
If you use a smartcard for computer access.. Obviously you need this.

Consequences of Stopping:
Smartcards may not work on your computer.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
None

Manual Manual Disabled Disabled
SNMP Trap
Description:
SNMP Trapping and forwarding to SNMP.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
None

Manual Manual Disabled Disabled
Software Licensing
Description:
Enforcement of DRM and possibly Windows Update. Required for Readyboost which is required for control panel access.

Consequences of Stopping:
Windows update will likely not work. Control Panel will not work, unless you have found a work around for readyboost.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
ReadyBoost, SL UI Notification Service

Automatic Automatic Automatic Automatic
SSDP Discovery
Description:
Enables devices that use SSDP, which is for UPnP. If you have UPnP (separate from PnP) devices, they may stop working. If so, set it back to manual.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
Windows Media Player Network Sharing Service, Windows Media Center Extender Service, UPnP Device Host

Manual Manual Disabled Disabled
Superfetch
Description:
This service prioritizes user applications over background services. Great if you are running a desktop. Not great if you are running a server, and it puts higher priority on your 'desktop experience' while starving the background server apps you want to give priority to. It preloads applications that you most often use into memory as well, so it might end up using quite a bit of memory. I will get around to doing some in depth tests on this service later.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
None

Automatic Automatic Automatic Disabled
System Event Notification Service
Description:
Notifies COM+ events to other applications. I have seen no downside to not running this.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC), COM+ Event System

Required for:
COM+ System Application

Automatic Automatic Automatic Disabled
Tablet PC Input Service
Description:
Unless you have a tablet PC.. Why does MS feel it necessary to set this to Automatic?

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Plug and Play, Remote Procedure Call (RPC)

Required for:
None

Automatic Manual Disabled Disabled
Task Scheduler
Description:
Allows you to schedule automated tasks, and some services use this to schedule tasks as well. Not able to disable via Services.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC), Windows Event Log

Required for:
None

Automatic* Automatic* Automatic* Automatic*
TCP/IP NetBIOS Helper
Description:
NetBIOS support. Most likely you don't need this unless you know otherwise

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
None

Automatic Automatic Disabled Disabled
Telephony
Description:
TAPI support. Mostly used for people with dialup. If your networking stops working, try setting this back to manual.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Plug and Play, Remote Procedure Call (RPC)

Required for:
Fax , Remote Access Auto Connection Manager

Manual Manual Disabled Disabled
Service Default 'Safe' Tweaked Minimal
Terminal Services
Description:
Allows users to log in to this computer. Not required to make outward connections with Remote Desktop. It may be required to use the new Vista features of terminal services, which allows you to run remote programs without being 'conscious' of the use, as it will run in your own desktop, rather than through a Window. I will get around to investigating this further...

Consequences of Stopping:
I believe that Terminal Services to a computer are disabled by default, unless you set it up, so I am unsure why this process needs to be running at all times.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
Windows Media Center Extender Service, Terminal Services UserMode Port Redirector

Automatic Automatic Manual Disabled
Terminal Services Configuration
Description:
Configuration of Terminal Services

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
Workstation, DCOM Server Process Launcher, Remote Procedure Call (RPC), Network Store Interface Service

Required for:
None

Manual Manual Manual Disabled
Terminal Services UserMode Port Redirector
Description:
Redirection of ports for Terminal Services

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC), Terminal Services

Required for:
None

Manual Manual Disabled Disabled
Themes
Description:
I rather like the new fancy windows views. But it's pretty heavy so make the decision yourself. Without it sidebar still works only without fancy transparency. Disabling it will default you to the classic Windows theme.

Consequences of Stopping:
You will be unable to use themes. It will default back to the old Windows classic look and feel.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
None

Automatic Automatic Automatic Disabled
Thread Ordering Server
Description:
Ordered execution of threads. More on this as I look further into the matter.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
None

Manual Manual Manual Disabled
TPM Base Services
Description:
Trusted Platform Module key hosting

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
None

Manual Manual Manual Disabled
UPnP Device Host
Description:
UPnP support. Plug and Play devices over your network. Let your computer get notified that your toast is ready! It was introduced for XP, but as far as I have heard, it has not caught on.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
SSDP Discovery

Required for:
Windows Media Player Network Sharing Service

Automatic Automatic Automatic Disabled
User Profile Service
Description:
User management. If disabled, prepare for some fun times getting it set up. It tries to look for your desktop in the system32 directory, loses all your start menu settings, and Services won't run. I won't guarentee this will happen to you. Just reboot into safe mode if you get in to trouble.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
Application Information

Automatic Automatic Automatic Automatic
Virtual Disk
Description:
Management services for disks. You can leave it on manual to run only when you need it.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Plug and Play, Remote Procedure Call (RPC)

Required for:
None

Manual Manual Manual Disabled
Volume Shadow Copy
Description:
Used for backup.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
None

Manual Manual Manual Disabled
WebClient
Description:
Allows your programs to modify internet files via windows. I have not found any programs that use this (FrontPage maybe?).

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
None

Automatic Manual Disabled Disabled
Service Default 'Safe' Tweaked Minimal
Windows Audio
Description:
Pretty self-explanatory. This manages audio within windows.

Consequences of Stopping:
If disabled, you won't be able to use your audio devices.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Multimedia Class Scheduler, Plug and Play, Remote Procedure Call (RPC), Windows Audio Endpoint Builder

Required for:
None

Automatic Automatic Automatic Automatic
Windows Audio Endpoint Builder
Description:
Endpoint devices are things like speakers, microphones, etc. I have this strange feeling this has been broken out of the 'Windows Audio' service where it used to lie, to include much of the new DRM crazyiness that you read about in Vista. Securing down your computer so that certain audio devices, if not secure (i.e. analog) get different quality audio than secure channels. I cannot confirm that this is the culprit, as honestly, I havn't seen any of these 'nasty' things that MS put into Windows (but most likely had to, to allow for a secure channel for decoding DRM whatnot). Anyway, on the surface, it tells allows Windows to more effectively manage your audio hardware. It knows how many mics, speakers, etc you have, rahter than just sending information out blindly.

Consequences of Stopping:
If Disabled, Windows Audio service wont be able to start
All services listed in 'Required For' will be unable to function

Depends on:
Plug and Play

Required for:
Windows Audio

Automatic Automatic Automatic Automatic
Windows Backup
Description:
Windows backup and restore

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
None

Manual Manual Manual Disabled

(A-P) | (P-W) | (W-Z)


Steampunk Labs