| Service |
Description |
Safely Disable? |
| Alerter |
Notifies selected users and computers of administrative alerts |
Yes |
| Application Layer Gateway |
Provides support for application-level protocol plug-ins and enables network/protocol connectivity |
Maybe |
| Application Management |
Processes installation, removal, and enumeration requests for Active Directory IntelliMirror group policy programs |
Yes |
| Automatic Updates |
Enables the download and installation of critical Windows updates |
Yes |
| Background Intelligent Transfer |
Transfers data between clients and servers in the background |
Yes |
| ClipBook |
Enables ClipBook Viewer to store information and share it with remote computers |
Yes |
| COM+ Event System/System Application |
Allows management of Component Services by providing automatic distribution of events to subscribing COM components |
No |
| Computer Browser |
Maintains an up-to-date list of computers on your network, and supplies the list to programs that request it. The Computer Browser service is used by Windows-based computers that need to view network domains and resources. |
Yes |
| Cryptographic services |
Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates |
No |
| DHCP Client |
Allows the system to automatically obtain IP addressing information, WINS server information, routing information, and so forth; is required to update records in Dynamic DNS |
Maybe |
| HID Input |
Enables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices |
Maybe |
| IMAPI CD-Burning COM |
Manages CD recording using Image Mastering Applications Programming Interface (IMAPI) |
Maybe |
| Indexing Service |
Indexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language |
Yes |
| Internet Connection - Firewall (ICF) / Sharing (ICS) |
Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network |
Maybe |
| IPSEC services |
Provides end-to-end security between clients and servers on TCP/IP networks |
Maybe |
| Logical Disk Manager |
Waits for new drives to be added and passes required information to the LDM administrative service; required to ensure dynamic disk information is up to date |
Yes |
| Logical Disk Manager Administrative |
Starts and allows configuration to take place when a new drive is detected or a partition/drive is configured |
Yes |
| Machine Debug Manager |
Manages Visual Studio debugging |
Yes |
| Messenger |
Transmits net send and Alerter service messages between clients and servers. This service is not related to Windows Messenger |
Yes |
| Microsoft Software Shadow Copy Provider |
Manages software-based volume shadow copies taken by the Volume Shadow Copy service |
Yes |
| NetMeeting Remote Desktop Sharing |
Enables an authorized user to access this computer remotely by using NetMeeting over a corporate intranet |
Yes |
| Network Connections |
Manages the network and dial-up connections for the server, including network status notification and configuration |
No |
| Network DDE |
Provides network transport and security for Dynamic Data Exchange (DDE) for programs running on the same computer or on different computers |
Yes |
| Network DDE DSDM |
Manages Dynamic Data Exchange (DDE) network shares |
Yes |
| Network Location Awareness (NLA) |
Collects and stores network configuration and location information and notifies applications when this information changes. This service is a part of ICS |
Maybe |
| NT LM Security Support Provider |
Allows users to log on to the network using NTLM |
Maybe |
| Performance Logs and Alerts |
Collects performance data for the computer or other computers and writes it to a log or displays it on the screen |
Yes |
| Plug and Play |
Allows an administrator to add hardware to a server and have the server automatically detect and configure it |
No |
| Portable Media Serial Number |
Retrieves the serial number of any portable media player connected to this computer |
Yes |
| Print Spooler |
Manages all local and network print queues and controls all printing jobs |
Maybe |
| Protected Storage |
Protects sensitive information such as private keys from exposure except to allowed persons and services |
Yes |
| QoS RSVP |
Provides network signaling and local, traffic-control, set-up functionality for (Quality of Service) QoS-aware programs and control applets |
Yes |
| Remote Access Auto Connection Manager |
Detects unsuccessful attempts to connect to a remote network or computer and provides alternative methods for connection |
Yes |
| Remote Access Connection Manager |
Manages dial-up and virtual private network (VPN) connections from this computer to the Internet or other remote networks |
Maybe |
| Remote Desktop Help Session Manager |
Manages and controls Remote Assistance |
Yes |
| Remote Procedure Call (RPC) |
Allows processes to communicate internally and across the network with each other |
No |
| Remote Procedure Call (RPC) Locator |
Provides RPC name services similar to DNS services for IP |
No |
| Remote Registry |
Provides a mechanism to remotely manage the system registry |
Maybe |
| Removable Storage |
Manages and catalogs removable media and operates automated removable media devices |
Yes |
| Routing and Remote Access |
Enables multiprotocol LAN-to-LAN, LAN-to-WAN, virtual private network (VPN), and network address translation (NAT) routing services for clients and servers on this network |
Yes |
| Secondary Logon |
Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable |
Yes |
| Security Accounts Manager |
Stores account information for local security accounts, which, when started, allows other services to access the SAM |
Yes |
| Server |
Allows the sharing of local resources such as files and printers, as well as named pipe communication |
Yes |
| Shell Hardware Detection |
Provides notifications for AutoPlay hardware events |
Yes |
| Smart Card |
Manages access to smart cards read by this computer |
Yes |
| Smart Card Helper |
Provides support for earlier smart card readers attached to the computer |
Yes |
| SSDP Discovery |
Used to locate UPnP devices on your home network. Used in conjunction with Universal Plug and Play Device Host, it detects and configures UPnP devices on your home network |
Yes |
| System Event Notification |
Required to record entries in the event logs; notifies COM+ subscribers about logon and power-related events |
Yes |
| System Restore |
Performs system restore functions, including saving periodic checkpoints |
Yes |
| Task Scheduler |
Enables a user to configure and schedule automated tasks on this computer |
Yes |
| TCP/IP NetBIOS Helper |
Required for software distribution in a Group Policy (may be used to distribute patches) and provides support for NetBIOS over TCP/IP and NetBIOS name lookups |
Yes |
| Telephony |
Provides Telephony API (TAPI) support for clients using programs that control telephony devices and IP-based voice connections |
Yes |
| Telnet |
Enables a remote user to log on to this computer and run programs; supports various TCP/IP Telnet clients, including UNIX- and Windows-based computers |
Yes |
| Terminal Services |
Allows users to connect interactively to a remote computer; Remote Desktop, Fast User Switching, Remote Assistance, and Terminal Server depend on this service. |
Yes |
| Themes |
Provides user experience theme management |
Yes |
| Uninterruptible Power Supply |
Manages an uninterruptible power supply (UPS) connected to the computer |
Yes |
| Universal Plug and Play Device Host |
Used in conjunction with SSDP Discovery Service, it detects and configures UPnP devices on your home network |
Yes |
| Upload Manager |
Manages synchronous and asynchronous file transfers between clients and servers. Driver data is anonymously uploaded from these transfers and used by Microsoft to help users find needed drivers. The Driver Feedback Server asks the client's permission to upload the computer's hardware profile and then search the Internet for information about how to obtain the appropriate driver or get support. |
Yes |
| Volume Shadow Copy |
Manages and implements volume shadow copies used for backup and other purposes |
Yes |
| WebClient |
Enables Windows-based programs to create, access, and modify Internet-based files |
Yes |
| Windows Audio |
Manages audio devices for Windows-based programs |
Yes |
| Windows Image Acquisition (WIA) |
Provides image acquisition services for scanners and cameras |
Yes |
| Windows Installer |
Adds, modifies, and removes applications provided as a Windows Installer (*.msi) package |
Yes |
| Windows Management Instrumentation (WMI) |
Provides system management information; required to implement performance alerts using Performance Logs and Alerts |
No |
| WMI Driver Extensions |
Monitors all drivers and event trace providers that are configured to publish Windows Management Instrumentation (WMI) or event trace information |
Yes |
| Windows Time |
Uses NTP to keep computers in the domain synchronized |
Yes |
| Wireless Zero Configuration |
Automatically configured WiFi (802.11) network adapters |
Maybe |
| WMI Performance Adapter |
Provides performance library information from Windows Management Instrumentation (WMI) providers to clients on the network |
Yes |
| Workstation |
Provides network connections and communications using the Microsoft Network services |
Yes |
