Disabling Services Guide

I suggest we use this thread to suggest to each other which services can be turned off, because we do not need them. This is a work in progress. I did not follow this post 100% and neither should you. Change services according to your computer config. If you do not have one of these services, chances are you already disabled the option in 'Turn Windows features on or off' or you are running a different edition of Windows Vista.

Start > services.msc > Enter
Winkey + R > services.msc > Enter

Application Experience - Default: Automatic (Started)
- Safe: Leave as is

Application Information - Default: Manual (Started)
- Safe: Leave as is

Application Layer Gateway Service - Default: Manual
- Used for certain software services | If this service is started already, leave on Manual (Safe) | If it is not, set to Disabled

Application Management - Default: Manual
- If you don't "deploy software through Group Policy", Set to Disabled

Background Intelligent Transfer Service - Default: Automatic (Delayed Start) (Started)
- Safe: Leave as is (unless you don't use Windows Update)

Base Filtering Engine - Default: Automatic (Started)
- Disabling this service reduces security of the OS (needed for firewall, some unusual protocols, remote access, and internet connection sharing), Safe: Leave as is

Block Level Backup Engine Service - Default: Manual
- Since this service is on manual and does not start, it may be needed at some point, but it isn't a critical service

Certificate Propagation - Default: Manual
- If you don't use Smart Cards, Safe: Set to Disabled

CNG Key Isolation - Default: Manual
- This service may be needed if you are on Wired/Wireless Lan Autoconfig Since and will be using EAP (Extensible Authentication Protocol), Otherwise: Set to Disabled

COM+ Event System - Default: Automatic (Started)
- Responsible for many things including the Backup and Restore Center, Safe: Leave as is

COM+ System Application - Default: Manual
- Since this service is on manual and does not start, it may be needed at some point, but it isn't a critical service

Computer Browser - Default: Automatic
- If you aren't on a network, Safe: Set to Disabled

Cryptographic Services - Default: Automatic (Started)
- Needed for some connections/websites (Microsoft/Windows Update?), confirms signatures of windows files, Safe: Leave as is

DCOM Server Process Launcher - Default: Automatic (Started)
- Safe: Leave as is

Desktop Window Manager Session Manager - Default: Automatic (Started)
- If you don't use the advanced Aero Glass transparency interface, Safe: Set to Disabled

DFS Replication - Default: Manual
- If you aren't on a network, Safe: Set to Disabled

DHCP Client - Default: Automatic (Started)
- Typically needed for most Internet Connections (maybe not if you have a static IP), Safe: Leave as is

Diagnostic Policy Service - Default: Automatic (Started)
- If you don't care for Windows finding solutions to problems (including fixing internet connection problems in vista and ie7), Safe: Set to Disabled

Diagnostic Service Host - Default: Manual
- If you don't care for Windows finding solutions to problems, Safe: Set to Disabled

Diagnostic System Host - Default: Manual (Started)
- If you don't care for Windows finding solutions to problems, Safe: Set to Disabled

Distributed Link Tracking Client - Default: Automatic (Started)
- If you don't have links between NTFS Files, Safe: Set to Disabled

Distributed Transaction Coordinator - Default: Manual
- Since this service is on manual and does not start, it may be needed at some point, but it isn't a critical service (Set to Disabled)

DNS Client - Default: Automatic (Started)
- Needed once in a while, Safe: Leave as is

Extensible Authentication Protocol - Default: Manual
- Disabling this service reduces security of the OS (needed for firewall, some unusual protocols, remote access, and internet connection sharing), Safe: Leave as is

Fax - Default: Manual
- If you don't use a fax or a scanner, Safe: Set to Disabled

Function Discovery Provider Host - Default: Manual (Started)
- If not on a network (needed for certain uncommon network components), Safe: Set to Disabled

Function Discovery Resource Publication - Default: Automatic (Started)
- If not on a network (needed for certain uncommon network components), Safe: Set to Disabled

Group Policy Client - Default: Automatic (Started)
- Safe: Leave as is (can technically be disabled if not used, will look into possible problems later)

Health Key and Certificate Management - Default: Manual
- Safe: Set to Disabled

Human Interface Device Access - Default: Manual
- If you don't use the extra buttons on your keyboard or use the software for it, Safe: Set to Disabled

IKE and AuthIP IPsec Keying Modules - Default: Automatic
- Safe: Set to Disabled

Infrared Monitor service - Default: Automatic (Started)
- If you don't have/use infrared, Safe: Set to Disabled

Interactive Services Detection - Default: Manual
- Since this service is on manual and does not start, it may be needed at some point, but it isn't a critical service

Internet Connection Sharing (ICS) - Default: Disabled
- Possibly not needed (will look into), Safe: Leave as is

IP Helper - Default: Automatic (Started)
- If you don't want IPv6 support, Safe: Set to Disabled

IPsec Policy Agent - Default: Automatic (Started)
- Possibly not needed (will look into), Safe: Leave as is

KtmRM for Distributed Transaction Coordinator - Default: Automatic (Delayed Start)
- Possibly not needed (will look into), Safe: Leave as is

Link-Layer Topology Discovery Mapper - Default: Manual
- Since this service is on manual and does not start, it may be needed at some point, but it isn't a critical service

Microsoft .Net Framework NGEN v.20.50727_X64/X86 - Default: Manual
- Safe: Leave as is

Microsoft iSCSI Initiator Service - Default: Manual
- If you don't use iSCSI, Safe: Set to Disabled

Microsoft Software Shadow Copy Provider - Default: Manual
- Since this service is on manual and does not start, it may be needed at some point, but it isn't a critical service

Multimedia Class Scheduler - Default: Automatic (Started)
- Needed for Windows Audio, Safe: Leave as is

Net.Tcp Port Sharing Service - Default: Disabled
- Safe: Leave as is

Netlogon - Default: Manual
- Since this service is on manual and does not start, it may be needed at some point, but it isn't a critical service

Network Access Protection Agent - Default: Manual
- Safe: Set to Disabled

Network Connections - Default: Manual (Started)
- Unless you aren't using the internet, Safe: Leave as is

Network List Service - Default: Automatic (Started)
- Unless you aren't using the internet, Safe: Leave as is

Network Location Awareness - Default: Automatic (Started)
- Unless you aren't using the internet, Safe: Leave as is

Network Store Interface Service - Default: Automatic (Started)
- Unless you aren't using the internet, Safe: Leave as is

Offline Files - Default: Automatic (Started)
- Unless you use them, Safe: Set to Disabled

Parental Controls - Default: Manual
- Unless you use them, Safe: Set to Disabled

Peer Name Resolution Protocol - Default: Manual
- Unless you use Windows Meetings, Safe: Set to Disabled

Peer Networking Grouping - Default: Manual
- Unless you use such applications, Safe: Set to Disabled

Peer Networking Identity Manger - Default: Manual
- Safe: Set to Disabled

Performance Logs & Alerts - Default: Manual
- Needed for many features of Windows, Safe: Leave as is

Plug and Play - Default: Automatic (Started)
- Unless you don't connect various devices often, Safe: Leave as is

PnP-X IP Bus Enumerator - Default: Manual
- Since this service is on manual and does not start, it may be needed at some point, but it isn't a critical service

PNRP Machine Name Publication Service - Default: Manual
- Safe: Set to Disabled

Portable Device Enumerator Service - Default: Automatic (Started)
- If you do not own a portable device, Safe: Set to Disabled

Print Spooler - Default: Automatic (Started)
- If no printer (including virtual ones) is present on the computer, Safe: Set to Disabled

Problem Reports and Solutions Control Panel Support - Default: Manual
- If you don't use it, Safe: Set to Disabled

Program Compatibility Assistant Service - Default: Automatic (Started)
- If you don't use the Program Compatibility Assistant, Safe: Set to Disabled

Protected Storage - Default: Manual
- If you don't save passwords, Safe: Set to Disabled

Quality Windows Audio Video Experience - Default: Manual
- If you don't need it, Safe: Set to Disabled

ReadyBoost - Default: Automatic (Started)
- If you don't use USB drives as a memory boost, Safe: Set to Disabled

Remote Access Auto Connection Manager - Default: Manual
- If you won't be connecting to your computer remotely, Safe: Set to Disabled

Remote Access Connection Manger - Default: Manual (Started)
- If you won't be connecting to your computer remotely, Safe: Set to Disabled

Remote Procedure Call (RPC) - Default: Automatic (Started)
- Vital, Safe: Leave as is

Remote Procedure Call (RPC) Locator - Default: Manual
- Possibly not needed (will look into), Safe: Leave as is

Remote Registry - Default: Manual
- Recommended: Set to Disabled

Routing and Remote Access - Default: Disabled
- Typically not needed, Safe: Leave as is

Secondary Logon - Default: Automatic (Started)
- If you are only running vista with one user, Safe: Set to Disabled

Security Accounts Manager - Default: Automatic (Started)
- If you don't use Global Policy Editor, Safe: Set to Disabled

Security Center - Default: Automatic (Delayed Start) (Started)
- If you don't use the Security Center, Safe: Set to Disabled

Server - Default: Automatic (Started)
- If you don't plan to send files or print them over a network, Safe: Set to Disabled

Shell Hardware Detection - Default: Automatic (Started)
- If you don't use Autoplay, Safe: Set to Disabled

SL UI Notification Service - Default: Manual
- Not required on most setups (needed for Tablet Input Panel) but, Safe: Leave as is

Smart Card - Default: Manual
- If you don't use Smart Cards, Safe: Set to Disabled

Smart Card Removal Policy - Default: Manual
- If you don't use Smart Cards, Safe: Set to Disabled

SNMP Trap - Default: Manual
- If not on a network with SNMP, Safe: Set to Disabled

Software Licensing - Default: Automatic (Started)
- Needed for the Control Panel and other parts of Windows to function (Tablet Input Panel for Tablets), Safe: Leave as is

SSDP Discovery - Default: Automatic (Started)
- If you don't have such devices, Set to Disabled

Superfetch - Default: Automatic (Started)
- Safe: Leave as is

System Event Notification Service - Default: Automatic (Started)
- Typically not needed (event log may display an error if disabled) Safe: Leave as is

Table PC Input Service - Default: Automatic (Started)
- If you don't have a tablet PC, Safe: Set to Disabled

Task Scheduler - Default: Automatic (Started)
- Needed for various Windows and 3rd Party Programs, Safe: Leave as is

TCP/IP NetBIOS Helper - Default: Automatic (Started)
- If you won't be sharing files between computers, Set to Disabled

Telephony - Default: Manual (Started)
- Needed for dial-up and certain DSL connections, Safe: Leave as is

Terminal Services - Default: Automatic (Started)
- If you don't plan to administer remote computers, Safe: Set to Disabled

Terminal Services Configuration - Default: Manual
- If you don't plan to administer remote computers, Safe: Set to Disabled

Terminal Services UserMode Port Redirector - Default: Manual
- If you don't plan to administer remote computers, Safe: Set to Disabled

Themes - Default: Automatic (Started)
- If you are using Windows Classic, Safe: Set to Disabled

Thread Ordering Server - Default: Manual
- Safe: Leave as is

TPM Base Services - Default: Manual
- Used for hardware certificates, Safe: Leave as is

UPnP Device Host - Default: Automatic (Started)
- If you don't use UPnP, Safe: Set to Disabled

User Profile Service - Default: Automatic (Started)
- Safe: Leave as is

Virtual Disk - Default: Manual
- Since this service is on manual and does not start, it may be needed at some point, but it isn't a critical service

Volume Shadow Copy - Default: Manual
- Needed for some integrated backups, since this service is on manual and does not start, it may be needed at some point, but it isn't a critical service

WebClient - Default: Automatic (Started)
- If you don't use web folders, Safe: Set to Disabled

Windows Audio - Default: Automatic (Started
- Safe: Leave as is

Windows Audio Endpoint Builder - Default: Automatic (Started)
- Safe: Leave as is

Windows Backup - Default: Manual
- If you don't use it, Safe: Set to Disabled, Recommended: Leave as is

Windows CardSpace - Default: Manual
- If you don't use it, Safe: Set to Disabled

Windows Color System - Default: Manual
- Safe: Leave as is

Windows Connect Now - Config Registrat - Default: Manual
- Safe: Set to Disabled

Windows Defender - Default: Automatic (Started)
- If you don't use it, Safe: Set to Disabled, Recommended: Leave as is

Windows Driver Foundation - User-mode Driver Framework - Default: Manual
- Safe: Leave as is

Windows Error Reporting Service - Default: Automatic
- If you don't use it, Safe: Set to Disabled, Recommended: Leave as is

Windows Event Collector - Default: Manual
- Safe: Leave as is

Windows Event Log - Default: Automatic (Started)
- Safe: Leave as is

Windows Firewall - Default: Automatic (Started)
- If you don't use it, Safe: Set to Disabled, Recommended: Leave as is

Windows Image Acquisition (WIA) - Default: Manual
- If you don't have a scanner/camera, Safe: Set to Disabled

Windows Installer - Default: Manual
- Safe: Leave as is

Windows Management Instrumentation - Default: Automatic (Started)
- Safe: Leave as is

Windows Media Center Extender Service - Default: Disabled
- Safe: Leave as is

Windows Media Center Receiver Service - Default: Manual
- If you don't use it, Safe: Set to Disabled

Windows Media Center Scheduler Service - Default: Manual
- If you don't use it, Safe: Set to Disabled

Windows Media Center Service Launcher - Default: Automatic (Delayed Start) (Started)
- If you don't use it, Safe: Set to Disabled

Windows Media Player Network Sharing Service - Default: Manual
- If no portable device is owned, Set to Disabled

Windows Modules Installer - Default: Manual
- Certain Windows Updates require it, Safe: Leave as is

Windows Presentation Foundation Font Cache 3.0.0.0 - Default: Manual
- Safe: Leave as is

Windows Remote Management (WS-Management) - Default: Manual
- If you don't plan to administer remote computers, Safe: Set to Disabled

Windows Search - Default: Automatic (Started)
- If you don't use it, Safe: Set to Disabled, Recommended: Leave as is

Windows Time - Default: Automatic (Started)
- If you don't plan to sync the clock with a server, Safe: Set to Disabled

Windows Update - Default: Automatic (Delayed Start) (Started)
- If you don't use it, Safe: Set to Disabled, Recommended: Leave as is

WinHTTP Web Proxy Auto-Discovery Service - Default: Manual
- Almost always not needed, Safe: Set to Disabled

Wired/WLAN AutoConfig - Default: Manual
- If you don't use it, Safe: Set to Disabled

WMI Performance Adapter - Default: Manual
- Safe: Leave as is

Workstation - Default: Automatic (Started)
- If you plan on being on a LAN, Safe: Leave as is

Please inform me about mistakes, what you have found and what you would change.