Windows XP Professional Services Configurations
Display Name Service Name Process Name Internet
Gateway
Alerter Alerter services.exe Disabled
Application Layer Gateway
Service ALG alg.exe Auto
Application Management AppMgmt svchost.exe Manual
Auto Updates wuauserv svchost.exe Auto
Background Intelligent Transfer
Service BITS svchost.exe Disabled
ClipBook ClipSrv clipsrv.exe Disabled
COM+ Event System EventSystem svchost.exe Disabled
COMSysAp
COM+ System Application p dllhost.exe Disabled
Computer Browser Browser svchost.exe Auto
Cryptographic Services CryptSvc svchost.exe Auto
DHCP Client Dhcp svchost.exe Disabled
Distributed Link Tracking Client TrkWks svchost.exe Disabled
Distributed Transaction
Coordinator MSDTC msdtc.exe Disabled
DNS Client Dnscache svchost.exe Disabled
Error Reporting Service ERSvc svchost.exe Disabled
Event Log Eventlog services.exe Auto
FastUserSwi
tching
Compatibilit
Fast User Switching Compatibility y svchost.exe Disabled
Not
Fax Service FAX fxssvc.exe Installed
Not
FTP Publishing Service inetinfo.exe Installed
Help and Support helpsvc svchost,exe Disabled
Human Interface Device Access HidServ svchost,exe Disabled
Not
IIS Admin IISADMIN inetinfo.exe Installed
IMAPI CD-Burning COM Service ImapiService imapi.exe Disabled
Indexing Service cisvc cisvc.exe Disabled
Internet Connection
Firewall/Internet Connection SharedAcces
Sharing s svchost.exe Auto
IPSEC Services PolicyAgent lsass,exe Disabled
Logical Disk Manager dmserver svchost.exe Disabled
Logical Disk Manager
Administrative Service dmadmin dmadmin.exe Disabled
Not
Message Queuing mqsvc.exe Installed
Not
Message Queuing Triggers mqtgsvc.exe Installed
Messenger Messenger services.exe Disabled
MS Software Shadow Copy
Provider SwPrv dllhost.exe Disabled
Net Login Netlogon lsass.exe Disabled
NetMeeting Remote Desktop
Sharing mnmsrvc mnmsrvc.exe Disabled
Network Connections Netman svchost.exe Auto
Network DDE NetDDE netdde.exe Disabled
NetDDE
Network DDE DSDM dsdm netdde.exe Disabled
Network Location Awareness
(NLA) Nla svchost.exe Auto
NT LM Security Support Provider NtLmSsp lsass.exe Disabled
Performance Logs and Alerts SysmonLog smlogsvc.exe Disabled
Plug and Play PlugPlay services.exe Auto
WmdmPmS
Portable Media Serial Number p svchost.exe Disabled
Print Spooler Spooler spoolsv.exe Auto
ProtectedSto
Protected Storage rage lsass.exe Auto
QoS RSVP RSVP rsvp.exe Disabled
Remote Access Auto Connection
Manager RasAuto svchost.exe Auto
Remote Access Connection
Manager RasMan svchost.exe Auto
Remote Desktop Help Session
Manager RDSessMgr sessmgr.exe Disabled
Remote Procedure Call (RPC) RpcSs svchost.exe Auto
Remote Procedure Call (RPC)
Locator RpcLocator locator.exe Manual
RemoteRegi
Remote Registry Service stry svchost.exe Disabled
Removable Storage NtmsSvc svchost.exe Disabled
Not
RIP Listener svchost.exe Installed
RemoteAcce
Routing and Remote Access ss svchost.exe Disabled
Secondary Logon seclogon svchost.exe Disabled
Security Accounts Manager SamSs
lanmanserve lsass.exe Disabled
Server r svchost.exe Auto
ShellHWDet
Shell Hardware Detection ection svchost.exe Disabled
Simple Mail Transport Protocol Not
(SMTP) SMTPSVC inetinfo.exe Installed
Not
Simple TCP/IP Services tcpsvcs.exe Installed
Smart Card SCardSvr SCardSvr.exe Disabled
Smart Card Helper SCardDrv SCardSvr.exe Disabled
Not
SNMP Service snmp.exe Installed
Not
SNMP Trap Service snmptrap.exe Installed
SSDP Discovery Service SSDPSRV svchost.exe Disabled
System Event Notification SENS svchost.exe Disabled
System Restore Service srservice svchost.exe Disabled
Task Scheduler Schedule svchost.exe Disabled
TCP/IP NetBIOS Helper Service LmHosts svchost.exe Disabled
Not
TCP/IP Printer Server LPDSVC tcpsvcs.exe Installed
Telephony TapiSrv svchost.exe Auto
Telnet TlntSvr tlntsvr.exe Disabled
Terminal Services TermService svchost.exe Disabled
Themes Themes svchost.exe Disabled
Uninterruptible Power Supply UPS ups.exe Disabled
Universal Plug and Play Device
Host UPNPhost svchost.exe Disabled
Upload Manager uploadmgr svchost.exe Disabled
Volume Shadow Copy VSS vssvc.exe Disabled
WebClient WebClient svchost.exe Disabled
Disabled
(no sound
card in this
Windows Audio AudioSrv svchost.exe system)
Windows Image Acquisition
(WIA) stisvc svchost.exe Disabled
Windows Installer MSIServer msiexec.exe Manual
Windows Management
Instrumentation Minmgmt svchost.exe Auto
Windows Management
Instrumentation Driver Extension Wmi svchost.exe Manual
Windows Time W32Time svchost.exe Disabled
Wireless Zero Configuration WZCSVC svchost.exe Disabled
WMI Performance Adapter WmiApSrv wmiapsrv.exe Disabled
lanmanwork
Workstation station svchost.exe Auto
World Wide Web Publishing Not
Service W3SVC inetinfo.exe Installed
* Alerter: Notifies selected users and computers of administrative alerts.
* Application Layer Gateway Services: Provides support for 3rd party protocol
plugins for Internet
* Application Connection
Management: Sharingsoftware
Provides and the Internet Connection
installation services Firewall.
such as
Assign, Publish, and Remove.
* Automatic Updates: Enables the download and installation of critical
Windows
* Background Intelligent Transfer updates.
Service: Uses idle network bandwidth to
transfer data.
* ClipBook: Enables ClipBook Viewer to store information and share it with
remote computers. If the service is stopped, ClipBook Viewer will not be able
to share Supports
* COM+ Event System: information
SENSwith(System
remote Event
computers.
Notification Service),
which provides automatic distribution of events to subscribing COM
(Component Object Model) components.
* COM+ System Application: Manages the configuration and tracking of
COM+ (Component Object Model) based components.
* Computer Browser: Maintain an updated list of computers on the network and
supplies this list to computers designated as browsers.
* Cryptographic Services: Provides three management services: Catalog
Database Service, which confirms the signatures of Windows files; Protected
Root Service, which adds & removes Trusted Root Certification Authority
certificates from this computer; and Key Service, which helps enroll this
computer for certificates.
* DHCP Client: Manages network configuration by registering and updating IP
addresses and DNS names.
* Diskeeper: Controls the Diskeeper service.
* Distributed Link Tracking Client: Maintains links between NTFS files within
a computer
* Distributed or across
Transaction computers
Coordinator: in a network
Coordinates domain. that span
transactions
multiple resource managers, such as databases, message queues, and file
* DNS Client: Resolves and cachessystems.
Domain Name System (DNS) names for
this computer.
* Error Reporting Service. Allows error reporting for services and applications
running in non-standard environments.
* Event Log: Enables event log messages issued by Windows-based programs
and components to be viewed in Event Viewer.
* Fast User Switching Compatibility: Provides management for applications
that require assistance in a multiple user environment.
* Help and Support: Enables Help and Support Center to run on this computer.
* Human Interface Device Access: Enables generic input access to Human
Interface Devices (HID), which activates and maintains the use of predefined
hot buttons
* IIS Admin:onThis
keyboards,
service remote
should controls, and other
only be enabled multimedia
if you devices.
run the personal
version of IIS on Windows XP
* IMAPI CD-Burning COM Service: Manages CD recording using Image
Mastering Applications Programming Interface (IMAPI).
* Indexing Service: Indexes contents & properties of files on local and remote
computers; provides rapid access to files through flexible querying language.
* Infrared Monitor: This service should only be disabled if you do not have an
IR port on your computer, or if you do not use IR communications.
* Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS):
Provides network address translation, addressing, name resolution and/or
intrusion prevention services for a home or small office network.
* IPSEC Services: Manages IP security policy and starts the ISAKMP/Oakley
(IKE)
* Logical Disk Manager: and and
Detects the IP securitynew
monitors driver.
hard disk drives and sends
disk volume information to Logical Disk Manager Administrative Service for
configuration.
* Logical Disk Manager Administrative Service: Configures hard disk drives
and volumes.
* McAfee Firewall: This service is only for those that use McAfee Firewall
software.
* McShield: McAfee on Access Scanner.
* Messenger: Transmits netsend and Alerter service messages between clients
and servers. This service is not related to Windows Messenger.
* MS Software Shadow Copy Provider: Manages software-based volume
shadow copies taken by the Volume Shadow Copy service.
* NetMeeting Remote Desktop Sharing: Enables an authorized user to access
this computer
* Network remotely byManages
Connections: using NetMeeting overNetwork
objects in the a corporate intranet.
and Dial-Up
Connections folder, in which you can view both local area network and remote
* Network DDE: Provides networkconnections.
transport and security for Dynamic Data
Exchange (DDE) for programs running on the same computer or on different
* Network DDE DSDM: Manages computers.
Dynamic Data Exchange (DDE) network
shares.
* Network Location Awareness (NLA): Collects and stores network
configuration and location information, and notifies applications when this
information changes.
* NVIDIA Driver Helper Service: If you use a NVIDIA graphics card with
Detonator
* Performance Logs drivers
and Alerts: you will
Collects have this service.
performance data from local or remote
computers based on preconfigured schedule parameters, then writes the data to
a log or triggers an alert.
* Plug and Play: Enables a computer to recognize and adapt to hardware
changes with little or no user input.
* Portable Media Serial Number: Retrieves the serial number of any portable
music player connected to your computer.
* Print Spooler: Loads files to memory for later printing.
* Protected Storage: Provides protected storage for sensitive data, such as
private keys, to prevent access by unauthorized services, processes, or users.
* QoS RSVP: Provides network signaling and local traffic control setup
* Remote functionality
Access Auto for QoS-aware
Connection programs
Manager: and control
Creates applets.to a remote
a connection
network whenever a program references a remote DNS or NetBIOS name or
address.
* *Remote
RemoteDesktop
Access Help
Connection
SessionManager:
Manager:Creates a network
Manages connection.
and controls Remote
Assistance.
* Remote Procedure Call (RPC): Provides the endpoint mapper and other
miscellaneous
* Remote Procedure Call RPCManages
(RPC) Locater: services. the RPC name service
database.
* Remote Registry: Enables remote users to modify registry settings on this
computer
* Removable Storage: Manages removable media, drives, and libraries.
* Routing and Remote Access: Offers routing services to businesses in local
area and wide area network environments.
**Secondary Logon: Enables
Security Accounts Manager: starting
Storesprocesses
security under alternate
information for credentials.
local user
accounts.
* Server: Supports file, print, and named pipe-sharing over the network for this
computer.
* Shell Hardware Detection: This provides support for docking a laptop or other
related external hardware devices.
* Smart Card: Manages access to smart cards read by this computer.
* Smart Card Helper: Enables support for legacy non-plug and play smart-card
readers
* SSDP Discovery Service: used discovery
Enables by this computer.
of UPnP devices on your home
network.
* System Event Notification: Tracks system events such as Windows logon,
network, and power events.
* System Restore
* Task Scheduler: Enables Service:
a user toPerforms
configuresystem restore automated
and schedule functions. tasks on
this computer.
* TCP/IP NetBIOS Helper: Enables support for NetBIOS over TCP/IP (NetBT)
service and NetBIOS name resolution.
* Telephony: Provides Telephony API (TAPI) support for programs that control
telephony devices and IP based voice connections on the local computer and,
through
* Telnet: thea LAN,
Enables remoteonuser
servers
to logthat
on are alsocomputer
to this running the
andservice.
run programs,
and supports various TCP/IP Telnet clients, including UNIX-based and
Windows-based computers.
* Terminal Services: Allows multiple users to be connected interactively to a
machine as well as the display of desktops and applications to remote
computers. The underpinning of Remote Desktop (including RD for
Administrators), Fast User Switching, Remote Assistance, and Terminal Server.
* Themes: Provides user experience theme management.
* Uninterruptible Power Supply: Manages an uninterruptible power supply
* Universal Plug and(UPS) connected
Play Device to Provides
Host: the computer.
support to host Universal
Plug and Play devices.
* Upload Manager: Manages synchronous and asynchronous file transfers
between clients and servers on the network.
* Volume Shadow Copy: Manages and implements Volume Shadow Copies
* WebClient: Enablesused for backup and
Windows-based other purposes.
programs to create, access, and modify
Internet-based files.
* Windows Audio: Manages audio devices for Windows-based programs. If
* this serviceImage
Windows is stopped, audio devices
Acquisition (WIA): and effects
Provides will not
image functionservices
acquisition properly.
for
scanners and cameras.
* Windows Installer: Installs, repairs and removes software according to
instructions
* Windows Management contained in
Instrumentation: .MSI files.
Provides a common interface and
object model to access management information about operating system,
devices, applications and services.
* Windows Management Instrumentation Driver Extensions: Provides systems
* Windows Time:management
Maintains information
date and timetosynchronization
and from drivers.
on all clients and
servers in the network.
* Wireless Zero Configuration: Provides automatic configuration for the 802.11
adapters.
* WMI Performance Adapter: Provides performance library information from
WMI HiPerf providers.
* Workstation: Creates and maintains client network connections to the remote
servers.
* World Wide Web Publishing: This service should only be disabled if you're
not running the personal version of IIS on your computer.
