Windows services are basically the backbone for core operating systems components. Without the services running, its associated function won’t work either.
For example, the “Security Center” service governs the Security Center feature in Windows 7. The Security Center monitors things like your anti-virus or Windows updates, and alerts you when an item is in need of attention. Normal users may find this helpful, power users may find this annoying.
To see an overview of all the Windows services, click on the Windows button (aka “Start” button) and type “services.msc” in the search box and hit enter.
You’ll see a new window showing all the Windows Services and their status.
To disable a service, double click on the service you want to disable, select “Disabled” for the “Startup type”. Then click on “Stop” to stop the service (if it is already started, otherwise don’t worry about this), then click “OK” to save and finish.
Here’s a list and descriptions of services unnecessary for day to day use (at least for me). Your system will work if you disable all the services below, but functionality may be decreased depending on what services you disable. That said, it is a good idea to know what you’re doing before you do it, so please, read the descriptions and choose carefully.
Computer Browser
Maintains an updated list of computers on the network and supplies this list to computers designated as browsers.
Makes it easier for users to find computers on their network. I know the addresses of all PCs on my home network, so this function is useless to me.
IKE and AuthIP Ipsec Keyring Modules
The IKEEXT service hosts the Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) keying modules. These keying modules are used for authentication and key exchange in Internet Protocol security (IPsec). Stopping or disabling the IKEEXT service will disable IKE and AuthIP key exchange with peer computers. IPsec is typically configured to use IKE or AuthIP; therefore, stopping or disabling the IKEEXT service might result in an IPsec failure and might compromise the security of the system.
This service is needed for IPsec functionality. IPsec are protocols designed to secure IP and are typically used in conjunction with a VPN solution. If you use a VPN tunnel, say for remote connectivity to your office, then you might want to leave this enabled. Otherwise, most people have no use for this.
IP Helper
Provides tunnel connectivity using IPv6 transition technologies (6to4, ISATAP, Port Proxy, and Teredo), and IP-HTTPS. If this service is stopped, the computer will not have the enhanced connectivity benefits that these technologies offer.
Not many people know what IPv6 is, let alone use it, so this would be safe to disable.
IPSec Policy Agent
Internet Protocol security (IPsec) supports network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and replay protection. This service enforces IPsec policies created through the IP Security Policies snap-in or the command-line tool “netsh ipsec”.
If you use VPN tunnels, leave this enabled. Otherwise, disable it.
Microsoft Software Shadow Copy Provider
Manages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed.
If you use the built-in Windows backup, leave this on. Otherwise, disable it.
Network List Service*
Identifies the networks to which the computer has connected, collects and stores properties for these networks, and notifies applications when these properties change.
Network Location Awareness*
Collects and stores configuration information for the network and notifies programs when this information is modified. If this service is stopped, configuration information might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
* These two services work hand in hand to provide you with network profiles. Windows identifies the network you’re on and configures some network settings based on what profile you use. You know how a window pops up asking you to identify what network you’re connected to (Home, Work, Public)? Disable these two services to get rid of network profiles (and that annoying prompt).
Offline Files
The Offline Files service performs maintenance activities on the Offline Files cache, responds to user logon and logoff events, implements the internals of the public API, and dispatches interesting events to those interested in Offline Files activities and changes in cache state.
This service is for syncing files. For example, if your “Documents” folder is redirected to a server share, every file in that “Documents” folder becomes an offline file. When you disconnect from the server share, “offline files” allow you to access your documents, even though you’re not connected to the server. Then, when you reconnect to the server, the changes to the offline files are synced with your original files on the server share.
Portable Device Enumerator
Enforces group policy for removable mass-storage devices. Enables applications such as Windows Media Player and Image Import Wizard to transfer and synchronize content using removable mass-storage devices.
Unless you’re under Active Directory, you’re probably not using group policies. If you’re not using group policies, you don’t need this service. Furthermore, if you don’t want to sync removable devices with WMP, then you can disable this as well.
Security Center
The WSCSVC (Windows Security Center) service monitors and reports security health settings on the computer. The health settings include firewall (on/off), antivirus (on/off/out of date), antispyware (on/off/out of date), Windows Update (automatically/manually download and install updates), User Account Control (on/off), and Internet settings (recommended/not recommended). The service provides COM APIs for independent software vendors to register and record the state of their products to the Security Center service. The Action Center (AC) UI uses the service to provide systray alerts and a graphical view of the security health states in the AC control panel. Network Access Protection (NAP) uses the service to report the security health states of clients to the NAP Network Policy Server to make network quarantine decisions. The service also has a public API that allows external consumers to programmatically retrieve the aggregated security health state of the system.
This controls those annoying notifications telling you that your UAC is turned off, your firewall is off, you have no spyware protection, etc. I know how my system is configured, thank you very much, and I don’t need to be nagged every 5 minutes.
SSDP Discovery
Discovers networked devices and services that use the SSDP discovery protocol, such as UPnP devices. Also announces SSDP devices and services running on the local computer. If this service is stopped, SSDP-based devices will not be discovered. If this service is disabled, any services that explicitly depend on it will fail to start.
Helps make networking devices easier. For example, if you have a network printer, SSDP can make it easier to locate and install the printer by simply browsing the network and using UPnP. However, if you know how to manually install/configure devices over the network, then this has no use.
UPnP Device Host
Allows UPnP devices to be hosted on this computer. If this service is stopped, any hosted UPnP devices will stop functioning and no additional hosted devices can be added.
I can’t think of any UPnP devices I would want to host. However, one common use is probably the Windows Media Player library streaming. You know the drill by now, if you use WMP streaming, leave this on, if not, turn it off.
Windows Defender
Protection against spyware and potentially unwanted software
I am a huge advocate of malware defense through common sense. Don’t do things you shouldn’t do, like visit nasty websites or open unknown .exe’s, and you won’t get infected – plain and simple. I had a Windows XP install on my laptop, which I used for 8 months with no virus or malware protection. Then, I took a class where the professor made us do these labs which included scanning our PCs with anti-malware programs like Malwarebytes Anti-Malware, Lavasoft Ad-Aware, and Spybot Search & Destroy. The result? 0 infections across the board.
That said, Windows Defender is useless while practicing this strategy. Furthermore, I hate having programs scan files in the background, slowing down the system.
Windows Firewall
Windows Firewall helps protect your computer by preventing unauthorized users from gaining access to your computer through the Internet or a network.
Like many, many people, I use a router in conjunction with my cable modem to split the internet connection between multiple computers. Most, if not all, popular router models come with a built-in hardware firewall. Having a software firewall (e.g. Windows Firewall) is redundant and unnecessary (on a clean system). However, one scenario where the Windows Firewall may come in handy is when your computer is directly connected to the internet (not behind a router). It can also prevent malware from phoning home, but you’ve got bigger issues if you’ve got that crap on your PC.
Windows Media Player Network Sharing Service
Shares Windows Media Player libraries to other networked players and media devices using Universal Plug and Play
Allows you to share whatever is in your Windows Media Player library to network devices, such as another computer, or more commonly, an Xbox 360. If you don’t stream your media to other devices, or don’t even use Windows Media Player, then disable this service.
Windows Search
Provides content indexing, property caching, and search results for files, e-mail, and other content.
This service mainly provides indexing functionality. I rarely ever use the Windows Search, so this isn’t useful to me. Plus, as with Windows Defender, I hate having background running programs that constantly access my hard drive, thus slowing down the system. I was wondering why my hard drive was thrashing randomly while not in use and disabling Windows Search and Windows Defender helped cut that down.
This is just a short list of the many Windows Services that can be disabled without ill effect for most people. Make sure you read the descriptions and understand what you’re doing before disabling.
If anyone finds any additional services that are safe to disable, please share it with us!
