Service Name: Alarm
Process name: services.exe
Function Description: This service sends an alarm to the administrator or an error message to the user when the system fails. Unless your computer is in the local area network and equipped with a network administrator, it can generally be set to "manual" or "disabled".
Default setting: Manual.
General Configuration: Disabled
Network configuration: disabled
Independent configuration: disabled
Extreme configuration: disabled
2. Application layer gateway service
Service name: ALG
Process name: alg.exe
Function Description: Provide support for third-party plug-ins of Internet access and firewall. If you use WindowsXP's Internet access and firewall, you must enable this service. It takes up about 1.5MB of memory resources.
Default setting: Manual.
Normal configuration: manual
Network configuration: automatic
Independent configuration: disabled
Extreme configuration: disabled
3. Application management
Service name: AppMgmt
Process name: svchost.exe
Function description: Windows2000/XP has introduced a software management scheme based on msi file format (application installation information package)-application management component service, which not only manages the installation and deletion of software, but also can use this service to modify and repair existing applications, monitor file recovery, and eliminate basic faults through recovery.
Default setting: Manual.
Normal configuration: manual
Network Configuration: Manual
Independent configuration: manual
Limit configuration: manual
4. Automatically update service name: wuauserv
Process name: svchost.exe
Function description: Windows automatic upgrade service. It should be noted that both manual upgrade and automatic upgrade through Windows Update need the support of two services: background intelligent transfer service and system event notification.
Default setting: automatic
General Configuration: Automatic
Network configuration: automatic
Independent configuration: disabled
Extreme configuration: disabled
5. Name of background intelligent service: BITS
Process name: svchost.exe
Function Description: Used for asynchronous data transmission through Http 1. 1 server, that is, using idle network bandwidth to transmit files in the background. Windows Update needs this service to realize the function of breakpoint continuous transmission of upgrade data. In addition, when using MSN Explorer, Windows Messenger, Windows Media Player or. NET function, its automatic update needs this service.
Default setting: Manual.
General Configuration: Disabled
Network configuration: disabled
Independent configuration: disabled
Extreme configuration: disabled
6. Name of transmission service:
Process name: svchost.exe
Function Description: Used for asynchronous data transmission through Http 1. 1 server, that is, using idle network bandwidth to transmit files in the background. Windows Update needs this service to realize the function of breakpoint continuous transmission of upgrade data. In addition, when using MSN Explorer, Windows Messenger, Windows Media Player or. NET function, its automatic update needs this service.
Default setting: Manual.
General Configuration: Disabled
Network configuration: disabled
Independent configuration: disabled
Extreme configuration: disabled
7. scrapbook service name: ClipSrv.
Process name: clipsrv.exe
Function description: This service can view the scrapbooks in remote computers through the network dynamic data exchange service provided by network DDE and network DDDSDM. Even if your computer is in the local area network, it is strongly recommended to set it to "Manual" for security reasons, but it can be set to "Disabled" for ordinary users. This can save about 1.3MB of memory space.
Default setting: Manual.
General Configuration: Disabled
Network configuration: disabled
Independent configuration: disabled
Extreme configuration: disabled
8.com+ system application service name: COMSysApp.
Process name: dllhost.exe
Function description: It mainly provides hosting for those programs that use COM+, and the system log also needs it to run. It is recommended to change it to manual.
Default setting: Manual.
Normal configuration: manual
Network Configuration: Manual
Independent configuration: disabled
Extreme configuration: disabled
9.COM+ Event System Service Name: Event System.
Process name: svchost.exe
Function description: Provide system event support for using COM+ programs, or automatically publish to subscribing COM components. It is recommended to keep the default settings of Windows.
Default setting: Manual.
Normal configuration: manual
Network Configuration: Manual
Independent configuration: manual
Extreme configuration: disabled
10, computer browser service name: browser
Process name: svchost.exe
Function Description: Maintain the latest list of computers in my network neighborhood, including Windows-based domains, workgroups and computers, and other NetBIOS protocol network devices from which the content displayed by My Network Neighborhood comes. And notify the requester of the list. Ordinary stand-alone users are set to "disabled" and LAN users are set to "automatic". If you can't see other computers in my network neighborhood, it's probably because this service is not turned on.
Default setting: automatic
General Configuration: Disabled
Network configuration: automatic
Independent configuration: disabled
Extreme configuration: disabled
1 1, encryption service name: CryptSvc.
Process name: svchost.exe
Function description: mainly used to confirm the signature of Windows files. If it is disabled, you will often encounter a warning box reporting that the driver has not been authenticated by Microsoft. At the same time, this service is also needed when Windows Update is updated manually or automatically. In addition, this service must be running when upgrading SP 1 or SP2 and DirectX 9.0. Windows Media Player and some. NET applications also need this service. The occupied memory space is about1.9mb..
Default setting: automatic
General Configuration: Automatic
Network configuration: automatic
Independent configuration: disabled
12, Dhcp client service name: DHCP.
Process name: svchost.exe
Function description: The full name is Dynamic Host Configuration Protocol, which can automatically assign an IP address to each computer in the local area network and complete the TCP/IP protocol configuration of each computer, including IP address, subnet mask, gateway, DNS server, etc. In this way, in a local area network, especially in a large local area network, the administrator does not have to manually configure the TCP/IP protocol for each computer, and the problem of duplicate IP addresses is also avoided. As an ordinary user, if you have access to the Internet through DSL, cable, etc. It's best to keep it automatic, because our IP address on the Internet is dynamically assigned by ISP. If the system should not be used for any network, you can set it to Disabled. To enable DHCP protocol in Windows, just set the IP address to "automatically obtain IP address". The specific method is as follows: Take Windows XP as an example, open the local connection properties, and double-click the Internet Protocol (TCP/IP) to open the properties window. Next, in the General tab, select Get IP address automatically, and then click Advanced in the lower right corner. Below, you can see "DHCP enabled" in the "IP Settings" tab of the open window.
Default setting: automatic
General Configuration: Automatic
Network configuration: disabled
Independent configuration: automatic
Extreme configuration: disabled
13, service name of distributed link tracking client: TrkWks.
Process name: svchost.exe
Function description: Distributed connection tracking client, which can track the movement of files in NTFS volume of network domain and send out notifications. Normal users are set to "disabled" and LAN users (hard disk partition file system is NTFS) are set to "automatic". For example, if you create a file on computer A and then create a shortcut or link to the file on computer B, if you move the file on computer A, the service will tell computer B the new location of the file and correct it. For stand-alone users, this service is of little use, and it will occupy about 3.5MB~4MB ~ 4 MB of memory resources.
Default setting: automatic
Normal configuration: manual
Network Configuration: Manual
Independent configuration: disabled
Extreme configuration: disabled
14, service name of distributed transaction coordinator: MSDTC
Process name: msdtc.exe
Function description: Parallel transactions are distributed in more than two databases, message queues, file systems or other transaction protection resource managers. When this service is disabled, the event log will report related errors. But after testing, it is found that it will not affect the system operation. There are still some. NET program will use it.
Default setting: Manual.
Normal configuration: manual
Network Configuration: Manual
Independent configuration: disabled
Extreme configuration: disabled
15, DNS client service name: Dnscache
Process name: svchost.exe
Function description: Domain name system client can resolve domain names into IP addresses. Unless you are not connected to any network, it should be set to Automatic.
Default setting: automatic
General Configuration: Automatic
Network configuration: automatic
Independent configuration: disabled
Extreme configuration: disabled
16, service name of error reporting service: ERSvc
Process name: svchost.exe
Function Description: When there is an error in the application, the service can submit relevant reports to Microsoft. Because it is of little use and takes up memory and system resources in vain, it is recommended to disable it.
Default setting: automatic
General Configuration: Disabled
Network configuration: disabled
Independent configuration: disabled
Extreme configuration: disabled
17, Event Log service name: eventlog.
Process name: services.exe
Function Description: This service can record the error messages sent by programs and systems. The log contains information that helps diagnose the problem. Sometimes after disabling this service and restarting the system, several network-related services can't be started, and the phenomenon of dial-up internet access can't appear. Therefore, if you have an Internet or LAN connection, it is recommended to set it to "Automatic".
Default setting: automatic
General Configuration: Automatic
Network configuration: automatic
Independent configuration: automatic
Limit configuration: automatic
18, Fast User Switching Compatibility Service Name: Fast User Switching Compatibility
Process name: svchost.exe
Function description: Windows XP provides a quick user switching function, which enables you to log in with another account while keeping the current user logged in, so as to achieve simultaneous login status. Unless your computer is used by many people and you really need this function, then change it to manual or disable it.
Default setting: Manual.
Normal configuration: manual
Network Configuration: Manual
Independent configuration: disabled
Extreme configuration: disabled
19, name of fax service: fax
Process name: fxssvc.exe
Function description: Fax service, the fax function in Windows 95 is supported again in Windows 2000 and is better integrated with the system. If it is not used, it is set to "Disabled".
Default setting: Manual.
General Configuration: Disabled
Network configuration: disabled
Independent configuration: disabled
Extreme configuration: disabled
20. Help and support service name: helpsvc
Process name: svchost.exe
Function Description: The service necessary for WindowsXP search and help function, but we don't use this function every day, so we suggest setting it as "disabled" and starting it when necessary.
Default setting: automatic
General Configuration: Disabled
Network configuration: disabled
Independent configuration: disabled
Extreme configuration: disabled
2 1, name of access service for man-machine interface equipment: HidServ.
Process name: svchost.exe
Function Description: Mainly used for scanners with function buttons (fax, copy) or multimedia keyboards. Therefore, it is recommended to set it to "disabled" first, and then set it to "automatic" if some of your devices have problems.
Default setting: Disabled.
General Configuration: Disabled
Network configuration: disabled
Independent configuration: disabled
Extreme configuration: disabled
22. name of httpssl service: HTTPFilter
Process name: svchost.exe
Function Description: This service realizes the secure Hypertext Transfer Protocol (HTTPS) of HTTP service through Secure Sockets Layer (SSL).
Default setting: Manual.
Normal configuration: manual
Network Configuration: Manual
Independent configuration: manual
Limit configuration: manual
23.IMAPI CD-Burning COM service name: ImapiService.
Process name: imapi.exe
Function description: This is the service of Windows XP's burning function. You can burn CDs by dragging and dropping, which is very convenient. At the same time, some software will also use this service, and it is recommended to set it to "automatic". If recording software such as Nero is installed, you can also try to disable it, which will speed up the operation of Nero. This service takes up 1.6MB memory resources.
Default setting: Manual.
General Configuration: Automatic
Network configuration: automatic
Independent configuration: disabled
Extreme configuration: disabled
24. Index Service Service Name: cisvc
Process name: cisvc.exe
Function Description: Indexing service can index the contents and attributes of documents on local hard disk or * * * network drive, and quickly locate the documents you need through the unique document filter of Windows 2000/XP, which greatly enhances the search ability of Windows 2000/XP. However, the indexing service will continue, thus consuming a lot of system resources. Microsoft suggests that the service should be disabled if there are more than100,000 documents to be indexed in a system with only 64MB of memory. But in the actual test, we found that even if the number of documents is far below100000, the consumption of system resources is amazing, and the situation is not much better on the system of 128MB, so it is strongly recommended to disable it. In addition, although Microsoft claims to run only when the system is idle, we find that it is often not so regular. If your computer is often slow, try disabling it to see the effect.
Default setting: Manual.
General Configuration: Disabled
Network configuration: disabled
Independent configuration: disabled
Extreme configuration: disabled
25.internet Connection Firewall /internet Connection Sharing Service Name: SharedAccess.
Process name: svchost.exe
Function description: Internet firewall of LAN computer and Internet access connection. This service provides a shortcut for multiple networked computers to access the Internet through dial-up network, and can be set as "disabled" for ordinary users who do not use this function.
Default setting: automatic
General Configuration: Automatic
Network configuration: automatic
Independent configuration: disabled
Extreme configuration: disabled
26.IPSEC Services Service Name: PolicyAgent
Process name: lsass.exe
Function description: IP security policy proxy service, which allows IP security policy to encrypt data packets transmitted between two computers, so as to prevent people who see it on the Internet from changing and decrypting it. IPSEC is a network used to protect intranet, private network and external network.
(Internet, Extranet) is an important defense against attacks. Before using IPSEC, you must first define the ways of mutual trust and communication security between two computers. Please note: In Windows 2000, the IP security policy agent will be started automatically by default, but the IP security policy will not be started. In this case, ordinary users can completely disable the service.
Default setting: automatic
General Configuration: Disabled
Network configuration: disabled
Independent configuration: disabled
Extreme configuration: disabled
27. service name of logical disk manager: dmserver.
Process name: svchost.exe
Function description: It is an important service of Windows disk management. If you encounter problems when going through "Control Panel → Administrative Tools → Computer Management → Disk Management", you'd better see if this service is started.
Default setting: automatic
Normal configuration: manual
Network Configuration: Manual
Independent configuration: disabled
Extreme configuration: disabled
28. Service name of logical disk manager management service: dmadmin.
Process name: dmadmin.exe
Function Description: Similar to the previous service, the system management service requested by disk management.
Default setting: Manual.
Normal configuration: manual
Network Configuration: Manual
Independent configuration: disabled
Extreme configuration: disabled
29. Name of Courier Service: Courier
Process name: services.exe
Function Description: A service that sends and receives messages sent by system administrators or alarm services. Since the alarm service depends on this service, if the alarm has been disabled, this item can be set to manual or disabled. This service provides the function of transmitting information between the server and the client. It is useless for home users, so it is suggested to set it as "disabled", which can also ban spam on the Internet. In addition, you can also enter "net send127.0.0.1hi" at the command line to test whether there are related vulnerabilities in your computer. If you receive the pop-up message "Hi", you should disable this service. If you receive the error message "The network cannot find this message alias", then your computer is safe. If you really need this service, you can close UDP ports 135 and 137 and TCP ports 135, 139 and 445 through the firewall to filter out information from the Internet.
Default setting: automatic
General Configuration: Disabled
Network configuration: disabled
Independent configuration: disabled
Extreme configuration: disabled
30.MS Software Volume Shadow Copy Provider Service Name: SwPrv.
Process name: dllhost.exe
Function Description: Used in conjunction with the Volume Shadow Copy service, mainly used for backup. In addition, some software such as disk cloning and mirroring need to use this service to run.
Default setting: Manual.
Normal configuration: manual
Network Configuration: Manual
Independent configuration: disabled
Extreme configuration: disabled
3 1, network login
Service name: Netlogon
Process name: lsass.exe
Function Description: Simply put, it is a service to verify login information on LAN. Ordinary home users can set it to "Disabled" or "Manual". Sometimes, after being infected with a virus, the service will not be able to start.
Default setting: automatic
General Configuration: Disabled
Network configuration: disabled
Independent configuration: disabled
Extreme configuration: disabled
32.NetMeeting remote desktop sharing service name: mnmsrvc
Process name: mnmsrvc.exe
Function Description: Remote Desktop * * *, this service can allow authorized users to remotely access the Windows desktop through NetMeeting. This function is generally of little use and can be set to "disabled".
Default setting: Manual.
General Configuration: Disabled
Network configuration: disabled
33. Name of network connection service: Netman
Process name: svchost.exe
Function Description: Network connection manages all objects in the "Network and Dial-up Connections" folder. If you have any network connection (including Internet dial-up connection), please keep it "Manual". Otherwise, if you disable it, you will not see anything in the Network and Dial-up Connections folder, let alone new connections and dial-up Internet access.
Default setting: Manual.
Normal configuration: manual
Network configuration: automatic
Independent configuration: manual
Extreme configuration: disabled
34. Network DDE
Service name: NetDDE
Process name: netdde.exe
Function description: Network dynamic data exchange service is a service that provides network transmission and security for DDE dialogue. DDE (Dynamic Data Exchange) is a form of process communication, which allows two or more programs supporting DDE to exchange information and commands. For general users, it can be set to "Disabled".
Default setting: Manual.
General Configuration: Disabled
Network configuration: disabled
Independent configuration: disabled
Extreme configuration: disabled
35. Network DDE DSDM service name: NetDDE dsdm.
Process name: netdde.exe
Function description: Network dynamic data exchange service is a service that provides network transmission and security for DDE dialogue. DDE (Dynamic Data Exchange) is a form of process communication, which allows two or more programs supporting DDE to exchange information and commands. For general users, it can be set to "Disabled".
Default setting: Manual.
General Configuration: Disabled
Network configuration: disabled
Independent configuration: disabled
Extreme configuration: disabled
36. Network Location Awareness (Nla) Service Name: NLA
Process name: svchost.exe
Function Description: This service is necessary for Internet network connection, but it can be started on the server.
Default setting: Manual.
Normal configuration: manual
Network configuration: automatic
Independent configuration: disabled
Extreme configuration: disabled
37. NT LM security support provider
Process name: lsass.exe
Function Description: Provides security for remote procedure call (RPC) programs that do not use named pipes for transmission. Manage system security information. If you start the Telnet service, you must turn it on.
Default setting: Manual.
Normal configuration: manual
Network Configuration: Manual
Independent configuration: manual
Extreme configuration: disabled
38. Service name of performance log and alert: SysmonLog.
Process name: smlogsvc.exe
Function description: Collect system performance data according to the plan, and send the information to the log or give a reminder. Ordinary users don't need it at all.
Default setting: Manual.
General Configuration: Disabled
Network configuration: disabled
Independent configuration: disabled
Extreme configuration: disabled
39. Name of Plug and Play Service: Plug and Play
Process name: services.exe
Function description: Turn on the plug-and-play function of Windows. It is recommended to set it to: automatic, otherwise the registry will be chaotic.
Default setting: automatic
General Configuration: Automatic
Network configuration: automatic
Independent configuration: automatic
Limit configuration: automatic
40. Portable media serial number service name: WmdmPmSp
Process name: svchost.exe
Function Description: Get the digital serial number of mobile player (MP3 player, etc.). ) Connect to your computer through a networked computer. Generally can be disabled. If there is a problem with your Windows Media Player after it is disabled, you need to open it.
Default setting: automatic
General Configuration: Disabled
Network configuration: disabled
Independent configuration: disabled
Extreme configuration: disabled
4 1, print background handler service name: background handler
Process name: spoolsv.exe
Function Description: Print background processing. The function of this service is to save and manage multiple printed documents, and then send the data to the printer for processing after the printer is idle. No user of any printing device is set as disabled, otherwise it is set as automatic. Please note:
If you enable the fax service, you should keep it automatic, because the fax service depends on the spooler.
Default setting: automatic
General Configuration: Automatic
Network configuration: automatic
Independent configuration: automatic
Extreme configuration: disabled