AppID service
Determine the identity of the application. The default operation mode of this service is manual, and it is not recommended to change it.
Target path: windowssystem32svchost.exe-klocalserviceanddecision.
Application experience
When the application is started, the query request compatible with the application is processed. The default operation mode of this service is automatic, and it is not recommended to change it.
Target path: windowssystem32svchost.exe-knetsvcs
It is estimated that after using this technology, the system will automatically select the corresponding compatibility mode when running the old program to obtain the best effect.
Application information
Provides information for the operation of the application. The default operation mode of this service is manual, and it is not recommended to change it.
Target path: windowssystem32svchost.exe-knetsvcs
Application layer gateway service
Provide third-party protocol plug-in support for Internet connection. The default operation mode of this service is manual. If you connect to the network, the service will start automatically, and it is not recommended to change it.
Target path: WINDOWSSystem32alg.exe.
Background Intelligent Transfer Service
Data is transferred between the client and the server in the background. If you disable BITS, some features, such as Windows Update, will not work properly. The default operation mode of this service is automatic, and the main purpose of this service is to automatically update Windows or. You'd better not change this service.
Target path: windowssystem32svchost.exe-knetsvcs
COM+ event system
Support system event notification service (SENS), and provide automatic distribution function for subscribing to component object model (COM) component events. If this service is stopped, SENS will shut down and cannot provide login and logout notifications. If this service is disabled, other services that explicitly depend on it will fail to start. A very primitive and ancient service, the default running mode of this service is automatic, which is an important system service. If it is set to manual, it will also run automatically. If it is set to disabled, it doesn't seem to matter, but there will be many errors in the log. We'd better not move.
Target path: windowssystem32svchost.exe-knetsvcs
Encryption service
Provides three management services: directory database service, which determines the signature of Windows files; Protected root service, add and remove certificates of trusted root certification authorities from this computer. And a key service, which helps to register this computer to obtain a certificate. If this service is stopped, these management services will not work properly. If this service is disabled, any services that depend on it will fail to start. Maintain and manage all certificates, keys and security databases of the system. In addition, visit the services required by some websites, such as Microsoft's website, Windows Update or DRM's website. In many cases, it will provide and confirm the signature information of Windows files. It is strongly recommended that you never touch it and never want to disable this service.
Target path: windowssystem32svchost.exe-knetsvcs
DCOM server process launcher
Provide loading function for DCOM service. The default operation mode of this service is automatic, so it's best not to tamper with it. The previous DCOM service, that is, remote service, was more basic than COM+. Look at the registry and you will know how many DCOM components there are in Windows system. Although it is okay to disable it, the temporary service set to manual will not start automatically and the icon on the taskbar will disappear, so it is best not to modify this option.
Target path: windowssystem32svchost.exe-kdcomlaunch
DNS client
The DNS client service (dnscache) caches the domain name system (DNS) name and registers the full computer name of the computer. If the service is stopped, DNS name resolution will continue. However, the query results of DNS names will not be cached, and the computer name will not be registered.
If you stop this service, your computer will not be able to interpret DNS information and use domain names to log on to websites.
Target path: windowssystem32svchost.exe-klocalservicenetworkrestricted
Group policy client
This service is responsible for applying the settings configured by the administrator for computers and users through the Group Policy component. If this service is stopped or disabled, settings will not be applied and applications and components will not be managed through Group Policy. If this service is stopped or disabled, any component or application that relies on Group Policy will not function properly. You cannot shut down this service.
Target path: windowssystem32svchost.exe-kgpsv group.
Multimedia curriculum schedule
System-wide task priority enables the relative priority of work. This is mainly suitable for multimedia applications. If this service is stopped, individual tasks will use their default priorities. Mainly to set the priority for audio/video streams of some multimedia applications. Disabling it may cause problems with the sound card function. It is recommended to start the service. If it is set to manual, it will start automatically.
Target path: windowssystem32svchost.exe-knetsvcs
network connections
Manage objects in the Network and Dial-up Connections folder, where you can view local area networks and remote connections.
If this service is stopped, you will not be able to configure the network, create network links and surf the Internet.
Target path: windowssystem32svchost.exe-k localsystemnetworkrestricted.
Network list service
Identify the networks to which the computer is connected, collect and store the properties of these networks, and notify the application when these properties change. This service lists the existing networks and displays the current connection status. Shutdown will lead to abnormal network, so don't shut down.
Target path: Windows System 32 SVC Host. Exe-Klocal service.
Network location awareness
Collect and store network configuration information, and notify the program when the information is modified. If this service is stopped, configuration information may not be available. If this service is disabled, all services that explicitly depend on it will fail to start. Is NLA, which can well support and mark multiple network cards, or provide you with enhanced functions when you switch and change from home, personal and corporate networks. In most cases, it will automatically start the network connection. Unlike NLA in XP, the shutdown is normal, but it will prompt that the network cable is not plugged in properly. It's best not to turn off your phone.
Target path: WindowsSystem32svchost.exe-K network service.
Network store interface service
The service sends network notifications (for example, adding/deleting interfaces, etc.). ) to the user mode client. Stopping this service will cause the network connection to be disconnected. If this service is disabled, all other services that explicitly depend on it will fail to start. This is a service that supports NLA, such as saving the configuration files of each network, so it will run in the same state as NLA, and it is best not to shut it down.
Target path: Windows System 32 SVC Host. Exe-Klocal service.
plug and play
Enables the computer to recognize and adapt to changes in hardware with little or no user input. Stopping or disabling this service will cause system instability. Plug and play, one of the most basic services, can't be turned off if you want.
Target path: windowssystem32svchost.exe-kdcomlaunch
remote procedure call (RPC)
RPCSS service is the service control manager of COM and DCOM servers. It performs object activation requests of COM and DCOM servers, object exporter parsing and distributed LJ collection. If this service is stopped or disabled, programs using COM or DCOM will not work properly. It is strongly recommended that you let the RPCSS service run.
This is very important (that is, very important). If you ban him, your system won't start.
Target path: windowssystem32svchost.exe-knetsvcs
Secure socket tunneling protocol service
Provides support for Secure Socket Tunneling Protocol (SSTP) that uses VPN to connect to remote computers. If this service is disabled, users will not be able to access remote servers using SSTP. This service is mainly aimed at VPN connection service. If you use a third-party VPN client, you can turn it off, but the service of Remote Access Connection Manager depends on this service, so don't move.
Target path: Windows System 32 SVC Host. Exe-Klocal service.
Software protection
A digital license that supports downloading, installing and implementing Windows and Windows applications. If this service is disabled, the operating system and licensed applications may run in reduced functionality mode. Be responsible for license management and verification of win7 system, and provide interface /API services for Windows system or other applications. All new features of Win7 will use this service. If it is set to disable, the protection function of win7 may be activated, resulting in some functions of the system being unavailable. It is highly recommended to set the opening to automatic.
Target path: Windowssystem32SLsvc.exe.
task dispatcher
Allow users to configure and schedule automatic tasks on this computer. If this service is stopped, these tasks will not run in the scheduled time. If this service is disabled, any services that depend on it will fail to start. It is not only the scheduling manager of the previous operating system, but also used by win7 and third-party applications, and the service cannot be disabled.
Target path: windowssystem32svchost.exe-knetsvcs
theme
Provide users with the experience of using theme management. For XP style, you must start this service first, especially when using Aero. Unless you only use the classic interface, open it.
Target path: windowssystem32svchost.exe-knetsvcs
UPnP device host
Allow UPnP devices to reside on this computer. If this service is stopped, all managed UPnP devices will stop working and other managed devices cannot be added. If this service is disabled, any services that explicitly depend on it will fail to start. This is the host program of universal plug and play equipment in the system. It will be the main body of communication and work between universal plug and play equipment and operating system, and it is not recommended to disable it.
Target path: Windows System 32 SVC Host. Exe-Klocal service.
virtual disk
Provides management services for disks, volumes, file systems and storage arrays. Provide management of storage device software volumes and hardware volumes, and do not set them to be disabled.
Target path: WindowsSystem32vds.exe.
Shadow copy
Manage and execute shadow copies for backup and other purposes. If this service is stopped, the backup will have no shadow copy and the backup will fail. If this service is disabled, any services that depend on it will fail to start. Shadow copy called with backup function in win7 is not recommended to be disabled.
Target path: Windowssystem32vssvc.exe.
Windows audio endpoint generator
Manage the audio of Windows-based programs. If this service is stopped, audio devices and effects will not work properly. If this service is disabled, any services that depend on it will fail to start. Start automatically unless you don't want the computer to make a sound.
Target path: windowssystem32svchost.exe-klocalservicenetworkrestricted
Windows Connect Now-Configure Registers
As a registrant, issue network credentials to the registrant. If this service is disabled, Windows Connect Now-Configuration Registrar will not work properly. By default.
Target path: Windows System 32 SVC Host. Exe-Klocal service.
Windows Installer
Add, modify, and delete applications provided as Windows Installer (*). Msi) software package. If this service is disabled, any services that completely depend on it will not start. MSI installation package service, many installers need this service, just set it to manual.
Target path: Windowssystem32msiexec /V
Windows management specification
Provide * * * the same interface and object mode to access management information about operating systems, devices, applications and services. If this service is stopped, most Windows-based software will not work properly. If this service is disabled, any services that depend on it will fail to start. The system management service, Vista will be used to start and initialize, even if it is set to manual, it will start. Don't touch it.
Target path: windowssystem32svchost.exe-knetsvcs
work station
Official explanation: Use SMB protocol to create and maintain the connection between client network and remote server. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
As the name implies, if you ban it, your computer will disappear into the intranet, not to mention playing Microsoft's network resources with medie.
Network location awareness (NLA)
Official explanation: Collect and store network configuration information, and notify the program when the information is modified. If this service is stopped, configuration information may not be available. If this service is disabled, all services that explicitly depend on it will fail to start.
This is a wireless network link, but banning it will cause many problems.
DHCP client
Register and update the IP address of this computer. If this service is stopped, computers will not be able to receive dynamic IP addresses and DNS updates. If this service is disabled, all services that explicitly depend on it will fail to start.
DHCP service is forbidden, you must set the IP manually.
Encryption service
Provide four management services: directory database service, which is used to confirm the signature of Windows files and allow the installation of new programs; Protected root service for adding and deleting certificates of trusted root certification authorities from this computer; Automatic root certificate update service, which is used to retrieve the root certificate from Windows Update and enable SSL. Key service to help register this computer to obtain a certificate. If this service is stopped, these management services will not work properly. If this service is disabled, any services that explicitly depend on it will fail to start.
Banning this encryption service will lead to the decline of computer security index, unable to automatically update and unable to use ssl.
Other processes and services that can be disabled or closed according to the actual situation.
Adaptive brightness
Monitor ambient light conditions to adjust screen brightness. If this service is disabled, the screen brightness will not automatically adapt to the surrounding lighting conditions. The default operation mode of this service is manual. If you don't use smart devices such as touch screen to adjust the screen brightness, you can safely disable this function.
Target path: windowssystem32svchost.exe-klocalserviceanddecision.
application management
Provides software installation, uninstallation and enumeration operations for IntelliMirror group policy programs in active directory. If this service is stopped, users will not be able to install, delete or enumerate any programs installed by Smart Mirrors. If this service is disabled, any other services that depend on it will fail to run. The default operation mode of this service is manual, which is mainly suitable for centralized management in large enterprise environment, and home users can safely disable this service.
Target path: windowssystem32svchost.exe-knetsvcs
Basic filtering engine
Basic Filtering Engine (BFE) is a service that manages firewall and Internet Protocol Security (IPsec) policies and implements user mode filtering. Stopping or disabling BFE service will greatly reduce the security of the system. It can also lead to unpredictable behavior of IPsec management and firewall applications. It is recommended to keep the default value.
Target path: windowssystem32svchost.exe-klocalservicenetworkrestricted
It also provides dependent services for system firewall, VPN and IPsec, and is also a service for system security. If you use the third-party VPN dialing software, you can enjoy surfing the Internet without using the system firewall and ICS***. For the sake of system resources, turn it off, or don't touch it.
BitLocker drive encryption service
Provides BitLocker client services for the user interface and automatically unlocks data volumes. The default operation mode of this service is manual, and this function can be safely disabled without using BitLocker devices.
Target path: windowssystem32svchost.exe-knetsvcs
Block level backup engine service
An engine that performs block-level backup and recovery.
Target path: Windowssystem32wbengine.exe.
It is estimated that it has nothing to do with the service used for backup and recovery. The default is manual, and it has never been started by him. Just leave it there. It doesn't matter.
Bluetooth support service
Provide support for Bluetooth devices. If this service is disabled, users will not be able to discover or connect to Bluetooth devices. The default operation mode of this service is manual. If you don't use a Bluetooth device, you can safely disable this feature.
Target path: windowssystem32svchost.exe-kbthsvcs
Certificate dissemination
Provide certificates for smart cards. The default running mode of this service is manual. If you don't use a smart card, you can safely disable the service.
Target path: windowssystem32svchost.exe-knetsvcs
It is estimated that by the time win7 is released, passwords are not the only credentials that can be used to distinguish users' identities. Perhaps smart cards or more convenient biometric technologies, such as fingerprint and iris recognition, will be more widely used.