TweakHound Logo

 *** Stop by my new BLOG for the latest computer news! ***

 

 


 Main Menu 

Home

Articles

Windows XP

Windows Vista

Linux

Site Info

My Blog, Computing News and Notes

 

 

 Recent Articles 

***New & Hot***

Windows Vista Backup Strategies For Home Users

 

Updated!

Tweaking Windows Vista

 

Updated!

Installing Windows Vista

 

Windows XP Backup Strategies For Home Users

 

The Right Way To Install Windows XP

 

Installing Suse Linux 10.1

 

How To Samba With Suse 10.1 And Windows XP

 

iTunes, iPod File Types & Quality

 

Super XP Tweaking Guide Version 2.0

 


 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Securing Windows XP, Section 3

 

Disabling Services

   These services are by default set to either Automatic or Manual. Disabling these services can help make your computer more secure.

 

***Important! - Read what every service does before you disable it or your computer may cease to function properly!

  

 The description of these services has come from Microsoft. It has become a game to try and find these on the Microsoft web site because they have been slow to update the descriptions for SP2. It seems they would rather delete the pages than update them. As of this moment you can find them here and here.

   After reading the descriptions, choose the ones you wish to disable and follow these steps:

 

·       Press the Windows + R  keys, in the resulting box type services.msc and the services snap-in will appear. Scroll down to each service you wish to disable. You disable it by double-clicking on the service, a new window will appear. In that windows go down to the box next Startup type and use the arrow on the right to choose Disabled. Go down to the bottom of that windows and choose Apply and then OK. Restart when you've finished disabling all the services that you desire to.

 

 

Recommended Security Settings for Windows XP System Services

 

 A = Automatic          M = Manual          D = Disabled

Name

XP Pro

Default

 XP Home

Default

"Safe"

Secure Setting

Recommended

Secure Setting

Notes

Alerter

Disabled

Disabled

D

D

 

Application Layer Gateway Service

Manual

Manual

M

D

Needed if using ICS (Internet Connection Sharing)

Application Management

Manual

Manual

M

M

 

Automatic Updates

Automatic

Automatic

A

A

You can't disable this and still use Windows Update.

Background Intelligent Transfer Service

Manual

Manual

M

M

You can't disable this and still use Windows Update.

ClipBook

Disabled

Disabled

D

D

 

COM+ Event System

Manual

Manual

M

M

 

COM+ System Application

Manual

Manual

M

M

 

Computer Browser

Automatic

Automatic

D

D

 

Cryptographic Services

Automatic

Automatic

A

A

 Windows Update errors may occur if this is disabled.

DCOM Server Process Launcher

Automatic

Automatic

A

A

 

DHCP Client

Automatic

Automatic

A

D

 *CAUTION*

You'll have to set your IP Address manually. You'll need to know all your networks settings to do this. Not everyone will be able to disable this and still be able to connect to the Internet or connect to game servers.

Do not change this on an ICS gateway.

Distributed Link Tracking Client

Automatic

Automatic

A

D

 

Distributed Transaction Coordinator

Manual

Manual

M

D

 

DNS Client

Automatic

Automatic

A

D

 

Error Reporting Service

Automatic

Automatic

D

D

 

Event Log

Automatic

Automatic

A

A

 

Fast User Switching Compatibility

Manual

Manual

M

D

 Will require you to reboot machine to log in as another user.

Help and Support

Automatic

Automatic

M

D

 

HTTP SSL

Manual

Manual

M

M

 

Human Interface Device Access

Disabled

Disabled

D

D

Best to leave this at whatever your value is already set to.

Many USB devices use this these days (keyboards, special mice, remotes). You can try disabling this to see if your devices need it or not.

IMAPI CD-Burning COM Service

Manual

Manual

M

D

 

Indexing Service

Manual

Manual

D

D

 Worthless resource hog that fires up when it feels like it.

IPSEC Services

Automatic

Automatic

A

D

Required for certain types of VPN connections.

Logical Disk Manager

Automatic

Automatic

A

M

 

Logical Disk Manager Administrative Service

Manual

Manual

M

M

 

Messenger

Disabled

Disabled

D

D

Security risk.

MS Software Shadow Copy Provider

Manual

Manual

M

M

 Leave this at what it is already set to. Your backup program may depend on this.

Net Logon

Manual

Manual

D

D

 Only used in domains.

NetMeeting Remote Desktop Sharing

Manual

Manual

D

D

 

Network Connections

Manual

Manual

M

M

 

Network DDE

Disabled

Disabled

D

D

 

Network DDE DSDM

Disabled

Disabled

D

D

 

Network Location Awareness (NLA)

Manual

Manual

M

M

 

Network Provisioning Service

Manual

Manual

D

D

 May be needed in the future for WPS. Not required for home users. AFIK it hasn't been implemented yet.

NT LM Security Support Provider

Manual

Manual

M

M

 

Performance Logs and Alerts

Manual

Manual

M

M

 

Plug and Play

Automatic

Automatic

A

A

 

Portable Media Serial Number Service

Manual

Manual

M

M

If you have a portable media device and have problems accessing content, return this to Manual.

Print Spooler

Automatic

Automatic

A

A

 

Protected Storage

Automatic

Automatic

A

A

 Some things may cease to function properly if disabled. Among them: Saved passwords, ssl, s/mime

QoS RSVP

Manual

Manual

D

D

 

Remote Access Auto Connection Manager

Manual

Manual

M

M