Windows Vista Services Explained

Default: For space considerations, default shows Ultimate settings. For a full list of all defaults, check out the full services list.
Safe: Services that do not affect the user experience in any way. You should not even notice a difference when using these settings, but it is possible. Disables unnecessary services.
Tweaked: Many heavy and most likely unused services have been disabled. This is much lighter than 'Safe'. Aero disabled, but Themes left alone, as many people will blindly run this without reading what services are gone, and will be surprised/angry to see themes disappear.
Minimal: All services that are not necessary to every day use and windows update have been disabled. Themes is disabled, Aero is disabled, firewall disabled. This assumes you have your OWN firewall/AV software installed!

Note: If you want just an overview of all services, check out Services Overview

Too much to take in? Try out one of our registry files that will set up your computer to one of the below settings, or use it to set your services settings back to factory spec.

(A-P) | (P-W) | (W-Z)

Service Default 'Safe' Tweaked Minimal
Application Experience
Description:
Application compatibility. Essentially a database of 3rd party apps that Microsoft maintains to automatically apply proper settings to get well known programs with issues to run without user intervention (running in compatibility mode)

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
None

Automatic Automatic Manual Disabled
Application Information
Description:
AIS allows users to run applications as an administrator. You should leave this service set to manual.

Consequences of Stopping:
If disabled you will be unable to run tools like Services and Regedit so leave it on manual! If disabled, it's really rather hard to turn it on again. Boot into safe mode to be able to access services again.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC), User Profile Service

Required for:
None

Manual Manual Manual Manual
Application Layer Gateway Service
Description:
Allows 3rd party Internet connection sharing applications to be used. In XP this was required for Windows Firewall I believe, but it does not appear to need it now. If you do not use ICS, disable it, though it will not run anyway

Consequences of Stopping:
None that I can see so far. Will update.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
None

Manual Manual Manual Disabled
Application Management
Description:
The Application Management service is for allowing Group Policy installation management. Also used for some general remove software services, but not many. If you do not use Group Policy, you can disable it, but it is set to manual by default, and will most likely never run and use resources.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
None

Manual Manual Manual Disabled
Background Intelligent Transfer Service
Description:
BITS is essentially a download manager. It allows for downloads to be resumed later, and is fault tolerant. Windows Update uses this. If you disable it and run Windows update, it will automatically be set to Automatic (Delayed Start). Used for asynchronous downloading of Windows Updates.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC), COM+ Event System

Required for:
None

Automatic (DS) Automatic (DS) Manual Manual
Base Filtering System
Description:
Managed firewall filtering. Even if you use a 3rd party firewall, you will probably want this service set to automatic, as it does more than just firewall filtering. It can be disabled, but your computer will be less secure.

Consequences of Stopping:
Windows firewall will not run as 'secure'
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
Internet Connection Sharing (ICS), Routing and Remote Access, IPsec Policy Agent, IKE and AuthIP Ipsec Keying Modules, Windows Firewall

Automatic Automatic Automatic Disabled
Block Level Backup Engine Service
Description:
The Block Level Backup Engine isused by the Backup and Restore Center in the Control Panel. It allows for backups to occur at the hard disk level, instead of just file by file. Disk imaging essentially. If you do not use backup, then this service will probably never run, so setting it from manual to disabled is probably a moot point.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
None

Manual Manual Disabled Disabled
Certificate Propagation
Description:
Smart Card certificate handling. Microsoft has included many smartcard services in Vista, but probably not too many people use them. Do not get these confused with memory cards, they are completely different things. SmartCards are used sometimes for logging into vista instead of a password. If you do not have a smartcard reader, this will never be enabled, so setting it to disabled will not affect system performance.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
None

Manual Manual Disabled Disabled
CNG Key Isolation
Description:
Stores keys for cryptographic information. This could be used by other applications in the future, and only runs when needed, so it is safe to leave this as manual.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
Wired AutoConfig, WLAN AutoConfig, Extensible Authentication Protocol

Manual Manual Manual Disabled
COM+ Event System
Description:
I actually cannot name any real applications that make use of this service, but it is an event model that passes information between processes.

Consequences of Stopping:
Background Intelligent Transfer Service depends on this which is required by Windows Update.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
Background Intelligent Transfer Service, COM+ System Application, DFS Replication, System Event Notification Service

Automatic Manual Manual Manual
Service Default 'Safe' Tweaked Minimal
COM+ System Application
Description:
Configuration/tracking of COM+ components. There is not a lot of information around on what this service is actually used for. Despite the description by microsoft, if disabled, most if not all COM+ applications continue to function properly.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC), COM+ Event System, System Event Notification Service

Required for:
None

Manual Manual Manual Disabled
Computer Browser
Description:
Keeps list of computers on local network. Not needed if you don?t have other computers to connect to. You can still connect to other computers with this service disabled. If you use file/printer sharing often, you will probably want to leave this on at least manual.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
Workstation, DCOM Server Process Launcher, Remote Procedure Call (RPC), Server, Security Accounts Manager, Network Store Interface Service

Required for:
None

Automatic Manual Disabled Disabled
Cryptographic Services
Description:
Checks signed software and manages Root Certificates, etc. Windows Update will automatically set this to manual if you run it even if disabled. Needed for checking for signed drivers, etc.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
None

Automatic Manual Manual Manual
DCOM Server Process Launcher
Description:
Provides launch functionality for DCOM services. Pretty much every service relies on it, so leave it set to the default values.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
Network Location Awareness, IP Helper, Performance Logs & Alerts, Internet Connection Sharing (ICS), Base Filtering System, Windows Connect Now - Config Registrar, Microsoft Software Shadow Copy Provider, Windows Installer, Remote Procedure Call (RPC), Windows Firewall, Extensible Authentication Protocol, Remote Access Auto Connection Manager, Windows Media Center Receiver Service, Parental Controls, Protected Storage, Tablet PC Input Service, Windows Management Instrumentation, Windows Audio, DFS Replication, Security Accounts Manager, Quality Windows Audio Video Experience, COM+ Event System, System Event Notification Service, Offline Files, Wired AutoConfig, Routing and Remote Access, Fax , Group Policy Client, Windows Media Center Scheduler Service, IKE and AuthIP Ipsec Keying Modules, SL UI Notification Service, Windows Defender, Software Licensing, Security Center, Telephony, Server, Function Discovery Resource Publication, Terminal Services UserMode Port Redirector, PnP-X IP Bus Enumerator, Windows Backup, WLAN AutoConfig, Network List Service, Volume Shadow Copy, Superfetch, Windows Search, Remote Registry, Certificate Propagation, CNG Key Isolation, Shell Hardware Detection, Background Intelligent Transfer Service, Computer Browser, Health Key and Certificate Management, Windows Color System, COM+ System Application, Windows Update, Link-Layer Topology Discovery Mapper, Distributed Transaction Coordinator, Network Access Protection Agent, Program Compatibility Assistant Service, Windows Remote Management (WS-Management), Windows Media Center Extender Service, IPsec Policy Agent, Windows Media Center Service Launcher, ReadyBoost, Function Discovery Provider Host, Smart Card Removal Policy, Application Information, Terminal Services, Virtual Disk, Network Connections, Task Scheduler, Windows Image Acquisition (WIA), Cryptographic Services, Print Spooler, Distributed Link Tracking Client, KtmRm for Distributed Transaction Coordinator, User Profile Service, Portable Device Enumerator Service, Terminal Services Configuration

Automatic* Automatic* Automatic* Automatic*
Desktop Window Manager Session Manager
Description:
This is the main fancy processor for Aero fancy bits. It is one of the heavier background services, and pretty consistantly uses CPU power. Expect several % of CPU power to be used at all times. Some may find it worth the resources.

Consequences of Stopping:
Will free up system resources, but you will lose prettiness.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
None

Automatic Automatic Disabled Disabled
DFS Replication
Description:
DFS Replication can be used to keep files synchronized across multiple computers on a network. It is a rather nice feature, but it is unlikely that many users know of it or will take advantage of it. It is set to Automatic for Ultimate, but can be safely set to manual or even disabled if you do not use it.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC), COM+ Event System

Required for:
None

Automatic Manual Disabled Disabled
DHCP Client
Description:
Needed for internet if you use DHCP. Can be Disabled if you have a static IP address. If you do not have a static IP address, you use DHCP to obtain an IP address, so leave it on.

Consequences of Stopping:
If you use DHCP to obtain an IP address, network connectivity will be lost.
All services listed in 'Required For' will be unable to function

Depends on:
Network Store Interface Service

Required for:
WinHTTP Web Proxy Auto-Discovery Service

Automatic Automatic Automatic Automatic
Diagnostic Policy Service
Description:
Annoying app that verifies all your programs installed correctly. Well that is just my take on it. It is a collection of diagnostic tools that attempts to detect problems in memory, disk, and files.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
None

Automatic Manual Disabled Disabled
Diagnostic Service Host
Description:
Diagnostics for windows. It is a collection of diagnostic tools that attempts to detect problems in memory, disk and files.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
None

Manual Manual Disabled Disabled
Diagnostic System Host
Description:
Diagnostics for windows. It is a collection of diagnostic tools that attempts to detect problems in memory, disk and files.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
None

Manual Manual Disabled Disabled
Distributed Link Tracking Client
Description:
The Distributed Link Tracking Client maintains links across network. It keeps track of files' locations even if the file has been moved. Seems like a lot of overhead if you move stuff around, and safe to disable.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
None

Automatic Manual Disabled Disabled
Service Default 'Safe' Tweaked Minimal
Distributed Transaction Coordinator
Description:
The Microsoft Distributed Transaction Coordinator (MDTC) coordinates transactions across different computers. It assists with working with multiple data sources. It is used with SQL Server and the Personal Web Server. Since it is set to manual, it will only run when required, so setting it to disabled will not help regain resources.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC), Security Accounts Manager

Required for:
None

Manual Manual Disabled Disabled
DNS Client
Description:
The DNS Client service is not needed to connect to the internet. It is used for DNS client lookup caching. However, browsers already have DNS caching built into them. Some people have mentioned that this will slow down your browsing experience as you will have to re-retrieve DNS entries for all web requests, but I find that 2 levels of caching the same data is a bit silly, as the browsers can manage this on their own. You can up your DNS browser cache from within firefox (and probably IE), or use an extension such as FasterFox which ups it by default (if memory serves).

Consequences of Stopping:
If disabled DNS names will continue to be resolved but they won't be cached. Your internet will continue to work just fine. Can slow down browsing, hypothetically, but I have seen no difference in network speeds. Also some ipconfig commands will complain about errors (as there is no cache to clear)
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
None

Automatic Automatic Manual Disabled
Extensible Authentication Protocol
Description:
The Exensible Authentication Protocol (EAP) is used for PPP connection authentication. If you need VPN or dial-up access then you will probably need this service. Wireless Access Points (WAPs) use this for authentication as well, so if you use a wireless card, you will want to leave this alone as well

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, CNG Key Isolation, Remote Procedure Call (RPC)

Required for:
Wired AutoConfig, WLAN AutoConfig

Manual Manual Manual Manual
Fax
Description:
Lets your send faxes. Hooray! Just what you always wanted. I really do not know what other kind of description I can put here?

Consequences of Stopping:
You won't be able to send faxes.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Telephony, Plug and Play, Remote Procedure Call (RPC), Print Spooler

Required for:
None

Manual Disabled Disabled Disabled
Function Discovery Provider Host
Description:
Process for Function Discover processes.. This is used by Windows Media Center

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
PnP-X IP Bus Enumerator, Windows Media Center Extender Service

Manual Manual Disabled Disabled
Function Discovery Resource Publication
Description:
Publishes your computer resources over the network.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
None

Automatic Manual Disabled Disabled
Group Policy Client
Description:
Responsible for applying settings set through Group Policy. If you are just a home machine, you do not technically need this service, if you can find out how to disable it. You might be able to set it through the registry, or commandline, but you cannot via services.msc

Consequences of Stopping:
Not able to set it to Disabled. It is 'hardened', which means it cannot be killed. Like superman. Or not.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
None

Automatic* Automatic* Automatic* Automatic*
Health Key and Certificate Management
Description:
X.509 management.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
None

Manual Manual Disabled Disabled
Human Interface Device Access
Description:
Hotkeys for HID

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
None

Manual Manual Disabled Disabled
IKE and AuthIP Ipsec Keying Modules
Description:
If you need IKE. Leave it alone, but not really needed. Used for some VPN software.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Base Filtering System, Remote Procedure Call (RPC)

Required for:
None

Automatic Manual Disabled Disabled
Interactive Services Detection
Description:
If disabled, notification and access to new interactive services won't work

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
None

Manual Manual Disabled Disabled
Service Default 'Safe' Tweaked Minimal
Internet Connection Sharing (ICS)
Description:
Allows you to share your internet connection to other computers attached to yours.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
Network Connections, DCOM Server Process Launcher, Base Filtering System, Windows Management Instrumentation, Remote Procedure Call (RPC), Remote Access Connection Manager, Network Store Interface Service

Required for:
None

Disabled Manual Disabled Disabled
IP Helper
Description:
IPV6 support. Useful when that gets running but for now useless, as I am unaware of any locations that actually use IPV6. No idea why Microsoft chose to have it running at all time, but whatever.

Consequences of Stopping:
Well, if IPV6 starts being used, it probably won't work for you until you re-enable this service
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Windows Management Instrumentation, Remote Procedure Call (RPC), Network Store Interface Service

Required for:
None

Automatic Manual Disabled Disabled
IPsec Policy Agent
Description:
Required if internet provider requires it. I do not believe that many do, but some organizations might, so ask around. Or, disable it and test network connectivity.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Base Filtering System, Remote Procedure Call (RPC)

Required for:
None

Automatic Manual Disabled Disabled
KtmRm for Distributed Transaction Coordinator
Description:
connection between MSDTC and KTM

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC), Security Accounts Manager

Required for:
None

Automatic (DS) Automatic (DS) Disabled Disabled
Link-Layer Topology Discovery Mapper
Description:
Creates a network map of connectivity information.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
None

Manual Manual Disabled Disabled
Microsoft .NET Framework NGEN
Description:
.NET Framework. Needed for .NET type stuff.. ;)

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
None

Manual Manual Manual Manual
Microsoft iSCSI Initiator Service
Description:
connection to iSCSI devices

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
None

Manual Manual Disabled Disabled
Microsoft Software Shadow Copy Provider
Description:
Volume copies. Backup uses this service.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
None

Manual Manual Disabled Disabled
Multimedia Class Scheduler
Description:
Gives higher priority to multimedia applications. Windows audio requires it.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
Windows Audio

Automatic Automatic Automatic Automatic
Net.Tcp Port Sharing Service
Description:
Share your TCP ports.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
None

Disabled Disabled Disabled Disabled
Netlogon
Description:
Connection between yourself and Domain Controller. If you need to be able to log into your domain controller, leave it alone.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
Workstation, Network Store Interface Service

Required for:
None

Manual Manual Disabled Disabled
Service Default 'Safe' Tweaked Minimal
Network Access Protection Agent
Description:
Enables NAP, which is a way for administrators to control access to the network based on health indicators.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
None

Manual Manual Disabled Disabled
Network Connections
Description:
Manages network connections in Network and Dial-Up Connections folder.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC), Network Store Interface Service

Required for:
Internet Connection Sharing (ICS)

Manual Manual Manual Disabled
Network List Service
Description:
Maintains list of network connections. With this disabled the tray icon won't be able to tell if you are connected but you can still connect just fine.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
Network Location Awareness, DCOM Server Process Launcher, Remote Procedure Call (RPC), Network Store Interface Service

Required for:
SL UI Notification Service

Manual Manual Manual Disabled
Network Location Awareness
Description:
Stores information on network information and notifies programs when it changes. Utilized by Windows Firewall, but not required for its use.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC), Network Store Interface Service

Required for:
SL UI Notification Service, Network List Service

Automatic Manual Disabled Disabled
Network Store Interface Service
Description:
Stopping this client loses internet connections.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
None

Required for:
Network Connections, Network Location Awareness, Workstation, IP Helper, Internet Connection Sharing (ICS), Netlogon, Computer Browser, DHCP Client, SL UI Notification Service, Network List Service, WinHTTP Web Proxy Auto-Discovery Service, Terminal Services Configuration

Automatic Automatic Automatic Automatic
Offline Files
Description:
Maintains offline file cache

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
None

Automatic Disabled Disabled Disabled
Parental Controls
Description:
Offers parental controls. If you need this for children.. Enable it.

Consequences of Stopping:
.
All services listed in 'Required For' will be unable to function

Depends on:
DCOM Server Process Launcher, Remote Procedure Call (RPC)

Required for:
None

Manual Disabled Disabled Disabled

(A-P) | (P-W) | (W-Z)