ghacks Technology News

Harden XP by disabling services

I never thought that a lot of users would still run Windows XP with the default service configuration but reality proofed me wrong once again. The default settings want to make sure that the majority of Windows users can use Windows XP without having to think about services that they would have to enable. This is great for compatibility issues but bad for the overall security of your operating system.

It is possible to increase the security of your system by disabling certain services that you will never use. Why would you for instance use remote services if those are not needed on your system. A rule of thumb could be to disable as many services as possible as long as this does not mean that you can’t use functions or programs in Windows XP that you do need.

Hit Windows + R and type services.msc to view the services configuration window. Services do have one of three possible start up types – they are either started automatically, manually or disabled. The difference between automatic and manual is that services that are set to automatic are started when Windows starts. Manual services are only started when they are needed.

It would be good to backup your system before you make any changes to the services, make sure you have a backup at hand or at at least system restore. If you want to be on the safe side right-click a service before you disable it and select Properties. Take a look at the Dependencies before you disable it, some services (that you might need) rely on others to function.

Disabled services list: (for a one user system)

  1. Alerter
  2. Application Layer Gateway
  3. Automatic Updates
  4. Background Intelligent Transfer Service
  5. Clipbook
  6. Computer Browser
  7. Distributed Link Tracking Client
  8. Distributed Transaction Coordinator
  9. Error Reporting Service
  10. Event Log
  11. Fast User Switching Compatibility
  12. IMAPI CD-Burning Com Service
  13. ET.TCP Port Sharing Service
  14. Messenger
  15. Network DDE
  16. Network DDE DSDM
  17. QoS RSVP
  18. Remote Desktop Help Session Manager
  19. Remote Procedure Call Locator
  20. Remote Registry Service
  21. Routing and Remote Access
  22. SecondaryLogon
  23. Security Accounts Manager
  24. Server
  25. Shell Hardware Detection
  26. SSDP Discovery Service
  27. TCP/IP Netbios Helper
  28. Telnet
  29. Terminal Services
  30. Themes
  31. Web Client
  32. Windows Firewall / Internet Connection Sharing
  33. Windows Media Player Network Sharing Service
  34. Windows Time
  35. Wireless Zero Configuration
  36. WMI Performance Adapter

Manual Services:

  1. Application Management
  2. DNS Client
  3. HID Input Service
  4. HTTP SSL
  5. Install Driver Table Manager
  6. iPod Service
  7. IPSEC Services
  8. Logical Disk Manager
  9. Logical Disk Manager Administrative Service
  10. MS Software Shadow Copy Provider
  11. NB Service
  12. Net Logon
  13. Network Connections
  14. Network Location Awareness
  15. Network Provisioning Service
  16. Performance Logs and Alerts
  17. Protected Storage
  18. Remote Access Auto Connection Manager
  19. Remote Access Connection Manager
  20. Removable Storage
  21. Telephony
  22. Uninteruptable Power Supply
  23. Universal Plug and Play Device Host
  24. Volume Shadow Copy
  25. Windows Card Space
  26. Windows Installer
  27. Windows Management Instrumentation Driver Extensions
Enjoyed the article?: Then sign-up for our free newsletter or RSS feed to kick off your day with the latest technology news and tips, or share the article with your friends and contacts on Facebook or Twitter.

Related Articles:

Windows Services Manager
Service Manager, Manage Services, Drivers Locally and Remotely
Manage Windows Services
Turbo Service Manager, Manage Windows Services More Effectively
Services Suite, Better Windows Services Management



About the Author:Martin Brinkmann is a journalist from Germany who founded Ghacks Technology News Back in 2005. He is passionate about all things tech and knows the Internet and computers like the back of his hand. You can follow Martin on Facebook or Twitter.

Author: , Wednesday February 14, 2007 -
Tags:, , , ,


Responses so far:

  1. rakesh shastri says:

    hi..

    nice feed..

    i think it would be a good idea to:

    1) briefly describe the purpose of each service so that any user who intends to disable a particular service is aware of its repurcussions

    2) if after disabling a range of service the user detects a loss of functionality, the user would know exactly which service to re-enable.

    thanks.
    rakesh shastri

    • Martin says:

      Thanks for the comments. I did this on purpose. There are many websites on the net that describe every service in detail and even the services configuration tool has a description.

      What I would suggest would be to do this one by one if you feel insecure about changing so many services at once. Disable one and see if it has any effects, you might need to reboot the machine. If it has a effect, i.e. you can’t connect to the internet anymore, enable it again.

      Most users should not have to worry about disabling those services though.

  2. Joe says:

    Just in case, list of default settings:
    http://www.tech-recipes.com/windows_tips236.html

  3. GREYTAPE says:

    If you are looking on setting back your services to default settings here is the link…

    http://www.blackviper.com/WinXP/servicecfg.htm

  4. Braiam says:

    The probleam about Disable Automatic Update and BITS is that we need to harden the system with the updates like SP3, IE8, etc.

Leave a Reply   Follow Ghacks   Subscribe To Comment Rss

Subscribe without commenting

© 2005-2012 Ghacks.net. All Rights Reserved. Privacy Policy - About Us