清理和关闭多余的Win7服务 提高系统速度

现在已经有不少配置不是很高的电脑用户正式用上了Windows 7(以下简称Win 7),如何让低配置电脑可以更流畅的运行Win7呢?虽然部分软件提供了傻瓜化的优化处理方法,但这些优化往往让用户摸不到头脑,更不知道是否真实有效。本文教大家手动优化Win 7,而对象则是最容易被忽视的系统服务。

  我们首先了解系统服务的一些相关知识,然后再根据Windows 7用户的各种不同需求提供有针对性Windows7系统服务清理方案,提高WIndows7的运行速度。

  系统服务优化准备知识

  什么是服务?

  服务是系统用以执行指定系统功能的程序或进程,其功用是支持其他应用程序,一般在后台运行。与用户运行的程序相比,服务不会出现程序窗口或对话框,只有在任务管理器中才能观察到它们的身影。

  如何修改服务的启动类型?

  在Win 7开始菜单的“搜索程序和文件”栏里输入“services.msc”或“服务”,即可搜索到“服务”项,点击之后就可以打开服务管理列表窗口。双击任意一个服务即可查看或修改它的属性,在属性窗口中就可以修改启动类型为“手动”、“自动”、“自动(延时启动)”或“禁用”。

“自动”和“自动(延时启动)”有什么不同?

“自动”启动是指电脑启动时同时加载该服务项,以便支持其他在此服务基础上运行的程序。而“自动(延时启动)”则是Win 7当中非常人性化的一个设计。采用这种方式启动,可以在系统启动一段时间后延迟启动该服务项,可以很好地解决一些低配置电脑因为加载服务项过多导致电脑启动缓慢或启动后响应慢的问题。

“手动”和“禁用”有什么不同?

  服务启动状态为“手动”的情况下,该进程虽然关闭,但依然可以在特定情况下被激活,而设置为“禁用”后,除非用户手动修改属性,否则服务将无法运行。

  哪些服务需要手动启动?

“手动”模式,顾名思义就是这种服务不会随着系统的启动而加载,而需要其他服务激活或者由用户进入服务管理界面后,手动启动它或者修改其属性为“自动”启动。

  这种模式常用在需要开启一些系统原本没有开启的功能时。以“Application Identity”服务为例,默认状态下该服务为“手动”状态,即没有启动。但是当用户需要使用AppLocker功能时,就必须手动启用这一服务(修改为“自动”状态),否则AppLocker功能将无法正常工作。

  修改前我应该注意些什么?

  修改系统服务可能会造成一些意想不到的问题,所以修改前最好将默认的服务状态进行备份。方法为打开服务管理窗口后依次点击“操作→导出列表”,选择“保存类型”为TXT文本文件或CSV文件,建议选择后者,该文件可用Excel打开。

  此外,如果出现因为修改错误导致无法正常进入系统的情况,可以在开机时按F8键选择进入安全模式,在安全模式中修改服务启动属性。

  了解了这些知识,下面我们就开始动手操作,看看windows 7中有哪些服务在什么情况下是可以关闭的。请点击“下一页”.

  不在局域网 禁用服务多

  Computer Browser,简称CB,翻译过来就是“计算机浏览器”的意思,它的作用是浏览局域网上的其他计算机,并提供局域网中的计算机列表且自动更新。顾名思义,如果你的计算机在局域网当中,那么查看局域网中的其他计算机(也就是查看网上邻居),就需要这个服务的支持。但是如果你的计算机并不处在局域网环境当中,只是单机运行的话,那么该服务显然就可以禁用了。

  与它类似的还有HomeGroup Listener(家庭组监听服务,简称HL)和HomeGroupProvider(家庭组支持服务,简称HP),前者的作用是维护家庭组计算机之间的关联配置,为家庭群组提供接收服务;后者的作用是执行与家庭组的配置和维护相关的任务。如果你的计算机并不在家庭组当中,当然可以选择禁用它。

  提示:上述三个服务都涉及到局域网和家庭组,读者可以根据自己的实际情况选择禁用或者设置为“手动”模式。建议如果是台式机,可以选择禁用,如果是笔记本,还是不要禁用的好,特别是ComputerBrowser服务,毕竟笔记本是常常要连接到其他网络当中的。

  同时,你还可以禁用Offline Files(简称OF,脱机文件服务)和Server服务。前者的作用是将网络上的共享内容在本地缓存,使用户可以在脱机状态下访问共享文件;后者的作用是允许计算机通过网络共享文件。

  不用的功能 全部禁用

  虽然Win 7中提供了很多功能,但平时我们可能并不会用到,那么就可以有选择地关闭这些服务,从而达到有效节省系统资源的目的。

  如果你的电脑是台式机或者并没有启用电源管理策略,那么可以选择禁用Power服务;如果你的电脑没有连接打印机,那么可以选择禁用PrintSpooler服务,它的作用是将文件加载到内存中以供稍后打印;如果你用不到手写板又不是平板电脑,那么可以禁用Tablet PC Input Service服务,它的作用是提供手写板支持和笔触感应功能;如果你很少用移动硬盘等大容量移动存储设备,还可以禁用PortableDevice Enumerator Service服务,它是提供可移动大容量存储设备同步功能的服务。

  此外,如果已经关闭了系统的自动更新功能,还可以选择禁用Background IntelligentTransfer Service(后台智能传输服务,简称BITS)服务,它的作用是使用空闲的网络带宽在后台传输客户端和服务器之间的数据,主要就是对系统的WindowsUpdate功能提供支持。

  提示:关闭BITS服务,可能造成某些依赖于BITS服务的应用程序无法正常自动更新或下载更新程序。如果用户在禁用该服务后引起某些软件无法更新,可以选择重新启动该服务。

  除了上述这些服务,如果你不用Win 7当中最新提供的Windows Media Player媒体库网络共享功能,还可以禁用WindowsMedia Player Network Sharing Service服务,单机用户就更是要禁用了。

  鸡肋功能 该禁就禁

  Win 7中除了不常用的功能,还有一些比较鸡肋的功能,同样也可以选择禁用它们。

  Diagnostic Policy Service(诊断策略服务,简称DPS)服务,就完全可以禁用。它是为Windows组件提供问题检测、疑难解答和诊断支持的服务。常见的就是当系统中发生了故障,会弹出一个对话框询问你是否需要启用故障诊断来帮助你查找原因。用过该功能的用户都知道,解决问题的几率不大,所以,禁用它吧!

  禁用该服务后,系统的诊断工具将无法正常运行,会提示“诊断策略服务已被禁用”。

  除了DPS服务,我们还可以同时关闭Diagnostic Service Host服务,它的作用是具体分析故障的原因。类似的还有DiagnosticSystem Host,系统组件诊断服务。它的作用是检测Windows组件的问题、排除故障并提供解决方案。一般情况下,也是用不到的,并且同DPS服务类似,解决问题的几率不大,所以都可以选择禁用。

  如果说DPS服务还有些作用,那么Distributed Link Tracking Client(客户端分布式链接跟踪服务,简称DLTC)服务就可以说完全没什么作用了!它的主要作用是维护计算机内部或局域网内计算机中的NTFS文件系统文件间的链接。说白了,就是在快捷方式、对象链接和嵌入链接在目标文件被重命名或移动后仍然有效。而且在局域网内,只有所有的电脑都开启了该服务才有效,所以完全可以禁用之。

  此外,可以与DLTC服务相“媲美”的,恐怕就要算Windows Error Reporting Service(Windows系统错误报告服务)服务了!这个服务相信大家很熟悉,它的作用就是在程序停止运行或停止响应时报告错误,并允许提供解决方案,还会生成相应的错误日志和报告。试问你用过它么?所以禁了吧,一点都不用犹豫!

  自动播放 禁用更安全

  Shell Hardware Detection,硬件检测服务,简称SHD,它的作用是为自动播放的设备或硬件提供通知功能,也就是我们常用的插入闪存之后会弹出的操作提示。如果你认为这个提示没有多少实际意义,甚至成了烦人的提示,干脆禁用它,这样今后再连接闪存或可移动设备就不会有任何提示。

  提示:禁用该功能就是禁用了自动播放功能,还可以在一定程度上降低系统中毒的风险,何乐而不为呢?

  如果你先关闭SHD服务,那么系统还可能会提示你需要联动关闭Windows ImageAcquisition(Windows 图像采集服务,简称WIA)服务,它是为扫描仪和照相机提供图像采集服务的。一般情况下,如果你的电脑没有连接扫描仪,就可以关闭该服务。而普通用户一般也不会连接照相机,因为拷贝图片一般都是使用读卡器来完成的。

  提示:该服务默认为“手动”状态,如果你连接了扫描仪,那么不用修改该服务的状态,如果没有可以选择手动修改为“禁用”.

  搜索功能 因人而异

  Win 7当中提供的搜索功能(Windows Search)有了长足的进步,但对于该功能,不同的用户可能有着不同的定位。如果用户需要经常用该功能来搜索文档等,那么可以维持现状(延迟启动);如果用户很少用到Win7的搜索功能,那么可以选择禁用该服务。

  安装杀软 禁用防火墙服务

  Windows Firewall,我们熟知的Windows防火墙服务,它的作用就不用多说了–Windows的基本防御系统。不过如果你使用的是第三方的杀毒软件和防火墙,那么就可以考虑关闭WindowsFirewall服务,因为一般情况下,第三方杀毒软件和防火墙已经完全可以替代Windows自带的系统防火墙,效果也要比Windows防火墙更好。

  提示:一些第三方的杀毒软件在安装时会提示你关闭系统自带的防火墙,但关闭Windows防火墙后其实并没有关闭WindowsFirewall服务,这就在无形当中造成了资源浪费。所以在实际使用过程中,在安装第三方杀毒软件后可以选择手动关闭Windows Firewall服务(设置启动模式为“禁用”)。

  禁用服务 效果明显

  本文中,我们一共列举了可以禁用的系统服务近20项。经过亲自测试,关闭这些系统服务后,系统启动速度明显加快–电脑启动时间就由原来的58秒减少到50秒。当然这个时间会因为电脑的配置不同而不同,但相信对于一些配置相对较低的用户,效果会更明显!

后台服务备份:
Name Description Status Startup Type Log On As
2345加速浏览器安全中心 2345加速浏览器安全中心 Disabled Local System
Acer ePower Service Acer ePower Service Manual Local System
ActiveX Installer (AxInstSV) Provides User Account Control validation for the installation of ActiveX controls from the Internet and enables management of ActiveX control installation based on Group Policy settings. This service is started on demand and if disabled the installation of ActiveX controls will behave according to default browser settings. Manual Local System
Adaptive Brightness Monitors ambient light sensors to detect changes in ambient light and adjust the display brightness. If this service is stopped or disabled, the display brightness will not adapt to lighting conditions. Manual Local Service
Adobe Flash Player Update Service This service keeps your Adobe Flash Player installation up to date with the latest enhancements and security fixes. Manual Local System
Adobe SwitchBoard Manual Local System
Alipay payment client security service 为支付宝客户端提供服务,一旦停止该服务,有可能影响你的支付业务安全 Started Automatic Local System
Alipay security business service 为支付宝客户端提供安全保障服务,一旦停止该服务,有可能影响你的支付业务安全 Started Automatic Local System
AMD External Events Utility Started Automatic Local System
Application Experience Processes application compatibility cache requests for applications as they are launched Started Manual Local System
Application Identity Determines and verifies the identity of an application. Disabling this service will prevent AppLocker from being enforced. Manual Local Service
Application Information Facilitates the running of interactive applications with additional administrative privileges. If this service is stopped, users will be unable to launch applications with the additional administrative privileges they may require to perform desired user tasks. Manual Local System
Application Layer Gateway Service Provides support for 3rd party protocol plug-ins for Internet Connection Sharing Manual Local Service
ASP.NET State Service Provides support for out-of-process session states for ASP.NET. If this service is stopped, out-of-process requests will not be processed. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Network Service
Background Intelligent Transfer Service Transfers files in the background using idle network bandwidth. If the service is disabled, then any applications that depend on BITS, such as Windows Update or MSN Explorer, will be unable to automatically download programs and other information. Started Automatic (Delayed Start) Local System
Base Filtering Engine The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications. Started Automatic Local Service
BitLocker Drive Encryption Service BDESVC hosts the BitLocker Drive Encryption service. BitLocker Drive Encryption provides secure startup for the operating system, as well as full volume encryption for OS, fixed or removable volumes. This service allows BitLocker to prompt users for various actions related to their volumes when mounted, and unlocks volumes automatically without user interaction. Additionally, it stores recovery information to Active Directory, if available, and, if necessary, ensures the most recent recovery certificates are used. Stopping or disabling the service would prevent users from leveraging this functionality. Manual Local System
Block Level Backup Engine Service The WBENGINE service is used by Windows Backup to perform backup and recovery operations. If this service is stopped by a user, it may cause the currently running backup or recovery operation to fail. Disabling this service may disable backup and recovery operations using Windows Backup on this computer. Manual Local System
Bluetooth Support Service The Bluetooth service supports discovery and association of remote Bluetooth devices. Stopping or disabling this service may cause already installed Bluetooth devices to fail to operate properly and prevent new devices from being discovered or associated. Manual Local Service
Certificate Propagation Copies user certificates and root certificates from smart cards into the current user’s certificate store, detects when a smart card is inserted into a smart card reader, and, if needed, installs the smart card Plug and Play minidriver. Manual Local System
CNG Key Isolation The CNG key isolation service is hosted in the LSA process. The service provides key process isolation to private keys and associated cryptographic operations as required by the Common Criteria. The service stores and uses long-lived keys in a secure process complying with Common Criteria requirements. Started Manual Local System
COM+ Event System Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Local Service
COM+ System Application Manages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local System
Computer Browser Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local System
Credential Manager Provides secure storage and retrieval of credentials to users, applications and security service packages. Manual Local System
Cryptographic Services Provides four management services: Catalog Database Service, which confirms the signatures of Windows files and allows new programs to be installed; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; Automatic Root Certificate Update Service, which retrieves root certificates from Windows Update and enable scenarios such as SSL; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Network Service
DCOM Server Process Launcher The DCOMLAUNCH service launches COM and DCOM servers in response to object activation requests. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the DCOMLAUNCH service running. Started Automatic Local System
Desktop Window Manager Session Manager Provides Desktop Window Manager startup and maintenance services Started Automatic Local System
DHCP Client Registers and updates IP addresses and DNS records for this computer. If this service is stopped, this computer will not receive dynamic IP addresses and DNS updates. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Local Service
Diagnostic Policy Service The Diagnostic Policy Service enables problem detection, troubleshooting and resolution for Windows components. If this service is stopped, diagnostics will no longer function. Started Automatic Local Service
Diagnostic Service Host The Diagnostic Service Host is used by the Diagnostic Policy Service to host diagnostics that need to run in a Local Service context. If this service is stopped, any diagnostics that depend on it will no longer function. Started Manual Local Service
Diagnostic System Host The Diagnostic System Host is used by the Diagnostic Policy Service to host diagnostics that need to run in a Local System context. If this service is stopped, any diagnostics that depend on it will no longer function. Manual Local System
Diagnostics Tracking Service The Diagnostics Tracking Service enables data collection about functional issues in Windows components. Started Automatic Local System
Disk Defragmenter Provides Disk Defragmentation Capabilities. Manual Local System
Distributed Link Tracking Client Maintains links between NTFS files within a computer or across computers in a network. Manual Local System
Distributed Transaction Coordinator Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will fail. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Network Service
DNS Client The DNS Client service (dnscache) caches Domain Name System (DNS) names and registers the full computer name for this computer. If the service is stopped, DNS names will continue to be resolved. However, the results of DNS name queries will not be cached and the computer’s name will not be registered. If the service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Network Service
Encrypting File System (EFS) Provides the core file encryption technology used to store encrypted files on NTFS file system volumes. If this service is stopped or disabled, applications will be unable to access encrypted files. Manual Local System
Extensible Authentication Protocol The Extensible Authentication Protocol (EAP) service provides network authentication in such scenarios as 802.1x wired and wireless, VPN, and Network Access Protection (NAP). EAP also provides application programming interfaces (APIs) that are used by network access clients, including wireless and VPN clients, during the authentication process. If you disable this service, this computer is prevented from accessing networks that require EAP authentication. Started Manual Local System
Fax Enables you to send and receive faxes, utilizing fax resources available on this computer or on the network. Manual Network Service
FLEXnet Licensing Service This service performs licensing functions on behalf of FLEXnet enabled products. Manual Local System
Function Discovery Provider Host The FDPHOST service hosts the Function Discovery (FD) network discovery providers. These FD providers supply network discovery services for the Simple Services Discovery Protocol (SSDP) and Web Services – Discovery (WS-D) protocol. Stopping or disabling the FDPHOST service will disable network discovery for these protocols when using FD. When this service is unavailable, network services using FD and relying on these discovery protocols will be unable to find network devices or resources. Started Manual Local Service
Function Discovery Resource Publication Publishes this computer and resources attached to this computer so they can be discovered over the network. If this service is stopped, network resources will no longer be published and they will not be discovered by other computers on the network. Manual Local Service
Google 更新服务 (gupdate) Keeps your Google software up to date. If this service is disabled or stopped, your Google software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This service uninstalls itself when there is no Google software using it. Automatic (Delayed Start) Local System
Google 更新服务 (gupdatem) Keeps your Google software up to date. If this service is disabled or stopped, your Google software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This service uninstalls itself when there is no Google software using it. Manual Local System
Group Policy Client The service is responsible for applying settings configured by administrators for the computer and users through the Group Policy component. If the service is stopped or disabled, the settings will not be applied and applications and components will not be manageable through Group Policy. Any components or applications that depend on the Group Policy component might not be functional if the service is stopped or disabled. Started Automatic Local System
Health Key and Certificate Management Provides X.509 certificate and key management services for the Network Access Protection Agent (NAPAgent). Enforcement technologies that use X.509 certificates may not function properly without this service Manual Local System
HomeGroup Listener Makes local computer changes associated with configuration and maintenance of the homegroup-joined computer. If this service is stopped or disabled, your computer will not work properly in a homegroup and your homegroup might not work properly. It is recommended that you keep this service running. Disabled Local System
HomeGroup Provider Performs networking tasks associated with configuration and maintenance of homegroups. If this service is stopped or disabled, your computer will be unable to detect other homegroups and your homegroup might not work properly. It is recommended that you keep this service running. Disabled Local Service
Human Interface Device Access Enables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices. If this service is stopped, hot buttons controlled by this service will no longer function. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local System
IKE and AuthIP IPsec Keying Modules The IKEEXT service hosts the Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) keying modules. These keying modules are used for authentication and key exchange in Internet Protocol security (IPsec). Stopping or disabling the IKEEXT service will disable IKE and AuthIP key exchange with peer computers. IPsec is typically configured to use IKE or AuthIP; therefore, stopping or disabling the IKEEXT service might result in an IPsec failure and might compromise the security of the system. It is strongly recommended that you have the IKEEXT service running. Disabled Local System
Interactive Services Detection Enables user notification of user input for interactive services, which enables access to dialogs created by interactive services when they appear. If this service is stopped, notifications of new interactive service dialogs will no longer function and there might not be access to interactive service dialogs. If this service is disabled, both notifications of and access to new interactive service dialogs will no longer function. Manual Local System
Internet Connection Sharing (ICS) Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network. Disabled Local System
Internet Explorer ETW Collector Service ETW Collector Service for Internet Explorer. When running, this service collects real time ETW events and processes them. Manual Local System
IP Helper Provides tunnel connectivity using IPv6 transition technologies (6to4, ISATAP, Port Proxy, and Teredo), and IP-HTTPS. If this service is stopped, the computer will not have the enhanced connectivity benefits that these technologies offer. Disabled Local System
IPsec Policy Agent Internet Protocol security (IPsec) supports network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and replay protection. This service enforces IPsec policies created through the IP Security Policies snap-in or the command-line tool “netsh ipsec”. If you stop this service, you may experience network connectivity issues if your policy requires that connections use IPsec. Also,remote management of Windows Firewall is not available when this service is stopped. Disabled Network Service
KtmRm for Distributed Transaction Coordinator Coordinates transactions between the Distributed Transaction Coordinator (MSDTC) and the Kernel Transaction Manager (KTM). If it is not needed, it is recommended that this service remain stopped. If it is needed, both MSDTC and KTM will start this service automatically. If this service is disabled, any MSDTC transaction interacting with a Kernel Resource Manager will fail and any services that explicitly depend on it will fail to start. Disabled Network Service
Link-Layer Topology Discovery Mapper Creates a Network Map, consisting of PC and device topology (connectivity) information, and metadata describing each PC and device. If this service is disabled, the Network Map will not function properly. Disabled Local Service
Media Center Extender Service Allows Media Center Extenders to locate and connect to the computer. Disabled Local Service
Microsoft .NET Framework NGEN v2.0.50727_X64 Microsoft .NET Framework NGEN Disabled Local System
Microsoft .NET Framework NGEN v2.0.50727_X86 Microsoft .NET Framework NGEN Disabled Local System
Microsoft .NET Framework NGEN v4.0.30319_X64 Microsoft .NET Framework NGEN Automatic (Delayed Start) Local System
Microsoft .NET Framework NGEN v4.0.30319_X86 Microsoft .NET Framework NGEN Automatic (Delayed Start) Local System
Microsoft iSCSI Initiator Service Manages Internet SCSI (iSCSI) sessions from this computer to remote iSCSI target devices. If this service is stopped, this computer will not be able to login or access iSCSI targets. If this service is disabled, any services that explicitly depend on it will fail to start. Disabled Local System
Microsoft Software Shadow Copy Provider Manages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local System
Mozilla Maintenance Service Mozilla 维护服务能确保您的计算机上使用了最新且最安全的 Mozilla Firefox 版本。保持 Firefox 版本及时更新对您的网络安全是非常重要的,Mozilla 强烈建议您将这个服务保持开启状态。 Manual Local System
Multimedia Class Scheduler Enables relative prioritization of work based on system-wide task priorities. This is intended mainly for multimedia applications. If this service is stopped, individual tasks resort to their default priority. Started Automatic Local System
Net.Msmq Listener Adapter Receives activation requests over the net.msmq and msmq.formatname protocols and passes them to the Windows Process Activation Service. Disabled Network Service
Net.Pipe Listener Adapter Receives activation requests over the net.pipe protocol and passes them to the Windows Process Activation Service. Disabled Local Service
Net.Tcp Listener Adapter Receives activation requests over the net.tcp protocol and passes them to the Windows Process Activation Service. Disabled Local Service
Net.Tcp Port Sharing Service Provides ability to share TCP ports over the net.tcp protocol. Disabled Local Service
Netlogon Maintains a secure channel between this computer and the domain controller for authenticating users and services. If this service is stopped, the computer may not authenticate users and services and the domain controller cannot register DNS records. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local System
Network Access Protection Agent The Network Access Protection (NAP) agent service collects and manages health information for client computers on a network. Information collected by NAP agent is used to make sure that the client computer has the required software and settings. If a client computer is not compliant with health policy, it can be provided with restricted network access until its configuration is updated. Depending on the configuration of health policy, client computers might be automatically updated so that users quickly regain full network access without having to manually update their computer. Manual Network Service
Network Connections Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections. Started Manual Local System
Network List Service Identifies the networks to which the computer has connected, collects and stores properties for these networks, and notifies applications when these properties change. Started Manual Local Service
Network Location Awareness Collects and stores configuration information for the network and notifies programs when this information is modified. If this service is stopped, configuration information might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Network Service
Network Store Interface Service This service delivers network notifications (e.g. interface addition/deleting etc) to user mode clients. Stopping this service will cause loss of network connectivity. If this service is disabled, any other services that explicitly depend on this service will fail to start. Started Automatic Local Service
Office Source Engine 可保存用于更新和修复的安装文件,并且在下载安装程序更新和 Watson 错误报告时必须使用。 Manual Local System
Parental Controls This service is a stub for Windows Parental Control functionality that existed in Vista. It is provided for backward compatibility only. Manual Local Service
pcservice 数据统计,请勿禁用 Manual Local System
Peer Name Resolution Protocol Enables serverless peer name resolution over the Internet using the Peer Name Resolution Protocol (PNRP). If disabled, some peer-to-peer and collaborative applications, such as Remote Assistance, may not function. Manual Local Service
Peer Networking Grouping Enables multi-party communication using Peer-to-Peer Grouping. If disabled, some applications, such as HomeGroup, may not function. Manual Local Service
Peer Networking Identity Manager Provides identity services for the Peer Name Resolution Protocol (PNRP) and Peer-to-Peer Grouping services. If disabled, the Peer Name Resolution Protocol (PNRP) and Peer-to-Peer Grouping services may not function, and some applications, such as HomeGroup and Remote Assistance, may not function correctly. Manual Local Service
Performance Counter DLL Host Enables remote users and 64-bit processes to query performance counters provided by 32-bit DLLs. If this service is stopped, only local users and 32-bit processes will be able to query performance counters provided by 32-bit DLLs. Manual Local Service
Performance Logs & Alerts Performance Logs and Alerts Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local Service
Plug and Play Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability. Started Automatic Local System
PnP-X IP Bus Enumerator The PnP-X bus enumerator service manages the virtual network bus. It discovers network connected devices using the SSDP/WS discovery protocols and gives them presence in PnP. If this service is stopped or disabled, presence of NCD devices will not be maintained in PnP. All pnpx based scenarios will stop functioning. Manual Local System
PNRP Machine Name Publication Service This service publishes a machine name using the Peer Name Resolution Protocol. Configuration is managed via the netsh context ‘p2p pnrp peer’ Manual Local Service
Portable Device Enumerator Service Enforces group policy for removable mass-storage devices. Enables applications such as Windows Media Player and Image Import Wizard to transfer and synchronize content using removable mass-storage devices. Manual Local System
Power Manages power policy and power policy notification delivery. Started Automatic Local System
Print Spooler Loads files to memory for later printing Disabled Local System
Problem Reports and Solutions Control Panel Support This service provides support for viewing, sending and deletion of system-level problem reports for the Problem Reports and Solutions control panel. Manual Local System
Program Compatibility Assistant Service This service provides support for the Program Compatibility Assistant (PCA). PCA monitors programs installed and run by the user and detects known compatibility problems. If this service is stopped, PCA will not function properly. Started Manual Local System
Protected Storage Provides protected storage for sensitive data, such as passwords, to prevent access by unauthorized services, processes, or users. Manual Local System
QQBrowse QQ浏览器 Automatic Local System
QQPCMgr RTP Service QQ电脑管家实时防护服务 Started Automatic Local System
Quality Windows Audio Video Experience Quality Windows Audio Video Experience (qWave) is a networking platform for Audio Video (AV) streaming applications on IP home networks. qWave enhances AV streaming performance and reliability by ensuring network quality-of-service (QoS) for AV applications. It provides mechanisms for admission control, run time monitoring and enforcement, application feedback, and traffic prioritization. Manual Local Service
Remote Access Auto Connection Manager Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address. Disabled Local System
Remote Access Connection Manager Manages dial-up and virtual private network (VPN) connections from this computer to the Internet or other remote networks. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local System
Remote Desktop Configuration Remote Desktop Configuration service (RDCS) is responsible for all Remote Desktop Services and Remote Desktop related configuration and session maintenance activities that require SYSTEM context. These include per-session temporary folders, RD themes, and RD certificates. Manual Local System
Remote Desktop Services Allows users to connect interactively to a remote computer. Remote Desktop and Remote Desktop Session Host Server depend on this service. To prevent remote use of this computer, clear the checkboxes on the Remote tab of the System properties control panel item. Disabled Network Service
Remote Procedure Call (RPC) The RPCSS service is the Service Control Manager for COM and DCOM servers. It performs object activations requests, object exporter resolutions and distributed garbage collection for COM and DCOM servers. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the RPCSS service running Started Automatic Network Service
Remote Procedure Call (RPC) Locator In Windows 2003 and earlier versions of Windows, the Remote Procedure Call (RPC) Locator service manages the RPC name service database. In Windows Vista and later versions of Windows, this service does not provide any functionality and is present for application compatibility. Manual Network Service
Remote Registry Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start. Disabled Local Service
Routing and Remote Access Offers routing services to businesses in local area and wide area network environments. Disabled Local System
RPC Endpoint Mapper Resolves RPC interfaces identifiers to transport endpoints. If this service is stopped or disabled, programs using Remote Procedure Call (RPC) services will not function properly. Started Automatic Network Service
Secondary Logon Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Started Manual Local System
Secure Socket Tunneling Protocol Service Provides support for the Secure Socket Tunneling Protocol (SSTP) to connect to remote computers using VPN. If this service is disabled, users will not be able to use SSTP to access remote servers. Manual Local Service
Security Accounts Manager The startup of this service signals other services that the Security Accounts Manager (SAM) is ready to accept requests. Disabling this service will prevent other services in the system from being notified when the SAM is ready, which may in turn cause those services to fail to start correctly. This service should not be disabled. Started Automatic Local System
Security Center The WSCSVC (Windows Security Center) service monitors and reports security health settings on the computer. The health settings include firewall (on/off), antivirus (on/off/out of date), antispyware (on/off/out of date), Windows Update (automatically/manually download and install updates), User Account Control (on/off), and Internet settings (recommended/not recommended). The service provides COM APIs for independent software vendors to register and record the state of their products to the Security Center service. The Action Center (AC) UI uses the service to provide systray alerts and a graphical view of the security health states in the AC control panel. Network Access Protection (NAP) uses the service to report the security health states of clients to the NAP Network Policy Server to make network quarantine decisions. The service also has a public API that allows external consumers to programmatically retrieve the aggregated security health state of the system. Started Automatic (Delayed Start) Local Service
Server Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Local System
Shell Hardware Detection Provides notifications for AutoPlay hardware events. Disabled Local System
Smart Card Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start. Disabled Local Service
Smart Card Removal Policy Allows the system to be configured to lock the user desktop upon smart card removal. Manual Local System
SNMP Trap Receives trap messages generated by local or remote Simple Network Management Protocol (SNMP) agents and forwards the messages to SNMP management programs running on this computer. If this service is stopped, SNMP-based programs on this computer will not receive SNMP trap messages. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local Service
SoftEther VPN Client 它为 SoftEther VPN Client 管理虚拟网络适配器设备驱动和连接服务。当服务停止时,此计算机将无法使用 SoftEther VPN Client 连接到 SoftEther VPN Server。 Started Automatic Local System
Software Protection Enables the download, installation and enforcement of digital licenses for Windows and Windows applications. If the service is disabled, the operating system and licensed applications may run in a notification mode. It is strongly recommended that you not disable the Software Protection service. Automatic (Delayed Start) Network Service
SPP Notification Service Provides Software Licensing activation and notification Manual Local Service
SSDP Discovery Discovers networked devices and services that use the SSDP discovery protocol, such as UPnP devices. Also announces SSDP devices and services running on the local computer. If this service is stopped, SSDP-based devices will not be discovered. If this service is disabled, any services that explicitly depend on it will fail to start. Disabled Local Service
Superfetch Maintains and improves system performance over time. Started Automatic Local System
System Event Notification Service Monitors system events and notifies subscribers to COM+ Event System of these events. Disabled Local System
Tablet PC Input Service Enables Tablet PC pen and ink functionality Disabled Local System
TAOFrame Started Manual Local System
Task Scheduler Enables a user to configure and schedule automated tasks on this computer. The service also hosts multiple Windows system-critical tasks. If this service is stopped or disabled, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Local System
TBSecSvc 阿里巴巴反钓鱼安全服务 Started Manual Local System
TCP/IP NetBIOS Helper Provides support for the NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution for clients on the network, therefore enabling users to share files, print, and log on to the network. If this service is stopped, these functions might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Local Service
Telephony Provides Telephony API (TAPI) support for programs that control telephony devices on the local computer and, through the LAN, on servers that are also running the service. Manual Network Service
Themes Provides user experience theme management. Manual Local System
Thread Ordering Server Provides ordered execution for a group of threads within a specific period of time. Manual Local Service
TPM Base Services Enables access to the Trusted Platform Module (TPM), which provides hardware-based cryptographic services to system components and applications. If this service is stopped or disabled, applications will be unable to use keys protected by the TPM. Manual Local Service
UPnP Device Host Allows UPnP devices to be hosted on this computer. If this service is stopped, any hosted UPnP devices will stop functioning and no additional hosted devices can be added. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local Service
User Profile Service This service is responsible for loading and unloading user profiles. If this service is stopped or disabled, users will no longer be able to successfully logon or logoff, applications may have problems getting to users’ data, and components registered to receive profile event notifications will not receive them. Started Automatic Local System
Virtual Disk Provides management services for disks, volumes, file systems, and storage arrays. Manual Local System
VMware Authorization Service Authorization and authentication service for starting and accessing virtual machines. Manual Local System
VMware DHCP Service DHCP service for virtual networks. Manual Local System
VMware NAT Service Network address translation for virtual networks. Manual Local System
VMware USB Arbitration Service Arbitration and enumeration of USB devices for virtual machines Manual Local System
VMware Workstation Server Remote access service for registration and management of virtual machines. Manual Local System
Volume Shadow Copy Manages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local System
WebClient Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start. Disabled Local Service
Windows Activation Technologies Service Performs Windows 7 Validation. Manual Local System
Windows Audio Manages audio for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start Started Automatic Local Service
Windows Audio Endpoint Builder Manages audio devices for the Windows Audio service. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start Started Automatic Local System
Windows Backup Provides Windows Backup and Restore capabilities. Manual Local System
Windows Biometric Service The Windows biometric service gives client applications the ability to capture, compare, manipulate, and store biometric data without gaining direct access to any biometric hardware or samples. The service is hosted in a privileged SVCHOST process. Manual Local System
Windows CardSpace Securely enables the creation, management, and disclosure of digital identities. Manual Local System
Windows Color System The WcsPlugInService service hosts third-party Windows Color System color device model and gamut map model plug-in modules. These plug-in modules are vendor-specific extensions to the Windows Color System baseline color device and gamut map models. Stopping or disabling the WcsPlugInService service will disable this extensibility feature, and the Windows Color System will use its baseline model processing rather than the vendor’s desired processing. This might result in inaccurate color rendering. Manual Local Service
Windows Connect Now – Config Registrar WCNCSVC hosts the Windows Connect Now Configuration which is Microsoft’s Implementation of Wi-Fi Protected Setup (WPS) protocol. This is used to configure Wireless LAN settings for an Access Point (AP) or a Wi-Fi Device. The service is started programmatically as needed. Started Manual Local Service
Windows Defender Protection against spyware and potentially unwanted software Started Automatic (Delayed Start) Local System
Windows Driver Foundation – User-mode Driver Framework Creates and manages user-mode driver processes. This service cannot be stopped. Manual Local System
Windows Error Reporting Service Allows errors to be reported when programs stop working or responding and allows existing solutions to be delivered. Also allows logs to be generated for diagnostic and repair services. If this service is stopped, error reporting might not work correctly and results of diagnostic services and repairs might not be displayed. Disabled Local System
Windows Event Collector This service manages persistent subscriptions to events from remote sources that support WS-Management protocol. This includes Windows Vista event logs, hardware and IPMI-enabled event sources. The service stores forwarded events in a local Event Log. If this service is stopped or disabled event subscriptions cannot be created and forwarded events cannot be accepted. Manual Network Service
Windows Event Log This service manages events and event logs. It supports logging events, querying events, subscribing to events, archiving event logs, and managing event metadata. It can display events in both XML and plain text format. Stopping this service may compromise security and reliability of the system. Started Automatic Local Service
Windows Firewall Windows Firewall helps protect your computer by preventing unauthorized users from gaining access to your computer through the Internet or a network. Started Automatic Local Service
Windows Font Cache Service Optimizes performance of applications by caching commonly used font data. Applications will start this service if it is not already running. It can be disabled, though doing so will degrade application performance. Started Automatic Local Service
Windows Image Acquisition (WIA) Provides image acquisition services for scanners and cameras Disabled Local Service
Windows Installer Adds, modifies, and removes applications provided as a Windows Installer (*.msi) package. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local System
Windows Management Instrumentation Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Local System
Windows Media Center Receiver Service Windows Media Center Service for TV and FM broadcast reception Manual Network Service
Windows Media Center Scheduler Service Starts and stops recording of TV programs within Windows Media Center Manual Network Service
Windows Media Player Network Sharing Service Shares Windows Media Player libraries to other networked players and media devices using Universal Plug and Play Automatic (Delayed Start) Network Service
Windows Modules Installer Enables installation, modification, and removal of Windows updates and optional components. If this service is disabled, install or uninstall of Windows updates might fail for this computer. Manual Local System
Windows Presentation Foundation Font Cache 3.0.0.0 Optimizes performance of Windows Presentation Foundation (WPF) applications by caching commonly used font data. WPF applications will start this service if it is not already running. It can be disabled, though doing so will degrade the performance of WPF applications. Manual Local Service
Windows Remote Management (WS-Management) Windows Remote Management (WinRM) service implements the WS-Management protocol for remote management. WS-Management is a standard web services protocol used for remote software and hardware management. The WinRM service listens on the network for WS-Management requests and processes them. The WinRM Service needs to be configured with a listener using winrm.cmd command line tool or through Group Policy in order for it to listen over the network. The WinRM service provides access to WMI data and enables event collection. Event collection and subscription to events require that the service is running. WinRM messages use HTTP and HTTPS as transports. The WinRM service does not depend on IIS but is preconfigured to share a port with IIS on the same machine. The WinRM service reserves the /wsman URL prefix. To prevent conflicts with IIS, administrators should ensure that any websites hosted on IIS do not use the /wsman URL prefix. Disabled Network Service
Windows Search Provides content indexing, property caching, and search results for files, e-mail, and other content. Started Automatic (Delayed Start) Local System
Windows Time Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Manual Local Service
Windows Update Enables the detection, download, and installation of updates for Windows and other programs. If this service is disabled, users of this computer will not be able to use Windows Update or its automatic updating feature, and programs will not be able to use the Windows Update Agent (WUA) API. Started Automatic (Delayed Start) Local System
WinHTTP Web Proxy Auto-Discovery Service WinHTTP implements the client HTTP stack and provides developers with a Win32 API and COM Automation component for sending HTTP requests and receiving responses. In addition, WinHTTP provides support for auto-discovering a proxy configuration via its implementation of the Web Proxy Auto-Discovery (WPAD) protocol. Disabled Local Service
Wired AutoConfig The Wired AutoConfig (DOT3SVC) service is responsible for performing IEEE 802.1X authentication on Ethernet interfaces. If your current wired network deployment enforces 802.1X authentication, the DOT3SVC service should be configured to run for establishing Layer 2 connectivity and/or providing access to network resources. Wired networks that do not enforce 802.1X authentication are unaffected by the DOT3SVC service. Manual Local System
WLAN AutoConfig The WLANSVC service provides the logic required to configure, discover, connect to, and disconnect from a wireless local area network (WLAN) as defined by IEEE 802.11 standards. It also contains the logic to turn your computer into a software access point so that other devices or computers can connect to your computer wirelessly using a WLAN adapter that can support this. Stopping or disabling the WLANSVC service will make all WLAN adapters on your computer inaccessible from the Windows networking UI. It is strongly recommended that you have the WLANSVC service running if your computer has a WLAN adapter. Started Automatic Local System
WMI Performance Adapter Provides performance library information from Windows Management Instrumentation (WMI) providers to clients on the network. This service only runs when Performance Data Helper is activated. Manual Local System
Workstation Creates and maintains client network connections to remote servers using the SMB protocol. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. Started Automatic Network Service
WWAN AutoConfig This service manages mobile broadband (GSM & CDMA) data card/embedded module adapters and connections by auto-configuring the networks. It is strongly recommended that this service be kept running for best user experience of mobile broadband devices. Manual Local Service

Advertisements