Services in 22H2

cereberus · Jan 15, 2023

SightUp said:
What makes them core services? I don't care about diag info because if there is a problem I will reinstall. I don't care about BT because I don't use BT devices. I don't care about Xbox because none of the games are through Xbox. I don't care about printing services because it's 2023. I don't need Windows Search because I know where everything I install and use is.

I guess I am missing where or how this is breaking my core Windows experience.

This is like saying, I do not need aircon in my cars, a spare tire in case of a puncture, no radio, windscreen wipers as I only drive on dry days blah blah blah.

There are many dependencies between services, so disabling them can cause unexpected sode effects.

Emasculate your pc by all means but don't kid yourself it is a good idea LOL.

TairikuOkami · Jan 15, 2023

SightUp said:
I was wondering if anyone here had a list of services that they too also disable?

I keep MS account, onedrive, edge synced to android, otherwise I could have disabled a few more.

Code:

rem AMD Crash Defender Driver
sc config amdfendr start= disabled

rem AMD Crash Defender Driver
sc config amdfendrmgr start= disabled

rem AMD Crash Defender Service
sc config "AMD Crash Defender Service" start= disabled

rem AMD External Events Utility
sc config "AMD External Events Utility" start= disabled

rem AMD Link Controller Emulation
sc config AMDXE start= disabled

rem AMD PSP Driver
sc config amdpsp start= disabled

rem AMD Streaming Audio Driver
sc config AMDSAFD start= disabled

rem AMD User Experience Program Data Uploader
sc config "AUEPLauncher" start= disabled

rem AVCTP service
sc config BthAvctpSvc start= disabled

rem BitLocker Drive Encryption Service
sc config BDESVC start= disabled

rem Clipboard User Service
sc config cbdhsvc start= disabled

rem Connected User Experiences and Telemetry
sc config DiagTrack start= disabled

rem Contact Data
reg add "HKLM\System\CurrentControlSet\Services\PimIndexMaintenanceSvc" /v "Start" /t REG_DWORD /d "4" /f

rem Data Usage
sc config DusmSvc start= disabled

rem DevQuery Background Discovery Broker
sc config DevQueryBroker start= disabled

rem Device Management Wireless Application Protocol (WAP) Push message Routing Service
sc config dmwappushservice start= disabled

rem DHCP Client
sc config Dhcp start= disabled

rem Display Enhancement Service
sc config DisplayEnhancementService start= disabled

rem Display Policy Service
sc config DispBrokerDesktopSvc start= disabled

rem Distributed Link Tracking Client
sc config TrkWks start= disabled

rem dLauncherLoopback
sc config dLauncherLoopback start= demand

rem EaseUS Agent Service
sc config "EaseUS Agent" start= disabled

rem EaseUS UPDATE SERVICE
sc config "EaseUS UPDATE SERVICE" start= disabled

rem Encrypting File System (EFS)
sc config EFS start= disabled

rem FileSyncHelper
sc config FileSyncHelper start= disabled

rem Function Discovery Provider Host
sc config fdPHost start= disabled

rem Function Discovery Resource Publication
sc config FDResPub start= disabled

rem Geolocation Service
sc config lfsvc start= disabled

rem IKE and AuthIP IPsec Keying Modules
sc config IKEEXT start= disabled

rem IP Helper
sc config iphlpsvc start= disabled

rem Microsoft (R) Diagnostics Hub Standard Collector Service
sc config diagnosticshub.standardcollector.service start= disabled

rem Network Connections
sc config Netman start= disabled

rem Network Policy Server Management Service
sc config NPSMSvc start= disabled

rem Optimize drives
sc config defragsvc start= disabled

rem Panda Devices Agent
sc config PandaAgent start= disabled

rem Payments and NFC/SE Manager
sc config SEMgrSvc start= disabled

rem Portable Device Enumerator ServicePayments and NFC/SE Manager
sc config WPDBusEnum start= disabled

rem Program Compatibility Assistant Service
sc config PcaSvc start= disabled

rem Print Spooler
sc config Spooler start= disabled

rem Radio Management Service
sc config RmSvc start= disabled

rem Remote Access Connection Manager
sc config RasMan start= disabled

rem Remote Desktop Services
sc config TermService start= disabled

rem Retail Demo
sc config RetailDemo start=disabled

rem Secure Socket Tunneling Protocol Service
sc config SstpSvc start=disabled

rem Server
sc config LanmanServer start= disabled

rem Shell Hardware Detection
sc config ShellHWDetection start= disabled

rem SSDP Discovery
sc config SSDPSRV start= disabled

rem Superfetch
sc config SysMain start= disabled

rem Sync Host
sc config OneSyncSvc start= disabled

rem TCP/IP NetBIOS Helper
sc config lmhosts start= disabled

rem WebClient
sc config WebClient start= disabled

rem Web Threat Defense Service (Phishing protection_
sc config webthreatdefsvc start= disabled

rem Web Threat Defense User Service (Phishing protection)
sc config webthreatdefusersvc start= disabled

rem Windows Connection Manager
sc config Wcmsvc start= disabled

rem Windows Font Cache Service
sc config FontCache start= disabled

rem Windows Image Acquisition (WIA)
sc config StiSvc start= disabled

rem Windows Remote Management (WS-Management)
sc config WinRM start= disabled

rem Windows Search
sc config WSearch start= disabled

rem Windows Time
sc config W32Time start= disabled

rem WinHTTP Web Proxy Auto-Discovery Service
reg add "HKLM\System\CurrentControlSet\Services\WinHttpAutoProxySvc" /v "Start" /t REG_DWORD /d "4" /f

rem Workstation
sc config LanmanWorkstation start= disabled

Code:

rem Application Information / required by UAC
rem AppX Deployment Service (AppXSVC) / required by Store
rem Background Intelligent Transfer Service / required by Windows Updates / depends on Network List Service (starts even when disabled)
rem Base Filtering Engine / required by Windows Defender Firewall
rem CNG Key Isolation / required to login to Windows Insider / Switch to Local Account / Set up PIN / Basically everything Credentials related
rem Connected Devices Platform / required to open Settings - Windows Backup and to sync Edge with android
rem Credential Manager / required to store credentials (check User Accounts - Credential Manager) / required by apps like Windows Mail to store passwords / An administrator has blocked you from running this app.
rem Delivery Optimization / required by Windows Updates
rem DevicesFlow / required to open Settings - Bluetooth and devices
rem Diagnostic Policy Service / required by Windows Diagnostic (Troubleshooting)
rem DHCP Client / sometimes required by Windows Updates (0x80240022)
rem Distributed Link Tracking Client / sometimes required to open shortcuts and System apps - "Windows cannot access the specified device, path, or file. You may not have the appropriate permission to access the item"
rem Geolocation Service / required by some Windows Store apps, it can not be enabled when Connected User Experiences and Telemetry is disabled
rem Microsoft Account Sign-in Assistant / required to login to Microsoft Account
rem Network Connections / required to manage old Network Connections
rem Network Connection Broker / required to change Network Settings
rem Network List Service / required by Windows Update and to change Network Settings (when disabled desktop fails to load)
rem Network Location Awareness / required by Windows Update and Windows Defender Firewall
rem Network Store Interface Service / disabling disables Windows Firewall (when disabled Windows might fail to boot - Critical Service Died)
rem Print Spooler / required by printers
rem Radio Management Service / required to display WiFi networks
rem Security Accounts Manager / when disabled, explorer.exe (Desktop) crashes constantly
rem Storage Service / required to update store apps
rem Text Input Management Service (keeps ctfmon.exe running) / required to be able to login at all
rem User Data services / required to be able to change PIN/password at lockscreen or to login via Microsoft Authenticator
rem Web Account Manager / required to login to Microsoft Account/Store
rem Windows Biometric Service / required by biometric devices like a fingerprint reader
rem Windows Connection Manager / required by WiFi and Data Usage and Windows Update (starts even when disabled)
rem Windows Defender Firewall (Base Filtering Engine/Network Location Awareness) / required by Windows Update and Store Apps (0x80073d0a)
rem Windows Driver Foundation - User-mode Driver Framework / required by some drivers like USB devices
rem Windows Image Acquisition (WIA) / required by scanners
rem Windows Management Instrumentation / required by wmic commands / disabled to prevent some fileless malware
rem Windows Push Notifications User Service / required by Logitech Setpoint to avoid Runtime Error and upon disabling, Windows and network is sluggish

abactuon said:
It's not as important as you think.

Disabling some services improves security. MS even recommends to disable them, till a patch is released, but when disabled you are protected against zero days, even something as simple as print service, though you might not have a printer, it can be abused and it was multiple times over the years, the same goes for time sync and etc.

Microsoft Warns of Another Windows Print Spooler Vulnerability

Another security flaw has been found in the utility that allows Windows to print documents.

www.pcmag.com

safron · Jan 15, 2023

I’m relatively new to this Forum, so please accept my apologies if I misspeak.

I appreciate that many viewing the Forum are less technically inclined, and it’s great to point out that things said here shouldn’t necessarily be taken as gospel. Naturally, each viewer should use discretion, perform their own due diligence, and take backups before implementing changes mentioned in the Forum. Caveat emptor!

I believe the Forum’s purpose is to help others administrate (e.g., optimize, troubleshoot, customize) the Windows 11 operating environment. As such, a discussion of which, if any, Windows Services might be stopped to free up system resources is well within scope. Discussing the potential merits / drawbacks of enabling or stopping a Service is not the same as advocating.

It would be wonderful if Microsoft documented the impact of stopping a Service, but in lieu, I appreciate being able to read opinions of this Forum’s knowledgeable (if not “guru”) members. Let’s not presume what might or might not be helpful to other Forum viewers, extremity of the post notwithstanding.

abactuon · Jan 15, 2023

Adding to the madness.
I uninstalled the drivers for the old devices:
$services = @(

##### Drivers
"3ware"
"ADP80XX"
"arcsas"
"b06bdrv"
"bcmfn2"
"cht4iscsi"
"cht4vbd"
"ebdrv"
"ebdrv0"
"flpydisk"
"HpSAMD"
"ibbus"
"ItSas35i"
"LSI_SAS"
"LSI_SAS2i"
"LSI_SAS3i"
"megasas2i"
"megasas35i"
"megasr"
"mlx4_bus"
"mpi3drvi"
"mvumis"
"ndfltr"
"nvraid"
"nvstor"
"Parport"
"percsas2i"
"percsas3i"
"SmartSAMD"
"stexstor"
"vsmraid"
"VSTXRAID"
"SiSRaid2"
"SiSRaid4"
"WacomPen"
"WinMad"
"WinVerbs"
)
foreach ($service in $services) {
#Get-Service -Name $service | Stop-Service -Force
#Set-Service -Name $service -StartupType Disabled
}

Wynona · Jan 16, 2023

safron said:
I’m relatively new to this Forum, so please accept my apologies if I misspeak.

I appreciate that many viewing the Forum are less technically inclined, and it’s great to point out that things said here shouldn’t necessarily be taken as gospel. Naturally, each viewer should use discretion, perform their own due diligence, and take backups before implementing changes mentioned in the Forum. Caveat emptor!

I believe the Forum’s purpose is to help others administrate (e.g., optimize, troubleshoot, customize) the Windows 11 operating environment. As such, a discussion of which, if any, Windows Services might be stopped to free up system resources is well within scope. Discussing the potential merits / drawbacks of enabling or stopping a Service is not the same as advocating.

It would be wonderful if Microsoft documented the impact of stopping a Service, but in lieu, I appreciate being able to read opinions of this Forum’s knowledgeable (if not “guru”) members. Let’s not presume what might or might not be helpful to other Forum viewers, extremity of the post notwithstanding.

Well said, @safron!

Kinnyr901 · Sep 24, 2023

SightUp said:
Found this out the hard way. Pre 22H2 you were able to disable the service:

However, if you do it now, your Explorer.exe crashes and relaunches rapidly over and over.

A couple of other services that I do not disable: (note: I have not tested them in 22H2 but they crashed the Explorer.exe or made Office not work in previous versions so I do not do it now)

Here is a complete list of services that I disable on a fresh install:

I was wondering if anyone here had a list of services that they too also disable?

Kinnyr901 · Sep 24, 2023

SightUp said:
Found this out the hard way. Pre 22H2 you were able to disable the service:

However, if you do it now, your Explorer.exe crashes and relaunches rapidly over and over.

A couple of other services that I do not disable: (note: I have not tested them in 22H2 but they crashed the Explorer.exe or made Office not work in previous versions so I do not do it now)

Here is a complete list of services that I disable on a fresh install:

I was wondering if anyone here had a list of services that they too also disable?

Kinnyr901 · Sep 24, 2023

You can also leave at Manual Active xInstaller which will not come on so you can change the startup type to disabled. Also Agent Activation runtime= Runtime for activating conversational agent applications. Set to disabled. Aluoyn Router Service. set to disabled = Routes AllJoyn messages for the local AllJoyn clients. If this service is stopped the AllJoyn clients that do not have their own bundled routers will be unable to run. Also. App readiness. Disabled = Gets apps ready for use the first time a user signs in to this PC and when adding new apps. Also Application Identity. Set to diabled. = Gets apps ready for use the first time a user signs in to this PC and when adding new apps.. Application Layer Gateway Service Disable= Provides support for 3rd party protocol plug-ins for Internet Connection Sharing. Application Managment disabled=Processes installation, removal, and enumeration requests for software deployed through Group Policy. If the service is disabled, users will be unable to install, remove, or enumerate software deployed through Group Policy. If this service is disabled, any services that explicitly depend on it will fail to start. Background Intelligence Transfer service (BITS) Disable= Transfers files in the background using idle network bandwidth. If the service is disabled, then any applications that depend on BITS, such as Windows Update or MSN Explorer, will be unable to automatically download programs and other information.