1. .NET Runtime Optimization Service v2.0.50727_X86=Manual.

The process name is mscorsvw.exe. No dependencies. It is recommended to set it to manual.

2. Adobe LM Service=Manual. Process name Adobelmsvc.exe. No dependencies.

Adobe Photoshop related services. The default startup type is manual.

3. Alerter=Disabled. Process name svchost.exe. Depends on Workstation service.

4. Application Layer Gateway Service=Disabled. Process name alg.exe. No dependencies. Application layer gateway service. The default startup type is manual. Provides support for third-party protocol plug-ins for Internet Connection Sharing and Windows Firewall. Set to manual if desired. It is not used by general users and is recommended to be disabled.

5. Application Management=Manual. Process name svchost.exe. No dependencies.

Application management services. The default startup type is manual. It not only manages the installation and deletion of software, but also can use this service to modify and repair existing applications, monitor file recovery and eliminate basic faults through recovery. It is recommended to set it to manual.

6. ASP.NET State Service=Manual. The process name is aspnet_state.exe. No dependencies.

Microsoft.NET Framework network framework related services. The default startup type is manual. It is recommended to set it to manual.

7. Automatic Updates=Disabled. Process name svchost.exe. No dependencies.

Automatic update service. The default startup type is automatic. It is recommended to set it to disabled.

8. Background Intelligent Transfer Service=Disabled. Process name svchost.exe. Depends on Remote Procedure Call (RPC) service. It is recommended to disable

9. ClipBook=Disable or manually. The process name is clipsrv.exe. Depends on Network DDE and Network DDE DSDM services. Clipboard viewer service. The default startup type is manual. It is recommended to disable

10. COM Event System=manual. Process name svchost.exe. Depends on Remote Procedure

Call (RPC) service. It is recommended to do it manually

11. COM System Application=Manual. Process name dllhost.exe. Depends on Remote Procedure Call (RPC) service. It is recommended to manually

12. Computer Browser=Disable or automatic. Process name svchost.exe. Depends on Server and Workstation services. Obviously, this service is not needed for ordinary household computers, unless the computer is located on a local area network. For example, friends who use Great Wall Broadband can use it to easily know the network environment in the community. It is recommended for general users to set it to disabled.

13. Cryptographic Services=Manual. Process name svchost.exe. Depends on Remote Procedure Call (RPC) service.

It is recommended to use manual operation

14. DCOM Server Process Launcher=automatic. Process name svchost. No dependencies. Set automatic

15. DHCP Client=Disabled or Automatic. Process name svchost.exe. Depends on AFD, NetBios over Tcpip, TCP/IP Protocol Driver, IPSEC driver services. Dynamic Host Configuration Protocol client service. The default startup type is automatic. If network parameters such as IP addresses are to be automatically assigned in the network, then this DHCP Client service is essential. This service can be disabled if you set the IP address manually. It is recommended to set it to disabled.

16. Distributed Link Tracking Client=Disabled. Process name svchost.exe. Depends on Remote Procedure Call (RPC) service. It is recommended to disable

17. Distributed Transaction Coordinator=disable or manual. Process name msdtc.exe. Depends on Remote Procedure Call (RPC) and Security Accounts Manager services. It is recommended to disable

18. DNS Client=Automatic. Process name svchost.exe. Depends on TCP/IP Protocol Driver and IPSEC drive services. It is recommended to disable

19. Error Reporting Service=Disable. Process name svchost.exe. Depends on Remote Procedure. It is recommended to disable

20. Event Log=Automatic. Process name services.exe. No dependencies. Eventlog, system logging service. Set to automatic

21. Fast User Switching Compatibility=Disabled or Manual. Process name svchost.exe.

Quickly switch services for multiple users, it is recommended to disable it

22. Help and Support=manual. Process name svchost.exe. Depends on Remote Procedure

Call (RPC) service. It is recommended to disable

23. HTTP SSL=manual. Process name svchost.exe. Depends on HTTP service.

HTTPFilter, the default startup type is manual. This service implements Hypertext Transfer Protocol Secure (HTTPS) for HTTP services over Secure Sockets Layer (SSL). It is recommended to set it to manual.

24. Human Interface Device Access=Disabled. Process name svchost.exe. Depends on Remote Procedure Call (RPC) service. It is recommended to disable

25. IMAPI CD-Burning COM Service=Disable. The process name is imapi.exe. No dependencies. It is recommended to disable

26. Indexing Service=manual. The process name is cisvc.exe. Depends on Remote Procedure Call (RPC) service. It is recommended to manually disable

27. IPSEC Services=Disable. The process name is lsass.exe.

Depends on IPSEC driver, Remote Procedure Call (RPC), and TCP/IP Protocol Driver services. It is recommended to disable

28. Logical Disk Manager=Manual. Process name svchost.exe. Disk management function in Console (MMC) console. This service is essential for friends who often use peripherals such as mobile hard drives and USB flash drives. It is recommended to set it to manual.

29. Logical Disk Manager Administrative Service=Manual. It is recommended to do it manually

30. Messenger=disabled. Process name svchost.exe. Messenger service. It is recommended to disable

31. Microsoft Office Diagnostics Service = Manual. Microsoft Office Diagnostic Services. It is recommended to set it to manual.

32. MS Software Shadow Copy Provider=Disabled. Manage volume shadow copy service. It is recommended to set it to disabled.

33. Net Logon=Disabled or automatic. The process name is lsass.exe. Depends on Workstation service. It is recommended to disable

34. NetMeeting Remote Desktop Sharing=Disable or manually. Process name mnmsrvc.exe. No dependencies. It is recommended to disable

35. Network Connections=Automatic. Process name svchost.exe. Depends on Remote Procedure Call (RPC) service. Set to Automatic

36, Network DDE=Disabled or Manual. The process name is netdde.exe. Depends on Network DDE DSDM service. It is recommended to disable

37. Network DDE DSDM=disable or manual. The process name is netdde.exe. No dependencies.

NetDDEdsdm, network dynamic data exchange network exclusive service. It is recommended to disable

38. Network Location Awareness (NLA) = Disabled. Process name svchost.exe. Depends on AFD, TCP/IPProtocol Driver, IPSEC Driver services. Except for notebooks, it is recommended to disable

39. Network Provisioning Service=Disable or manually. Process name svchost.exe. Depends on Remote Procedure Call (RPC) service. It is recommended to disable

40. NT LM Security Support Provider=Disabled. The process name is lsass.exe. No dependencies. It is recommended to disable

41. Office Source Engine=Manual. The process name is OSE.EXE. No dependencies.

Ose, the default startup type is manual. Saves installation files used for updates and repairs, and must be used when downloading installer updates and bug reports. It is recommended to set it to manual.

42. Performance Logs and Alerts=Manual. Process name smlogsvc.exe. No dependencies. It is recommended to do it manually

43. Plug and Play=automatic. Process name services.exe. No dependencies. Automatic

44. Portable Media Serial Number Service=Disabled. Process name svchost.exe.

No dependencies. Disabled

45. Print Spooler=Disabled or automatic. Process name spoolsv.exe. Depends on Remote Procedure Call (RPC) service. If there is a printer, set it to automatic. If there is no printer, it will naturally be disabled.

46. Protected Storage=Automatic. The process name is lsass.exe. Depends on Remote Procedure Call (RPC) service.

47. QoS RSVP=Disabled. Process name rsvp.exe. Relying on AFD, Remote Procedure Call (RPC), and TCP/IP, it is recommended to disable

48. Remote Access Auto Connection Manager=Disable. Process name svchost.exe. It is recommended to disable

49. Remote Access Connection Manager=Disable. Process name svchost.exe. Depends on Telephony, Plug and Play, Remote Procedure Call (RPC) services. It is recommended to disable

50, Remote Desktop Help Session Manager=disable or manually. Process name sessmgr.exe. Depends on Remote. It is recommended to disable

51. Remote Procedure Call (RPC) = automatic. Process name svchost. No dependencies. Automatic

52. Remote Procedure Call (RPC) Locator=Disabled. Process name locator.exe. Depends on Workstation service. It is recommended to disable

53. Remote Registry=Disable. Process name svchost.exe. Depends on Remote Procedure Call (RPC) service. It is recommended to disable

54. Removable Storage=Disable. Process name svchost.exe. Depends on Remote Procedure

Call (RPC) service. It is recommended to disable

55. Routing and Remote

Access=disable. Process name svchost.exe. Depends on NetBIOSGroup, NetBIOS Interface, Remote Procedure Call (RPC) services. It is recommended to disable

56. Secondary Logon=Disable. Process name svchost.exe. No dependencies. Seclogon, used for secondary login service. It is recommended to disable

57. Security Accounts Manager=Automatic. The process name is lsass.exe. Depends on Remote Procedure Call (RPC) service. SamSs, a secure account management service. The default startup type is automatic. It is a service responsible for the control and maintenance of the SAM database. Set to automatic

58, Security Center=Disabled. Process name svchost.exe. wscsvc, security center. The default startup type is automatic. Monitor system security settings and configurations. It is recommended to set it to disabled.

59. Server=disabled or automatic. Process name svchost.exe. No dependencies.

Lanmanserver, server service. The default startup type is automatic.

The Server service corresponds to file/printer machine sharing on the network, as well as the path mapping sharing function of the network. You can turn it off if there is no need for these aspects. It is not used by general users and is recommended to be disabled.

60. Shell Hardware Detection=Automatic. Process name svchost.exe. Depends on Remote Procedure Call (RPC) service.

ShellHWDetection, shell hardware detection service. The default startup type is automatic. This service is mainly related to hardware with automatic operation (playback) functions, such as digital cameras, CD-ROMs, etc. Through this service, when these hardware are connected to the system or put into the corresponding media, WinXP can automatically detect and take corresponding actions. As there are more and more peripherals nowadays, don’t turn it off easily if you are not sure. It is recommended to set it to automatic.

61. Smart Card=Disabled. The process name is SCardSvr.exe. Depends on Plug and Play service.

SCardSvr, smart card service. The default startup type is manual. A Smart Card looks the same as an ordinary credit card, but with the addition of an IC chip the size of a fingernail, the original ordinary card becomes capable of data control and logical operations. If you have a smart card and related card reading equipment, enable this service, otherwise disable it. It is not used by general users and is recommended to be disabled.

62. SSDP Discovery Service=Disabled. Process name svchost.exe. Depends on HTTP service.

SSDPSRV, discovery service of Simple Service Discovery Protocol. The default startup type is manual. SSDPSRV is mainly used to search for UPnP (Universal Plug and Play) devices on home networks. It is not used by general users and is recommended to be disabled.

63. System Event Notification=Automatic. Process name svchost.exe. Depends on COM Event System and Remote Procedure Call (RPC) services.

SENS, system event notification service. The default startup type is automatic. Its simple description is "Track system events, such as Windows login, network and power events, etc. Notify these events to the COM event system 'subscriber'". Record user login/logout/restart/shutdown information, but it is especially important for servers. Although some people think that this service is irrelevant, in fact whether the system requires it depends on what you have installed in the system, and many applications run through SENS, so it is recommended to set it to automatic.

64. System Restore Service=Disabled. Process name svchost.exe. Depends on Remote Procedure Call (RPC) service.

Srservice, system restore service. The default startup type is automatic. This is a system restore function that everyone is very familiar with. If you do not use it, first turn off the system restore tab in the "My Computer" properties, and then disable the service here. It is recommended to set it to disabled.

65. Task Scheduler=Disabled. Process name svchost.exe. Depends on Remote Procedure Call (RPC) service. Schedule, scheduled task service. The default startup type is automatic. This service supports WinXP's scheduled tasks, which can enable programs to run automatically at scheduled times, such as regular disk defragmentation, virus scanning, updates, etc. You can choose whether to enable it according to your own needs. It is recommended to set it to disabled.

66. TCP/IP NetBIOS Helper=Disabled. Process name svchost.exe. Depends on AFD, NetBios over Tcpip, TCP/IP Protocol Driver, IPSEC driver services.

LmHosts, TCP/IP NetBIOS

Assistant service. The default startup type is automatic. This service provides NetBIOS support over TCP/IP. NetBIOS network protocol is a very old protocol developed by IBM and dominated the LAN back then. Since NetBIOS does not have a routing function, which means that its data packets cannot be transmitted across network segments, it can only take a supporting role today when wide area networks and metropolitan area networks are popular. Since NetBIOS is completely based on the LAN, you can disable it as a general user accessing Internet resources, unless your system is in a small LAN and uses the NetBIOS protocol. It is not used by general users and is recommended to be disabled.

67. Telephony=Manual. Process name svchost.exe. Depends on Plug and Play and Remote Procedure Call (RPC) services.

TapiSrv, phone service. The default startup type is manual. Simply put, this service provides computers with the ability to dial telephone numbers. If you use any form of dial-up, whether connecting to the Internet using a dial-up modem or DSL/Cable, connecting to other computers via phone lines, or making computer IP calls, sending faxes, etc., it is necessary for you to retain this service, and vice versa. Just turn it off. It is recommended to set it to manual.

68. Telnet=disabled. The process name is tlntsvr.exe. Depends on NT LM Security Support Provider, Remote Procedure Call (RPC), TCP/IP Protocol Driver, and IPSEC driver services. tlntSvr, remote login service. The default startup type is manual. Allow users to log in to a host on the Internet as a simulated terminal. Once the connection is successful, these personal computers will act like a terminal on the remote computer. They can enter commands and run programs on the remote computer just like using their own computers. For security reasons, this service must be turned off and disabled if there is no special need. It is recommended to set it to disabled.

69. Terminal Services=Disable or manual. Process name svchost. Depends on Remote Procedure Call (RPC) service.

TermService, terminal service. The default startup type is manual. Its simple description is "Allows multiple users to connect to and control a machine and display desktops and applications on remote computers. This is Remote Desktop (including Administrator's Remote Desktop), Fast User Switching, Remote Assistance, and Terminal Server infrastructure". This description has clearly explained the purpose of this service. It needs to be emphasized that these conveniences come at the expense of security. If you do not use it at ordinary times, you must turn it off. It is recommended to set it to disabled.

70. Themes=automatic. Process name svchost.exe. No dependencies.

Themes, theme service. The default startup type is automatic. There are no service dependencies. Many people like to use XP's background themes, but if the user doesn't like fancy themes, just turn them off. It is recommended to set it to automatic

71. Uninterruptible Power Supply=Disabled. Process name ups.exe. No dependencies.

UPS, uninterruptible power management service. The default startup type is manual.

Its simple description is "Manage uninterruptible power supplies (UPS) connected to computers." It is recommended to set it to disabled.

72. Universal Plug and Play Device Host=Disabled. Process name svchost.exe. Depends on HTTP and SSDP Discovery Service.

UPNPhost, unified plug-and-play driver hosting service. The default startup type is manual. It has an inheritance relationship with the SSDP Discovery Service. The latter searches and discovers UPnP devices, and UPNPhost provides driver support for UPnP devices. Of course, it can usually be turned off. General users do not need it and it is recommended to disable it.

73. Volume Shadow Copy=Disabled. Process name vssvc.exe. Depends on Remote Procedure

Call (RPC) service. VSS, Volume Shadow Copy Service. The default startup type is manual. Manage and perform volume shadow copies for backup and other purposes. General users do not need it and it is recommended to disable it.

74. WebClient=Disabled. Process name svchost.exe. Depends on WebDav Client Redirector system component. WebClient, Web client service. The default startup type is automatic. You can use WebDav to upload files or folders to a Web service. This service will be of greater significance to .NET in the future. For security reasons, you can now try turning it off. It is rarely used by general users and is recommended to be disabled.

75. Windows Audio=Automatic. Process name svchost.exe. Depends on Plug and Play and Remote Procedure Call (RPC) services.

AudioSrv, Windows audio service. The default startup type is automatic. If your machine does not have a sound card you can turn it off. It is recommended to set it to automatic.

76. Windows Driver Foundation - User-mode Driver Framework=Manual. Process name svchost.exe. Depends on Plug and Play service.

Driver management service. The default startup type is manual. It is recommended to set it to manual.

77. Windows Firewall/Internet Connection Sharing (ICS)=Automatic. Process name svchost.exe. Depends on Network Connections, Remote Procedure Call (RPC), and Windows Management Instrumentation services.

SharedAccess, Internet connection sharing and firewall service. The default startup type is automatic. This service provides WinXP's built-in Internet connection sharing and firewall functions. If you are using third-party software such as Wingate, this service is not needed. For safety reasons, it is recommended to set it to automatic.

78. Windows Image Acquisition (WIA) = Manual. Process name svchost.exe. Depends on Remote Procedure Call (RPC) service.

Stisvc, Windows image acquisition service. The default startup type is manual. This service provides support for the Scanners and Cameras feature in Control Panel. Through this function, users can easily operate scanners and digital cameras to obtain images without installing related management software after installing the device driver. It is recommended to set it to manual.

79. Windows Installer=Manual. Process name msiexec.exe. Depends on Remote Procedure

Call (RPC) service. MSIServer, Windows Installation Service. The default startup type is manual. This service is basically the same as the Application Management service. Judging from Microsoft's explanation, the Windows Installer service should be the most direct executor of .MSI files. It is recommended to set it to manual.

80. Windows Management Instrumentation=Automatic. Process name svchost.exe. Depends on Remote Procedure Call (RPC) service.

Winmgmt, Windows Management Instrumentation Service. The default startup type is automatic. WMI is the basic management structure in Windows. It controls and monitors the system through a set of common interfaces (such as viewing and changing system properties, setting user permissions, etc.). WMI provides a unified mechanism for accessing large amounts of Windows management data. WMI provides access to information through scripts, C programming interfaces, .NET classes (system management), and command line tools (WMIC). WMI functionality also includes events, remoting, querying, viewing, planning and implementing user extensions and more. All in all, although it can be turned off in the service management tool, it is best not to touch it, otherwise many inexplicable problems will occur. Requires setting to automatic.

81. Windows Management Instrumentation Driver Extensions=Manual. Process name svchost.exe. No dependencies.

Wmi, Windows Management Instrumentation driver extension service. The default startup type is manual. There are no service dependencies. According to Microsoft's white paper, this service is an extension of the WMI service in terms of drivers. Simply put, it is mainly to allow the system to easily learn about hardware manufacturers such as OEMs (original equipment manufacturers) and IHVs (independent hardware vendors) in the computer. Hardware information. It is recommended to set it to manual.

82. Windows Media Player Network Sharing Service=Disabled. The process name is WMPNetwk.exe. Depends on HTTP, HTTP SSL, Universal Plug and Play Device Host, and SSDP Discovery Service services. The default startup type is manual. Use Universal Plug and Play devices to share your Windows Media Player library with other network players and media devices. General users do not need it and it is recommended to disable it.

83. Windows Time=Manual. Process name svchost.exe. No dependencies.

W32Time, Windows time service. The default startup type is automatic. This service corresponds to the Internet time synchronization service of WinXP and can be closed if it is not necessary. It is recommended to set it to manual.

84. Wireless Zero Configuration=Disabled. Process name svchost.exe. Depends on NDIS

User mode I/O protocol and Remote Procedure Call (RPC) service.

WZCSVC, wireless configuration service. The default startup type is automatic. Its simple description is "Provides automatic configuration for your 802.11 adapter".

802.11 is a wireless LAN protocol standard that everyone is familiar with, and it has already taken an advantage in the market. Of course, the 802.11 protocol, Bluetooth standard and HomeRF industry standard are the main competitors among all wireless LAN standards, and they also have their own advantages and disadvantages. However, 802.11b wireless LAN technology has been widely used in the United States, so it is not surprising that Microsoft has built-in service support for WinXP. If you are not using a wireless network adapter device, you can turn off the service. General users do not need it and it is recommended to disable it.

85. WMI Performance Adapter=Manual. The process name is wmiapsrv.exe. Depends on Remote Procedure Call (RPC) service.

WmiApSrv, WMI performance adapter service. The default startup type is manual. This service provides performance library information obtained from the WMI HiPerf provider, requires manual configuration, and does not run by default. For ordinary users, it is best to keep the default state - manual. It is recommended to set it to manual.

86. Workstation=automatic. Process name svchost.exe. No dependencies.

Lanmanworkstation, workstation service. The default startup type is automatic. It does not depend on other services, but quite a few services do. This service is also a basic service, please keep its default state (automatic) and do not turn it off. Requires setting to automatic.

87. The related services of the anti-virus software you installed should be set to automatic.

Those are services when the computer is turned on. Here are its services and descriptions, as well as the corresponding processes