Tutorials to .com

Tutorials to .com » Os » Winxp » Application » Microsoft Windows XP Service Xiangjie

Microsoft Windows XP Service Xiangjie

Print View , by: iSee ,Total views: 5 ,Word Count: 6477 ,Date: Wed, 26 Aug 2009 Time: 4:04 AM

This article is in my vacation time-ending. Original published in the public view on the software in 2003 18,19. We want to help, use WinXP's friends system faster. . . . .

Preface: Why write this article

Microsoft's personal operating system from Win98 developed to WinXP, so why the sudden consumption of system resources? So many people feel that winxp just high configuration computers to run, does not. The changes are mainly due to WinXP abandon the former home of the operating system kernel, in addition to a beautiful interface, consume a large amount of memory and memory and other system resources, and Win2000, like, WinXP default in the background is also running a lot of different services, such as printers service, the system automatically update the services, the system resources occupied by a lot. These services have a considerable portion of the individual users may never be used, in terms of security but cause great risks. So, according to their own circumstances, in their own do not need to disable system services not only save system resources and speed up system speed, but also play a security role, it is very necessary.

Friendly reminder: Please see "Preliminary Chapter" and "end of the chapter."

Preliminary chapter: how to manage to configure system services

To properly manage and configure the system services, must first make sure you have the appropriate permissions, otherwise you can not change some settings. Therefore, the most convenient way is to use the Administrator group of users landing. Change the settings in the service, back up the current state is necessary, once the error can be immediately restored to normal state. Here are the direct backup of the registry service-related content. Select "Start - Run", type "regedit" (without the quotes) and press ENTER to open the Registry Editor, expand the registry selected "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetService" click menu "File - Export" the contents of this branch of the registry under the Export and saved as a. reg file. If you want to restore system service to its original state, as long as you can double-click the file into the registry.

If you have already backed up the service's default settings, and now you can try to change service. Skilled use of Win98's friends all know that, "msconfig" is a Win98 startup configuration occupied an important tool for system resources. In WinXP, considering the family of operating systems users of previous habit of disappearing in this tool in Win2000 was again retained, so a lot of to upgrade from Win98 to WinXP's friends are still customary to use it to configure the system. However, for the management of system services configuration, this is a desirable. To use "msconfig" really can be easily shut down and start the system back-office services, but the only machine in which the decision to start or shut down services, and set the system service can not be a complete three kinds of startup type. More importantly, since the "msconfig" system services not see the basic notes, in this case will easily lead to errors in configuration management services. In particular, some of the system must boot the basic services, such as Remote Procedure Call, the use of specialized service management configuration Services.msc can not be closed, but is to use "msconfig" you can turn it off, it could not start the system can easily result in mistakes. So they still use WinXP with service configuration management tool Service.msc to manage services better.

Open the service configuration management tool is in turn open the "Start - Control Panel - Performance Maintenance" (in Category View, under), and then select Open "Administrative Tools - Services", or directly in the "Start - Run", type Services.msc Then Enter. In the Service Configuration Tool window, double-click on a service, you can open the properties of the service panel. In doing here adjustment of management, by changing the startup type of service based on their own needs to start, shut down or disable a service. However, the configuration of these services, we would first look at properties of the service panel, the meaning of some important information.

Switch to the specific properties of the service panel of the "General" page. "Service Name" refers to the service "called", and is the name that appears in the registry; "Display Name" refers to the service configuration panel display name for each service; "description" is a brief explanation of this service , "executable file path" to better understand. Then there is the more important of the "Startup Type", and this is the core of the entire service configuration management. For any one service, usually only 3 different startup types: Automatic (Auto), Manual (manual), Disabled (disabled), as long as the choice from the drop-down menu can change the startup type of service. These three kinds of startup type has its own meaning and function.

Automatic (Auto): This service, together with the start WinXP started, will extend the time required to start, and some services must be set to automatic, such as Remote Procedure Call (RPC). Because the nature of dependencies, or the impact of some other services must be set to automatic, so that the service is better not to touch it, otherwise the system can not work properly.

Manual (Manual): If a service is set to manual, you can run it when it's needed. Most services are like this, which can save a lot of system resources.

Disabled (disabled): This service is no longer running, even if the system must be. This setting is generally a time when increased security is very useful. If you suspect that a stranger to the system of services will give you a security risk, you can first try to stop it, to see if the system can not run, if everything goes normal, then it can ban it. In the future if you need this service, start it, they must first startup type is set to automatic or manual.

Finally, "service state", referring to the present state is to start service on or off, usually available on the "Start", "off", "pause", etc. button to instantly change the status of the service, but in both cases, these button is gray not available. A situation where the service is set to Disabled (disabled), in which case only the service is set to automatic or manual, and "applied" only after use; In other cases, we mentioned earlier the system must start basic services, and their startup type is set to automatic and immutable, natural state of those buttons to change the service also can not be used.

Switch to the service properties panel, "dependencies" page. Some of the services alone can not run, we must rely on (ie, dependent) other services. In the stop or disable a service, make sure to look at this service dependencies, if there are other services that depend on the need to activate this service, will not be able to stop it. Example Messenger this service, we must rely on other four services in order to run, so to stop or disable any one of them, Messenger services will not work correctly. Another example is application Layer Gateway Service This service, if it is turned off, then rely on its Internet Connection / Firewall Internet Connection Sharing will not be able to work. So we shut down a service before the green check its dependencies is essential step.

Combat chapter: Service Xiangjie

Since we have just learned about the service management configuration, Here's to learn about the specific meaning of each service. If your system is not mentioned below, some of the services are not to worry because some services only in a particular state or after the installation of some of the hardware to appear.

1, Alerter

Alerter (warning device) service process name is Service.exe (ie start the service running in the background of the process name, you can see through the task manager, the same below). Alerter service function is, WinXP will occur on the system and management-related incidents in order to alert (Alert) Information transmitted to the designated computer on the network or user, such as when printing error occurs, or the hard disk soon filled with such incidents, such alerts warning device by WinXP service (Alerter Service) to collect, send. Although the Alerter service and is not dependent Messenger (Messenger) service, but the Alerter service must rely on the latter in order to send information, so start Alerter service must also determine the Messenger Service is also working state, while the receiving computer must also start the Messenger service. As the Alerter service is running, the service is that users can send "pop-up (Pop-up)" messages to other users, this information may be used to attack the attacker, such as the trick users to modify passwords and so on, resulting in potential safety problems. The same time, the service allows users to account leakage may also be used by attackers to conduct password guessing attack. So for the family a single user, even for the vast majority of small-scale local area network, this feature is completely disabled, not only saves system resources and speed up the startup speed, but also to improve the security of the machine.

2, application Layer Gateway Service

Referred to as "ALG" (application layer gateway) process name is alg.exe, WinXP Home / Pro is installed by default startup type to Manual. ALG is also known as a proxy server (Proxy Server), is a network firewall from the functional level of a classification. When the internal computer to connect to external hosts, will be the proxy server as internal and external host computers were connected relay. The benefits of the use of ALG is hidden within the host's address and the prevention of abnormal external connections, if the proxy server is not installed on the application for the design of agents, any part of this network service packet will not pass through the firewall. Popular speaking, specific to the ALG itself, it is included with Internet Connection Sharing / Firewall specific control procedures, if you need to start these two, this service is essential. Of course, only one computer access to the Internet family may consider disabling the service, but the WinXP built-in firewall or a good effect, if not insist on using third-party firewall, or open it bar.

3, Application Management

AppMent (Application Management Services), the process name is Svchost.exe, WinXP Home / Pro is installed by default startup type to Manual, there is no dependency service relationship. From the beginning Win2000, Microsoft introduced a file format based on the MSI (application package installation information file) a new, effective software management program - namely, Application Management Component Services (Application Management), it is not only the installation of management software , delete, and can be modified to use the service, repair of existing applications, monitors file resiliency, and exclusion of essential breakdown and so on through demobilization. Usually this service we maintain its default state better.

Many friends may have the impression, when ACDSee4.0 just released, due to installation of the production of the ill-considered and did not take into account the majority of the people at that time system also does not support MSI installation format, the results only went to download and install a called the Windows Installer, MSI supporting documentation before solving the problem. MSI file format is usually very good recognition software installed, such as Office XP, when you install the software again after running the installation program, which generally will have a "re-install", "fix software", "uninstall the software" over the election items, rather than the previously installed program that would simply uninstall or install trouble.

4, Automatic Updates

Wuauserv (Automatic Updates service) process name is Svchost.exe, WinXP Home / Pro is installed by default startup type to Automatic, there is no dependency service relationship. This is all very familiar with the system's automatic update feature, no more to say. Access the internet with the kitten is suffering immensely, friends remember to turn off the system properties is not enough, we still want to disable the Automatic Updates This service can only be. After the need to be updated directly in IE, enter the Windows Update Web site address http://v4.windowsupdate.microsoft.com/zhcn/default.asp can manually update.

5, Background Intelligent Transfer Service

BITS (Background Intelligent Transfer Service) process name is Svchost.exe, WinXP Home / Pro is installed by default startup type to Manual, depends on the Remote Procedure Call, Workstation service. Microsoft claimed that the remaining bandwidth to take advantage of BITS to transfer files, when the network cut off or a computer restart, the Background Intelligent Transfer Service to the file transfer will automatically be preserved, when the network re-connection, the Background Intelligent Transfer Service will resume where it began to transfer. In fact, this service was originally used to achieve HTTP1.1 transfer of information between servers, basically to support its application is automatically updated when the HTTP. If you have disabled the Automatic Updates, keep it has no meaning.

6, ClipBook

ClipSrv (Clipboard Viewer Services) process name is clipsrv.exe, WinXP Home / Pro is installed by default startup type to Manual, depending on the Network DDE service. ClipBook through the Network DDE and Network DDE DSDM provided by the Network Dynamic Data Exchange service, available on the remote machine to cut and paste version of layman's terms is to support the cut and paste version of ClipBook Viewer (ClipBook Viewer) program, which allows the remote computer, cut and paste pages browsing on the ClipBook.

For example, there is a large document engineering, from A, B, c joint development. A charge of Excel data section, B is responsible for Visio mapping component, while the C++ is responsible for integration of the two parts of the document. C often requires A, B copies of the data, stupid approach is to C Open A, B in the Network Neighborhood on a shared document, and then copy the relevant content. While the Windows system, users should have some understanding of OLE have heard of this thing, the above said Excel data and Visio drawing can be considered independent OLE objects, if A, B, C of the three machines on the ClipBook services for the open, you can use ClipBook share these OLE objects, C as long as the documents in their own OLE objects to establish the link to point A, B of the Excel and Visio, A, B of any changes in his work can be in the C, compound document where automatically reflected. Thus, ClipBook is based on a shared object, rather than a simple file sharing. So it very well understand that this is a double-edged sword, at the same time a great convenience, it also brings illegal remote access security risks ClipBook clip page. For the absence of such similar work, not ready to use or rarely use the remote desktop users, the service can be disabled completely in the open when needed.

7, COM + Event System

Event System (COM + Event System service) process name is Svchost.exe, WinXP Home / Pro is installed by default startup type to Manual, depends on the Remote Procedure Call service. For non-professional friends, software development, COM + is a very easy to understand terms. Simply put, COM + is a software component / component standards. For example to write a software is like a build a house, while the doors and windows and other components will be based on standard designs in order to achieve saves time and effort. COM component that is Windows, doors and windows and other standard components of, COM + is COM's further expansion of its specific meaning of this is not described in detail. Windows systems is a typical message (event) process-based system, many functions are triggered by messages, which resulted in COM + Event System. We want to learn is how a simple system to determine whether their programs to rely on this service. Check your system installation disk under the "Program filesComPlus Applications" directory, if there is nothing you can put the service closed.

8, COM + System Application

COMSysApp (COM + System Application service) process name is Dllhost.exe, WinXP Home / Pro is installed by default startup type to Manual, depends on the Remote Procedure Call service. To put it simply, COM + System Application is the COM + Event System of specific actors, if you disable the COM + Event System is naturally disable it.

9, Computer Browser

Browser (Computer Browser service) process name is Svchost.exe, WinXP Home / Pro is installed by default startup type of automatic, depends on the Server and Workstation services. Browser service maintains a list of network resources, including a Windows-based domain, the working groups, and computers, as well as other support NetBIOS protocol network equipment, we are in the "My Network Places" to see the content displayed is from this. Obviously for the average home computer does not need this service, unless the computer in the LAN, such as the Great Wall Broadband with friends, use it within the community can easily understand the network environment. This service is still cautious approach is better, if they are not too concerned about, or be set to automatically bar.

10, Cryptographic Services

CryptSvc (authentication service) process name is Svchost.exe, WinXP Home / Pro is installed by default startup type of automatic, depends on the Remote Procedure Call service. CryptSvc the entire Microsoft public key system (PKI, Public Key Infrastructure) of the core components. PK is a kind of so-called public key encryption method, through the encryption to ensure data security and transmission, its traditional secret (symmetric) key cryptography, not the same, PK cryptography, the basic characteristic is different from encryption and decryption keys, each a user two keys, a public key, a private key. Apart from these it difficult to understand terminology specific to CryptSvc itself, if we use the Automatic Updates in WinXP Automatic Updates, or Internet, use certificates for authentication, as well as proper management of these certificates, etc., then this service should not shut down. This feature is most useful of which is that when you install a driver program, to determine if it is certified by Microsoft. Because the driver is available in the operating system to run a very high authority, that contains malicious code, the driver will let your computer Waner Wan, thus developing the driver of the manufacturers usually do Microsoft certification validated, Microsoft will be added inside It's authentication data, then you have installed on the machine can be upgraded by CryptSvc test.

11, DHCP Client

Dhcp (DHCP Client service) process name is Svchost.exe, WinXP Home / Pro is installed by default startup type of automatic, depends on the AFD Networking Support Environment, NetBIOS over TCP / IP and TCP / IP Protocol Driver service. Simply put, by a network DHCP process is a host (DHCP Server) all of the network parameters are automatically assigned to the network on any one computer, while the DHCP Client is a network object is assigned network parameters computer. If the network is automatically assigned IP addresses and network parameters, then the DHCP Client service is essential. For home users, stand-alone, as long as the use of DSL / Cable Internet, open the ICS and IPSEC services people need this to specify a static IP, it is usually the service is not closed, unless your machine is completely stand-alone applications.

12, Distributed Link Tracking Client

TrkWks (Distributed Link Tracking Client service) process name is Svchost.exe, WinXP Home / Pro is installed by default startup type of automatic, depends on the Remote Procedure Call service. For the computer have a certain understanding of person to "distributed" is no stranger to the word here do not explain. TrkWks service is simple, said that the whole network, scattered among various computer file system, so when moving files within the system occurs, it will record this information. It is for "Domain Users" and "NTFS File" and "distributed connection", which three conditions, it is missing one you do not have access, for users who are not stand-alone local area network, of course, disable it.

13, Distributed Transaction Coordinator

MSDTC (Distributed Transaction Coordinator) process name is Msdtct.exe, WinXP Home / Pro is installed by default startup type to Manual, depends on the Remote Procedure Call and the Security Accounts Manager service. MSDTC is mainly used to handle distributed transactions, the so-called distributed transaction, that is, across two or more databases within a single SQL Server transaction. Within the same database of transactions between the different data tables, it can not be called a distributed transaction. Obviously for the need to simultaneously handle multiple databases or file system users, the service is of great significance, but it is also the usual sense to the average user will not use the services, typically run by default manually start on it. In fact, this service is also vulnerable to a remote denial of service attacks, disable it no problem, but also more secure.

14, DNS Client

Dnscache (DNS Client service) process name is Svchost.exe, WinXP Home / Pro is installed by default startup type is automatic, depends on the TCP / IP Protocol Driver service. DNS (Domain Name System) is also a common noun, and the simple explanation is that when using a web browser to go online, it will enter the site's URL, and these site names on the Internet is through the domain name server (DNS server) to the completion of the name is converted to IP addresses. In fact, some websites are not the only one server at work, but rather the work of a number of servers at the same time, that is also the name of a Web site addresses can be IP addresses corresponding to a different (in the Win2000 operating system before the executable in this query). However, if the operating system change to a Win2000 or WinXP, the same web site you will find are always found in the same IP address. Why is it so? This is the DNS Client service role.

In order to achieve the most rapid and efficient manner so that clients can quickly find the domain authentication service, Win2000, WinXP system, by adding a DNS cache feature, when the first time in finding the purpose of the host IP address , the operating system will be the query to the name and IP address recorded in the machine's cache buffer (Cache), the next time the client needs to query again, we do not need to query DNS server, while the direct use of the DNS Cache the data in the machine can be, so you query the result is always the same IP address. This service turned on or off did not affect, in the largest number of security measures can only reveal the contents of your cache, make sure you have visited the site.

15, Error Reporting Service

ERSvc (Error Reporting Service) process name is Svchost.exe, WinXP Home / Pro is installed by default startup type of automatic, depends on the Remote Procedure Call service. This service we often encounter when using the system error, will be out of the dialog box, ask you if you need to send the report to Microsoft, that is, the service function. Sub-service can be set to manual or completely prohibited. If you want more detail on the error reporting settings, you can right-click "My Computer" icon, select "Properties" in the "Advanced tab" electric shock under the "Error Report" button, where you can decide whether to send an error report and how to send an error report. Internet users can not directly disable this service, and Internet users worried that if the report will reveal your private information (of course, Microsoft claimed that such a thing will not happen), but also can disable it.

16, Event Log

Eventlog (System log record service) process name is Services.exe, WinXP Home / Pro is installed by default startup type is automatic, without any service dependencies. Event Log service is responsible for recording the program from the system and operation management of the event messages, and applications for Windows provides a standard and centralized way to record important software and hardware events. Open the Event Viewer is in turn open the "Start - Control Panel" and then select Open "Administrative Tools - Event Viewer." This service is a basic service, do not adjust the shut down.

17, Fast User Switching Compatibility

Fast User Switching Compatibility (multi-user fast switching service) process name is Svchost.exe, WinXP Home / Pro is installed by default startup type to Manual, depends on the Terminal Services service. This service is WinXP's new services, that rapid multi-user switching environment. To solve the previous multi-user environment, while security switch-user environment, but need to re-start, and lost on a user's work environment. The use of very simple, as long as a "start - log off - switch user" operation can easily switch the user environment is a very good multi-user technology, if do not need a multi-user environment, we do not have to open it (the default can not be joined to a domain after the fast switching , of course, can be disabled).

18, FAX Service

FAX (fax service) process name is Fxssvc.exe, WinXP Home / Pro is not installed by default, depends on the Plug and Play, Print Spooler, Remote Procedure Call, Telephony services. FAX service is not installed by default, but if you have installed it can be "Start - All Programs - Accessories - Communications - Fax" operation, using the WinXP built-in fax service to send and receive fax, and of course you want to ensure that your machine at least connected to the kitten. Of course, people who do not need to disable the swap.

19, Help and Support

Helpsvc (help service) process name is Svchost.exe, WinXP Home / Pro is installed by default startup type of automatic, depends on the Remote Procedure Call service. This service used to support WinXP Help and Support Center function, if you have just started using WinXP, the Help Center can solve many problems. If we think do not need help, and then disable the bar.

20, Human interface Device Access

HidServ (Human Interface Device Service) process name is Svchost.exe, WinXP Home / Pro is installed by default startup type is disabled, dependent on the Remote Procedure Call service. The service is simple and that is to support the so-called keyboard with multimedia functions, such as a keyboard with a volume adjustment. Of course, if you have ergonomic standard equipment (mainly referring to the keyboard and mouse), then this service should be set to Automatic, otherwise some of the features of these devices will not work properly. If there is no equipment or have their own driver, you can disable this service.

21, IMAPI CD-Burning COM Service

ImapiService (IMAPI CD burning service) process name is Imapi.exe, WinXP Home / Pro is installed by default startup type to Manual, there is no any service dependencies. That is the WinXP built-in CD burning services. Overall the service functionality and performance is very limited, there is a friend or a recorder mature third-party burning software installed, close the service bar.

22, Index Service

Cisvc (indexing service) process name is Cisvc.exe, WinXP Home / Pro is installed by default startup type to Manual, depends on the Remote Procedure Call service. This service can provide local and remote files on your computer to index, that is like a library for searching the index compiled for the book, as this would speed up the pace to find the file. But in fact the service is not mature enough. In some cases to open, the file browsing speed (ie, double-click a folder waiting time) will significantly increase, because the system directory structure has been read into memory when needed will be directly called; but sometimes, the service starts will cause the system is extremely busy at this time the service starts Cidaemon.exe, in Task Manager can see this process taking up most of the CPU resources. So treat this service, please according to their own situation in the machine is set to "automatic" or "Disabled."

23, Internet Connection Firewall / Internet Connection Sharing

SharedAcess (Internet Connection Sharing and Firewall services) process name is Svchost.exe, WinXP Home / Pro is installed by default startup type of manual and automatic, respectively, depending on the Application Layer Gateway Service, Network Connections, Network Location Awareness, Remote Access Connection Manager service. This service provides WinXP built-in connection sharing and firewall features. Performance of these two functions are good, and very convenient, close or not to see the specific personal preferences, do not you can turn it off.

24, IPSEC Services

PolicyAgent (IP Security Policy Services) process name is Lsass.exe, WinXP Home / Pro is installed by default startup type of automatic, depends on the IPSEC driver, Remote Procedure Call, TCP / IP Protocol Driver service. IPSEC is used to protect the internal network, private network and external networks (Internet, Extranet) an important defense against attack methods, the main characteristics is that he may be right for all IP-level communications for encryption and authentication, is precisely what makes IPSEC can be sure to include remote login, client / server, e-mail, file transfer, and Web access to a variety of applications, including security. As businesses and government users are very focused on the deployment of secure IP, so the services have become very important. But also can be seen, for the vast majority of users, this is simply not care about things. So disable it bar.

25, Logical Disk Manager

Dmserver (Logical Disk Manager service) process name is Svchost.exe, WinXP Home / Pro is installed by default startup type of manual and automatic, respectively, depends on the Plug and Play, Remote Procedure Call service. Dmserver for dynamic management of disk, such as the display disk free space and use the Microsoft Management Console (MMC) console in the disk management functions. This service for frequent users of mobile hard disk, U disk and other peripherals are essential to a friend If not, choose disable it.

26, Logical Disk Manager Administrative Service

Dmadmin (Logical Disk Management System Management Services) process name is Svchost.exe, WinXP Home / Pro is installed by default startup type of manual and automatic, respectively, depends on the Logical Disk Manager, Plug and Play, Remote Procedure Call service. Dmadmin mainly used to configure the hard disk information, usually is basically useless. Open the "Computer Management" (Microsoft Management Console, referred to as MMC), you can see the "Disk Management", then will spend it, and can be set manually.

27, Messenger

Messenger (Messenger service) process name is Services.exe, WinXP Home / Pro is installed by default startup type of automatic, depends on the NetBIOS Interface, Plug and Play, Remote Procedure Call, Workstation service. Messenger who went online this service should be more familiar with the original Microsoft development "Messenger Service" is the same domain in order to facilitate the exchange of information administrator, and later developed a breakthrough in some jurisdictions restrict the courier delivery vehicle, so we hung on the Online, the computer will pop up often called "Messenger Service" dialog box, these non-invited to the "Messenger" is basically rubbish messenger message that silly ad, there are illegal information. Usually this information is to use some called "vicious baby Courier", "demon thorn" software release, but in fact if it is in the same domain, just use the NET SEND command can easily send the news. Sudden appearance of a "Messenger Service" is not only interfere with the work, affecting mood, but also vulnerable to security attacks, so disable it bar.

28, MS Software Shadow Copy ProviderLr

SwPrv (disk area management Volume Shadow Copy Service) process name is Dllhost.exe, WinXP Home / Pro is installed by default startup type to Manual, depends on the Remote Procedure Call service. This service is designed for MS Backup in WinXP backup program to provide support, strangely enough, even if it is turned off can also be successfully completed backup job, if not afraid to disable the bar.

29, Net Logon

NetLogon (network logon service) process name is Lsass.exe, WinXP Home / Pro is installed by default startup type of manual and automatic, respectively, depend on the Workstation service. This service is used for domain review. When your computer in a domain net, if you want to use the net in the domain server when you log on to the domain network, it is necessary to log in through it. General users do not need, disable can be.

30, NetMeeting Remote Desktop Sharing

Mnmsrvc (NetMeeting Remote Desktop Sharing service) process name is Mnmsrvc.exe, WinXP Home / Pro is installed by default startup type to Manual, depends on the Remote Procedure Call service. Use NetMeeting through in-house network to allow users to share control of a computer local area network or other users on the Internet, many people disable it because of security issues, and it takes up network resources. But if you want others to do the non-text communication, it is quite joking. Note that it is switched off, the Remote Desktop feature will not be able to enjoy the use of power.

31, Network Connections

Netman (Network Connections service) process name is Svchost.exe, WinXP Home / Pro is installed by default startup type to Manual, depends on the Remote Procedure Call service. Netman is also very important to basic services, it manages the "Network and Dial-up Connections" folder, all objects in, any information on the network (LAN, Internet) connection to the service required. If it is disabled, in the "Network and Dial-up Connections" folder will not see anything, let alone the new connections and dial-up online. Therefore, unless your machine is an absolute stand-alone environment, in order to turn it off.

32, Network DDE

NetDDE (Network Dynamic Data Exchange Services) process name is Netdde.exe, WinXP Home / Pro is installed by default startup type to Manual, depending on the Network DDE DSDM service. NetDDE (Network Dynamic Data Exchange) is Microsoft's early design of a method that allows applications on different PC, Windows dynamic data exchange between the now seldom used. WinXP fact, the only truly depend on it ClipBook service, recalling the three persons mentioned joint development of a common document, through the ClipBook example of dynamic data exchange can be well understood the role of the service. Data-sharing services are normally provided by a trusted communication channel responsible for the management of the service is a network DDE agent (Network DDE Agent), in fact the network DDE agent will make the machine very easy to attack and loss of control over the administrator of this machine . Therefore, if no ClipBook Share this special service can be disabled.

34, Network Location Awareeness

NLA (Network Location Awareness Service) process name is Svchost.exe, WinXP Home / Pro is installed by default startup type to Manual, depends on the AFD network support environment and TCP / IP Protocol Driver service. NLA,。,。,。IP,IP。IP,IP,NLA(),。,。。

35、NT LM Security Support Provider

NtLmSsp(NT LM)Lsass.exe,WinXP Home/Pro,。 NT LMNT LanManger,NT,64。 NtLmSspRPC(),RPC,,TCP/IP、UDP、IPX,(Pipeline)。Windows,RPC,,NtLmSspRPC。 WinXPRPCTelnet(TelnetNtLmSsp),Telnet。

36、Performance Logs and Alerts

SysmonLog()Smlogsvc.exe,WinXP Home/Pro,。,“”,,,,。 SysmonLog。,,、、CPU,。,,,,Messenger(Messenger),()。,。

37、Plug and Play

PlugPlay()Services.exe,WinXP Home/Pro,。,Win98。Intel,,。 PlugPlayWinXP,,。

38、Portable Media Serial Number Service

WmdmPmSp()Svchost.exe,WinXP Home/Pro,。,,。,?copyMP3、MD。,,,CDMP3,,?

39、Print Spooler

Spooler()Spoolsv.exe,WinXP Home/Pro,Remote Procedure Call。 Spooler,,,,,。,。。

40、Protected Storage

ProtectedStorage()Lsass.exe,WinXP Home/Pro,Remote Procedure Call。,、,Windows,。,。,,,。ProtectedStorage,Protected Storage PassView,ProtectedStorage、、。,,。


Windows XP Application Articles


Can't Find What You're Looking For?


Rating: Not yet rated

Comments

No comments posted.