To make Windows Server 2008 as fast as possible you also need to do some Windows Services fine-tuning. Below is a table with a list of all services on a clean Windows Server 2008 Enterprise machine. This list is quite the same as the list of services in other editions of Windows Server 2008. If you have any additions/corrections to this list, please leave a Comment with a description why you can tweak the service and when you might need it.

To edit the Startup Type of services do the following:
1. Open the Start menu, click Run, enter services.msc and click OK.
2. Right click the Service name and choose Properties.
3. Choose the value you want from the Startup type dropdown and click OK to save the setting.

Windows Services Tweaks List

ServiceName Default Startup Type Safe Startup Type Tweaked Startup Type Comment
Application Experience Automatic Automatic Automatic (Delayed Start)  
Application Information Manual - -  
Application Layer Gateway Service Manual - -  
Application Management Manual - -  
Background Intelligent Transfer Service Automatic (Delayed Start) - -  
Base Filtering Engine Automatic - -  
Certificate Propagation Manual Manual Disabled This service is only needed when you use Smart Cards.
CNG Key Isolation Manual - -  
COM+ Event System Automatic Automatic Automatic (Delayed Start)  
COM+ System Application Manual - -  
Computer Browser Disabled - - Set it to Automatic if you want to view what other computers there are in your network. The service is not needed to browse them.
Cryptographic Services Automatic Automatic Automatic Needed for checking for signed drivers.
DCOM Server Process Launcher Automatic - - This service is needed for almost every other service so leave it.
Desktop Window Manager Session Manager Automatic Automatic Disabled Heavy backgroundservice that is needed for the Aero interface. If you use Aero, leave it on.
DHCP Client Automatic - - Can only be disabled if you configured a static ipaddress.
Diagnostic Policy Service Automatic Manual Disabled Enables problem detection, troubleshooting, and resolution for Windows components. Can forewarn disk failure based on SMART report.
Diagnostic Service Host Manual Manual Disabled Diagnostic tools that attempt to detect problems in memory, disk and files.
Diagnostic System Host Manual Manual Disabled Diagnostic tools that attempt to detect problems in memory, disk and files.
Distributed Link Tracking Client Automatic Disabled Disabled Keeps track of file locations across the network.
Distributed Transaction Coordinator Automatic (Delayed Start) Manual Disabled Is used by Microsoft SQL Server and IIS.
DNS Client Automatic - -  
Extensible Authentication Protocol Manual - -  
Function Discovery Provider Host Manual - -  
Function Discovery Resource Publication Manual Manual Disabled Publishes your computer resources over the network.
Group Policy Client Automatic - -  
Health Key and Certificate Management Manual - -  
Human Interface Device Access Manual - -  
IKE and AuthIP IPsec Keying Modules Automatic Automatic Manual Internet Key Exchange is used for some VPN software.
Interactive Services Detection Manual - -  
Internet Connection Sharing (ICS) Disabled - -  
IP Helper Automatic Manual Disabled Only needed if you need IPV6 support. Probably not needed.
IPsec Policy Agent Automatic - -  
KtmRm for Distributed Transaction Coordinator Automatic (Delayed Start) Manual Disabled  
Link-Layer Topology Discovery Mapper Manual - -  
Microsoft .NET Framework NGEN v2.0.50727_X86 Manual - -  
Microsoft Fibre Channel Platform Registration Service Manual - -  
Microsoft iSCSI Initiator Service Manual - -  
Microsoft Software Shadow Copy Provider Manual - -  
Multimedia Class Scheduler Manual - -  
Netlogon Manual Manual Disabled If you are using a Domain Controller, leave this service. Otherwise you can disable it.
Network Access Protection Agent Manual - -  
Network Connections Manual - -  
Network List Service Automatic - -  
Network Location Awareness Automatic Automatic Automatic (Delayed Start)  
Network Store Interface Service Automatic Automatic Automatic (Delayed Start)  
Offline Files Disabled - -  
Performance Logs & Alerts Manual Manual Disabled Performance logging. You probably don't use/need it.
Plug and Play Automatic - -  
PnP-X IP Bus Enumerator Disabled - -  
Portable Device Enumerator Service Manual - -  
Print Spooler Automatic - -  
Problem Reports and Solutions Control Panel Support Manual - -  
Protected Storage Manual - -  
Remote Access Auto Connection Manager Manual - -  
Remote Access Connection Manager Manual - -  
Remote Procedure Call (RPC) Automatic - -  
Remote Procedure Call (RPC) Locator Manual - -  
Remote Registry Automatic Manual Disabled Is needed if you want to access the computers registry from an other computer, but it might also be needed for local applications.
Resultant Set of Policy Provider Manual - -  
Routing and Remote Access Disabled - -  
Secondary Logon Automatic Automatic Automatic (Delayed Start)  
Secure Socket Tunneling Protocol Service Manual - -  
Security Accounts Manager Automatic - -  
Server Automatic Automatic Automatic (Delayed Start)  
Shell Hardware Detection Automatic - -  
SL UI Notification Service Manual - -  
Smart Card Manual Manual Disabled This service is only needed when you use Smart Cards.
Smart Card Removal Policy Manual Manual Disabled This service is only needed when you use Smart Cards.
SNMP Trap Manual - -  
Software Licensing Automatic - -  
Special Administration Console Helper Manual - -  
SSDP Discovery Disabled - -  
Superfetch Disabled - -  
System Event Notification Service Automatic - -  
Task Scheduler Automatic - -  
TCP/IP NetBIOS Helper Automatic - -  
Telephony Manual Manual Manual Needed for dialup and VPN connections.
Terminal Services Automatic Manual Disabled Allows users to log in to this computer. Not required to make outward connections with Remote Desktop.
Terminal Services Configuration Manual - -  
Terminal Services UserMode Port Redirector Manual - -  
Themes Disabled - - Needed if you use Themes.
Thread Ordering Server Manual - -  
TPM Base Services Automatic (Delayed Start) - -  
UPnP Device Host Disabled - -  
User Profile Service Automatic - -  
Virtual Disk Manual - -  
Volume Shadow Copy Manual - -  
Windows Audio Manual - -  
Windows Audio Endpoint Builder Manual - -  
Windows Color System Manual - -  
Windows Driver Foundation - User-mode Driver Framework Manual - -  
Windows Error Reporting Service Automatic - -  
Windows Event Collector Manual - -  
Windows Event Log Automatic - -  
Windows Firewall Automatic Automatic Automatic  
Windows Installer Manual - -  
Windows Management Instrumentation Automatic Automatic Automatic (Delayed Start)  
Windows Modules Installer Manual - -  
Windows Remote Management (WS-Management) Automatic (Delayed Start) - -  
Windows Time Automatic - -  
Windows Update Automatic (Delayed Start) - -  
WinHTTP Web Proxy Auto-Discovery Service Manual - -  
Wired AutoConfig Manual - -  
WMI Performance Adapter Manual - -  
Workstation Automatic - -  

Tags Server 2008 Workstation

17 Responses to “Fine-Tuning Services”

  1. Fine-Tuning Services | Windows 2008 Security Says:

    [...] Read the original here: Fine-Tuning Services [...]

  2. IceDevil Says:

    great, this is new isn’t it

    will try it and give a feedback

    thanks a lot…greetZ IceDevil

    Admin: That’s right, just added it yesterday. ;)

  3. aviv00 Says:

    here my list

    [Services]
    AELOOKUPSVC = Automatic (Delayed Start)
    CRYPTSVC = Automatic (Delayed Start)
    DPS = Automatic (Delayed Start)
    EVENTSYSTEM = Automatic (Delayed Start)
    IKEEXT = Manual
    LANMANSERVER = Automatic (Delayed Start)
    MPSSVC = Manual
    NLASVC = Automatic (Delayed Start)
    NSI = Automatic (Delayed Start)
    QWAVE = Automatic (Delayed Start)
    REMOTEREGISTRY = Manual
    SECLOGON = Automatic (Delayed Start)
    SLUINOTIFY = Disabled
    TERMSERVICE = Automatic (Delayed Start)
    THEMES = Automatic
    TRKWKS = Automatic (Delayed Start)
    WINMGMT = Automatic (Delayed Start)
    WUAUSERV = Disabled

    changing it to Automatic (Delayed Start) maybe boost the startup

  4. » Fine-Tuning Services Citrix terminal servers, thin clients, secure computing - SafeWord for Citrix Says:

    [...] news by admin This entry is filed under Uncategorized. You can follow any responses to this entry through the [...]

  5. anon Says:

    Telephony is required for software VPN connections.

    Admin: Thanks for your reply; changed the ‘Tweaked Startup Type’ into ‘Manual’ because quite a lot people will use VPN.

  6. Selectaa Says:

    You’ve written that the Remote Registry service is only used for “Is only needed if you want to access the computers registry from an other computer.”. I’ve experienced that certain programs won’t install (or maybe even run, can’t remember) unless this service is running. Probably some bad programming, but it was a pain in the *ss to troubleshoot! So be aware if you disable this service.

  7. anon Says:

    Remote registry is reguired for some corporate antivirus (trend at least)

  8. aviv00 Says:

    IKE and AuthIP IPsec Keying Modules not needed as far as i know

  9. MarcelDevG Says:

    Remote Registry is needed for sure by some .net programs when the are using remoting and maybe with wcf.

  10. aviv00 Says:

    if i disabled Distributed Transaction Coordinator

    i need KtmRm for Distributed Transaction Coordinator ?

    Arris: Updated the table.

  11. Recent Links Tagged With "autodiscovery" - JabberTags Says:

    [...] public links >> autodiscovery Fine-Tuning Services Saved by heartslessqueen on Sat 01-11-2008 Zend Framework 1.6 Release Candidate ist da Saved by [...]

  12. JustK Says:

    Anyway to automate these tunings ?

  13. aviv00 Says:

    with vlite 1.2 u could

    or look for reg in speedyvista website

    GL

  14. David Balažic Says:

    Once I tried to disable almost half of default services onWin2008.
    The boot time was not shorter by even a single second.
    Are you sure there is any speed gain by disabling the above services ?
    Did anyone measure the gains ?

    Regards,
    David

    Arris: Some people say it’s useless, others say it speeds up your system. Personally I do it to clean up the list of running services a bit and to possibly gain some performance improvement.

  15. Anonymous Says:

    I’d say enable Diagnostic Policy Service as it can forewarn disk failure based on SMART report.

    Arris: Thanks for your comment; updated the description.

  16. Mur Says:

    my windows firewall will not let me delay start

    Arris: Thanks for your comment, you are right so I updated the table!

  17. James Says:

    Following this list made my computer’s boot time extend to about 5-10 minutes from a normal ~30 seconds. I didn’t bother to divide and conquer as I was considering to figure out the culprit service but Cryptographic Services sounds like it may have been the issue. Delaying the start of this probably presented a problem on my Dell laptop. I have since reverted the changes and it is back to normal.

    Can I also add that there is not really much point to this. The gains are minimal, the fact that most people tech savvy enough to tinker here would know about sleep/hibernate, the fact that these services use very little resources during a user’s session, and the fact that it can easily cause problems as what happened to me.

    The only services you should be tinkering with are things like the Windows Firewall if you use a 3rd party one and others that are more “features” than “services” such as Indexing.

Leave a Reply