HomeProductsServicesSupportNewsLinks 

  Certified Lotus SpecialistMCDBA Accredited

    Home

 

Recommended Security Settings for Windows XP System Services

 

 A = Automatic          M = Manual          D = Disabled

Name

XP Pro

Default

 XP Home

Default

"Safe"

Secure Setting

Recommended

Secure Setting

Notes

Alerter

Disabled

Disabled

D

D

 

Application Layer Gateway Service

Manual

Manual

M

D

Needed if using ICS (Internet Connection Sharing)

Application Management

Manual

Manual

M

M

 

Automatic Updates

Automatic

Automatic

A

A

You can't disable this and still use Windows Update.

Background Intelligent Transfer Service

Manual

Manual

M

M

You can't disable this and still use Windows Update.

ClipBook

Disabled

Disabled

D

D

 

COM+ Event System

Manual

Manual

M

M

 

COM+ System Application

Manual

Manual

M

M

 

Computer Browser

Automatic

Automatic

D

D

 

Cryptographic Services

Automatic

Automatic

A

A

 Windows Update errors may occur if this is disabled.

DCOM Server Process Launcher

Automatic

Automatic

A

A

 

DHCP Client

Automatic

Automatic

A

D

 *CAUTION*

You'll have to set your IP Address manually. You'll need to know all your networks settings to do this. Not everyone will be able to disable this and still be able to connect to the Internet or connect to game servers.

Do not change this on an ICS gateway.

Distributed Link Tracking Client

Automatic

Automatic

A

D

 

Distributed Transaction Coordinator

Manual

Manual

M

D

 

DNS Client

Automatic

Automatic

A

D

 

Error Reporting Service

Automatic

Automatic

D

D

 

Event Log

Automatic

Automatic

A

A

 

Fast User Switching Compatibility

Manual

Manual

M

D

 Will require you to reboot machine to log in as another user.

Help and Support

Automatic

Automatic

M

D

 

HTTP SSL

Manual

Manual

M

M

 

Human Interface Device Access

Disabled

Disabled

D

D

Best to leave this at whatever your value is already set to.

Many USB devices use this these days (keyboards, special mice, remotes). You can try disabling this to see if your devices need it or not.

IMAPI CD-Burning COM Service

Manual

Manual

M

D

 

Indexing Service

Manual

Manual

D

D

 Worthless resource hog that fires up when it feels like it.

IPSEC Services

Automatic

Automatic

A

D

Required for certain types of VPN connections.

Logical Disk Manager

Automatic

Automatic

A

M

 

Logical Disk Manager Administrative Service

Manual

Manual

M

M

 

Messenger

Disabled

Disabled

D

D

Security risk.

MS Software Shadow Copy Provider

Manual

Manual

M

M

 Leave this at what it is already set to. Your backup program may depend on this.

Net Logon

Manual

Manual

D

D

 Only used in domains.

NetMeeting Remote Desktop Sharing

Manual

Manual

D

D

 

Network Connections

Manual

Manual

M

M

 

Network DDE

Disabled

Disabled

D

D

 

Network DDE DSDM

Disabled

Disabled

D

D

 

Network Location Awareness (NLA)

Manual

Manual

M

M

 

Network Provisioning Service

Manual

Manual

D

D

 May be needed in the future for WPS. Not required for home users. AFIK it hasn't been implemented yet.

NT LM Security Support Provider

Manual

Manual

M

M

 

Performance Logs and Alerts

Manual

Manual

M

M

 

Plug and Play

Automatic

Automatic

A

A

 

Portable Media Serial Number Service

Manual

Manual

M

M

If you have a portable media device and have problems accessing content, return this to Manual.

Print Spooler

Automatic

Automatic

A

A

 

Protected Storage

Automatic

Automatic

A

A

 Some things may cease to function properly if disabled. Among them: Saved passwords, ssl, s/mime

QoS RSVP

Manual

Manual

D

D

 

Remote Access Auto Connection Manager

Manual

Manual

M

M

 

Remote Access Connection Manager

Manual

Manual

M

M

  

Remote Desktop Help Session Manager

Manual

Manual