This post will go over services included in Windows 7 that you can disable for more performance, privacy, and security. This list is based off of our Windows 7 Updated v5 ISO. You may have other services not listed here which could be from different OS components being enabled or drivers or software you install. I recommend doing this on a fresh install without any other programs or drivers to more easily tell.
To open the Services configurator, press the windows key, type services.msc, and press enter.
Some services are accessible only by registry. These usually have short words with no spaces. To disable these, you will need to find them in regedit (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\(service)) and set Start to 4.
1: These should be disabled on every install
► Show Spoiler
ActiveX Installer (AxInstSV) (Default: Manual)
Relates to useless stuff in Internet Explorer and probably security risk.
HomeGroup Listener (Default: Manual)
HomeGroup, security risk.
HomeGroup Provider (Default: Manual)
Same as above.
MRxDAV (Registry) (Default: Manual/3)
This seems to be WebDAV, which looks to be useless to most people. Blackbird recommends disabling it, so I think it's fine.
Print Spooler (Default: Automatic)
Recommended to disable due to unpatched vulnerability.
Remote Desktop Configuration (Default: Manual)
Remote Desktop, potential security risk.
Remote Desktop Services (Default: Manual)
Same as above.
Remote Desktop Services UserMode Port Redirector (Default: Manual)
Same as above.
Remote Registry (Default: Manual)
Sounds like big security risk going by description.
Shell Hardware Detection (Default: Automatic)
Autoplay, security risk. This also removes the Windows icon on the C: drive, however that is very minor compared to security risk. You can disable Autoplay through Group Policy, but the service will still always run.
Windows Media Player Network Sharing Service (Default: Manual)
Sounds like security risk.
Windows Remote Management (WS-Management) (Default: Manual)
Not sure what this does but the remote name makes me think security risk, doesn't seem to affect anything.
Windows Update (Default: Automatic (Delayed Start))
Since my ISOs are fully updated this isn't required and recommended to disable so any telemetry doesn't slip in.
Relates to useless stuff in Internet Explorer and probably security risk.
HomeGroup Listener (Default: Manual)
HomeGroup, security risk.
HomeGroup Provider (Default: Manual)
Same as above.
MRxDAV (Registry) (Default: Manual/3)
This seems to be WebDAV, which looks to be useless to most people. Blackbird recommends disabling it, so I think it's fine.
Print Spooler (Default: Automatic)
Recommended to disable due to unpatched vulnerability.
Remote Desktop Configuration (Default: Manual)
Remote Desktop, potential security risk.
Remote Desktop Services (Default: Manual)
Same as above.
Remote Desktop Services UserMode Port Redirector (Default: Manual)
Same as above.
Remote Registry (Default: Manual)
Sounds like big security risk going by description.
Shell Hardware Detection (Default: Automatic)
Autoplay, security risk. This also removes the Windows icon on the C: drive, however that is very minor compared to security risk. You can disable Autoplay through Group Policy, but the service will still always run.
Windows Media Player Network Sharing Service (Default: Manual)
Sounds like security risk.
Windows Remote Management (WS-Management) (Default: Manual)
Not sure what this does but the remote name makes me think security risk, doesn't seem to affect anything.
Windows Update (Default: Automatic (Delayed Start))
Since my ISOs are fully updated this isn't required and recommended to disable so any telemetry doesn't slip in.
► Show Spoiler
These seem to be disabled by default, not sure in what scenario they would be enabled by default. Don't know what most of these do so most have no note. Default: Disabled is a given.
ASP.NET State Service
Internet Connection Sharing (ICS)
Allows you to sorta use your computer like a shitty network switch if you have a free RJ45 port.
Media Center Extender Service
Microsoft .NET Framework NGEN v2.0.50727_X64
If you're using stock 7 without .NET 4.x installed, this will instead be enabled by default and should not be disabled manually.
Microsoft .NET Framework NGEN v2.0.50727_X86
Same as above.
Net.Msmq Listener Adapter
Net.Pipe Listener Adapter
Net.Tcp Listener Adapter
Net.Tcp Port Sharing Service
Routing and Remote Access
ASP.NET State Service
Internet Connection Sharing (ICS)
Allows you to sorta use your computer like a shitty network switch if you have a free RJ45 port.
Media Center Extender Service
Microsoft .NET Framework NGEN v2.0.50727_X64
If you're using stock 7 without .NET 4.x installed, this will instead be enabled by default and should not be disabled manually.
Microsoft .NET Framework NGEN v2.0.50727_X86
Same as above.
Net.Msmq Listener Adapter
Net.Pipe Listener Adapter
Net.Tcp Listener Adapter
Net.Tcp Port Sharing Service
Routing and Remote Access
► Show Spoiler
Adaptive Brightness (Default: Manual)
Maybe useful for laptops, but I just control brightness manually.
Application Experience (Default: Manual)
Not sure what this does, it doesn't seem to effect anything.
Application Identity (Default: Manual)
Useless unless you use AppLocker.
Application Layer Gateway Service (Default: Manual)
Might be useful if you do Internet Connection Sharing, otherwise useless.
Application Management (Default: Manual)
Related to software deployed through Group Policy, useless for normal use.
BitLocker Drive Encryption Service (Default: Manual)
Only useful if you use BitLocker.
Block Level Backup Engine Service (Default: Manual)
Only useful if you use Windows Backup.
Bluetooth Support Service (Default: Manual)
Well, Bluetooth.
BranchCache (Default: Manual)
Not sure what this does, it doesn't seem to effect anything.
Certificate Propagation (Default: Manual)
Might be useful if you use smart cards, otherwise useless.
Computer Browser (Default: Manual)
Might be more secure to disable, doesn't seem to break any networking tasks or SMB NAS.
Credential Manager (Default: Manual)
This doesn't break applications, just GUI access to the credential manager, which would be useless for most users.
Encrypting File System (EFS) (Default: Manual)
Might be useful if you use BitLocker, otherwise useless.
Fax (Default: Manual)
Lets you send and receive faxes. Removed if Windows Fax and Scan feature is turned off.
Function Discovery Provider Host (Default: Manual)
Not sure what this does but it doesn't seem to effect networking or SMB NAS.
Function Discovery Resource Publication (Default: Automatic)
Same as above.
Health Key and Certificate Management (Default: Manual)
Seems useless, internet and certificates work fine without it.
Interactive Services Detection (Default: Manual)
Not sure what this does, it doesn't seem to effect anything.
Internet Explorer ETW Collector Service (Default: Manual)
Not sure what ETW events are but Internet Explorer works fine without it.
Link-Layer Topology Discovery Mapper (Default: Manual)
Not sure what this does but it doesn't seem to effect networking or SMB NAS.
Microsoft iSCSI Initiator Service (Default: Manual)
Same as above.
Microsoft Software Shadow Copy Provider (Default: Manual)
I think related to System Restore.
Multimedia Class Scheduler (Default: Automatic)
Manages priority of multimedia applications. Doesn't sound useful. Not sure why I had this in 4 before.
Netlogon (Default: Manual)
Not sure what this does but it doesn't seem to effect networking or SMB NAS.
Network Access Protection Agent (Default: Manual)
Same as above.
Offline Files (Default: Automatic)
Not sure what this does, it doesn't seem to effect anything.
Parental Controls (Default: Manual)
Compatibility stub, useless.
Peer Name Resolution Protocol (Default: Manual)
Not sure what this does but it doesn't seem to effect networking or SMB NAS. Not related to P2P torrenting.
Peer Networking Grouping (Default: Manual)
Same as above.
Peer Networking Identity Manager (Default: Manual)
Same as above.
Performance Counter DLL Host (Default: Manual)
Not sure what this does, it doesn't seem to effect anything.
Performance Logs & Alerts (Default: Manual)
Not sure what this does, it doesn't seem to effect anything.
PNRP Machine Name Publication Service (Default: Manual)
Not sure what this does but it doesn't seem to effect networking or SMB NAS. Not related to torrenting.
Portable Device Enumerator Service (Default: Manual)
If you have group policy stuff related to mass storage devices might be worth keeping enabled. Autoplay group policy is not effected.
Problem Reports and Solutions Control Panel Support (Default: Manual)
Not sure what this does, it doesn't seem to effect anything.
Program Compatibility Assistant Service (Default: Automatic)
Not sure what this does, it doesn't seem to effect anything.
Quality Windows Audio Video Experience (Default: Manual)
Maybe useful if you stream videos through WMP or Media Center, otherwise useless.
Remote Procedure Call (RPC) Locator (Default: Manual)
Compatibility stub, useless.
Secure Socket Tunneling Protocol Service (Default: Manual)
Doesn't seem to affect any VPN type I can test.
Security Center (Default: Automatic (Delayed Start))
Useless and annoying.
Server (Default: Automatic)
Useless unless you host a SMB server or something.
Smart Card (Default: Manual)
Useless unless you use smart cards.
Smart Card Removal Policy (Default: Manual)
Same as above.
SNMP Trap (Default: Manual)
Not sure what this does but it doesn't seem to effect networking or SMB NAS.
SPP Notification Service (Default: Manual)
Related to activation, but only displaying the notification, not needed.
srv (Registry) (Default: Manual/3)
Seems to only be used for server tasks, doesn't look to impact SMB (2) NAS.
SSDP Discovery (Default: Manual)
Not sure what this does but it doesn't seem to effect networking or SMB NAS.
Still Image Acquisition Events (Default: Manual)
Not sure what this does, it doesn't seem to effect anything.
Storage Service (Default: Manual)
Maybe useful if you use group policy for storage devices, not even sure what that means.
Superfetch (Default: Automatic)
Useless if you have a SSD, might be useful if you have HDD.
Tablet PC Input Service (Default: Manual)
Useless unless you use pen touch input through like a drawing pad.
UPnP Device Host (Default: Manual)
Blackbird recommends disabling this. Seems to be some weird networking thing. Not sure what it impacts.
Volume Shadow Copy (Default: Manual)
Maybe required for System Restore. Is used for the Previous Versions of files feature.
WebClient (Default: Manual)
Not sure what this does but it doesn't seem to effect networking or SMB NAS.
Windows Backup (Default: Manual)
Maybe required for System Restore.
Windows Biometric Service (Default: Manual)
Useless unless you want fingerprint login.
Windows CardSpace (Default: Manual)
Not sure what this does, it doesn't seem to effect anything.
Windows Color System (Default: Manual)
Useless unless you use monitor color profiles.
Windows Connect Now - Config Registrar (Default: Manual)
Doesn't seem to do anything, connecting to WiFi works fine without it.
Windows Defender (Default: Automatic (Delayed Start))
Useless, especially if Defender is not installed.
Windows Error Reporting Service (Default: Manual)
Useless, could be telemetry.
Windows Font Cache Service (Default: Automatic)
Useless unless maybe you have a HDD idk.
Windows Image Acquisition (WIA) (Default: Manual)
Not sure what this does, it doesn't seem to effect anything.
Windows Media Center Receiver Service (Default: Manual)
Lets Windows Media Center recieve TV and FM broadcasts. Removed if Windows Media Center feature is turned off.
Windows Media Center Scheduler Service (Default: Manual)
Starts and stops recording of TV programs with Windows Media Center. Removed if Windows Media Center feature is turned off.
Windows Presentation Foundation Font Cache 3.0.0.0 (Default: Manual)
Useless unless maybe you have a HDD idk.
Windows Time (Default: Manual)
You shouldn't need to sync time often if at all, so mostly useless.
WinHTTP Web Proxy Auto-Discovery Service (Default: Manual)
Not sure what this does but it doesn't seem to effect networking or SMB NAS.
WMI Performance Adapter (Default: Manual)
Not sure what this does, it doesn't seem to effect anything.
WWAN AutoConfig (Default: Manual)
Required if you want to connect to cellular networks with dedicated WAN card, otherwise useless. Does not affect RNDIS or tethering from phone.
Maybe useful for laptops, but I just control brightness manually.
Application Experience (Default: Manual)
Not sure what this does, it doesn't seem to effect anything.
Application Identity (Default: Manual)
Useless unless you use AppLocker.
Application Layer Gateway Service (Default: Manual)
Might be useful if you do Internet Connection Sharing, otherwise useless.
Application Management (Default: Manual)
Related to software deployed through Group Policy, useless for normal use.
BitLocker Drive Encryption Service (Default: Manual)
Only useful if you use BitLocker.
Block Level Backup Engine Service (Default: Manual)
Only useful if you use Windows Backup.
Bluetooth Support Service (Default: Manual)
Well, Bluetooth.
BranchCache (Default: Manual)
Not sure what this does, it doesn't seem to effect anything.
Certificate Propagation (Default: Manual)
Might be useful if you use smart cards, otherwise useless.
Computer Browser (Default: Manual)
Might be more secure to disable, doesn't seem to break any networking tasks or SMB NAS.
Credential Manager (Default: Manual)
This doesn't break applications, just GUI access to the credential manager, which would be useless for most users.
Encrypting File System (EFS) (Default: Manual)
Might be useful if you use BitLocker, otherwise useless.
Fax (Default: Manual)
Lets you send and receive faxes. Removed if Windows Fax and Scan feature is turned off.
Function Discovery Provider Host (Default: Manual)
Not sure what this does but it doesn't seem to effect networking or SMB NAS.
Function Discovery Resource Publication (Default: Automatic)
Same as above.
Health Key and Certificate Management (Default: Manual)
Seems useless, internet and certificates work fine without it.
Interactive Services Detection (Default: Manual)
Not sure what this does, it doesn't seem to effect anything.
Internet Explorer ETW Collector Service (Default: Manual)
Not sure what ETW events are but Internet Explorer works fine without it.
Link-Layer Topology Discovery Mapper (Default: Manual)
Not sure what this does but it doesn't seem to effect networking or SMB NAS.
Microsoft iSCSI Initiator Service (Default: Manual)
Same as above.
Microsoft Software Shadow Copy Provider (Default: Manual)
I think related to System Restore.
Multimedia Class Scheduler (Default: Automatic)
Manages priority of multimedia applications. Doesn't sound useful. Not sure why I had this in 4 before.
Netlogon (Default: Manual)
Not sure what this does but it doesn't seem to effect networking or SMB NAS.
Network Access Protection Agent (Default: Manual)
Same as above.
Offline Files (Default: Automatic)
Not sure what this does, it doesn't seem to effect anything.
Parental Controls (Default: Manual)
Compatibility stub, useless.
Peer Name Resolution Protocol (Default: Manual)
Not sure what this does but it doesn't seem to effect networking or SMB NAS. Not related to P2P torrenting.
Peer Networking Grouping (Default: Manual)
Same as above.
Peer Networking Identity Manager (Default: Manual)
Same as above.
Performance Counter DLL Host (Default: Manual)
Not sure what this does, it doesn't seem to effect anything.
Performance Logs & Alerts (Default: Manual)
Not sure what this does, it doesn't seem to effect anything.
PNRP Machine Name Publication Service (Default: Manual)
Not sure what this does but it doesn't seem to effect networking or SMB NAS. Not related to torrenting.
Portable Device Enumerator Service (Default: Manual)
If you have group policy stuff related to mass storage devices might be worth keeping enabled. Autoplay group policy is not effected.
Problem Reports and Solutions Control Panel Support (Default: Manual)
Not sure what this does, it doesn't seem to effect anything.
Program Compatibility Assistant Service (Default: Automatic)
Not sure what this does, it doesn't seem to effect anything.
Quality Windows Audio Video Experience (Default: Manual)
Maybe useful if you stream videos through WMP or Media Center, otherwise useless.
Remote Procedure Call (RPC) Locator (Default: Manual)
Compatibility stub, useless.
Secure Socket Tunneling Protocol Service (Default: Manual)
Doesn't seem to affect any VPN type I can test.
Security Center (Default: Automatic (Delayed Start))
Useless and annoying.
Server (Default: Automatic)
Useless unless you host a SMB server or something.
Smart Card (Default: Manual)
Useless unless you use smart cards.
Smart Card Removal Policy (Default: Manual)
Same as above.
SNMP Trap (Default: Manual)
Not sure what this does but it doesn't seem to effect networking or SMB NAS.
SPP Notification Service (Default: Manual)
Related to activation, but only displaying the notification, not needed.
srv (Registry) (Default: Manual/3)
Seems to only be used for server tasks, doesn't look to impact SMB (2) NAS.
SSDP Discovery (Default: Manual)
Not sure what this does but it doesn't seem to effect networking or SMB NAS.
Still Image Acquisition Events (Default: Manual)
Not sure what this does, it doesn't seem to effect anything.
Storage Service (Default: Manual)
Maybe useful if you use group policy for storage devices, not even sure what that means.
Superfetch (Default: Automatic)
Useless if you have a SSD, might be useful if you have HDD.
Tablet PC Input Service (Default: Manual)
Useless unless you use pen touch input through like a drawing pad.
UPnP Device Host (Default: Manual)
Blackbird recommends disabling this. Seems to be some weird networking thing. Not sure what it impacts.
Volume Shadow Copy (Default: Manual)
Maybe required for System Restore. Is used for the Previous Versions of files feature.
WebClient (Default: Manual)
Not sure what this does but it doesn't seem to effect networking or SMB NAS.
Windows Backup (Default: Manual)
Maybe required for System Restore.
Windows Biometric Service (Default: Manual)
Useless unless you want fingerprint login.
Windows CardSpace (Default: Manual)
Not sure what this does, it doesn't seem to effect anything.
Windows Color System (Default: Manual)
Useless unless you use monitor color profiles.
Windows Connect Now - Config Registrar (Default: Manual)
Doesn't seem to do anything, connecting to WiFi works fine without it.
Windows Defender (Default: Automatic (Delayed Start))
Useless, especially if Defender is not installed.
Windows Error Reporting Service (Default: Manual)
Useless, could be telemetry.
Windows Font Cache Service (Default: Automatic)
Useless unless maybe you have a HDD idk.
Windows Image Acquisition (WIA) (Default: Manual)
Not sure what this does, it doesn't seem to effect anything.
Windows Media Center Receiver Service (Default: Manual)
Lets Windows Media Center recieve TV and FM broadcasts. Removed if Windows Media Center feature is turned off.
Windows Media Center Scheduler Service (Default: Manual)
Starts and stops recording of TV programs with Windows Media Center. Removed if Windows Media Center feature is turned off.
Windows Presentation Foundation Font Cache 3.0.0.0 (Default: Manual)
Useless unless maybe you have a HDD idk.
Windows Time (Default: Manual)
You shouldn't need to sync time often if at all, so mostly useless.
WinHTTP Web Proxy Auto-Discovery Service (Default: Manual)
Not sure what this does but it doesn't seem to effect networking or SMB NAS.
WMI Performance Adapter (Default: Manual)
Not sure what this does, it doesn't seem to effect anything.
WWAN AutoConfig (Default: Manual)
Required if you want to connect to cellular networks with dedicated WAN card, otherwise useless. Does not affect RNDIS or tethering from phone.
► Show Spoiler
These are services that affect more useful or wanted functionality than the above.
Background Intelligent Transfer Service (Default: Automatic (Delayed Start))
Should only be useful if you use Windows Update, but some other programs may require it.
Desktop Window Manager Session Manager (Default: Automatic)
Requried for Aero, otherwise useless.
Diagnostic Policy Service (Default: Automatic)
Diagnostic services which can be helpful in solving issues. It's only here because it can't be disabled by registry key
Diagnostic Service Host (Default: Manual)
Same as above.
Diagnostic System Host (Default: Manual)
Same as above.
Disk Defragmenter (Default: Manual)
Risk for SSDs as you're not supposed to defrag them. However required for disk management. Maybe keep manual and disable automatic defrag?
Distributed Link Tracking Client (Default: Automatic)
Not sure what this does, but it doesn't break or affect SMB NAS. It's only here because it can't be disabled by registry key
Extensible Authentication Protocol (Default: Manual)
Maybe can disable if you don't use the internet on this machine.
Human Interface Device Access (Default: Manual)
If you wish to use volume knobs, play/pause controls, etc, you might want to keep enabled.
IP Helper (Default: Automatic)
Maybe useful if you use IPv6.
MRxSMB, MRxSMB10, and MRxSMB20 (Registry) (Default: Manual/3)
MRxSMB10 seems to be the SMB 1.0 driver, but disabling it breaks accessing SMB 2 shares. So I've lumped all these together as they're all SMB.
NetBT (Registry) (Default: Automatic (Delayed Start)/1)
NetBIOS is a security risk, however required for SMB NAS.
Network Connections (Default: Manual)
Maybe can disable if you don't use the internet on this machine.
Network List Service (Default: Manual)
Same as above.
Network Location Awareness (Default: Automatic)
Same as above.
Network Store Interface Service (Default: Automatic)
Same as above.
TCP/IP NetBIOS Helper (Default: Automatic)
NetBIOS is a security risk, however required for SMB NAS.
Telephony (Default: Manual)
Not required unless you use IKEv2 VPN.
tunnel (Registry) (Default: Manual/3)
Looks to be related to IPv6, though not entirely sure.
Themes (Default: Automatic)
Required for Aero/Basic theme, otherwise useless.
Virtual Disk (Default: Manual)
Required for Disk Management, otherwise useless.
Windows Audio (Default: Automatic)
Required for audio, otherwise useless.
Windows Audio Endpoint Builder (Default: Automatic)
Same as above.
Windows Modules Installer (Default: Manual)
Required for Windows Update, using DISM, and other programs that may want to use the TrustedInstaller user account, otherwise useless.
Windows Search (Default: Automatic (Delayed Start))
Disabling this disables search indexing, which makes bigger searches slower, but search still works.
Wired AutoConfig (Default: Manual)
Disabling this breaks wired network access.
WLAN AutoConfig (Default: Manual)
Required if you want to connect to WiFi, otherwise useless.
Workstation (Default: Automatic)
Required for SMB NAS, need to test NFS, otherwise useless.
Background Intelligent Transfer Service (Default: Automatic (Delayed Start))
Should only be useful if you use Windows Update, but some other programs may require it.
Desktop Window Manager Session Manager (Default: Automatic)
Requried for Aero, otherwise useless.
Diagnostic Policy Service (Default: Automatic)
Diagnostic services which can be helpful in solving issues. It's only here because it can't be disabled by registry key
Diagnostic Service Host (Default: Manual)
Same as above.
Diagnostic System Host (Default: Manual)
Same as above.
Disk Defragmenter (Default: Manual)
Risk for SSDs as you're not supposed to defrag them. However required for disk management. Maybe keep manual and disable automatic defrag?
Distributed Link Tracking Client (Default: Automatic)
Not sure what this does, but it doesn't break or affect SMB NAS. It's only here because it can't be disabled by registry key
Extensible Authentication Protocol (Default: Manual)
Maybe can disable if you don't use the internet on this machine.
Human Interface Device Access (Default: Manual)
If you wish to use volume knobs, play/pause controls, etc, you might want to keep enabled.
IP Helper (Default: Automatic)
Maybe useful if you use IPv6.
MRxSMB, MRxSMB10, and MRxSMB20 (Registry) (Default: Manual/3)
MRxSMB10 seems to be the SMB 1.0 driver, but disabling it breaks accessing SMB 2 shares. So I've lumped all these together as they're all SMB.
NetBT (Registry) (Default: Automatic (Delayed Start)/1)
NetBIOS is a security risk, however required for SMB NAS.
Network Connections (Default: Manual)
Maybe can disable if you don't use the internet on this machine.
Network List Service (Default: Manual)
Same as above.
Network Location Awareness (Default: Automatic)
Same as above.
Network Store Interface Service (Default: Automatic)
Same as above.
TCP/IP NetBIOS Helper (Default: Automatic)
NetBIOS is a security risk, however required for SMB NAS.
Telephony (Default: Manual)
Not required unless you use IKEv2 VPN.
tunnel (Registry) (Default: Manual/3)
Looks to be related to IPv6, though not entirely sure.
Themes (Default: Automatic)
Required for Aero/Basic theme, otherwise useless.
Virtual Disk (Default: Manual)
Required for Disk Management, otherwise useless.
Windows Audio (Default: Automatic)
Required for audio, otherwise useless.
Windows Audio Endpoint Builder (Default: Automatic)
Same as above.
Windows Modules Installer (Default: Manual)
Required for Windows Update, using DISM, and other programs that may want to use the TrustedInstaller user account, otherwise useless.
Windows Search (Default: Automatic (Delayed Start))
Disabling this disables search indexing, which makes bigger searches slower, but search still works.
Wired AutoConfig (Default: Manual)
Disabling this breaks wired network access.
WLAN AutoConfig (Default: Manual)
Required if you want to connect to WiFi, otherwise useless.
Workstation (Default: Automatic)
Required for SMB NAS, need to test NFS, otherwise useless.
► Show Spoiler
This is a list of services that should stay enabled if you don't want to break Windows. Rather than try and fail to describe what they do, I will just post their names.
Application Information (Default: Manual)
Base Filtering Engine (Default: Automatic)
CNG Key Isolation (Default: Manual)
COM+ Event System (Default: Automatic)
COM+ System Application (Default: Manual)
Cryptographic Services (Default: Automatic)
DCOM Server Process Launcher (Default: Automatic)
DHCP Client (Default: Automatic)
DNS Client (Default: Automatic)
Distributed Transaction Coordinator (Default: Manual)
Group Policy Client (Default: Automatic)
IKE and AuthIP IPsec Keying Modules (Default: Manual)
IPsec Policy Agent (Default: Manual)
KtmRm for Distributed Transaction Coordinator (Default: Manual)
Microsoft .NET Framework NGEN v4.0.30319_X64 (Default: Automatic (Delayed Start))
Microsoft .NET Framework NGEN v4.0.30319_X86 (Default: Automatic (Delayed Start))
Plug and Play (Default: Automatic)
PnP-X IP Bus Enumerator (Default: Manual)
Power (Default: Automatic)
Protected Storage (Default: Manual)
Remote Access Auto Connection Manager (Default: Manual)
The name is misleading, this is not related to remote access, disabling this will break internet access.
Remote Access Connection Manager (Default: Manual)
Same as above.
Remote Procedure Call (RPC) (Default: Automatic)
RPC Endpoint Mapper (Default: Automatic)
Secondary Logon (Default: Manual)
Security Accounts Manager (Default: Automatic)
Software Protection (Default: Automatic (Delayed Start))
System Event Notification Service (Default: Automatic)
Task Scheduler (Default: Automatic)
Thread Ordering Server (Default: Manual)
User Profile Service (Default: Automatic)
Windows Driver Foundation - User-mode Driver Framework (Default: Manual)
Windows Event Collector (Default: Manual)
Windows Event Log (Default: Automatic)
Windows Firewall (Default: Automatic)
Even if you have your own firewall or protection, keep this enabled. It will save you if it somehow fails.
Windows Installer (Default: Manual)
Disabling it breaks installing programs.
Windows Management Instrumentation (Default: Automatic)
Application Information (Default: Manual)
Base Filtering Engine (Default: Automatic)
CNG Key Isolation (Default: Manual)
COM+ Event System (Default: Automatic)
COM+ System Application (Default: Manual)
Cryptographic Services (Default: Automatic)
DCOM Server Process Launcher (Default: Automatic)
DHCP Client (Default: Automatic)
DNS Client (Default: Automatic)
Distributed Transaction Coordinator (Default: Manual)
Group Policy Client (Default: Automatic)
IKE and AuthIP IPsec Keying Modules (Default: Manual)
IPsec Policy Agent (Default: Manual)
KtmRm for Distributed Transaction Coordinator (Default: Manual)
Microsoft .NET Framework NGEN v4.0.30319_X64 (Default: Automatic (Delayed Start))
Microsoft .NET Framework NGEN v4.0.30319_X86 (Default: Automatic (Delayed Start))
Plug and Play (Default: Automatic)
PnP-X IP Bus Enumerator (Default: Manual)
Power (Default: Automatic)
Protected Storage (Default: Manual)
Remote Access Auto Connection Manager (Default: Manual)
The name is misleading, this is not related to remote access, disabling this will break internet access.
Remote Access Connection Manager (Default: Manual)
Same as above.
Remote Procedure Call (RPC) (Default: Automatic)
RPC Endpoint Mapper (Default: Automatic)
Secondary Logon (Default: Manual)
Security Accounts Manager (Default: Automatic)
Software Protection (Default: Automatic (Delayed Start))
System Event Notification Service (Default: Automatic)
Task Scheduler (Default: Automatic)
Thread Ordering Server (Default: Manual)
User Profile Service (Default: Automatic)
Windows Driver Foundation - User-mode Driver Framework (Default: Manual)
Windows Event Collector (Default: Manual)
Windows Event Log (Default: Automatic)
Windows Firewall (Default: Automatic)
Even if you have your own firewall or protection, keep this enabled. It will save you if it somehow fails.
Windows Installer (Default: Manual)
Disabling it breaks installing programs.
Windows Management Instrumentation (Default: Automatic)
Bluetooth: Enable Bluetooth Support Service.
Enabling features: Enable Windows Modules Installer and Windows Update.
Windows Update: Enable Background Intelligent Transfer Service, Windows Modules Installer, and Windows Update.
For other tasks like accessing a SMB share or IKEv2 VPN, check 3: Conditional as services that impact those tasks are described there.
For ease of use, the services from list 1 and 2 are compiled here into a registry file. There is no file for 3 as those should be applied manually depending on what you want.
