Hello everyone, i want to ask, if u guys have list of Windows 11 Services that are safe to disabled? I only use my Windows 11 mostly for offline use, school works, i only go online with firefox to connect to Google Classroom or searching for answer for my schoolworks. Thanks for your help.
Safe to disabled doesn't mean your system will be stability/function well It's per user. And his needs. There is this site with service list, So you can see what each service does, And choice disable or not. I generally don't touch service section, Most of times it not end well ( Wifi not work, printers not work ... Etc .. )
Yeah, thats what happened to me, i tried to disable some services, and it end up with breaking something in the system, i thought i am the only stupid person, so i am curious about which services are safe to disabled. Hey about the site u mention, what site is that? Have the link? I am curious
A few Services that can be adjusted with a bit of info about what they do etc... Never delete a service as once it gone its gone and if you require it later then only a OS reinstall will fix it majority of the time. This list was compiled via the internet and some data may be out of date. But it is a starting point to most of the 'safe' services to disable. Always test on a test pc or VM first! Or at least have a good working backup image if things go wrong, and believe me they can quite spectacularly. The list is not a total one as there may most likely be new services added since the list was created. Note some services are linked to others more so in Win11. One or two services may not be allowed to change state as they could be controlled by System or NT/Authority and you will need something like NSudo, PowerRun etc to change them. Spoiler: W10/11 Safe to Disable Services Windows 10/11 ============= Any info inside ( ) means default state/value. Disable Services: ================= AllJoyn Router Service If you don't have IoT clients or want to not use them, disable this. Application Layer Gateway Service (Manual) Supports third-party plugins for Internet Connection Sharing. Application Management (Manual) Security vulnerability. Only needed if you install/manage software through Group Policy on a domain BitLocker- Application Management () Drive Encryption Service (Manual, Trigger Start) Do not disable if you use drive encryption (or if you're not 100% sure) - you won't be able to boot. Certificate Propagation (Manual, Triggered) Only required for Smart Card log on devices. Distributed Link Tracking Client (Automatic) Old service that keeps track of NTFS files as they move around on a server. Downloaded Maps Manager (Automatic, Delayed Start) If you don't use Maps. IP Helper (Automatic) If you don't use IPv6. If unsure don't change value as some devices may require IPv6 sooner or later. IPsec Policy Agent (Manual, Trigger Start) A really old point to point VPN that nobody should use. Internet Connection Sharing (ICS) (Manual, Trigger Start) Old service, disabling could cause problems with Internet Explorer. Offline Files (Manual, Trigger Start) If you connect to a network share which has "Make available offline" enabled, you may need this, otherwise you can disable. Microsoft iSCSI Initiator (Manual) If you don't know what an iSCSI target is you don't need it. Netlogon (Manual) If you don't connect to a domain. Network Connected Devices Auto-Setup (Manual) If you prefer to manually install network devices, disable this. Parental Controls (Manual) If you don't use parental controls. Secure Socket Tunneling Protocol Service (Manual) Disables the WAN Miniport (SSTP), if you don't use this kind of VPN. SNMP Trap (Manual) If you don't know what SNMP traps are you don't need this. SSDP Discovery (Manual) If you don't need to discover UPnP devices on the network—May negatively affect torrent software. UPnP Device Host (Manual) If you don't need to publish UPnP devices from your computer. TCP/IP NetBIOS Helper (Manual, Trigger Start) May cause problems with resolving network hostnames that do not have reverse DNS entries. Touch Keyboard and Handwriting Panel Service (Manual, Trigger Start) If you don't have a touch screen. Retail Demo Service (Manual) Disable. WebClient (Manual) No one really uses WebClient any more. Maybe SharePoint. Windows Error Reporting Service (Manual, Trigger Start) If you will never create or send Windows Error Reports. Windows Insider Service (Manual, Trigger Start) If you will never use this. Windows Mobile Hotspot Service (Manual, Trigger Start) Disable if you won't share internet with others. Windows Remote Management (Manual) Security vulnerability if you don't use it. Not required unless you use Bluetooth Audio/headphones: ======================================================= Bluetooth Audio Gateway Service (Manual, Triggered) AVCTP service (Manual, Trigger Start) For Bluetooth Audio/headphones Disable these if you don't use digitally protected video. May affect Netflix or streaming services: =================================================================================================== Intel(R) Capability Licensing Service TCP IP Interface (Manual) Intel(R) Content Protection HDCP Service (Automatic) Intel(R) Content Protection HECI Service (Manual) If you don't use Intel Management Engine for remote management of your device, disable these: ============================================================================================= Intel(R) Dynamic Application Loader Host Interface Service (Automatic, Delayed) Intel(R) Management and Security Application Local Management Service (Automatic, Delayed) Intel(R) TPM Provisioning Service (Automatic) If you won't need Remote Assistance: ==================================== Peer Name Resolution Protocol (Manual) Peer Networking Grouping (Manual) Peer Networking Identity Manager (Manual) Program Compatibility Assistant Service (Manual) Enable if you need to run software in Compatibility mode. Remote Access Connection Manager (Automatic) Removes WAN Miniport Adapters. Remote Access Auto Connection Manager (Manual) Not required if you never use RAS. Remote Registry (Disabled) Confirm it's disabled. Routing and Remote Access (Disabled) Confirm it's disabled Security vulnerability if you don't use RDS. Remote Desktop Services (Manual) Remote Desktop Services UserMode Port Redirection (Manual) Remote Desktop Configuration (Manual) If you don't use Xbox: ====================== Xbox Accessory Management Service (Manual, Trigger Start) Xbox Live Auth Manager (Manual) Xbox Live Game Save (Manual, Trigger Start) Xbox Live Networking Service (Manual) If you don't use Smart Cards: ============================= Smart Card (Manual) Smart Card Device Enumeration Service (Manual) Smart Card Removal Policy (Manual) The Do not disable Services: ============================ Network List Service - Causes problems with network tray icon/discovery. Network Location Awareness - Causes problems with network tray icon/discovery. Network Location Awareness - Now required by BITS. Network List Service - Now required by BITS. Server - Now required by Workstation service.
This is for reference only. I have not experienced any problems with this setup. Spoiler: My Sample ;Diagnostic Policy Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DPS] "Start"=dword:00000004 ;Distributed Link Tracking Client [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TrkWks] "Start"=dword:00000003 ;Computer Browser [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\bowser] "Start"=dword:00000004 ;Delivery Optimization [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DoSvc] "Start"=dword:00000004 ;Diagnostics Tracking Service(Connected User Experiences and Telemetry) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DiagTrack] "Start"=dword:00000004 ;Distributed Transaction Coordinator [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MSDTC] "Start"=dword:00000003 ;dmwappushsvc [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dmwappushservice] "Start"=dword:00000004 ;Function Discovery Resource Publication [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\FDResPub] "Start"=dword:00000003 ;Geolocation Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lfsvc] "Start"=dword:00000003 ;IP Helper [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\iphlpsvc] "Start"=dword:00000003 ;Offline Files [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\CscService] "Start"=dword:00000004 ;Phone Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PhoneSvc] "Start"=dword:00000004 ;Secure Socket Tunneling Protocol Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SstpSvc] "Start"=dword:00000004 ;Security Center [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wscsvc] "Start"=dword:00000003 ;Server [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer] "Start"=dword:00000004 ;SSDP Discovery [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SSDPSRV] "Start"=dword:00000004 ;TCP/IP NetBIOS Helper [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lmhosts] "Start"=dword:00000004 ;Windows Modules Installer [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TrustedInstaller] "Start"=dword:00000003 ;Web Threat Defense Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\webthreatdefsvc] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\webthreatdefusersvc] "Start"=dword:00000004 ;Windows Error Reporting Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WerSvc] "Start"=dword:00000004 ;Windows Insider Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wisvc] "Start"=dword:00000004 ;Windows Search [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WSearch] "Start"=dword:00000004 ;Workstation [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation] "Start"=dword:00000004 ;WpnService [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WpnService] "Start"=dword:00000003 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WpnUserService] "Start"=dword:00000003 ;DusmSvc [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DusmSvc] "Start"=dword:00000003 ;RmSvc [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RmSvc] "Start"=dword:00000003 ;Clipboards [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cbdhsvc] "Start"=dword:00000004 ;Microsoft Account Sign-in Assistant [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wlidsvc] "Start"=dword:00000004
In order to get registry to allow these I had to run in WinPE. Sinse some services were open in windows
Can u share the reg list for those as well? Code: Disable Services: ================= AllJoyn Router Service If you don't have IoT clients or want to not use them, disable this. Application Layer Gateway Service (Manual) Supports third-party plugins for Internet Connection Sharing. Application Management (Manual) Security vulnerability. Only needed if you install/manage software through Group Policy on a domain BitLocker- Application Management () Drive Encryption Service (Manual, Trigger Start) Do not disable if you use drive encryption (or if you're not 100% sure) - you won't be able to boot. Certificate Propagation (Manual, Triggered) Only required for Smart Card log on devices. Distributed Link Tracking Client (Automatic) Old service that keeps track of NTFS files as they move around on a server. Downloaded Maps Manager (Automatic, Delayed Start) If you don't use Maps. IP Helper (Automatic) If you don't use IPv6. If unsure don't change value as some devices may require IPv6 sooner or later. IPsec Policy Agent (Manual, Trigger Start) A really old point to point VPN that nobody should use. Internet Connection Sharing (ICS) (Manual, Trigger Start) Old service, disabling could cause problems with Internet Explorer. Offline Files (Manual, Trigger Start) If you connect to a network share which has "Make available offline" enabled, you may need this, otherwise you can disable. Microsoft iSCSI Initiator (Manual) If you don't know what an iSCSI target is you don't need it. Netlogon (Manual) If you don't connect to a domain. Network Connected Devices Auto-Setup (Manual) If you prefer to manually install network devices, disable this. Parental Controls (Manual) If you don't use parental controls. Secure Socket Tunneling Protocol Service (Manual) Disables the WAN Miniport (SSTP), if you don't use this kind of VPN. SNMP Trap (Manual) If you don't know what SNMP traps are you don't need this. SSDP Discovery (Manual) If you don't need to discover UPnP devices on the network—May negatively affect torrent software. UPnP Device Host (Manual) If you don't need to publish UPnP devices from your computer. TCP/IP NetBIOS Helper (Manual, Trigger Start) May cause problems with resolving network hostnames that do not have reverse DNS entries. Touch Keyboard and Handwriting Panel Service (Manual, Trigger Start) If you don't have a touch screen. Retail Demo Service (Manual) Disable. WebClient (Manual) No one really uses WebClient any more. Maybe SharePoint. Windows Error Reporting Service (Manual, Trigger Start) If you will never create or send Windows Error Reports. Windows Insider Service (Manual, Trigger Start) If you will never use this. Windows Mobile Hotspot Service (Manual, Trigger Start) Disable if you won't share internet with others. Windows Remote Management (Manual) Security vulnerability if you don't use it.
Forgot to mention it has only been tested with english ISO's/images and host os. Some things might still function with a different language but I haven't tried that.