I used 1 bat script to delete windows services so only those in image remained: But when I try script in VirtualBox and delete services and after that use windows update installation of updates fails (even if it doesnt fail same happens) and after reboot windows shows failure reverting changes. What missing service could be causing this? Spoiler subinacl /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services /setowner=everyone >nul subinacl /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services /grant=everyone=F >nul If exist "%Temp%\~import.reg" ( Attrib -R -S -H "%Temp%\~import.reg" del /F /Q "%Temp%\~import.reg" If exist "%Temp%\~import.reg" ( Echo Could not delete file "%Temp%\~import.reg" Pause ) ) > "%Temp%\~import.reg" ECHO Windows Registry Editor Version 5.00 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AxInstSV] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SensrSvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AeLookupSvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000003 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AppIDSvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Appinfo] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ALG] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AppMgmt] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000003 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BDESVC] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wbengine] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\bthserv] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PeerDistSvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CertPropSvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KeyIso] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000003 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventSystem] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000003 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\COMSysApp] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VaultSvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CryptSvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000003 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UxSms] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000002 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000002 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\defragsvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSDTC] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000002 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EFS] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EapHost] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000003 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fdPHost] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FDResPub] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gpsvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000002 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hkmsvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HomeGroupListener] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HomeGroupProvider] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hidserv] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IKEEXT] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UI0Detect] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iphlpsvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KtmRm] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lltdsvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\clr_optimization_v2.0.50727_32] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSiSCSI] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\swprv] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000003 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MMCSS] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000002 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\napagent] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netman] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000003 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\netprofm] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000003 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NlaSvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000003 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nsi] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000003 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CscService] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WPCSvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PNRPsvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\p2psvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\p2pimsvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pla] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PlugPlay] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000002 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IPBusEnum] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PNRPAutoReg] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WPDBusEnum] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Power] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000003 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000002 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wercplsupport] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PcaSvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ProtectedStorage] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\QWAVE] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasAuto] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000003 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000003 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermService] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UmRdpService] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcLocator] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcEptMapper] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000002 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\seclogon] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SstpSvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000003 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ShellHWDetection] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SCardSvr] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SCPolicySvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SNMPTRAP] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sppsvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000001 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sppuinotify] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SSDPSRV] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SysMain] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SENS] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TabletInputService] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Schedule] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lmhosts] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TapiSrv] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000003 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Themes] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000002 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\THREADORDER] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TBS] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\upnphost] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ProfSvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000002 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vds] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000003 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WebClient] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AudioSrv] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000002 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AudioEndpointBuilder] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000002 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SDRSVC] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WbioSrvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WcsPlugInService] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wcncsvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WerSvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wecsvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000002 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MpsSvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FontCache] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\StiSvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msiserver] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000003 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Winmgmt] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinRM] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000003 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinHttpAutoProxySvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dot3svc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wlansvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000003 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wmiApSrv] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 >> "%Temp%\~import.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WwanSvc] >> "%Temp%\~import.reg" ECHO "Start"=dword:00000004 START /WAIT REGEDIT /S "%Temp%\~import.reg" DEL "%Temp%\~import.reg" Sc delete AxInstSV Sc delete SensrSvc Sc delete AppHostSvc Sc delete AppIDSvc Sc delete Appinfo Sc delete ALG Sc delete AppMgmt Sc delete aspnet_state Sc delete BFE Sc delete BDESVC Sc delete wbengine Sc delete bthserv Sc delete PeerDistSvc Sc delete CertPropSvc Sc delete NfsClnt Sc delete COMSysApp Sc delete Browser Sc delete VaultSvc Sc delete DPS Sc delete WdiServiceHost Sc delete WdiSystemHost Sc delete defragsvc Sc delete TrkWks Sc delete MSDTC Sc delete Dnscache Sc delete EFS Sc delete Fax Sc delete fdPHost Sc delete FDResPub Sc delete hkmsvc Sc delete HomeGroupListener Sc delete HomeGroupProvider Sc delete hidserv Sc delete IISADMIN Sc delete IKEEXT Sc delete CISVC Sc delete UI0Detect Sc delete SharedAccess Sc delete iphlpsvc Sc delete PolicyAgent Sc delete KtmRm Sc delete lltdsvc Sc delete LPDSVC Sc delete Mcx2Svc Sc delete MSMQ Sc delete MSMQTriggers Sc delete clr_optimization_v2.0.50727_32 Sc delete ftpsvc Sc delete MSiSCSI Sc delete NetMsmqActivator Sc delete NetPipeActivator Sc delete NetTcpActivator Sc delete NetTcpPortSharing Sc delete Netlogon Sc delete napagent Sc delete Netman sc delete netprofm sc delete NlaSvc Sc delete CscService Sc delete WPCSvc Sc delete PNRPsvc Sc delete p2psvc Sc delete p2pimsvc Sc delete pla Sc delete IPBusEnum Sc delete PNRPAutoReg Sc delete WPDBusEnum Sc delete wercplsupport Sc delete PcaSvc Sc delete ProtectedStorage Sc delete QWAVE Sc delete SessionEnv Sc delete TermService Sc delete UmRdpService Sc delete RpcLocator Sc delete RemoteRegistry Sc delete iprip Sc delete RemoteAccess Sc delete SeaPort Sc delete seclogon Sc delete SamSs Sc delete wscsvc Sc delete LanmanServer Sc delete ShellHWDetection Sc delete simptcp Sc delete SCardSvr Sc delete SCPolicySvc Sc delete SNMP Sc delete SNMPTRAP Sc delete sppuinotify Sc delete SSDPSRV Sc delete StorSvc Sc delete SysMain Sc delete SENS Sc delete TabletInputService Sc delete Schedule Sc delete lmhosts Sc delete TlntSvr Sc delete THREADORDER Sc delete TBS Sc delete upnphost Sc delete vds Sc delete WMSVC Sc delete WebClient Sc delete SDRSVC Sc delete WbioSrvc Sc delete idsvc Sc delete WcsPlugInService Sc delete wcncsvc Sc delete WinDefend Sc delete wudfsvc Sc delete WerSvc Sc delete Wecsvc Sc delete MpsSvc Sc delete FontCache Sc delete StiSvc Sc delete fsssvc Sc delete Winmgmt Sc delete ehRecvr Sc delete ehSched Sc delete WMPNetworkSvc Sc delete FontCache3.0.0.0 Sc delete WAS Sc delete WinRM Sc delete WSearch Sc delete W32Time Sc delete WinHttpAutoProxySvc Sc delete dot3svc Sc delete wmiApSrv Sc delete LanmanWorkstation Sc delete W3SVC Sc delete WwanSvc reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\AxInstSV /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SensrSvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\AppHostSvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\AppIDSvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Appinfo /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\ALG /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\AppMgmt /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\aspnet_state /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BFE /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BDESVC /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wbengine /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\bthserv /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\PeerDistSvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\CertPropSvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\NfsClnt /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\COMSysApp /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Browser /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VaultSvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\DPS /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WdiServiceHost /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WdiSystemHost /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\defragsvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TrkWks /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MSDTC /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Dnscache /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\EFS /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Fax /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\fdPHost /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\FDResPub /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\hkmsvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\HomeGroupListener /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\HomeGroupProvider /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\hidserv /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\IISADMIN /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\IKEEXT /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\CISVC /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\UI0Detect /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\iphlpsvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\PolicyAgent /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\KtmRm /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\lltdsvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LPDSVC /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Mcx2Svc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MSMQ /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MSMQTriggers /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\clr_optimization_v2.0.50727_32 /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\ftpsvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MSiSCSI /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\NetMsmqActivator /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\NetPipeActivator /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\NetTcpActivator /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\NetTcpPortSharing /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Netlogon /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\napagent /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Netman /va /f reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\netprofm /va /f reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\NlaSvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\CscService /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WPCSvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\PNRPsvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\p2psvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\p2pimsvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\pla /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\IPBusEnum /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\PNRPAutoReg /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WPDBusEnum /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wercplsupport /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\PcaSvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\ProtectedStorage /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\QWAVE /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SessionEnv /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TermService /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\UmRdpService /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\RpcLocator /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\RemoteRegistry /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\iprip /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\RemoteAccess /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SeaPort /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\seclogon /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SamSs /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wscsvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanServer /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\ShellHWDetection /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\simptcp /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SCardSvr /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SCPolicySvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SNMP /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SNMPTRAP /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\sppuinotify /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SSDPSRV /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\StorSvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SysMain /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SENS /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TabletInputService /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Schedule /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\lmhosts /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TlntSvr /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\THREADORDER /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TBS /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\upnphost /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\vds /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WMSVC /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WebClient /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SDRSVC /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WbioSrvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\idsvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WcsPlugInService /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wcncsvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinDefend /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wudfsvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WerSvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Wecsvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MpsSvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\FontCache /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\StiSvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\fsssvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Winmgmt /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\ehRecvr /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\ehSched /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WMPNetworkSvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\FontCache3.0.0.0 /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WAS /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinRM /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WSearch /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\W32Time /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinHttpAutoProxySvc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\dot3svc /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wmiApSrv /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\W3SVC /va /f reg DELETE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WwanSvc /va /f shutdown -r -f -t 1
It was just problem with Winmgmt missing... Any idea what of remaining services can be safely removed?
Code: SensrSvc=True ALG=True wbengine=True bthserv=True CertPropSvc=True VaultSvc=True DPS=True WdiServiceHost=True WdiSystemHost=True defragsvc=True TrkWks=True Fax=True fdPHost=True FDResPub=True hkmsvc=True HomeGroupListener=True HomeGroupProvider=True IKEEXT=True UI0Detect=True SharedAccess=True PolicyAgent=True lltdsvc=True Mcx2Svc=True MSiSCSI=True NetTcpPortSharing=True Netlogon=True napagent=True WPCSvc=True PNRPsvc=True p2psvc=True p2pimsvc=True IPBusEnum=True PNRPAutoReg=True WPDBusEnum=True wercplsupport=True PcaSvc=True RasAuto=True RasMan=True SessionEnv=True TermService=True RpcLocator=True RemoteRegistry=True RemoteAccess=True seclogon=True SstpSvc=True LanmanServer=True SCardSvr=True SCPolicySvc=True SNMPTRAP=True SSDPSRV=True TabletInputService=True lmhosts=True TBS=True upnphost=True WebClient=True SDRSVC=True WbioSrvc=True idsvc=True WinDefend=True wudfsvc=True WerSvc=True FontCache=True ehRecvr=True ehSched=True WMPNetworkSvc=True TapiSrv=True FontCache3.0.0.0=True WinRM=True WinHttpAutoProxySvc=True Advanced UAC=True Location and Mobile PC Sensor=True On-Screen Keyboard=True Optional Features=True Windows System Restore=True TabletPCOC=True User Account Control=True These are all the services I removed from my last thin client build. The only thing that didn't work that I wanted to work was Windows Firewall--not sure which service that was removed is responsible for it either. Other than that, all that was left intact worked exactly as it should. Even Windows Update, with Internet Explorer removed too.