This article shows how to configure Windows Time Service on Windows Server 2016 so that it acts as an NTP server for domain client computers.
Configure Windows Time Service
1. Type the following commands on PowerShell:
Now the Windows Server 2016 is an NTP client of pool.ntp.org and its time/clock is synced with the NTP pool servers (The server is at the same time the NTP server for other domain client systems).
If your Windows Server 2016 machine is a VM inside Hyper-V, you have to disable time sync. Go to VM settings-> Management-> Integration Services and uncheck Time Synchronization. Otherwise, Windows Server 2016 time/clock will be synced with the Host time/clock.
2. Go to the client machines and run the following command on PowerShell to force them to sync their time/clock with the domain controller on the Windows Server 2016.
You can check the time synchronization status using the following command.
How to Configure NTP Server in Windows Server 2016
-->
Applies to: Windows Server 2016
The Windows operating system includes many system services that provide important functionality. Different services have different default startup policies: some are started by default (automatic), some when needed (manual), and some are disabled by default and must be explicitly enabled before they can run. These defaults were chosen carefully for each service to balance performance, functionality, and security for typical customers.
However, some enterprise customers may prefer a more security-focused balance for their Windows PCs and servers, one that reduces their attack surface to the absolute minimum, and may therefore wish to fully disable all services that are not needed in their specific environments. For those customers, Microsoft® is providing the accompanying guidance regarding which services can safely be disabled for this purpose.
The guidance is only for Windows Server 2016 with Desktop Experience (unless used as a desktop replacement for end users). Beginning with Windows Server 2019, these guidelines are configured by default. Each service on the system is categorized as follows:
Customers can configure their Windows PCs and servers to disable selected services using the Security Templates in their Group Policies or using PowerShell automation. In some cases, the guidance includes specific Group Policy settings that disable the service’s functionality directly, as an alternative to disabling the service itself.
Microsoft recommends that customers disable the following services and their respective scheduled tasks on Windows Server 2016 with Desktop Experience:
Services:
Scheduled tasks:
(You can also access the information on all services detailed in this article by viewing the attached Microsoft Excel spreadsheet: Guidance on Disabling System Services on Windows Server 2016 with Desktop Experience) Playready pc runtime amd64.
Disabling services not installed by default
Microsoft recommends against applying policies to disable services that are not installed by default. Blade of darkness gog version.
For all system services listed in this document, the two tables that follow offer an explanation of columns and Microsoft recommendations for enabling and disabling system services in Windows Server 2016 with Desktop Experience: Explanation of columns
Explanation of Microsoft recommendations
The following tables offer Microsoft guidance on disabling system services on Windows Server 2016 with Desktop Experience:
ActiveX Installer (AxInstSV)
AllJoyn Router Service
App Readiness
Application Identity
Application Information
Application Layer Gateway Service
Application Management
AppX Deployment Service (AppXSVC)
Auto Time Zone Updater
Background Intelligent Transfer Service
Background Tasks Infrastructure Service
Base Filtering Engine
Bluetooth Support Service
CDPUserSvc
Certificate Propagation
Client License Service (ClipSVC)
CNG Key Isolation
COM+ Event System
COM+ System Application
Computer Browser
Connected Devices Platform Service
Connected User Experiences and Telemetry
Contact Data
CoreMessaging
Credential Manager
Cryptographic Services
Data Sharing Service
DataCollectionPublishingService
DCOM Server Process Launcher
Device Association Service
Device Install Service
Device Management Enrollment Service
Device Setup Manager
DevQuery Background Discovery Broker
DHCP Client
Diagnostic Policy Service
Diagnostic Service Host
Diagnostic System Host
Distributed Link Tracking Client
Distributed Transaction Coordinator
dmwappushsvc
DNS Client
Downloaded Maps Manager
Embedded Mode
Encrypting File System (EFS)
Enterprise App Management Service
Extensible Authentication Protocol
Function Discovery Provider Host
Function Discovery Resource Publication
Geolocation Service
Group Policy Client
Human Interface Device Service
HV Host Service
Hyper-V Data Exchange Service
Hyper-V Guest Service Interface
Hyper-V Guest Shutdown Service
Hyper-V Heartbeat Service
Hyper-V PowerShell Direct Service
Hyper-V Remote Desktop Virtualization Service
Server 2016 Remote Desktop ManagerHyper-V Time Synchronization Service
Hyper-V Volume Shadow Copy Requestor
IKE and AuthIP IPsec Keying Modules
Interactive Services Detection
Internet Connection Sharing (ICS)
IP Helper
IPsec Policy Agent
KDC Proxy Server service (KPS)
KtmRm for Distributed Transaction Coordinator
Link-Layer Topology Discovery Mapper
Local Session Manager
Microsoft (R) Diagnostics Hub Standard Collector
Microsoft Account Sign-in Assistant
Microsoft App-V Client
Microsoft iSCSI Initiator Service
Microsoft Passport
Microsoft Passport Container
Microsoft Software Shadow Copy Provider
Microsoft Storage Spaces SMP
Net.Tcp Port Sharing Service
Netlogon
Network Connection Broker
Network Connections
Network Connectivity Assistant
Network List Service
Network Location Awareness
Network Setup Service
Network Store Interface Service
Offline Files
Optimize drives
Performance Counter DLL Host
Performance Logs & Alerts
Phone Service
Plug and Play
Portable Device Enumerator Service
Power
Print Spooler
Printer Extensions and Notifications
Problem Reports and Solutions Control Panel Support
Program Compatibility Assistant Service
Quality Windows Audio Video Experience
Radio Management Service
Remote Access Auto Connection Manager
Remote Access Connection Manager
Remote Desktop Configuration
Remote Desktop Services
Remote Desktop Services UserMode Port Redirector
Remote Procedure Call (RPC)
Remote Procedure Call (RPC) Locator
Remote Registry
Resultant Set of Policy Provider
Routing and Remote Access
RPC Endpoint Mapper
Secondary Logon
Secure Socket Tunneling Protocol Service
Security Accounts Manager
Sensor Data Service
Sensor Monitoring Service
Not giving feedback in the feedback thread within 3 days of posting a track is not cool. Copy and paste fl studio. 10. 9. Posting FL Studio tutorials by others or yourself is usually not spam.
Sensor Service
|
Service description | Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. |
Service name | LanmanServer |
Installation | Always installed |
StartType | Automatic |
Recommendation | Do not disable |
Comments | Needed for remote management, IPC$, SMB file sharing |
Shell Hardware Detection
Service description | Provides notifications for AutoPlay hardware events. |
Service name | ShellHWDetection |
Installation | Only with Desktop Experience |
StartType | Automatic |
Recommendation | OK to disable |
Comments |
Smart Card
Service description | Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start. |
Service name | SCardSvr |
Installation | Always installed |
StartType | Disabled |
Recommendation | Already disabled |
Comments |
Smart Card Device Enumeration Service
Service description | Creates software device nodes for all smart card readers accessible to a given session. If this service is disabled, WinRT APIs will not be able to enumerate smart card readers. |
Service name | ScDeviceEnum |
Installation | Always installed |
StartType | Manual |
Recommendation | OK to disable |
Comments | Needed almost exclusively for WinRT apps |
Smart Card Removal Policy
Service description | Allows the system to be configured to lock the user desktop upon smart card removal. |
Service name | SCPolicySvc |
Installation | Always installed |
StartType | Manual |
Recommendation | No guidance |
Comments |
SNMP Trap
Service description | Receives trap messages generated by local or remote Simple Network Management Protocol (SNMP) agents and forwards the messages to SNMP management programs running on this computer. If this service is stopped, SNMP-based programs on this computer will not receive SNMP trap messages. If this service is disabled, any services that explicitly depend on it will fail to start. |
Service name | SNMPTRAP |
Installation | Always installed |
StartType | Manual |
Recommendation | No guidance |
Comments |
Software Protection
Service description | Enables the download, installation and enforcement of digital licenses for Windows and Windows applications. If the service is disabled, the operating system and licensed applications may run in a notification mode. It is strongly recommended that you not disable the Software Protection service. |
Service name | sppsvc |
Installation | Always installed |
StartType | Automatic |
Recommendation | No guidance |
Comments |
Special Administration Console Helper
Service description | Allows administrators to remotely access a command prompt using Emergency Management Services. |
Service name | sacsvr |
Installation | Always installed |
StartType | Manual |
Recommendation | No guidance |
Comments |
Spot Verifier
Service description | Verifies potential file system corruptions. |
Service name | svsvc |
Installation | Always installed |
StartType | Manual |
Recommendation | No guidance |
Comments |
SSDP Discovery
Service description | Discovers networked devices and services that use the SSDP discovery protocol, such as UPnP devices. Also announces SSDP devices and services running on the local computer. If this service is stopped, SSDP-based devices will not be discovered. If this service is disabled, any services that explicitly depend on it will fail to start. |
Service name | SSDPSRV |
Installation | Only with Desktop Experience |
StartType | Manual |
Recommendation | OK to disable |
Comments |
State Repository Service
Service description | Provides required infrastructure support for the application model. |
Service name | StateRepository |
Installation | Always installed |
StartType | Manual |
Recommendation | No guidance |
Comments |
Still Image Acquisition Events
Service description | Launches applications associated with still image acquisition events. |
Service name | WiaRpc |
Installation | Only with Desktop Experience |
StartType | Manual |
Recommendation | OK to disable |
Comments |
Storage Service
Service description | Provides enabling services for storage settings and external storage expansion |
Service name | StorSvc |
Installation | Only with Desktop Experience |
StartType | Manual |
Recommendation | No guidance |
Comments |
Storage Tiers Management
Service description | Optimizes the placement of data in storage tiers on all tiered storage spaces in the system. |
Service name | TieringEngineService |
Installation | Always installed |
StartType | Manual |
Recommendation | No guidance |
Comments |
Superfetch
Service description | Maintains and improves system performance over time. |
Service name | SysMain |
Installation | Always installed |
StartType | Manual |
Recommendation | No guidance |
Comments |
Sync Host
Service description | This service synchronizes mail, contacts, calendar and various other user data. Mail and other applications dependent on this functionality will not work properly when this service is not running. |
Service name | OneSyncSvc |
Installation | Only with Desktop Experience |
StartType | Automatic |
Recommendation | OK to disable |
Comments | User service template |
System Event Notification Service
Service description | Monitors system events and notifies subscribers to COM+ Event System of these events. |
Service name | SENS |
Installation | Always installed |
StartType | Automatic |
Recommendation | No guidance |
Comments |
System Events Broker
Service description | Coordinates execution of background work for WinRT application. If this service is stopped or disabled, then background work might not be triggered. |
Service name | SystemEventsBroker |
Installation | Always installed |
StartType | Automatic |
Recommendation | Do not disable |
Comments | In spite of the fact that its description implies it is only for WinRT apps, it's needed for task scheduler, broker infrastructure service, and other internal components. |
Task Scheduler
Service description | Enables a user to configure and schedule automated tasks on this computer. The service also hosts multiple Windows system-critical tasks. If this service is stopped or disabled, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start. |
Service name | Schedule |
Installation | Always installed |
StartType | Automatic |
Recommendation | No guidance |
Comments |
TCP/IP NetBIOS Helper
Service description | Provides support for the NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution for clients on the network, therefore enabling users to share files, print, and log on to the network. If this service is stopped, these functions might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. |
Service name | lmhosts |
Installation | Always installed |
StartType | Manual |
Recommendation | No guidance |
Comments |
Telephony
Service description | Provides Telephony API (TAPI) support for programs that control telephony devices on the local computer and, through the LAN, on servers that are also running the service. |
Service name | TapiSrv |
Installation | Only with Desktop Experience |
StartType | Manual |
Recommendation | Do not disable |
Comments | Disabling breaks RRAS |
Themes
Service description | Provides user experience theme management. |
Service name | Themes |
Installation | Only with Desktop Experience |
StartType | Automatic |
Recommendation | Do not disable |
Comments | Can't set accessibility themes when this service is disabled |
Tile Data model server
Service description | Tile Server for tile updates. |
Service name | tiledatamodelsvc |
Installation | Only with Desktop Experience |
StartType | Automatic |
Recommendation | Do not disable |
Comments | Start menu breaks if this service is disabled |
Time Broker
Service description | Coordinates execution of background work for WinRT application. If this service is stopped or disabled, then background work might not be triggered. |
Service name | TimeBrokerSvc |
Installation | Always installed |
StartType | Manual |
Recommendation | Do not disable |
Comments | In spite of the fact that its description implies it is only for WinRT apps, it's needed for task scheduler, broker infrastructure service, and other internal components. |
Touch Keyboard and Handwriting Panel Service
Service description | Enables Touch Keyboard and Handwriting Panel pen and ink functionality |
Service name | TabletInputService |
Installation | Only with Desktop Experience |
StartType | Manual |
Recommendation | OK to disable |
Comments |
Update Orchestrator Service for Windows Update
Service description | Manages Windows Updates. If stopped, your devices will not be able to download and install latest updates. |
Service name | UsoSvc |
Installation | Always installed |
StartType | Manual |
Recommendation | Do not disable |
Comments | Service description was missing in v1607; Windows Update (incl. WSUS) depends on this service. |
UPnP Device Host
Service description | Allows UPnP devices to be hosted on this computer. If this service is stopped, any hosted UPnP devices will stop functioning and no additional hosted devices can be added. If this service is disabled, any services that explicitly depend on it will fail to start. |
Service name | upnphost |
Installation | Only with Desktop Experience |
StartType | Manual |
Recommendation | OK to disable |
Comments |
User Access Logging Service
Service description | This service logs unique client access requests, in the form of IP addresses and user names, of installed products and roles on the local server. This information can be queried, via Powershell, by administrators needing to quantify client demand of server software for offline Client Access License (CAL) management. If the service is disabled, client requests will not be logged and will not be retrievable via Powershell queries. Stopping the service will not affect query of historical data (see supporting documentation for steps to delete historical data). The local system administrator must consult his, or her, Windows Server license terms to determine the number of CALs that are required for the server software to be appropriately licensed; use of the UAL service and data does not alter this obligation. |
Service name | UALSVC |
Installation | Always installed |
StartType | Automatic |
Recommendation | No guidance |
Comments |
User Data Access
Service description | Provides apps access to structured user data, including contact info, calendars, messages, and other content. If you stop or disable this service, apps that use this data might not work correctly. |
Service name | UserDataSvc |
Installation | Only with Desktop Experience |
StartType | Manual |
Recommendation | OK to disable |
Comments | User service template |
User Data Storage
Service description | Handles storage of structured user data, including contact info, calendars, messages, and other content. If you stop or disable this service, apps that use this data might not work correctly. |
Service name | UnistoreSvc |
Installation | Only with Desktop Experience |
StartType | Manual |
Recommendation | OK to disable |
Comments | User service template |
User Experience Virtualization Service
Service description | Provides support for application and OS settings roaming |
Service name | UevAgentService |
Installation | Only with Desktop Experience |
StartType | Disabled |
Recommendation | Already disabled |
Comments |
User Manager
Service description | User Manager provides the runtime components required for multi-user interaction. If this service is stopped, some applications may not operate correctly. |
Service name | UserManager |
Installation | Always installed |
StartType | Automatic |
Recommendation | No guidance |
Comments |
User Profile Service
Service description | This service is responsible for loading and unloading user profiles. If this service is stopped or disabled, users will no longer be able to successfully sign in or sign out, apps might have problems getting to users' data, and components registered to receive profile event notifications won't receive them. |
Service name | ProfSvc |
Installation | Always installed |
StartType | Automatic |
Recommendation | No guidance |
Comments |
Virtual Disk
Service description | Provides management services for disks, volumes, file systems, and storage arrays. |
Service name | vds |
Installation | Always installed |
StartType | Manual |
Recommendation | No guidance |
Comments |
Volume Shadow Copy
Service description | Manages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start. |
Service name | VSS |
Installation | Always installed |
StartType | Manual |
Recommendation | No guidance |
Comments |
WalletService
Service description | Hosts objects used by clients of the wallet |
Service name | WalletService |
Installation | Only with Desktop Experience |
StartType | Manual |
Recommendation | OK to disable |
Comments |
Windows Audio
Service description | Manages audio for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start |
Service name | Audiosrv |
Installation | Only with Desktop Experience |
StartType | Manual |
Recommendation | OK to disable |
Comments |
Windows Audio Endpoint Builder
Service description | Manages audio devices for the Windows Audio service. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start |
Service name | AudioEndpointBuilder |
Installation | Only with Desktop Experience |
StartType | Manual |
Recommendation | OK to disable |
Comments |
Windows Biometric Service
Service description | The Windows biometric service gives client applications the ability to capture, compare, manipulate, and store biometric data without gaining direct access to any biometric hardware or samples. The service is hosted in a privileged SVCHOST process. |
Service name | WbioSrvc |
Installation | Only with Desktop Experience |
StartType | Manual |
Recommendation | No guidance |
Comments |
Windows Camera Frame Server
Service description | Enables multiple clients to access video frames from camera devices. |
Service name | FrameServer |
Installation | Only with Desktop Experience |
StartType | Manual |
Recommendation | OK to disable |
Comments |
Windows Connection Manager
Service description | Makes automatic connect/disconnect decisions based on the network connectivity options currently available to the PC and enables management of network connectivity based on Group Policy settings. |
Service name | Wcmsvc |
Installation | Only with Desktop Experience |
StartType | Automatic |
Recommendation | No guidance |
Comments |
Windows Defender Network Inspection Service
Service description | Helps guard against intrusion attempts targeting known and newly discovered vulnerabilities in network protocols |
Service name | WdNisSvc |
Installation | Always installed |
StartType | Manual |
Recommendation | No guidance |
Comments |
Windows Defender Service
Service description | Helps protect users from malware and other potentially unwanted software |
Service name | WinDefend |
Installation | Always installed |
StartType | Automatic |
Recommendation | No guidance |
Comments |
Windows Driver Foundation - User-mode Driver Framework
Service description | Creates and manages user-mode driver processes. This service cannot be stopped. |
Service name | wudfsvc |
Installation | Always installed |
StartType | Manual |
Recommendation | No guidance |
Comments |
Windows Encryption Provider Host Service
Service description | Windows Encryption Provider Host Service brokers encryption related functionalities from third-party Encryption Providers to processes that need to evaluate and apply EAS policies. Stopping this will compromise EAS compliancy checks that have been established by the connected Mail Accounts |
Service name | WEPHOSTSVC |
Installation | Only with Desktop Experience |
StartType | Manual |
Recommendation | No guidance |
Comments |
Remote Registry Service Gpo
Windows Error Reporting Service
Service description | Allows errors to be reported when programs stop working or responding and allows existing solutions to be delivered. Also allows logs to be generated for diagnostic and repair services. If this service is stopped, error reporting might not work correctly and results of diagnostic services and repairs might not be displayed. |
Service name | WerSvc |
Installation | Always installed |
StartType | Manual |
Recommendation | Do not disable |
Comments | Collects and sends crash/hang data used by both MS and third party ISVs/IHVs. The data is used to diagnose crash-inducing bugs, which may include security bugs. Also needed for Corporate Error Reporting |
Windows Event Collector
Service description | This service manages persistent subscriptions to events from remote sources that support WS-Management protocol. This includes Windows Vista event logs, hardware and IPMI-enabled event sources. The service stores forwarded events in a local Event Log. If this service is stopped or disabled event subscriptions cannot be created and forwarded events cannot be accepted. |
Service name | Wecsvc |
Installation | Always installed |
StartType | Manual |
Recommendation | Do not disable |
Comments | Collects ETW events (including security events) for manageability, diagnostics. Lots of features and third-party tools rely on it, including security audit tools |
Windows Event Log
Service description | This service manages events and event logs. It supports logging events, querying events, subscribing to events, archiving event logs, and managing event metadata. It can display events in both XML and plain text format. Stopping this service may compromise security and reliability of the system. |
Service name | EventLog |
Installation | Always installed |
StartType | Automatic |
Recommendation | No guidance |
Comments |
Windows Firewall
Service description | Windows Firewall helps protect your computer by preventing unauthorized users from gaining access to your computer through the Internet or a network. |
Service name | MpsSvc |
Installation | Always installed |
StartType | Automatic |
Recommendation | No guidance |
Comments |
Windows Font Cache Service
Service description | Optimizes performance of applications by caching commonly used font data. Applications will start this service if it is not already running. It can be disabled, though doing so will degrade application performance. |
Service name | FontCache |
Installation | Always installed |
StartType | Automatic |
Recommendation | No guidance |
Comments |
Windows Image Acquisition (WIA)
Service description | Provides image acquisition services for scanners and cameras |
Service name | stisvc |
Installation | Only with Desktop Experience |
StartType | Manual |
Recommendation | OK to disable |
Comments |
Windows Insider Service
Service description | wisvc |
Service name | wisvc |
Installation | Always installed |
StartType | Manual |
Recommendation | OK to disable |
Comments | Server doesn't support flighting, so it's a no-op on Server. Feature can be disabled via GP as well. |
Windows Installer
Service description | Adds, modifies, and removes applications provided as a Windows Installer (*.msi, *.msp) package. If this service is disabled, any services that explicitly depend on it will fail to start. |
Service name | msiserver |
Installation | Always installed |
StartType | Manual |
Recommendation | No guidance |
Comments |
Windows License Manager Service
Service description | Provides infrastructure support for the Microsoft Store. This service is started on demand and if disabled then content acquired through the Microsoft Store will not function properly. |
Service name | LicenseManager |
Installation | Only with Desktop Experience |
StartType | Manual |
Recommendation | No guidance |
Comments |
Windows Management Instrumentation
Service description | Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. |
Service name | Winmgmt |
Installation | Always installed |
StartType | Automatic |
Recommendation | No guidance |
Comments |
Windows Mobile Hotspot Service
Service description | Provides the ability to share a cellular data connection with another device. |
Service name | icssvc |
Installation | Only with Desktop Experience |
StartType | Manual |
Recommendation | OK to disable |
Comments |
Windows Modules Installer
Service description | Enables installation, modification, and removal of Windows updates and optional components. If this service is disabled, install or uninstall of Windows updates might fail for this computer. |
Service name | TrustedInstaller |
Installation | Always installed |
StartType | Manual |
Recommendation | No guidance |
Comments |
Windows Push Notifications System Service
Service description | This service runs in session 0 and hosts the notification platform and connection provider which handles the connection between the device and WNS server. |
Service name | WpnService |
Installation | Only with Desktop Experience |
StartType | Automatic |
Recommendation | OK to disable |
Comments | Needed for live tiles and other features |
Windows Push Notifications User Service
Service description | This service hosts Windows notification platform which provides support for local and push notifications. Supported notifications are tile, toast and raw. |
Service name | WpnUserService |
Installation | Only with Desktop Experience |
StartType | Manual |
Recommendation | OK to disable |
Comments | User service template |
Windows Remote Management (WS-Management)
Service description | Windows Remote Management (WinRM) service implements the WS-Management protocol for remote management. WS-Management is a standard web services protocol used for remote software and hardware management. The WinRM service listens on the network for WS-Management requests and processes them. The WinRM Service needs to be configured with a listener using winrm.cmd command line tool or through Group Policy in order for it to listen over the network. The WinRM service provides access to WMI data and enables event collection. Event collection and subscription to events require that the service is running. WinRM messages use HTTP and HTTPS as transports. The WinRM service does not depend on IIS but is preconfigured to share a port with IIS on the same machine. The WinRM service reserves the /wsman URL prefix. To prevent conflicts with IIS, administrators should ensure that any websites hosted on IIS do not use the /wsman URL prefix. |
Service name | WinRM |
Installation | Always installed |
StartType | Automatic |
Recommendation | Do not disable |
Comments | Needed for remote management |
Windows Search
Service description | Provides content indexing, property caching, and search results for files, e-mail, and other content. |
Service name | WSearch |
Installation | Only with Desktop Experience |
StartType | Disabled |
Recommendation | Already disabled |
Comments |
Windows Time
Service description | Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. |
Service name | W32Time |
Installation | Always installed |
StartType | Automatic |
Recommendation | No guidance |
Comments |
Windows Update
Service description | Enables the detection, download, and installation of updates for Windows and other programs. If this service is disabled, users of this computer will not be able to use Windows Update or its automatic updating feature, and programs will not be able to use the Windows Update Agent (WUA) API. |
Service name | wuauserv |
Installation | Always installed |
StartType | Manual |
Recommendation | No guidance |
Comments |
WinHTTP Web Proxy Auto-Discovery Service
Service description | WinHTTP implements the client HTTP stack and provides developers with a Win32 API and COM Automation component for sending HTTP requests and receiving responses. In addition, WinHTTP provides support for auto-discovering a proxy configuration via its implementation of the Web Proxy Auto-Discovery (WPAD) protocol. |
Service name | WinHttpAutoProxySvc |
Installation | Always installed |
StartType | Manual |
Recommendation | Do not disable |
Comments | Anything that uses the network stack can have a functional dependency on this service. Many organizations rely on this to configure their internal networks' HTTP proxy routing. Without it, internally-originating HTTP connections to the Internet will all fail. |
Wired AutoConfig
Service description | The Wired AutoConfig (DOT3SVC) service is responsible for performing IEEE 802.1X authentication on Ethernet interfaces. If your current wired network deployment enforces 802.1X authentication, the DOT3SVC service should be configured to run for establishing Layer 2 connectivity and/or providing access to network resources. Wired networks that do not enforce 802.1X authentication are unaffected by the DOT3SVC service. |
Service name | dot3svc |
Installation | Only with Desktop Experience |
StartType | Manual |
Recommendation | No guidance |
Comments |
WMI Performance Adapter
Service description | Provides performance library information from Windows Management Instrumentation (WMI) providers to clients on the network. This service only runs when Performance Data Helper is activated. |
Service name | wmiApSrv |
Installation | Always installed |
StartType | Manual |
Recommendation | No guidance |
Comments |
Workstation
Service description | Creates and maintains client network connections to remote servers using the SMB protocol. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. |
Service name | LanmanWorkstation |
Installation | Always installed |
StartType | Automatic |
Recommendation | No guidance |
Comments |
Xbox Live Auth Manager
Service description | Provides authentication and authorization services for interacting with Xbox Live. If this service is stopped, some applications may not operate correctly. |
Service name | XblAuthManager |
Installation | Only with Desktop Experience |
StartType | Manual |
Recommendation | Should be disabled |
Comments |
Xbox Live Game Save
Service description | This service syncs save data for Xbox Live save enabled games. If this service is stopped, game save data will not upload to or download from Xbox Live. |
Service name | XblGameSave |
Installation | Only with Desktop Experience |
StartType | Manual |
Recommendation | Should be disabled |
Comments | This service syncs save data for Xbox Live save enabled games. If this service is stopped, game save data will not upload to or download from Xbox Live. |
Comments are closed.
Author
Write something about yourself. No need to be fancy, just an overview.