Some Restrictions Set for Windows

Some important and useful restrictions, which can be put in Windows 2000, XP, Server 2003, Vista, Server 2008 and 7.

A. Open Registry Editor

To open Registry Editor by providing regedit command in RUN or Start menu Search box and press Enter.

B. Create Registry Key

Go to following keys:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\System

1. Restricting Desktop Properties

Create or modify required DWORD value: NoDispCPL and set its value to 1

2. Restricting Task Manager

Create new DWORD DisableTaskMgr and set its value to 1

3. Restricting Registry Editor

Create new DWORD DisableRegistryTools and set its value to 1

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

4. Restricting Taskbar Properties

Create new DWORD NoSetTaskbar and set its value to 1

5. Restricting System Properties

Create new DWORD NoPropertiesMyComputer and set its value to 1

6. Restricting Folder Options

Create new DWORD NoFolderOptions and set its value to 1

7. Restricting Control Panel

Create new DWORD NoControlPanel and set its value to 1

8. Restricting Locking/Unlocking of Taskbar

Create new DWORD LockTaskbar and set its value to 1

9. Restricting right-click on Taskbar

Create new DWORD NoTrayContextMenu and set its value to 1

10. Restricting Toolbars in Taskbar

Create new DWORD NoToolbarsOnTaskbar and set its value to 1

11. Restricting drag-and-drop and right-click in Start Menu

Create new DWORD NoChangeStartMenu and set its value to 1

12. Restricting RUN in Start Menu

Create new DWORD NoRun and set its value to 1

13. Restricting Shut Down, Restart, Sleep and Hibernate commands

Create new DWORD NoClose and set its value to 1

14. Restricting Log off in Start Menu

Create new DWORD StartMenuLogOff and set its value to 1

15. Restricting Active Desktop Feature

Create new DWORD NoActiveDesktop and set its value to 1

16. Restricting adding/removing items to/from Toolbars

Create new DWORD NoToolbarCustomize and set its value to 1

17. Restricting adding/removing Toolbars

Create new DWORD NoBandCustomize and set its value to 1

18. Restricting notification at low disk space

Create new DWORD NoLowDiskSpaceChecks and set its value to 1

19. Restricting Command Prompt

Go to following key:

HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System

Create new DWORD DisableCMD and set its value to 2

20. Restricting Writing to USB Drives

Go to following key:

HKEY_LOCAL_MACHINE\SYSTEM\Current Control Set\Control\StorageDevicePolicies

Create new DWORD WriteProtect and set its value to 1

21. Restricting "New" option in context menu

Go to following key:

HKEY_CLASSES_ROOT\Directory\Background\shellex\ContextMenu Handlers\New

And delete the value of Default, e.g., empty it.

22. Restricting "Send To" option in context menu

Go to following key:

HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\ContextMenu Handlers\Send To

And delete the value of Default, e.g., empty it.

23. Restricting any desired application

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer\DisallowRun

Create new String value with any name, like 1 and set its value to the desired program's EXE file.

e.g., If you want to restrict msconfig, then create a String value 1 and set its value to msconfig.exe. If you want to restrict more programs, simply create more String values with names 2, 3 and so on and set their values to the program's exe file.

24. Restricting Drives in My Computer

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

In right-side pane, create new DWORD NoViewOnDrive and change its value as following:

3 : To Restrict A and B drives only.
4 : To Restrict C drive only.
7 : To Restrict A, B, and C drives only.
8 : To Restrict D drive only.
F : To Restrict A, B, C, and D drives only.
03FFFFFF : To Restrict all drives.

If you want more specific restrictions, like you want to restrict a combination of drives, you can use decimal no. instead of hexadecimal no. Following is a list for all drives decimal no.:

A: 1
B: 2
C: 4
D: 8
E: 16
F: 32
G: 64
H: 128
I: 256
J: 512
K: 1024
L: 2048
M: 4096
N: 8192
O: 16384
P: 32768
Q: 65536
R: 131072
S: 262144
T: 524288
U: 1048576
V: 2097152
W: 4194304
X: 8388608
Y: 16777216
Z: 33554432
ALL: 67108863

*So if you want to disable a combination of drives, just sum their numbers and give the same value to NoViewOnDrive. e.g., for restricting C, D, E and F drives, give the value: 4+8+16+32 = 60

*You can also hide the drives using NoDrives DWORD value. The location and its value remain same as the above trick.

*If you want to remove the restriction, simply delete the DWORD or set its value to 0


Windows 7 Desktop & My Computer Context Menu- Tweaks

3:36 PM by Yash Kalra 0 comments

Tweaks- for change in Windows Desktop and My Computer Context Menu

* For Change in Desktop Context Menu

HKEY_CLASSES_ROOT\DesktopBackground\Shell

* For Change in My Computer Context Menu

HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell

Add your name at top of the menu and can open any program, Explorer, Documents folder or User Accounts by clicking on it in Windows 7 Desktop Context Menu

Steps:

1. Type regedit in RUN or startmenu search box and press Enter. It'll open Registry Editor.

2. Now go to:

HKEY_CLASSES_ROOT\DesktopBackground\Shell

3. Now we'll need to create a new key under "Shell" key. Right-click on "Shell" key and select "New -> Key". Give the new key any desired name e.g. "Yash" (without quotes).

4. Now in right-side pane, change value of "Default" to your desired name which you want to show in Desktop context menu. We have chosen !!~~YASH~~!! in our example.

5. Now right-click on the new key which we created in step 3, e.g. Yash and select "New -> Key". Give the new key name of command.

6. In right-side pane, change value of "Default" to explorer.exe if you want to open Explorer by clicking on it.

7. To set an icon for the shortcut, select the key created in Step 3 and in right-side pane, create a new String value "Icon". Set its value to your desired icon. We have set it to imageres.dll,207.

*To set its position in the context menu, create a new String value "Position" and set its value to:

Top (To show it at top)
Bottom (To show it at bottom)

Add "System Properties", "Task Manager" and Many Other Useful Shortcuts in Windows 7 Desktop Context Menu

Steps:

1. & 2. are same

3. Now we'll need to create a new key under "Shell" key. Right-click on "Shell" key and select "New -> Key". Give the new key any desired name e.g. "Folder Options" (without quotes).

4. Now we'll need to create another new key. Right-click on the new key which we created in the last step e.g. Folder Options and select "New -> Key". Give the new key name of "command".

5. Now select "command" key and in right-side pane, you'll see "Default" String value. Double-click on it and set its value to as following:

control folders

6. That's it. Now you'll have a new option "Folder Options" in Desktop context menu.

7. You can use the same steps 3-5 to add other options. Simply give the desired option label in Step 3 and set the required command in Step 5. Following are the required codes which you'll need to provide as "command" in step 5:

Administrative Tools: control admintools

Change Cursor: control main.cpl,,1

Change Date / Time: control timedate.cpl

Change Regional Settings: control intl.cpl

Folder Options: control folders

Fonts: control fonts

Internet Options: control inetcpl.cpl

Network Connections:control ncpa.cpl

Power Options: control powercfg.cpl

Printers: control printers

Programs and Features: control appwiz.cpl

Registry Editor: regedit

Security Center: control wscui.cpl

Security Configuration: msconfig

System Properties: control sysdm.cpl

Task Manager: taskmgr

Task Scheduler: Control schedtasks

Turn Firewall On / Off: control firewall.cpl

User Accounts: Control userpasswords

User Accounts Classic: Control userpasswords2

8. That's it.

9. You can add any other desired control panel applet using the same way.

Add any application shortcut in desktop context menu of Windows

Steps:

1. to 4. are same

5. Now select "command" key and in right-side pane, you'll see "Default" String value. Double-click on it and set its value to as following:

C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Winamp\winamp.exe
etc...

6. Thats it. Now you can check your favorite application shortcut in desktop context menu.

7. You can create as many shortcut as you want. Simply create a separate key for all the applications.

Add Cascading Menus in Desktop Context Menu:

PART 1: Creating cascading menus and adding programs shortcuts

1. & 2. are same

3. Now we'll need to create a new key under "Shell" key. Right-click on "Shell" key and select "New -> Key". Give the new key any desired name e.g. "Menu1" (without quotes).

4. Now select this newly created key "Menu1" and in right-side pane, we'll need to create following 4 String values:
MUIVerb
SubCommands
Icon
Position

* Icon and Position are optional but MUIVerb and SubCommands are compulsory.

* MUIVerb contains the name of cascading menu which will be displayed in the context menu. You can set its value to any desired name like Apps, Browsers, etc. Feel free to set any name.

* SubCommands contains list of commands separated by semi-colon (;) which you want to show under cascading menu. You can't add any program shortcut directly. First you'll need to give any desired command name in this list and after that you'll need to register it using PART 2 so that it can start working.

5. If you are confused about "SubCommands" String value, this point will clear all your doubts.

Suppose you have created a cascading menu "Apps" using Step 3 and now you want to add Notepad and Calculator shortcuts under it. In this case, you'll need to set following as "SubCommands" value:

notepad;calc

Above value can be changed according to your requirement. You can use np;ca instead of notepad;calc. But you'll have to use the same name while registering those commands using PART 2.

* If you want to put a separator between menus, just use Pipe symbol (|) between commands. For example, notepad;|;calc.

6. Icon String value can be used to show an icon for your cascading menu. We have set its value to explorer.exe that's why its showing Windows Explorer icon for the "Apps" cascading menu.

7. Position String value can be used to define the position of cascading menu in the context menu. By default the cascading menu is shown in the middle but you can set its position at Top or Bottom with the help of "Position" String value.

8. You can create more than one cascading menus using Step 3 and 4.

PART 2: Adding functionality to the shortcuts by registering them

Once you have added the program shortcuts to cascading menus, you'll need to register the commands mentioned in "SubCommands" String value using following method:

1. Go to following key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\Shell

2. Under this key, we'll need to create new keys for each command mentioned in "SubCommands" String value.

We used 2 commands : notepad and calc, so we'll need to create 2 keys under "CommandStore\Shell" key with the same names notepad and calc.

3. Once you create the key, select it and in right-side pane set value of "(Default)" to the name which you want to show in cascading menu. For example set its value to Notepad or Calculator or any other desired string.

4. If you also want to show an icon for it, create a new String value with the name icon and set its value to program's EXE file path or any other desired icon. For example, to show Notepad icon for Notepad shortcut, you can set value of Icon to notepad.exe

5. Now final step! Create a new key under the recently created keys, e.g. notepad or calc and give it name command.

Click on it and in right-side pane, set value of "(Default)" to the path of your desired program's EXE file. For example, if you want to open Notepad when you click on "Notepad" entry in cascading menu, set value of "Command" to notepad.exe

* Notepad is a Windows application, so you can omit the full path but if you want to execute any 3rd party program, you should give full path of its EXE file.

That's it. Now you'll see your desired cascading menus containing your favorite programs shortcuts in Desktop context menus.

* Define the shortcut icon and position.

To set an icon for the shortcut, select the key created in Step 3 and in right-side pane, create a new String value "Icon". Set its value to your desired icon or simply put the path of program's EXE file and it'll automatically show its default icon.

To set its position in the context menu, create a new String value "Position" and set its value to:

Top (To show it at top)
Bottom (To show it at bottom)

*To remove any option, simply delete its key.


Hide User Name for a Locked Computer in Windows

12:42 PM by Yash Kalra 0 comments

Hide user name for the user that has locked the computer:

1. Start Registry Editor.

2. Locate the following key in the registry:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System

3. If it doesn't exist, on the Edit menu, point to New, click DWORD Value, and then add the following registry values:

Value name: DontDisplayLockedUserId

Value data: 1, 2 or 3 (see below)

Base: Decimal

The following values can be set:
1 = Show the locked user display name and the user ID
2 = Show the locked user display name only
3 = Do not display the locked user information

4. Exit Registry Editor.

Note: To prevent the last logged on user to be displayed in the Windows logon screen, also set the dontdisplaylastusername value and set it to 1.


Windows 7 Shortcut Keys - Final

12:24 PM by Yash Kalra 0 comments

Windows 7 Calculator keyboard shortcut keys

Alt + 1 Switch to Standard mode
Alt + 2 Switch to Scientific mode
Alt + 3 Switch to Programmer mode
Alt + 4 Switch to Statistics mode
Ctrl + E Open date calculations
Ctrl + H Turn calculation history on or off
Ctrl + U Open unit conversion
Alt + C Calculate or solve date calculations and worksheets
F1 Open Calculator Help
Ctrl + Q Press the M- button
Ctrl + P Press the M+ button
Ctrl + M Press the MS button
Ctrl + R Press the MR button
Ctrl + L Press the MC button
% Press the % button
F9 Press the +/- button
/ Press the / button
* Press the * button
+ Press the + button
- Press the - button
R Press the 1/× button
@ Press the square root button
0-9 Press the number buttons (0-9)
= Press the = button
. Press the . (decimal point) button
Backspace Press the backspace button
Esc Press the C button
Del Press the CE button
Ctrl + Shift + D Clear the calculation history
F2 Edit the calculation history
Up Arrow key Navigate up in the calculation history
Down Arrow key Navigate down in the calculation history
Esc Cancel editing the calculation history
Enter Recalculate the calculation history after editing
F3 Select Degrees in Scientific mode
F4 Select Radians in Scientific mode
F5 Select Grads in Scientific mode
I Press the Inv button in Scientific mode
D Press the Mod button in Scientific mode
Ctrl + S Press the sinh button in Scientific mode
Ctrl + O Press the cosh button in Scientific mode
Ctrl + T Press the tanh button in Scientific mode
( Press the ( button in Scientific mode
) Press the ) button in Scientific mode
N Press the ln button in Scientific mode
; Press the Int button in Scientific mode
S Press the sin button in Scientific mode
O Press the cos button in Scientific mode
T Press the tan button in Scientific mode
M Press the dms button in Scientific mode
P Press the pi button in Scientific mode
V Press the F-E button in Scientific mode
X Press the Exp button in Scientific mode
Q Press the x^2 button in Scientific mode
Y Press the x^y button in Scientific mode
# Press the x^3 button in Scientific mode
L Press the log button in Scientific mode
! Press the n! button in Scientific mode
Ctrl + Y Press the y?x button in Scientific mode
Ctrl + B Press the 3?x button in Scientific mode
Ctrl + G Press the 10x button in Scientific mode
F5 Select Hex in Programmer mode
F6 Select Dec in Programmer mode
F7 Select Oct in Programmer mode
F8 Select Bin in Programmer mode
F12 Select Qword in Programmer mode
F2 Select Dword in Programmer mode
F3 Select Word in Programmer mode
F4 Select Byte in Programmer mode
K Press the RoR button in Programmer mode
J Press the RoL button in Programmer mode
< Press the Lsh button in Programmer mode
> Press the Rsh button in Programmer mode
% Press the Mod button in Programmer mode
( Press the ( button in Programmer mode
) Press the ) button in Programmer mode
| Press the Or button in Programmer mode
^ Press the Xor button in Programmer mode
~ Press the Not button in Programmer mode
& Press the And button in Programmer mode
A-F Press the A-F buttons in Programmer mode
Spacebar Toggles the bit value in Programmer mode
A Press the Average button in Statistics mode
Ctrl + A Press the Average Sq button in Statistics mode
S Press the Sum button in Statistics mode
Ctrl + S Press the Sum Sq button in Statistics mode
T Press the S.D. button in Statistics mode
Ctrl + T Press the Inv S.D. button in Statistics mode
D Press the CAD button in Statistics mode

Windows 7 Dialog box keyboard shortcut keys

Ctrl + Tab Move forward through tabs
Ctrl + Shift + Tab Move back through tabs
Tab Move forward through options
Shift + Tab Move back through options
Alt + underlined letter Perform the command (or select the option) that goes with that letter
Enter Replaces clicking the mouse for many selected commands
Spacebar Select or clear the check box if the active option is a check box
Arrow keys Select a button if the active option is a group of option buttons
F1 Display Help
F4 Display the items in the active list
Backspace Open a folder one level up if a folder is selected in the Save As or Open dialog box

Windows 7 Ease of Access keyboard shortcut keys

Right Shift for eight seconds Turn Filter Keys on and off
Left Alt + Left Shift + PrtScn (or PrtScn) Turn High Contrast on or off
Left Alt + Left Shift + Num Lock Turn Mouse Keys on or off
Shift five times Turn Sticky Keys on or off
Num Lock for five seconds Turn Toggle Keys on or off
Windows logo key + U Open the Ease of Access Center

Windows 7 General keyboard shortcut keys

F1 Display Help
Ctrl + C (or Ctrl + Insert) Copy the selected item
Ctrl + X Cut the selected item
Ctrl + V (or Shift + Insert) Paste the selected item
Ctrl + Z Undo an action
Ctrl + Y Redo an action
Delete (or Ctrl + D) Delete the selected item and move it to the Recycle Bin
Shift + Delete Delete the selected item without moving it to the Recycle Bin first
F2 Rename the selected item
Ctrl + Right Arrow Move the cursor to the beginning of the next word
Ctrl + Left Arrow Move the cursor to the beginning of the previous word
Ctrl + Down Arrow Move the cursor to the beginning of the next paragraph
Ctrl + Up Arrow Move the cursor to the beginning of the previous paragraph
Ctrl + Shift with an arrow key Select a block of text
Shift + any arrow key Select more than one item in a window or on the desktop, or select text within a document
Ctrl + any arrow key + Spacebar Select multiple individual items in a window or on the desktop
Ctrl + A Select all items in a document or window
F3 Search for a file or folder
Alt + Enter Display properties for the selected item
Alt + F4 Close the active item, or exit the active program
Alt + Spacebar Open the shortcut menu for the active window
Ctrl + F4 Close the active document (in programs that allow you to have multiple documents open simultaneously)
Alt + Tab Switch between open items
Ctrl + Alt + Tab Use the arrow keys to switch between open items
Ctrl + Mouse scroll wheel Change the size of icons on the desktop
Windows logo key + Tab Cycle through programs on the taskbar by using Aero Flip 3-D
Ctrl+ Windows logo key + Tab Use the arrow keys to cycle through programs on the taskbar by using Aero Flip 3-D
Alt + Esc Cycle through items in the order in which they were opened
F6 Cycle through screen elements in a window or on the desktop
F4 Display the address bar list in Windows Explorer
Shift + F10 Display the shortcut menu for the selected item
Ctrl + Esc Open the Start menu
Alt + underlined letter Display the corresponding menu
Alt + underlined letter Perform the menu command (or other underlined command)
F10 Activate the menu bar in the active program
Right Arrow Open the next menu to the right, or open a submenu
Left Arrow Open the next menu to the left, or close a submenu
F5 (or Ctrl + R) Refresh the active window
Alt + Up Arrow View the folder one level up in Windows Explorer
Esc Cancel the current task
Ctrl + Shift + Esc Open Task Manager
Shift when you insert a CD Prevent the CD from automatically playing
Left Alt + Shift Switch the input language when multiple input languages are enabled
Ctrl + ShiftL Switch the keyboard layout when multiple keyboard layouts are enabled
Right or Left Ctrl + Shift Change the reading direction of text in right-to-left reading languages

Windows 7 Magnifier keyboard shortcut keys

Windows logo key + Plus Sign or Minus Sign Zoom in or out
Ctrl + Alt + Spacebar Preview the desktop in full-screen mode
Ctrl + Alt + F Switch to full-screen mode
Ctrl + Alt + L Switch to lens mode
Ctrl + Alt + D Switch to docked mode
Ctrl + Alt + I Invert colors
Ctrl + Alt + arrow keys Pan in the direction of the arrow keys
Ctrl + Alt + R Resize the lens
Windows logo key + Esc Exit Magnifier

Windows 7 Paint keyboard shortcut keys

Ctrl + N Create a new picture
Ctrl + O Open an existing picture
Ctrl + S Save changes to a picture
F12 Save the picture as a new file
Ctrl + P Print a picture
Alt + F4 Close a picture and its Paint window
Ctrl + Z Undo a change
Ctrl + Y Redo a change
Ctrl + A Select the entire picture
Ctrl + X Cut a selection
Ctrl + C Copy a selection to the Clipboard
Ctrl + V Paste a selection from the Clipboard
Right Arrow Move the selection or active shape right by one pixel
Left Arrow Move the selection or active shape left by one pixel
Down Arrow Move the selection or active shape down by one pixel
Up Arrow Move the selection or active shape up by one pixel
Esc Cancel a selection
Delete Delete a selection
Ctrl + B Bold selected text
Ctrl + + Increase the width of a brush, line, or shape outline by one pixel
Ctrl + - Decrease the width of a brush, line, or shape outline by one pixel
Ctrl + I Italicize selected text
Ctrl + U Underline selected text
Ctrl + E Open the Properties dialog box
Ctrl + W Open the Resize and Skew dialog box
Ctrl + Page Up Zoom in
Ctrl + Page Down Zoom out
F11 View a picture in full-screen mode
Ctrl + R Show or hide the ruler
Ctrl + G Show or hide gridlines
F10 or Alt Display keytips
Shift + F10 Show the current shortcut menu
F1 Open Paint Help

Windows 7 Remote Desktop Connection keyboard shortcut keys

Alt + Page Up Move between programs from left to right.
Alt + Page Down Move between programs from right to left.
Alt + Insert Cycle through programs in the order that they were started in.
Alt + Home Display the Start menu.
Ctrl + Alt + Break Switch between a window and full screen.
Ctrl + Alt + End Display the Windows Security dialog box.
Alt + Delete Display the system menu.
Ctrl + Alt + Minus Sign (-) on the numeric keypad Place a copy of the active window, within the client, on the Terminal server clipboard (provides the same functionality as pressing Alt + PrtScn on a local computer).
Ctrl + Alt + Plus Sign (+) on the numeric keypad Place a copy of the entire client window area on the Terminal server clipboard (provides the same functionality as pressing PrtScn on a local computer).
Ctrl + Alt + Right Arrow "Tab" out of the Remote Desktop controls to a control in the host program (for example, a button or a text box). Useful when the Remote Desktop controls are embedded in another (host) program.
Ctrl + Alt + Left Arrow "Tab" out of the Remote Desktop controls to a control in the host program (for example, a button or a text box). Useful when the Remote Desktop controls are embedded in another (host) program.

Windows 7 Taskbar keyboard shortcut keys

Shift + Click on a taskbar button Open a program or quickly open another instance of a program
Ctrl + Shift + Click on a taskbar button Open a program as an administrator
Shift + Right-click on a taskbar button Show the window menu for the program
Shift + Right-click on a grouped taskbar button Show the window menu for the group
Ctrl + Click on a grouped taskbar button Cycle through the windows of the group

Windows 7 Windows Explorer keyboard shortcut keys

Ctrl + N Open a new window
Ctrl + W Close the current window
Ctrl + Shift + N Create a new folder
End Display the bottom of the active window
Home Display the top of the active window
F11 Maximize or minimize the active window
Ctrl + Period (.) Rotate a picture clockwise
Ctrl + Comma (,) Rotate a picture counter-clockwise
Num Lock + Asterisk (*) on numeric keypad Display all subfolders under the selected folder
Num Lock + Plus Sign (+) on numeric keypad Display the contents of the selected folder
Num Lock + Minus Sign (-) on numeric keypad Collapse the selected folder
Left Arrow Collapse the current selection (if it's expanded), or select the parent folder
Alt + Enter Open the Properties dialog box for the selected item
Alt + P Display the preview pane
Alt + Left Arrow View the previous folder
Backspace View the previous folder
Right Arrow Display the current selection (if it's collapsed), or select the first subfolder
Alt + Right Arrow View the next folder
Alt + Up Arrow View the parent folder
Ctrl + Shift + E Display all folders above the selected folder
Ctrl + Mouse scroll wheel Change the size and appearance of file and folder icons
Alt + D Select the address bar
Ctrl + E Select the search box
Ctrl + F Select the search box

Windows 7 Windows logo key keyboard shortcut keys

Windows 7 Shortcut Key Action / Operation
Windows logo key Open or close the Start menu.
Windows logo key + Pause Display the System Properties dialog box.
Windows logo key + D Display the desktop.
Windows logo key + M Minimize all windows.
Windows logo key + Shift + M Restore minimized windows to the desktop.
Windows logo key + E Open Computer.
Windows logo key + F Search for a file or folder.
Ctrl + Windows logo key + F Search for computers (if you're on a network).
Windows logo key + L Lock your computer or switch users.
Windows logo key + R Open the Run dialog box.
Windows logo key + T Cycle through programs on the taskbar.
Windows logo key + number Start the program pinned to the taskbar in the position indicated by the number. If the program is already running, switch to that program.
Shift + Windows logo key + number Start a new instance of the program pinned to the taskbar in the position indicated by the number.
Ctrl + Windows logo key + number Switch to the last active window of the program pinned to the taskbar in the position indicated by the number.
Alt + Windows logo key + number Open the Jump List for the program pinned to the taskbar in the position indicated by the number.
Windows logo key + Tab Cycle through programs on the taskbar by using Aero Flip 3-D.
Ctrl+Windows logo key + Tab Use the arrow keys to cycle through programs on the taskbar by using Aero Flip 3-D.
Ctrl+Windows logo key + B Switch to the program that displayed a message in the notification area.
Windows logo key + Spacebar Preview the desktop.
Windows logo key + Up Arrow Maximize the window.
Windows logo key + Left Arrow Maximize the window to the left side of the screen.
Windows logo key + Right Arrow Maximize the window to the right side of the screen.
Windows logo key + Down Arrow Minimize the window.
Windows logo key + Home Minimize all but the active window.
Windows logo key + Shift + Up Arrow Stretch the window to the top and bottom of the screen.
Windows logo key + Shift+ Left Arrow or Right Arrow Move a window from one monitor to another.
Windows logo key + P Choose a presentation display mode.
Windows logo key + G Cycle through gadgets.
Windows logo key + U Open Ease of Access Center.
Windows logo key + X Open Windows Mobility Center.

Windows 7 Windows Journal keyboard shortcut keys

Ctrl + N Start a new note
Ctrl + O Open a recently used note
Ctrl + S Save changes to a note
Ctrl + Shift + V Move a note to a specific folder
Ctrl + P Print a note
Alt + F4 Close a note and its Journal window
Ctrl + Z Undo a change
Ctrl + Y Redo a change
Ctrl + A Select all items on a page
Ctrl + X Cut a selection
Ctrl + C Copy a selection to the Clipboard
Ctrl + V Paste a selection from the Clipboard
Esc Cancel a selection
Delete Delete a selection
Ctrl + F Start a basic find
Ctrl + G Go to a page
F5 Refresh find results
F5 Refresh the note list
F6 Toggle between a note list and a note
Ctrl + Shift + C Display a shortcut menu for column headings in a note list
F11 View a note in full-screen mode
F1 Open Journal Help

Windows 7 Windows Help viewer keyboard shortcut keys

Alt + C Display the Table of Contents
Alt + N Display the Connection Settings menu
F10 Display the Options menu
Alt + Left Arrow Move back to the previously viewed topic
Alt + Right Arrow Move forward to the next (previously viewed) topic
Alt + A Display the customer support page
Alt + Home Display the Help and Support home page
Home Move to the beginning of a topic
End Move to the end of a topic
Ctrl + F Search the current topic
Ctrl + P Print a topic
F3 Move the cursor to the search box

Windows 7 WordPad keyboard shortcut

Ctrl + N Create a new document
Ctrl + O Open an existing document
Ctrl + S Save changes to a document
F12 Save the document as a new file
Ctrl + P Print a document
Alt + F4 Close WordPad
Ctrl + Z Undo a change
Ctrl + Y Redo a change
Ctrl + A Select the entire document
Ctrl + X Cut a selection
Ctrl + C Copy a selection to the Clipboard
Ctrl + V Paste a selection from the Clipboard
Ctrl + B Make selected text bold
Ctrl + I Italicize selected text
Ctrl + U Underline selected text
Ctrl + = Make selected text subscript
Ctrl + Shift + = Make selected text superscript
Ctrl + L Align text left
Ctrl + E Align text center
Ctrl + R: Align text right
Ctrl + J Justify text
Ctrl + 1 Set single line spacing
Ctrl + 2 Set double line spacing
Ctrl + 5 Set line spacing to 1.5
Ctrl + Shift + > Increase the font size
Ctrl + Shift + < Decrease the font size
Ctrl + Shift + A Change characters to all capitals
Ctrl + Shift + L Change the bullet style
Ctrl + D Insert a Microsoft Paint drawing
Ctrl + F Find text in a document
F3 Find the next instance of the text in the Find dialog box
Ctrl + H Replace text in a document
Ctrl + Left Arrow Move the cursor one word to the left
Ctrl + Right Arrow Move the cursor one word to the right
Ctrl + Up Arrow Move the cursor to the line above
Ctrl + Down Arrow Move the cursor to the line below
Ctrl + Home Move to the beginning of the document
Ctrl + End Move to the end of the document
Ctrl + Page Up Move up one page
Ctrl + Page Down Move down one page
Ctrl + Delete Delete the next word
F10 Display keytips
Shift + F10 Show the current shortcut menu
F1 Open WordPad Help


Use HTTP PROXY via command line in Linux/FreeBSD

Use Proxy Server To Access Internet at Shell Prompt With http_proxy Variable

Linux / UNIX has environment variable called http_proxy. It allows you to connect text based session / application via the proxy server. All you need is proxy server IP and port values. This variable is almost used by all utilities such as elinks, lynx, wget, curl and others.

Assuming that your HTTP Proxy IP address is 192.168.0.1 port 3128 (standard proxy port)

Set http_proxy shell variable

Type the following command to set proxy server:

$ export http_proxy=http://server-ip:port/
$ export http_proxy=http://192.168.0.1.1:3128/
$ export http_proxy=http://proxy-server.mycorp.com:3128/

How do I setup proxy variable for all users?

To setup the proxy environment variable as a global variable, open /etc/profile file:
$ vi /etc/profile

In order to make this proxy permanent, add the line to your ~/.profile or /etc/profile or ~/(bash|ksh|sh)rc file.

Add the following information:
export http_proxy=http://proxy-server.mycorp.com:3128/

Save and close the file.

How do I use password protected proxy server?

$ export HTTP_PROXY='http://username:password@192.168.0.1:3128'

You can simply use wget as follows:

$ wget --proxy-user=USERNAME --proxy-password=PASSWORD http://path.to.domain.com/some.html

Lynx has following syntax:
$ lynx -pauth=USER:PASSWORD http://domain.com/path/html.file

Curl has following syntax:
$ curl --proxy-user user:password http://url.com/

To unset this, use:

$ export HTTP_PROXY=' '


Static Route in Windows

5:18 PM by Yash Kalra 0 comments

In Windows, to add a static route, the syntax is as below:

route add [destination network] mask [destination network mask] [default gateway] -p

Example:
route add 10.0.0.0 mask 255.255.255.0 192.168.1.1 -p

*Without "-p", the route will be erased upon next reboot.

To see the routing table:

route print

To delete the route:

route delete [network]

Example:

route delete 10.0.0.0

* Make a Batch file for easy.


Windows Advance Option Repair (F8)

5:13 PM by Yash Kalra 0 comments

To repair Windows Advance Option (F8)

The reason for corrupt of Windows Advance Option - Safe mode & other are not work (system restart or error of BSOD) is Virus. Some Virus remove the Windows Advance Option Menu Setting.

To resolve the issue:

The registry keys to boot into Safe Mode are under the SafeBoot key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot

You can boot into Safe Mode without or with networking, there is a subkey for each mode: Minimal (no networking) and Network (with networking).

Each device, driver or service that has to be started has a subkey under the Minimal or Network key.

If you want to disable a device, driver or service in Safe Mode, just delete the corresponding subkey (make a backup first).
I tested this with key {4D36E965-E325-11CE-BFC1-08002BE10318} (resulted in a disabled CD-ROM drive) and PlugPlay (resulted in a disabled Plug and Play service).

I compared several SafeBoot registry keys for Windows XP SP2 on different hardware platforms, and they were all identical. However, there were some small differences when comparing different operatings systems (Windows XP SP1, SP2 and Windows 2003 SP1). Remember that Safe Mode was introduced with Windows 2000.
These are minor differences, just listing devices, drivers or services that are only present on one version of Windows. For example, I found Volume shadow copy on a Windows 2003 and not on Windows XP. And Windows 2003 also had less network services than Windows XP, this is probably a result of the default hardening of Windows 2003: more services and applications are disabled by default on Windows 2003 than on Windows XP.

To repair you PC for Working of Windows Advance Option Menu insert or check the safe mode registry setting is there if not insert it. If you want to insert the Safe Mode default registry setting than download the attachment & Import it.

Download

Source


Windows Recovery Console Commands

4:49 PM by Yash Kalra 0 comments

When dealing with a Blue Screen of Death at boot - the first option should be to boot into Safe Mode (press F8 during bootup). From safe mode you can run a system restore with %systemroot%\system32\restore\rstrui.exe

Some hardware failures are so severe they prevent booting into Safe Mode.

The recovery console allows an alternative boot option giving a limited command prompt - this can be used to disable services or replace system files until you are able to boot into safe mode.

Recovery Console commands:

ATTRIB   Change file attributes
BATCH    Execute a batch file
CD       Change directory
CHKDSK   Check Disk
CLS      Clear screen
COPY     Copy files*
DEL      Delete Files*
DIR      Directory listing
DISABLE  Disable Service
DISKPART Create or delete disk Partitions (like running setup)
ENABLE   Enable Service
EXIT     Quit the recovery console and reboot
EXPAND
FIXBOOT  Write a new boot sector to the system partition
FIXMBR   Repair the Master boot Record
FORMAT   FORMAT drive /FS:NTFS
HELP
LISTSVC  List all services and drivers
LOGON    Logon as administrator (local)
MAP      List local physical drive mappings
MAP arc  List local physical drive mappings(ARC path)
MD       Make Directory*
MORE
RD       Remove Directory*
REN      Rename file*
SYSTEMROOT Set the current directory to be %Systemroot%

* File operations are only possible on:
  system directories, floppy drive(removable media), Root directories,
  local install sources. You can copy FROM but not TO a floppy disk.

Installation:

The recovery console is not installed by default, from the install CD use the command: D:\i386\winnt32 /cmdcons
Then restart the machine.


TASKLIST

4:47 PM by Yash Kalra 0 comments

TaskList displays all running applications and services with their Process ID (PID) This can be run on either a local or a remote computer.

Syntax
      tasklist options

Options:

   /s computer  Name or IP address of a remote computer
                don't use backslashes. Default = local computer.

   /u domain\user [/p password]]
                Run under a different account

   /svc         List information for each process without truncation.
                Valid when /fo=TABLE. Cannot be used with /m or /v

   /m [ModuleName]
                Show the processes that include the given module.

   /v           Verbose task information

   /fo {TABLE|LIST|CSV}]
                Output format, the default is TABLE.

   /nh          No Headers in the output (does not apply to LIST output)

   /fi FilterName [/fi FilterName2 [ ... ]]
                Apply one of the Filters below:

                   Imagename   eq, ne                  String
                   PID         eq, ne, gt, lt, ge, le  Positive integer.
                   Session     eq, ne, gt, lt, ge, le  Any valid session number.
                   SessionName eq, ne                  String
                   Status      eq, ne                  RUNNING | NOT RESPONDING
                   CPUTime     eq, ne, gt, lt, ge, le  Time hh:mm:ss
                   MemUsage    eq, ne, gt, lt, ge, le  Any valid integer.
                   Username    eq, ne                  User name ([Domain\]User).
                   Services    eq, ne                  String
                   Windowtitle eq, ne                  String
                   Modules     eq, ne                  String

Examples:

List the services running under each process:

TASKLIST /svc

List the services running under each SvcHost process:

TASKLIST /FI "imagename eq svchost.exe" /svc

List the services running now:

TASKLIST /v /fi "STATUS eq running"

List the services running under a specific user account:

TASKLIST /v /fi "username eq SERVICE_ACCT05"


SC (Service Control)

4:45 PM by Yash Kalra 0 comments

Service Control - Create, Start, Stop, Query or Delete any Windows SERVICE. The command options for SC are case sensitive.

Syntax
      SC [\\server] [command] [service_name] [Options]

Key
   server       : The machine where the service is running

   service_name : The KeyName of the service, this is often but not always
                  the same as the DisplayName shown in Control Panel, Services.
                  You can get the KeyName by running: 
                     SC GetKeyName <DisplayName>

   commands:
          query  [qryOpt]   Show status
          queryEx [qryOpt]  Show extended info - pid, flags
          GetDisplayName    Show the DisplayName
          GetKeyName        Show the ServiceKeyName
          EnumDepend        Show Dependencies
          qc                Show config - dependencies, full path etc
          start          START a service.
          stop           STOP a service
          pause          PAUSE a service.
          continue       CONTINUE a service.
          create         Create a service. (add it to the registry)
          config         permanently change the service configuration
          delete         Delete a service (from the registry)
          control        Send a control to a service
          interrogate    Send an INTERROGATE control request to a service
          Qdescription   Query the description of a service
          description    Change the description of a service
          Qfailure       Query the actions taken by a service upon failure
          failure        Change the actions taken by a service upon failure
          sdShow         Display a service's security descriptor using SDDL
          SdSet          Sets a service's security descriptor using SDDL

   qryOpt:
          type= driver|service|all
                         Query specific types of service
          state= active|inactive|all
                         Query services in a particular state only
          bufsize= bytes 
          ri= resume_index_number (default=0)
          group= groupname
                         Query services in a particular group

   Misc commands that don't require a service name:
          SC  QueryLock  Query the LockStatus for the ServiceManager Database.
                         this will show if a service request is running
          SC  Lock       Lock the Service Database
          SC  BOOT       Values are {ok | bad} Indicates whether to save  
                         the last restart configuration as the `last-known-good`
                         restart configuration
   Options
     The CREATE and CONFIG commands allow additional options to be set
     see the build-in help: 'SC create' and 'SC config'

Note the qryOpt options above are case sensitive - they must be entered in lower case, also the position of spaces and = must be exactly as shown.

The SC command duplicates some aspects of the NET command but adds the ability to create a service.
SC query will display if a service is running, giving output like this:

        SERVICE_NAME       : messenger
        TYPE               : 20  WIN32_SHARE_PROCESS
        STATE              : 4  RUNNING
                                (STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
        WIN32_EXIT_CODE    : 0  (0x0)
        SERVICE_EXIT_CODE  : 0  (0x0)
        CHECKPOINT         : 0x0
        WAIT_HINT          : 0x0

To retrieve specific information from SC's output, pipe into FIND or FindStr
e.g.

  C:\> SC query messenger | FIND "STATE" | FIND "STOPPED"

  C:\> SC query messenger | FIND "STATE" | FIND "RUNNING"

The statements above will return an %ERRORLEVEL% = 1 if the text is not found

IF errorlevel 1 GOTO :my_subroutine

The NET START command can be used in a similar way to check if a service is running:

   NET START | FIND "Service name" > nul
   IF errorlevel 1 ECHO The service is not running

The service control manager will normally wait up to 30 seconds to allow a service to start - you can modify this time (30,000 milliseconds) in the registry

HKLM\SYSTEM\CurrentControlSet\Control
ServicesPipeTimeout (REG_DWORD)

Some options only take effect at the point when the service is started e.g. the SC config command allows the executable of a service to be changed. When the service next starts up it will run the new executable. Config changes requires the current user to have "permission to configure the service".

Examples:

 SC GetKeyName "task scheduler"
 SC GetDisplayName schedule 
 SC start schedule
 SC QUERY schedule
 SC QUERY type= driver
 SC QUERY state= all |findstr "DISPLAY_NAME STATE" >svc_installed.txt 
 SC \\myServer CONFIG myService obj= LocalSystem password= mypassword
 SC CONFIG MyService binPath=c:\myprogram.exe obj=".\LocalSystem" password=""  

Watch out for extra spaces:
SC QUERY state= all Works
SC QUERY sTate =all Fails!


Windows XP Services list

4:15 PM by Yash Kalra 0 comments

A list of all the standard services

ServiceName

Service (Key)

Process

Description

Default Status & notes

Alerter

Alerter

Services.exe

[HKLM\SYSTEM\
CurrentControlSet\
Services\Alerter\Parameters]

[HKLM\SYSTEM\
CurrentControlSet
\Services\SysmonLog\Log Queries\<alertname>]

Distribute administrative alerts to specific users or machines.

e.g. Performance Monitor thresholds are distributed as alerts.

Requires the Messenger and Workstation services to be started.

Manual.
May be disabled if the alerts are not needed.

Application Layer Gateway Service

ALG

alg.exe

Support for Internet Connection Sharing and theInternet Connection Firewall

Manual

Application Management

appmgt

Services.exe or svchost.exe

Installation services (Add/Remove Programs) - Assign, Publish, and Remove.

Manual

Automatic Updates

wuaUserv

svchost.exe -k wugroup

Enable the download and installation of critical Windows updates.

Automatic.
If the service is stopped, the operating system can be manually updated at the Windows Update Web site.

Background Intelligent Transfer Service

BITS

svchost.exe -k BITSgroup

Transfer files using idle network bandwidth, maintain file transfers through network disconnections and computer restarts.

Automatic
switch to manual if you have problems - Q314862

Clipbook Server

Clipsrv

Clipsrv.exe

Provides support for the Clipbook Viewer, which allows the clipboard of the source machine to be accessed remotely.

Disabled

COM+ Event System

Event System

svchost.exe -k netsvcs

Automatic distribution of events to subscribing COM components.

Manual

Computer Browser

Browser

Services.exe

Collects the names of NetBIOS resources on the network, creating a list so that it can participate as a master browser or basic browser (one that takes part in browser elections).

This maintained list of resources (computers) is displayed in Network Neighborhood and Server Manager. If disabled you can still map drives, but can't browse the whole network.

Automatic.

If the machine is not connected to a LAN (stand-alone), or will not participate as a master browser or take part in elections, then feel free to change the status to manual (or disabled)

This does not equate to disabling TCP/IP so internet browsing is still possible.

Cryptographic Services

CryptSvc

svchost.exe

Management of Certification Authority certificates. Driver Catalog Database, Protected Root and Key certificate Services.

Automatic

DCOM Server Process Launcher

DcomLaunch

svchost.exe

Launch DCOM services

Automatic

DHCP Client

Dhcp

Services.exe or svchost.exe

Manage network configuration by registering and updating IP addresses and DNS names.

Automatic
On a stand-alone machine: Disable

Distributed Link Tracking Client

TrkWks

Services.exe or svchost.exe

Send notification of files moving between NTFS volumes in a network domain.

Automatic
Can be set to manual if you dont need this function.

Distributed Transaction Coordinator

msdtc

MSDTC.exe

Coordinate transactions that are distributed across two or more databases, message queues, file systems, or other transaction protected resource managers.

Manual
Can be set to Disabled if you dont need this function.

DNS Client

Dnscache

Services.exe

Resolves and caches Domain Name System (DNS) names.

Automatic

Directory Replicator (Server only)

Replicator

Lmrepl.exe

Replicate specified files & folders between computers.
The host is the export server, and the target machines are called import computers.
Replication is configured under Server in the Control Panel.

Automatic

Domain Controllers need this to replicate the Netlogon share.

Error Reporting Service

Ersvc

svchost.exe

Report errors back to Microsoft in Redmond.

Automatic
If you never want to report system crash info. to Microsoft set this to disabled.

EventLog

EventLog

Services.exe

Record System, Security, and Application Events.

Viewed with the MMC Event Viewer (eventvwr.exe in NT).

Automatic

Fast User Switching Compatibility

FastUserSwitching Compatibility

svchost.exe

Enable multiple users to login to the same PC simultaneously.

Manual

Fax Service

Fax

faxsvc.exe

Send and receive faxes

Automatic or Manual

Help and Support

helpsvc

svchost.exe

Help and Support Center

Automatic.
If stopped the help system will stop working.

Human Interface Device Access

HidServ

svchost.exe

Support for extra keyboard 'hot buttons' and other multimedia input devices.

Disabled

HTTP SSL

HTTPFilter

svchost.exe

Support for HTTPS (Secure Socket Layer) websites such as banking and e-commerce.

Manual

IMAPI CD-Burning COM Service

ImapiService

imapi.exe

CD-Rom Burning

Manual
If you have problems changing to Automatic may help.

Indexing Service

cisvc

cisvc.exe

Index the contents and properties of files on local and remote computers.
[ RESOURCE HOG ]

Manual
For improved performance Disable or
Uninstall thru C.Panel add/remove

IPSEC Policy Agent

PolicyAgent

lsass.exe

Manage IP security policy and starts the ISAKMP/Oakley (IKE) and the IP security driver.

Automatic
May be changed to Manual if IPSec is not needed.

License Logging Service (Server)

LicenseService

Llssrv.exe

License tracking on a server or DC (Domain Controller).

If disabled then licensing status alerts will not be generated.

Logical Disk Manager

Dmserver

services.exe or svchost.exe

Required by the MMC Disk Management plug-in.

Automatic

Logical Disk Manager Administrative Service

Dmadmin

dmadmin.exe /com

Administrative service for disk management requests

Manual

Message Queuing

mqsvc.exe

Message Queuing

Message Queuing Triggers

mqtgsvc.exe

Message Queuing

MS Software Shadow Copy Provider Service

swprv

dllhost.exe

Microsoft Backup Utility

Manual
Disable if you never use Shadow Copy features.

Messenger

Messenger

Services.exe

Process the receipt or delivery of pop-up messages sent via NET SEND.
Not related to Windows Messenger

Disabled
vulnerability once used to send pop-up spam.

Network Connections

Netman

svchost.exe -k netsvcs

Manage objects in the Network and Dial-Up Connections folder (LAN and remote connections.)

Manual

Net Logon

Netlogon

Lsass.exe
(Local Security Authority Subsystem)

Network Authentication: maintains a synced domain directory database between the PDC and BDC(s), handles authentication of respective accounts on the DCs, and authenticates domain accounts on networked machines.

Automatic
For stand-alone machines never connected to a domain set to Manual.

NetMeeting Remote Desktop Sharing

Nmnsrvc

mnmsrvc.exe

Allows authorized people to remotely access your Windows desktop using NetMeeting.

Manual.
A good idea to Disable unless you plan to allow remote connections.

Network DDE

NetDDE

Netdde.exe

Support the network transport of DDE (Dynamic Data Exchange) connections.
Requires Network DDE DSDM to be started. See Clipbook service

Disabled

Network DDE DSDM

NetDDEdsdm

Netdde.exe

Manage shared DDE conversations (from shares like: \\computername\ndde$).
See Clipbook service

Disabled

NLA - Network Location Awareness

nla

svchost.exe

Part of Internet Connection Sharing (ICS) and the Internet Connection Firewall (ICF)

Manual

Network Provisioning Service

xmlprov

svchost.exe

Manage XML configuration files on a domain basis

Manual

NT LM Security Support Provider

NtLmSsp

Services.exe

Extends NT security to Remote Procedure Call (RPC) programs using various transports other than named pipes.
RPC activity is quite common, and most RPC apps don't use named pipes.

Manual

Performance Logs and Alerts (XP)

Alerts and Performance Logs (Win 2K)

sysmonLog

smlogsvc.exe

Configure performance logs and alerts.

Manual. May be disabled if the alerts are not needed.

Plug and Play

PlugPlay

Services.exe

Plug and Play.
Do not disable this service.

Automatic

Universal Plug and Play Host

UPNPhost

svchost.exe

Device Host detect and configure external UPnP devices.
UPnP<>PnP

Manual

Portable Media Serial Number Service

WmdmPmSN

svchost.exe

Retrieves the serial number of any portable media player connected to this computer.

Manual
Disable if you never use DRM music devices.

Print Spooler or Spooler

Spooler

Spoolsv.exe
(Spoolss.exe in NT4)

The NT printing subsystem.

Automatic - If you print documents.

If no printing is ever done set to manual (or disabled)

Restarting this service will cancel all pending print jobs.

Protected Storage

ProtectedStorage

Pstores.exe

Encrypt and store secure info: SSL certificates, passwords for Outlook, Outlook Express, Profile Assistant, MS Wallet, and digitally signed S/MIME keys.

Automatic.

QoS RSVP

rsvp

rsvp.exe -s

Provide network signaling and local traffic control setup functionality for QoS-aware programs and control applets.

Manual

Remote Access Auto Connection Manager
or
Remote Access AutoDial Manager

Rasauto

svchost.exe -k netsvcs

Activates automatic dial-up when a URL link is clicked.

Required for some but not all RAS, ADSL or Cable connections.

Manual
May be disabled if the machine has no internet access.

Remote Access Connection Manager

Rasman

svchost.exe -k netsvcs

Required for most but not all RAS, ADSL or Cable connections.

Manual.
Required for Internet Connection Sharing or accessing remote servers via RAS.

Remote Desktop Help Session Manager

RDSessMgr

sessmgr.exe

Remote Desktop Help Session Manager.

Manual
May be disabled if RDP is never used.

Remote Procedure Call (RPC) Service
or
Remote Procedure Call (RPC)

RpcSs

svchost -k rpcss

This RPC subsystem is crucial to the operations of any RPC activities taking place on a system (e.g. DCOM)

Automatic
Do not disable

Many essential services are dependent on RPC.

Remote Procedure Call (RPC) Locator

RpcLocator

Locator.exe

Maintain the RPC name server database, requires the RPC service (below) to be started. Database of available server applications.

Manual.

Remote Registry Service (XP Pro only)

RemoteRegistry

regsvc.exe

Allow remote registry manipulation.

Automatic
A good idea to disable this, unless you have some reason to allow remote registry editing.

Removable Storage

Ntmssvc

svchost.exe -k netsvcs

Manage removable media, drives, and libraries.

Manual.

RIP Listener
(XP - option)

Listen for RIP announcements from routers and modify the routing table accordingly.

To use the RIP Listener service, your adjacent routers must support the RIP v1 protocol. You'll find the RIP Listener service under Add/Remove Windows Components - Networking Services.

Routing and Remote Access

RemoteAccess

svchost.exe -k netsvcs

Allow incoming connections via dial in or VPN. (WAN Routing)

Disabled

Secondary Logon (Win XP)
RunAs (Win 2K)

secLogon

services.exe or svchost.exe

Enables starting processes under alternate credentials.

Automatic
You may want to stop this service if you never use RunAs

Security Accounts Manager (Win 2K)

SamSs

lsass.exe

Stores security information for local user accounts.

Automatic

Security Center

wscsvc

svchost.exe

Monitor system security settings and configurations.

Automatic
You may want to disable this if firewall and virus updates are controlled via other means.

Server

LanmanServer

Services.exe

Support for peer-to peer file sharing, print sharing, and named pipe sharing via SMB services.

Automatic
May be disabled if you dont host file or print shares. (Admin$ shares)

Shell Hardware Detection

ShellHWDetection

svchost.exe

CD Autoplay

Automatic.

Smart Card

ScardSrv

SCardSvr.exe

Manages and controls access to a smart card inserted into a smart card reader attached to the computer.

Manual
If you never use smart cards, Disable

Smart Card Helper

ScardDrv

SCardSvr.exe

legacy smart card readers

Removed in XP SP2

SNMP Service

Snmp

snmp.exe

Agents that monitor the activity in network devices and report to the network console workstation.

Automatic (if installed)

SSDP Discovery Service

SSDPSRV

svchost.exe

Simple Service Discovery Protocol.
Enables discovery of UPnP devices on your home network

Manual
May be disabled if as is likely you dont have any UPnP devices)

System Event Notification

SENS

svchost.exe -k netsvcs

Track system events such as Windows logon, network, and power events.
Notifiy COM+ Event System subscribers of these events.

Automatic.

System Restore Service

srservice

svchost.exe

Creates system snap shots.
[ RESOURCE HOG ]

Automatic

If the machine's configuration has been cloned/backed up - turn off System Restore in Control Panel, System.

Task Scheduler or Schedule

Schedule

atsvc.exe or mstask.exe

This service is required to schedule background tasks (run at a specific date & time)

Under NT it's a Resource Hog.
Under XP it's used by some auto-tuning operations.

Automatic

TCP/IP NetBIOS Helper
or
TCP/IP NetBIOS Helper Service

lmHosts

Services.exe

Support for name resolution in a Windows 2000 domain . (Netbios/Wins)
An alternative to DNS lookup.

Automatic
If not required may be set to manual.

Telephony

TapiSrv

Tapisrv.exe

Telephony API (TAPI) support for programs that control telephony devices and IP based voice connections. e.g unimodem modems.

Manual

Telnet
(Win 2K)

TlntSvr

tlntsvr.exe

Allows a remote user to log on to the system and run console programs using the command line.

Disabled
Very insecure, presents a security risk when running.

Terminal Services

TermService

svchost.exe

Required for Fast User Switching, Remote Desktop and Remote Assistance

Manual
If not required may be Disabled

Themes

Themes

svchost.exe

XP Active Desktop Themes, and quick launch toolbars
[ RESOURCE HOG ]

Automatic
Set to Manual or Disabled if you dont like themes.

UPS or Uninterruptible Power Supply

UPS

Ups.exe

Support for an Uninteruptable Power Supply (UPS) physically connected to the machine.

Manual
Not every UPS will need or use this service.

Universal Plug and Play Host

UPNPhost

svchost.exe

Device Host detect and configure external UPnP devices.
UPnP<>PnP

Manual

Upload Manager

uploadmgr

svchost.exe

Upload Manager.

Removed in XP SP2

Volume Shadow Copy

VSS

vssvc.exe

MS Backup - A volume shadow copy is a picture of the volume at a particular moment in time. That means a computer can be backed up while files are open and applications running.

Manual
If not required may be disabled
see MS Software Shadow Copy Provider Service

WebClient

WebClient

svchost.exe

Allow access to web-resident disk storage from an ISP. WebDAV "internet disks" such as Apple's iDisk.

Automatic
If not required may be disabled

Windows Audio

AudioSrv

svchost.exe

Sound Driver
Note that disabling the sound driver won't stop sounds from playing - you just won't hear them.

Automatic
If no sound card fitted then disable.

Windows Firewall (XP SP2)

Internet Connection Firewall (XP)

Internet Connection Sharing (Win 2K)

SharedAccess

svchost.exe -k netsvcs

Network address translation, addressing, and name resolution services for all computers on your home network through a dial-up connection.

Automatic.
For better protection consider adding a third party firewall.

Windows Image Acquisition

stisvc

svchost.exe

Required for some but not all cameras, scanners, and digital video cameras.

Manual

Windows Installer

MSIServer

MsiExec.exe /V

Install, repair and remove software according to instructions contained in .MSI files.

Manual

Windows Management Instrumentation

WinMgmt

C:\WINNT\System32
\WBEM\WinMgmt.exe

WMI provides system management information.

Automatic

Windows Management Instrumentation Driver Extensions

Wmi

svchost.exe

Provides systems management information to and from drivers.

Manual

Windows Time

W32time

services.exe

Update the computer clock by reference to an internet time source or a time server.

Automatic

Wireless Zero Configuration

WZCSVC

svchost.exe

Configure wireless network devices (802.11a/b/g).

Automatic
disable if you don't have any wireless devices.

WMI Performance Adapter

WmiApSrv

wmiapsrv.exe

Collect performance library information.

Manual

Workstation

lanmanworkstation

Services.exe

Communications and network connections.
Services dependent on this being started: Alerter, Messenger, and Net Logon.

Automatic

It is inadvisable to disable a service without being aware of the consequences,

always start by setting the service to manual,

reboot and test for any problems.

A service set to manual may be automatically restarted if another service is dependent on it.
A service set to disabled will not restart even if it's required to boot the machine!

Stopping or disabling a service will generally save a small amount of memory and will reduce the number of software interrupts (cpu message queue.)

The main reason for tinkering with services is to harden the system against security vulnerabilities. Disable everything that you don't need or use -

then any future problems with those services cannot affect the machine.

To document all the services currently installed:

SC QUERY state= all |findstr "DISPLAY_NAME STATE" >my_services.csv

Some XP services communicate and send data directly to Microsoft, this is not generally something to lose sleep over.

Managing the running of these services may be a consideration if confidentiality/anonymity is highly important to you.

Removing a service completely

To delete a service, you may be tempted to hack the registry settings under (HKLM/SYSTEM/CurrentControlSet/Services)

this is not a reliable or recommended method, far better is to use the SC command:

SC delete NameofServiceTodelete

Built-in Service Accounts

In addition to other Default User & Group accounts there are 3 built-in accounts, designed for running background services.

Local Service Account (NT AUTHORITY\LOCAL SERVICE) - has the same level of access to resources and objects as

members of the Users group. This limited access helps safeguard the system if individual services or processes are compromised.

Services that run as the Local Service account access network resources as a null session without credentials.

(This account is not supported for running SQL Server services.)

Network Service Account (NT AUTHORITY\NETWORK SERVICE) - has more access to resources

and objects than members of the Users group. Services that run as the Network Service account access

network resources by using the credentials of the computer account.

Local System Account (NT AUTHORITY\SYSTEM) - a very high-privileged built-in account. It has extensive privileges on the local system and acts as the computer on the network.

In Windows 2008 a new feature was introduced: Managed Service Accounts which provide aut

omatic password management and simplified service principal name (SPN) management.

These accounts are created in Powershell with New-ADServiceAccount

Enable or Disable Ports
Many services and applications rely on the use of a specific PORT - to determine if a particular port is enabled for use, review the list of Service names and port numbers held in the "services" file ('windows\system32\drivers\etc\services')
Installing a good firewall is the easiest way to manage this.

Source