NW Doc

The file associations for .LNK files on a Windows 7 computer have changed from their default association to another application program, ie. Internet Explorer Picture Viewer, with the result that none of the program shortcut icons or desktop icons launch their respective programs - they all attempt to launch Explorer. Changing the file association on an individual shortcut results in all shortcuts being changed to the selected program. Is there a way to change the .LNK file associations back to the Windows default in order to relate the shortcuts to their respective application program?

Solution - Just download the Registry Fix and merged the .reg file with registry.

Site

Simply copy paste following code in NOTEPAD and save the file with name " Show_Hidden_Files_On_Off.vbs " (including quotes):

Hidden = "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Hidden"

SHidden = "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowSuperHidden"

Set Sh = WScript.CreateObject("WScript.Shell")

St = Sh.RegRead(Hidden)

If St = 2 Then

Sh.RegWrite Hidden, 1, "REG_DWORD"

Sh.RegWrite SHidden, 1, "REG_DWORD"

Else

Sh.RegWrite Hidden, 2, "REG_DWORD"

Sh.RegWrite SHidden, 0, "REG_DWORD"

End If

Sh.SendKeys("{F5}")

Whenever you insert a USB drive, CD/DVD, etc into your system, Windows automatically launches an Autorun dialog box which allows you to select an action from the given list. You can browse the content, play media files, etc using Autorun dialog box.

To disable Autorun functionality in Windows:

1. Type regedit in RUN or Startmenu searchbox and press Enter. It'll open Registry Editor.

2. Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

If the above key doesn't exist, create it.

3. In right-side pane, create a new DWORD value NoDriveTypeAutoRun and set its value to any of following according to your requirements:

FF - To disable AutoRun on all drives
20 - To disable AutoRun on CD-ROM drives
4 - To disable AutoRun on removable drives
8 - To disable AutoRun on fixed drives
10 - To disable AutoRun on network drives
40 - To disable AutoRun on RAM disks
1 - To disable AutoRun on unknown drives

4. If you want to disable Autorun on a combination of drives, you'll need to calculate sum of the values. For example, if you want to disable Autorun on CD-ROM drives and removable drives, you'll need to set the value to 20+4=24.

5. If you want to restore the Autorun functionality, simply delete the NoDriveTypeAutoRun DWORD value created in Step 3 Or you can set the default value which is given below:

Windows 2000: 95

Windows XP: 91

Windows Server 2003: 95

Windows Vista, Server 2008 and 7: 91

6. If you want to disable Autorun functionality for all users in your system, use the "HKEY_LOCAL_MACHINE" instead of "HKEY_CURRENT_USER" mentioned in Step 2.

In Windows you can change desktop wallpaper, screen saver, themes and other appearance settings by right-click on Desktop and select "Properties".

If you want to disable all or a few options in Desktop Properties to restrict users or you might want to enable those options in case they are disabled by your system administrator or a virus infection.

Following tutorial will help you in enabling or disabling all or a particular option in Desktop Properties:

A. Disable Themes Tab in Desktop Properties:

Type regedit in RUN dialog box and press Enter. Now goto:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer

If "Explorer" key is not present, then create it. Now in right-side pane, create a new DWORD value NoThemesTab and set its value to 1 to disable it.

B. Disable Desktop Tab in Desktop Properties:

Type regedit in RUN dialog box and press Enter. Now goto:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ System

If "System" key is not present, then create it. Now in right-side pane, create a new DWORD value NoDispBackgroundPage and set its value to 1 to disable it.

C. Disable Screen Saver Tab in Desktop Properties:

Type regedit in RUN dialog box and press Enter. Now goto:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ System

If "System" key is not present, then create it. Now in right-side pane, create a new DWORD value NoDispScrSavPage and set its value to 1 to disable it.

D. Disable both Themes and Appearance Tabs in Desktop Properties:

Type regedit in RUN dialog box and press Enter. Now goto:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ System

If "System" key is not present, then create it. Now in right-side pane, create a new DWORD value NoDispAppearancePage and set its value to 1 to disable it.

E. Disable Settings Tab in Desktop Properties:

Type regedit in RUN dialog box and press Enter. Now goto:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ System

If "System" key is not present, then create it. Now in right-side pane, create a new DWORD value NoDispSettingsPage and set its value to 1 to disable it.

* If you want to enable a restricted tab in Desktop Properties, just delete the required DWORD value as mentioned above or change its value to 0 instead of 1.

To hide or show any specific Control Panel applet in Windows.

A: For All Windows Versions except Windows 95, 98 & Me

1. Type regedit in RUN dialog box and press Enter. Now go to:

HKEY_CURRENT_USER\Control Panel\
OR
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\

2. Under this key create a new key with the name don't load , so the new path will be:

HKEY_CURRENT_USER\Control Panel\don't load
OR
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\don't load

3. Now in right-side pane, create new String value. Set its name to the file name of the applet which you want to hide, e.g. if you want to hide Display applet then set its name to Desk.cpl now set its value to no to hide it. If you want to show it again, either set its value to yes or simply delete the String value.

To use the above mentioned method, you'll need to know the .CPL file name of the desired applet. You can search for .CPL in Windows Search or you can use help of following list which contains .cpl file names of almost all default Control Panel applets:
Access.cpl Accessibility
Appwiz.cpl Add or Remove Programs
Bthprops.cpl Bluetooth Devices
Desk.cpl Display
Hdwwiz.cpl Add New Hardware
Inetcpl.cpl Internet Options
Intl.cpl Regional and Language Options
Joy.cpl Game Controllers
Keymgr.cpl Stored User Names and Passwords
Liccpa.cpl Licensing
Main.cpl Mouse
Mlcfg32.cpl Mail
Mmsys.cpl Sound and Audio Devices
Ncpa.cpl Network Connections
Nusrmgr.cpl User Accounts
Nwc.cpl Netware client connectivity
Odbccp32.cpl ODBC Data Source Administrator
Powercfg.cpl Power Options
Sysdm.cpl System
Telephon.cpl Phone and Modem Options
Timedate.cpl Date and Time
Sapi.cpl Speech
Wuaucpl.cpl Automatic Updates
Wscui.cpl Security Center or Action Center

B: For All Windows Versions except Windows 95, 98 & Me

1. Type regedit in RUN dialog box and press Enter. Now go to:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies

2. Look for a key "Explorer" under it. If its not present, then create a new one and give it name Explorer.

3. Select "Explorer" key and in right-side pane, create a new DWORD value DisallowCpl and set its value to 1

4. Now create another new key under Explorer key with the name DisallowCpl so the new path will be:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer\DisallowCpl

5. Select "DisallowCpl" key and in right-side, create new String value with name 1 and set its value to the applet name which you want to hide.You don't need to use the .cpl file name of applet in this method. You have to put the applet label which you see in Control Panel.

e.g., If you want to hide AutoPlay applet, then create a new String value, give it name 1 and set its value to AutoPlay. If you want to hide more applets, then simply create more String values with names 2, 3 and so on and set their values to the applet label.

C: For All Windows Versions except Windows 95, 98 & Me

In this method, you'll tell Windows which applets should be visible and Windows will automatically hide the rest.

Its useful when you want to show a few specific applets and want to hide remaining applets. So you just need to create a few String values to tell Windows which applets you want to show. It'll save your valuable time.

1. Type regedit in RUN dialog box and press Enter. Now go to:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies

2. Look for a key "Explorer" under it. If its not present, then create a new one and give it name Explorer.

3. Select "Explorer" key and in right-side pane, create a new DWORD value RestrictCpl and set its value to 1

4. Now create another new key under Explorer key with the name RestrictCpl so the new path will be:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ Explorer\RestrictCpl

5. Select "RestrictCpl" key and in right-side, create new String value with name 1 and set its value to the applet name which you want to show.You don't need to use the .cpl file name of applet in this method. You have to put the applet label which you see in Control Panel.

e.g., If you want to show AutoPlay applet, then create a new String value, give it name 1 and set its value to AutoPlay. If you want to show more applets, then simply create more String values with names 2, 3 and so on and set their values to the applet label.

Now Windows will only show the applets which you mentioned in String values, other applets will be hidden.

D: For Windows 95, 98 & Me

1. Open "%windir%\Control.INI" file. Where "%windir%" denotes Windows folder which is present in system drive where Windows is installed.

2. You'll see a line saying [don't load] in the file. If you can't find it, then create a new line at last.

3. Now under this line, you can set .CPL file name of your desired applet which you want to hide in following format:

filename.cpl=no

e.g.,

If you want to hide Display applet, then the syntax will be:

desk.cpl=no

You can create similar lines for other applets which you want to hide. The .CPL file name can be obtained from the list mentioned in A.

Source

Some important and useful restrictions, which can be put in Windows 2000, XP, Server 2003, Vista, Server 2008 and 7.

A. Open Registry Editor

To open Registry Editor by providing regedit command in RUN or Start menu Search box and press Enter.

B. Create Registry Key

Go to following keys:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\System

1. Restricting Desktop Properties

Create or modify required DWORD value: NoDispCPL and set its value to 1

2. Restricting Task Manager

Create new DWORD DisableTaskMgr and set its value to 1

3. Restricting Registry Editor

Create new DWORD DisableRegistryTools and set its value to 1

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

4. Restricting Taskbar Properties

Create new DWORD NoSetTaskbar and set its value to 1

5. Restricting System Properties

Create new DWORD NoPropertiesMyComputer and set its value to 1

6. Restricting Folder Options

Create new DWORD NoFolderOptions and set its value to 1

7. Restricting Control Panel

Create new DWORD NoControlPanel and set its value to 1

8. Restricting Locking/Unlocking of Taskbar

Create new DWORD LockTaskbar and set its value to 1

9. Restricting right-click on Taskbar

Create new DWORD NoTrayContextMenu and set its value to 1

10. Restricting Toolbars in Taskbar

Create new DWORD NoToolbarsOnTaskbar and set its value to 1

11. Restricting drag-and-drop and right-click in Start Menu

Create new DWORD NoChangeStartMenu and set its value to 1

12. Restricting RUN in Start Menu

Create new DWORD NoRun and set its value to 1

13. Restricting Shut Down, Restart, Sleep and Hibernate commands

Create new DWORD NoClose and set its value to 1

14. Restricting Log off in Start Menu

Create new DWORD StartMenuLogOff and set its value to 1

15. Restricting Active Desktop Feature

Create new DWORD NoActiveDesktop and set its value to 1

16. Restricting adding/removing items to/from Toolbars

Create new DWORD NoToolbarCustomize and set its value to 1

17. Restricting adding/removing Toolbars

Create new DWORD NoBandCustomize and set its value to 1

18. Restricting notification at low disk space

Create new DWORD NoLowDiskSpaceChecks and set its value to 1

19. Restricting Command Prompt

Go to following key:

HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System

Create new DWORD DisableCMD and set its value to 2

20. Restricting Writing to USB Drives

Go to following key:

HKEY_LOCAL_MACHINE\SYSTEM\Current Control Set\Control\StorageDevicePolicies

Create new DWORD WriteProtect and set its value to 1

21. Restricting "New" option in context menu

Go to following key:

HKEY_CLASSES_ROOT\Directory\Background\shellex\ContextMenu Handlers\New

And delete the value of Default, e.g., empty it.

22. Restricting "Send To" option in context menu

Go to following key:

HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\ContextMenu Handlers\Send To

And delete the value of Default, e.g., empty it.

23. Restricting any desired application

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer\DisallowRun

Create new String value with any name, like 1 and set its value to the desired program's EXE file.

e.g., If you want to restrict msconfig, then create a String value 1 and set its value to msconfig.exe. If you want to restrict more programs, simply create more String values with names 2, 3 and so on and set their values to the program's exe file.

24. Restricting Drives in My Computer

Go to following key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

In right-side pane, create new DWORD NoViewOnDrive and change its value as following:

3 : To Restrict A and B drives only.
4 : To Restrict C drive only.
7 : To Restrict A, B, and C drives only.
8 : To Restrict D drive only.
F : To Restrict A, B, C, and D drives only.
03FFFFFF : To Restrict all drives.

If you want more specific restrictions, like you want to restrict a combination of drives, you can use decimal no. instead of hexadecimal no. Following is a list for all drives decimal no.:

A: 1
B: 2
C: 4
D: 8
E: 16
F: 32
G: 64
H: 128
I: 256
J: 512
K: 1024
L: 2048
M: 4096
N: 8192
O: 16384
P: 32768
Q: 65536
R: 131072
S: 262144
T: 524288
U: 1048576
V: 2097152
W: 4194304
X: 8388608
Y: 16777216
Z: 33554432
ALL: 67108863

*So if you want to disable a combination of drives, just sum their numbers and give the same value to NoViewOnDrive. e.g., for restricting C, D, E and F drives, give the value: 4+8+16+32 = 60

*You can also hide the drives using NoDrives DWORD value. The location and its value remain same as the above trick.

*If you want to remove the restriction, simply delete the DWORD or set its value to 0

Tweaks- for change in Windows Desktop and My Computer Context Menu

* For Change in Desktop Context Menu

HKEY_CLASSES_ROOT\DesktopBackground\Shell

* For Change in My Computer Context Menu

HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell

Add your name at top of the menu and can open any program, Explorer, Documents folder or User Accounts by clicking on it in Windows 7 Desktop Context Menu

Steps:

1. Type regedit in RUN or startmenu search box and press Enter. It'll open Registry Editor.

2. Now go to:

HKEY_CLASSES_ROOT\DesktopBackground\Shell

3. Now we'll need to create a new key under "Shell" key. Right-click on "Shell" key and select "New -> Key". Give the new key any desired name e.g. "Yash" (without quotes).

4. Now in right-side pane, change value of "Default" to your desired name which you want to show in Desktop context menu. We have chosen !!~~YASH~~!! in our example.

5. Now right-click on the new key which we created in step 3, e.g. Yash and select "New -> Key". Give the new key name of command.

6. In right-side pane, change value of "Default" to explorer.exe if you want to open Explorer by clicking on it.

7. To set an icon for the shortcut, select the key created in Step 3 and in right-side pane, create a new String value "Icon". Set its value to your desired icon. We have set it to imageres.dll,207.

*To set its position in the context menu, create a new String value "Position" and set its value to:

Top (To show it at top)
Bottom (To show it at bottom)

Add "System Properties", "Task Manager" and Many Other Useful Shortcuts in Windows 7 Desktop Context Menu

Steps:

1. & 2. are same

3. Now we'll need to create a new key under "Shell" key. Right-click on "Shell" key and select "New -> Key". Give the new key any desired name e.g. "Folder Options" (without quotes).

4. Now we'll need to create another new key. Right-click on the new key which we created in the last step e.g. Folder Options and select "New -> Key". Give the new key name of "command".

5. Now select "command" key and in right-side pane, you'll see "Default" String value. Double-click on it and set its value to as following:

control folders

6. That's it. Now you'll have a new option "Folder Options" in Desktop context menu.

7. You can use the same steps 3-5 to add other options. Simply give the desired option label in Step 3 and set the required command in Step 5. Following are the required codes which you'll need to provide as "command" in step 5:

Administrative Tools: control admintools

Change Cursor: control main.cpl,,1

Change Date / Time: control timedate.cpl

Change Regional Settings: control intl.cpl

Folder Options: control folders

Fonts: control fonts

Internet Options: control inetcpl.cpl

Network Connections:control ncpa.cpl

Power Options: control powercfg.cpl

Printers: control printers

Programs and Features: control appwiz.cpl

Registry Editor: regedit

Security Center: control wscui.cpl

Security Configuration: msconfig

System Properties: control sysdm.cpl

Task Manager: taskmgr

Task Scheduler: Control schedtasks

Turn Firewall On / Off: control firewall.cpl

User Accounts: Control userpasswords

User Accounts Classic: Control userpasswords2

8. That's it.

9. You can add any other desired control panel applet using the same way.

Add any application shortcut in desktop context menu of Windows

Steps:

1. to 4. are same

5. Now select "command" key and in right-side pane, you'll see "Default" String value. Double-click on it and set its value to as following:

C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Winamp\winamp.exe
etc...

6. Thats it. Now you can check your favorite application shortcut in desktop context menu.

7. You can create as many shortcut as you want. Simply create a separate key for all the applications.

Add Cascading Menus in Desktop Context Menu:

PART 1: Creating cascading menus and adding programs shortcuts

1. & 2. are same

3. Now we'll need to create a new key under "Shell" key. Right-click on "Shell" key and select "New -> Key". Give the new key any desired name e.g. "Menu1" (without quotes).

4. Now select this newly created key "Menu1" and in right-side pane, we'll need to create following 4 String values:
MUIVerb
SubCommands
Icon
Position

* Icon and Position are optional but MUIVerb and SubCommands are compulsory.

* MUIVerb contains the name of cascading menu which will be displayed in the context menu. You can set its value to any desired name like Apps, Browsers, etc. Feel free to set any name.

* SubCommands contains list of commands separated by semi-colon (;) which you want to show under cascading menu. You can't add any program shortcut directly. First you'll need to give any desired command name in this list and after that you'll need to register it using PART 2 so that it can start working.

5. If you are confused about "SubCommands" String value, this point will clear all your doubts.

Suppose you have created a cascading menu "Apps" using Step 3 and now you want to add Notepad and Calculator shortcuts under it. In this case, you'll need to set following as "SubCommands" value:

notepad;calc

Above value can be changed according to your requirement. You can use np;ca instead of notepad;calc. But you'll have to use the same name while registering those commands using PART 2.

* If you want to put a separator between menus, just use Pipe symbol (|) between commands. For example, notepad;|;calc.

6. Icon String value can be used to show an icon for your cascading menu. We have set its value to explorer.exe that's why its showing Windows Explorer icon for the "Apps" cascading menu.

7. Position String value can be used to define the position of cascading menu in the context menu. By default the cascading menu is shown in the middle but you can set its position at Top or Bottom with the help of "Position" String value.

8. You can create more than one cascading menus using Step 3 and 4.

PART 2: Adding functionality to the shortcuts by registering them

Once you have added the program shortcuts to cascading menus, you'll need to register the commands mentioned in "SubCommands" String value using following method:

1. Go to following key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\CommandStore\Shell

2. Under this key, we'll need to create new keys for each command mentioned in "SubCommands" String value.

We used 2 commands : notepad and calc, so we'll need to create 2 keys under "CommandStore\Shell" key with the same names notepad and calc.

3. Once you create the key, select it and in right-side pane set value of "(Default)" to the name which you want to show in cascading menu. For example set its value to Notepad or Calculator or any other desired string.

4. If you also want to show an icon for it, create a new String value with the name icon and set its value to program's EXE file path or any other desired icon. For example, to show Notepad icon for Notepad shortcut, you can set value of Icon to notepad.exe

5. Now final step! Create a new key under the recently created keys, e.g. notepad or calc and give it name command.

Click on it and in right-side pane, set value of "(Default)" to the path of your desired program's EXE file. For example, if you want to open Notepad when you click on "Notepad" entry in cascading menu, set value of "Command" to notepad.exe

* Notepad is a Windows application, so you can omit the full path but if you want to execute any 3rd party program, you should give full path of its EXE file.

That's it. Now you'll see your desired cascading menus containing your favorite programs shortcuts in Desktop context menus.

* Define the shortcut icon and position.

To set an icon for the shortcut, select the key created in Step 3 and in right-side pane, create a new String value "Icon". Set its value to your desired icon or simply put the path of program's EXE file and it'll automatically show its default icon.

To set its position in the context menu, create a new String value "Position" and set its value to:

Top (To show it at top)
Bottom (To show it at bottom)

*To remove any option, simply delete its key.

Hide user name for the user that has locked the computer:

1. Start Registry Editor.

2. Locate the following key in the registry:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System

3. If it doesn't exist, on the Edit menu, point to New, click DWORD Value, and then add the following registry values:

Value name: DontDisplayLockedUserId

Value data: 1, 2 or 3 (see below)

Base: Decimal

The following values can be set:
1 = Show the locked user display name and the user ID
2 = Show the locked user display name only
3 = Do not display the locked user information

4. Exit Registry Editor.

Note: To prevent the last logged on user to be displayed in the Windows logon screen, also set the dontdisplaylastusername value and set it to 1.

To repair Windows Advance Option (F8)

The reason for corrupt of Windows Advance Option - Safe mode & other are not work (system restart or error of BSOD) is Virus. Some Virus remove the Windows Advance Option Menu Setting.

To resolve the issue:

The registry keys to boot into Safe Mode are under the SafeBoot key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot

You can boot into Safe Mode without or with networking, there is a subkey for each mode: Minimal (no networking) and Network (with networking).

Each device, driver or service that has to be started has a subkey under the Minimal or Network key.

If you want to disable a device, driver or service in Safe Mode, just delete the corresponding subkey (make a backup first).
I tested this with key {4D36E965-E325-11CE-BFC1-08002BE10318} (resulted in a disabled CD-ROM drive) and PlugPlay (resulted in a disabled Plug and Play service).

I compared several SafeBoot registry keys for Windows XP SP2 on different hardware platforms, and they were all identical. However, there were some small differences when comparing different operatings systems (Windows XP SP1, SP2 and Windows 2003 SP1). Remember that Safe Mode was introduced with Windows 2000.
These are minor differences, just listing devices, drivers or services that are only present on one version of Windows. For example, I found Volume shadow copy on a Windows 2003 and not on Windows XP. And Windows 2003 also had less network services than Windows XP, this is probably a result of the default hardening of Windows 2003: more services and applications are disabled by default on Windows 2003 than on Windows XP.

To repair you PC for Working of Windows Advance Option Menu insert or check the safe mode registry setting is there if not insert it. If you want to insert the Safe Mode default registry setting than download the attachment & Import it.

Download

Source

A list of all the standard services

ServiceName	Service (Key)	Process	Description	Default Status & notes
Alerter	Alerter	Services.exe [HKLM\SYSTEM\ CurrentControlSet\ Services\Alerter\Parameters] [HKLM\SYSTEM\ CurrentControlSet \Services\SysmonLog\Log Queries\<alertname>]	Distribute administrative alerts to specific users or machines. e.g. Performance Monitor thresholds are distributed as alerts. Requires the Messenger and Workstation services to be started.	Manual. May be disabled if the alerts are not needed.
Application Layer Gateway Service	ALG	alg.exe	Support for Internet Connection Sharing and theInternet Connection Firewall	Manual
Application Management	appmgt	Services.exe or svchost.exe	Installation services (Add/Remove Programs) - Assign, Publish, and Remove.	Manual
Automatic Updates	wuaUserv	svchost.exe -k wugroup	Enable the download and installation of critical Windows updates.	Automatic. If the service is stopped, the operating system can be manually updated at the Windows Update Web site.
Background Intelligent Transfer Service	BITS	svchost.exe -k BITSgroup	Transfer files using idle network bandwidth, maintain file transfers through network disconnections and computer restarts.	Automatic switch to manual if you have problems - Q314862
Clipbook Server	Clipsrv	Clipsrv.exe	Provides support for the Clipbook Viewer, which allows the clipboard of the source machine to be accessed remotely.	Disabled
COM+ Event System	Event System	svchost.exe -k netsvcs	Automatic distribution of events to subscribing COM components.	Manual
Computer Browser	Browser	Services.exe	Collects the names of NetBIOS resources on the network, creating a list so that it can participate as a master browser or basic browser (one that takes part in browser elections). This maintained list of resources (computers) is displayed in Network Neighborhood and Server Manager. If disabled you can still map drives, but can't browse the whole network.	Automatic. If the machine is not connected to a LAN (stand-alone), or will not participate as a master browser or take part in elections, then feel free to change the status to manual (or disabled) This does not equate to disabling TCP/IP so internet browsing is still possible.
Cryptographic Services	CryptSvc	svchost.exe	Management of Certification Authority certificates. Driver Catalog Database, Protected Root and Key certificate Services.	Automatic
DCOM Server Process Launcher	DcomLaunch	svchost.exe	Launch DCOM services	Automatic
DHCP Client	Dhcp	Services.exe or svchost.exe	Manage network configuration by registering and updating IP addresses and DNS names.	Automatic On a stand-alone machine: Disable
Distributed Link Tracking Client	TrkWks	Services.exe or svchost.exe	Send notification of files moving between NTFS volumes in a network domain.	Automatic Can be set to manual if you dont need this function.
Distributed Transaction Coordinator	msdtc	MSDTC.exe	Coordinate transactions that are distributed across two or more databases, message queues, file systems, or other transaction protected resource managers.	Manual Can be set to Disabled if you dont need this function.
DNS Client	Dnscache	Services.exe	Resolves and caches Domain Name System (DNS) names.	Automatic
Directory Replicator (Server only)	Replicator	Lmrepl.exe	Replicate specified files & folders between computers. The host is the export server, and the target machines are called import computers. Replication is configured under Server in the Control Panel.	Automatic Domain Controllers need this to replicate the Netlogon share.
Error Reporting Service	Ersvc	svchost.exe	Report errors back to Microsoft in Redmond.	Automatic If you never want to report system crash info. to Microsoft set this to disabled.
EventLog	EventLog	Services.exe	Record System, Security, and Application Events. Viewed with the MMC Event Viewer (eventvwr.exe in NT).	Automatic
Fast User Switching Compatibility	FastUserSwitching Compatibility	svchost.exe	Enable multiple users to login to the same PC simultaneously.	Manual
Fax Service	Fax	faxsvc.exe	Send and receive faxes	Automatic or Manual
Help and Support	helpsvc	svchost.exe	Help and Support Center	Automatic. If stopped the help system will stop working.
Human Interface Device Access	HidServ	svchost.exe	Support for extra keyboard 'hot buttons' and other multimedia input devices.	Disabled
HTTP SSL	HTTPFilter	svchost.exe	Support for HTTPS (Secure Socket Layer) websites such as banking and e-commerce.	Manual
IMAPI CD-Burning COM Service	ImapiService	imapi.exe	CD-Rom Burning	Manual If you have problems changing to Automatic may help.
Indexing Service	cisvc	cisvc.exe	Index the contents and properties of files on local and remote computers. [ RESOURCE HOG ]	Manual For improved performance Disable or Uninstall thru C.Panel add/remove
IPSEC Policy Agent	PolicyAgent	lsass.exe	Manage IP security policy and starts the ISAKMP/Oakley (IKE) and the IP security driver.	Automatic May be changed to Manual if IPSec is not needed.
License Logging Service (Server)	LicenseService	Llssrv.exe	License tracking on a server or DC (Domain Controller).	If disabled then licensing status alerts will not be generated.
Logical Disk Manager	Dmserver	services.exe or svchost.exe	Required by the MMC Disk Management plug-in.	Automatic
Logical Disk Manager Administrative Service	Dmadmin	dmadmin.exe /com	Administrative service for disk management requests	Manual
Message Queuing		mqsvc.exe	Message Queuing
Message Queuing Triggers		mqtgsvc.exe	Message Queuing
MS Software Shadow Copy Provider Service	swprv	dllhost.exe	Microsoft Backup Utility	Manual Disable if you never use Shadow Copy features.
Messenger	Messenger	Services.exe	Process the receipt or delivery of pop-up messages sent via NET SEND. Not related to Windows Messenger	Disabled vulnerability once used to send pop-up spam.
Network Connections	Netman	svchost.exe -k netsvcs	Manage objects in the Network and Dial-Up Connections folder (LAN and remote connections.)	Manual
Net Logon	Netlogon	Lsass.exe (Local Security Authority Subsystem)	Network Authentication: maintains a synced domain directory database between the PDC and BDC(s), handles authentication of respective accounts on the DCs, and authenticates domain accounts on networked machines.	Automatic For stand-alone machines never connected to a domain set to Manual.
NetMeeting Remote Desktop Sharing	Nmnsrvc	mnmsrvc.exe	Allows authorized people to remotely access your Windows desktop using NetMeeting.	Manual. A good idea to Disable unless you plan to allow remote connections.
Network DDE	NetDDE	Netdde.exe	Support the network transport of DDE (Dynamic Data Exchange) connections. Requires Network DDE DSDM to be started. See Clipbook service	Disabled
Network DDE DSDM	NetDDEdsdm	Netdde.exe	Manage shared DDE conversations (from shares like: \\computername\ndde$). See Clipbook service	Disabled
NLA - Network Location Awareness	nla	svchost.exe	Part of Internet Connection Sharing (ICS) and the Internet Connection Firewall (ICF)	Manual
Network Provisioning Service	xmlprov	svchost.exe	Manage XML configuration files on a domain basis	Manual
NT LM Security Support Provider	NtLmSsp	Services.exe	Extends NT security to Remote Procedure Call (RPC) programs using various transports other than named pipes. RPC activity is quite common, and most RPC apps don't use named pipes.	Manual
Performance Logs and Alerts (XP) Alerts and Performance Logs (Win 2K)	sysmonLog	smlogsvc.exe	Configure performance logs and alerts.	Manual. May be disabled if the alerts are not needed.
Plug and Play	PlugPlay	Services.exe	Plug and Play. Do not disable this service.	Automatic
Universal Plug and Play Host	UPNPhost	svchost.exe	Device Host detect and configure external UPnP devices. UPnP<>PnP	Manual
Portable Media Serial Number Service	WmdmPmSN	svchost.exe	Retrieves the serial number of any portable media player connected to this computer.	Manual Disable if you never use DRM music devices.
Print Spooler or Spooler	Spooler	Spoolsv.exe (Spoolss.exe in NT4)	The NT printing subsystem.	Automatic - If you print documents. If no printing is ever done set to manual (or disabled) Restarting this service will cancel all pending print jobs.
Protected Storage	ProtectedStorage	Pstores.exe	Encrypt and store secure info: SSL certificates, passwords for Outlook, Outlook Express, Profile Assistant, MS Wallet, and digitally signed S/MIME keys.	Automatic.
QoS RSVP	rsvp	rsvp.exe -s	Provide network signaling and local traffic control setup functionality for QoS-aware programs and control applets.	Manual
Remote Access Auto Connection Manager or Remote Access AutoDial Manager	Rasauto	svchost.exe -k netsvcs	Activates automatic dial-up when a URL link is clicked. Required for some but not all RAS, ADSL or Cable connections.	Manual May be disabled if the machine has no internet access.
Remote Access Connection Manager	Rasman	svchost.exe -k netsvcs	Required for most but not all RAS, ADSL or Cable connections.	Manual. Required for Internet Connection Sharing or accessing remote servers via RAS.
Remote Desktop Help Session Manager	RDSessMgr	sessmgr.exe	Remote Desktop Help Session Manager.	Manual May be disabled if RDP is never used.
Remote Procedure Call (RPC) Service or Remote Procedure Call (RPC)	RpcSs	svchost -k rpcss	This RPC subsystem is crucial to the operations of any RPC activities taking place on a system (e.g. DCOM)	Automatic Do not disable Many essential services are dependent on RPC.
Remote Procedure Call (RPC) Locator	RpcLocator	Locator.exe	Maintain the RPC name server database, requires the RPC service (below) to be started. Database of available server applications.	Manual.
Remote Registry Service (XP Pro only)	RemoteRegistry	regsvc.exe	Allow remote registry manipulation.	Automatic A good idea to disable this, unless you have some reason to allow remote registry editing.
Removable Storage	Ntmssvc	svchost.exe -k netsvcs	Manage removable media, drives, and libraries.	Manual.
RIP Listener (XP - option)			Listen for RIP announcements from routers and modify the routing table accordingly.	To use the RIP Listener service, your adjacent routers must support the RIP v1 protocol. You'll find the RIP Listener service under Add/Remove Windows Components - Networking Services.
Routing and Remote Access	RemoteAccess	svchost.exe -k netsvcs	Allow incoming connections via dial in or VPN. (WAN Routing)	Disabled
Secondary Logon (Win XP) RunAs (Win 2K)	secLogon	services.exe or svchost.exe	Enables starting processes under alternate credentials.	Automatic You may want to stop this service if you never use RunAs
Security Accounts Manager (Win 2K)	SamSs	lsass.exe	Stores security information for local user accounts.	Automatic
Security Center	wscsvc	svchost.exe	Monitor system security settings and configurations.	Automatic You may want to disable this if firewall and virus updates are controlled via other means.
Server	LanmanServer	Services.exe	Support for peer-to peer file sharing, print sharing, and named pipe sharing via SMB services.	Automatic May be disabled if you dont host file or print shares. (Admin$ shares)
Shell Hardware Detection	ShellHWDetection	svchost.exe	CD Autoplay	Automatic.
Smart Card	ScardSrv	SCardSvr.exe	Manages and controls access to a smart card inserted into a smart card reader attached to the computer.	Manual If you never use smart cards, Disable
Smart Card Helper	ScardDrv	SCardSvr.exe	legacy smart card readers	Removed in XP SP2
SNMP Service	Snmp	snmp.exe	Agents that monitor the activity in network devices and report to the network console workstation.	Automatic (if installed)
SSDP Discovery Service	SSDPSRV	svchost.exe	Simple Service Discovery Protocol. Enables discovery of UPnP devices on your home network	Manual May be disabled if as is likely you dont have any UPnP devices)
System Event Notification	SENS	svchost.exe -k netsvcs	Track system events such as Windows logon, network, and power events. Notifiy COM+ Event System subscribers of these events.	Automatic.
System Restore Service	srservice	svchost.exe	Creates system snap shots. [ RESOURCE HOG ]	Automatic If the machine's configuration has been cloned/backed up - turn off System Restore in Control Panel, System.
Task Scheduler or Schedule	Schedule	atsvc.exe or mstask.exe	This service is required to schedule background tasks (run at a specific date & time) Under NT it's a Resource Hog. Under XP it's used by some auto-tuning operations.	Automatic
TCP/IP NetBIOS Helper or TCP/IP NetBIOS Helper Service	lmHosts	Services.exe	Support for name resolution in a Windows 2000 domain . (Netbios/Wins) An alternative to DNS lookup.	Automatic If not required may be set to manual.
Telephony	TapiSrv	Tapisrv.exe	Telephony API (TAPI) support for programs that control telephony devices and IP based voice connections. e.g unimodem modems.	Manual
Telnet (Win 2K)	TlntSvr	tlntsvr.exe	Allows a remote user to log on to the system and run console programs using the command line.	Disabled Very insecure, presents a security risk when running.
Terminal Services	TermService	svchost.exe	Required for Fast User Switching, Remote Desktop and Remote Assistance	Manual If not required may be Disabled
Themes	Themes	svchost.exe	XP Active Desktop Themes, and quick launch toolbars [ RESOURCE HOG ]	Automatic Set to Manual or Disabled if you dont like themes.
UPS or Uninterruptible Power Supply	UPS	Ups.exe	Support for an Uninteruptable Power Supply (UPS) physically connected to the machine.	Manual Not every UPS will need or use this service.
Universal Plug and Play Host	UPNPhost	svchost.exe	Device Host detect and configure external UPnP devices. UPnP<>PnP	Manual
Upload Manager	uploadmgr	svchost.exe	Upload Manager.	Removed in XP SP2
Volume Shadow Copy	VSS	vssvc.exe	MS Backup - A volume shadow copy is a picture of the volume at a particular moment in time. That means a computer can be backed up while files are open and applications running.	Manual If not required may be disabled see MS Software Shadow Copy Provider Service
WebClient	WebClient	svchost.exe	Allow access to web-resident disk storage from an ISP. WebDAV "internet disks" such as Apple's iDisk.	Automatic If not required may be disabled
Windows Audio	AudioSrv	svchost.exe	Sound Driver Note that disabling the sound driver won't stop sounds from playing - you just won't hear them.	Automatic If no sound card fitted then disable.
Windows Firewall (XP SP2) Internet Connection Firewall (XP) Internet Connection Sharing (Win 2K)	SharedAccess	svchost.exe -k netsvcs	Network address translation, addressing, and name resolution services for all computers on your home network through a dial-up connection.	Automatic. For better protection consider adding a third party firewall.
Windows Image Acquisition	stisvc	svchost.exe	Required for some but not all cameras, scanners, and digital video cameras.	Manual
Windows Installer	MSIServer	MsiExec.exe /V	Install, repair and remove software according to instructions contained in .MSI files.	Manual
Windows Management Instrumentation	WinMgmt	C:\WINNT\System32 \WBEM\WinMgmt.exe	WMI provides system management information.	Automatic
Windows Management Instrumentation Driver Extensions	Wmi	svchost.exe	Provides systems management information to and from drivers.	Manual
Windows Time	W32time	services.exe	Update the computer clock by reference to an internet time source or a time server.	Automatic
Wireless Zero Configuration	WZCSVC	svchost.exe	Configure wireless network devices (802.11a/b/g).	Automatic disable if you don't have any wireless devices.
WMI Performance Adapter	WmiApSrv	wmiapsrv.exe	Collect performance library information.	Manual
Workstation	lanmanworkstation	Services.exe	Communications and network connections. Services dependent on this being started: Alerter, Messenger, and Net Logon.	Automatic

It is inadvisable to disable a service without being aware of the consequences,

always start by setting the service to manual,

reboot and test for any problems.

A service set to manual may be automatically restarted if another service is dependent on it.
A service set to disabled will not restart even if it's required to boot the machine!

Stopping or disabling a service will generally save a small amount of memory and will reduce the number of software interrupts (cpu message queue.)

The main reason for tinkering with services is to harden the system against security vulnerabilities. Disable everything that you don't need or use -

then any future problems with those services cannot affect the machine.

To document all the services currently installed:

SC QUERY state= all |findstr "DISPLAY_NAME STATE" >my_services.csv

Some XP services communicate and send data directly to Microsoft, this is not generally something to lose sleep over.

Managing the running of these services may be a consideration if confidentiality/anonymity is highly important to you.

Removing a service completely

To delete a service, you may be tempted to hack the registry settings under (HKLM/SYSTEM/CurrentControlSet/Services)

this is not a reliable or recommended method, far better is to use the SC command:

SC delete NameofServiceTodelete

Built-in Service Accounts

In addition to other Default User & Group accounts there are 3 built-in accounts, designed for running background services.

Local Service Account (NT AUTHORITY\LOCAL SERVICE) - has the same level of access to resources and objects as

members of the Users group. This limited access helps safeguard the system if individual services or processes are compromised.

Services that run as the Local Service account access network resources as a null session without credentials.

(This account is not supported for running SQL Server services.)

Network Service Account (NT AUTHORITY\NETWORK SERVICE) - has more access to resources

and objects than members of the Users group. Services that run as the Network Service account access

network resources by using the credentials of the computer account.

Local System Account (NT AUTHORITY\SYSTEM) - a very high-privileged built-in account. It has extensive privileges on the local system and acts as the computer on the network.

In Windows 2008 a new feature was introduced: Managed Service Accounts which provide aut

omatic password management and simplified service principal name (SPN) management.

These accounts are created in Powershell with New-ADServiceAccount

Enable or Disable Ports
Many services and applications rely on the use of a specific PORT - to determine if a particular port is enabled for use, review the list of Service names and port numbers held in the "services" file ('windows\system32\drivers\etc\services')
Installing a good firewall is the easiest way to manage this.

Source

---