WinXP common system service introduction (8)

Display name: Remote Registry
Process name: svchost.exe -k LocalService
Microsoft Description: Enable remote users to modify the registry settings on this computer. If this service is terminated, only users on this computer can modify the registry. If this service is disabled, any services that depend on it will not be able to start.
Supplement: Remote login registry service. Allow remote users to log in to the machine with permission and modify the registry settings. In general, this service is rarely used, and it adds unnecessary danger to your computer, so it is also banned.
Relying on this item: Remote Procedure Call (RPC)
Default: Auto
Setting Suggestion: Disable

Display Name: Removable Storage
Process Name: svchost.exe -k Netsvcs
Microsoft Description: No
Supplement: Removable storage device. Unless you have a Zip disk drive or a portable hardware such as USB or a Tape backup device, you can try to turn it off. There are a lot of devices in this area, so I recommend it.
Relying on this item: Remote Procedure Call (RPC)
Default: Manual
Setting Suggestion: Manual

Display Name: Routing and Remote Access
Process Name: svchost.exe -k netsvcs
Microsoft Description: Provides routing services for enterprises in LAN and WAN environments.
Additional note: Routing and remote access provide dial-up connection to the network or VPN service, which is not used by ordinary users and can be closed.
Depends on the service of this item: Remote Procedure Call (RPC), NetBIOSGroup
Default: Disable
Setting Suggestion: Disable
S
Display Name: Secondary Logon
Process Name: svchost. Exe -k netsvcs
Microsoft Description: Enable the enable process under the replacement credentials. This type of login access will not be available if this service is terminated. If this service is disabled, any services that depend on it will not be able to start.
Supplementary note: SecLogon (secondary login service). On computers that are used by multiple users, some users cannot perform certain programs because they are non-administrator. In order to allow logged-in users without administrator privileges to use this program, Windows XP designed this feature to assign temporary administrator privileges. The service process is named svchost.exe. Stop based on security considerations.
Default: Auto
Setting Suggestions: Manual

Display Name: Security Accounts Manager
Process Name: lsass.exe
Microsoft Description: Stores security information for local user accounts.
Additional note: Security account administrator. Manage account and group principles (gpedit.msc) application.
Responsible for this service: Remote Procedure Call (RPC), Distributed Transaction Coordinator
Default: Auto
Setting Suggestion: Auto

Display Name: Security Center
Process Name: svchost .exe -k netsvcs
Microsoft Description: Monitor system security settings and configuration.
Supplementary note: SP2 Security Center.
Default: Auto
Setting Suggestion: Disable

Display Name: Server
Process Name: svchost.exe -k netsvcs
Microsoft Description: Support this computer to print files over the network , and named pipe sharing. These features are not available if the service is stopped. If the service is disabled, any services that depend directly on this service will not be able to start.
Additional note: Simply put, the sharing of files and prints, unless you have shared with other computers, otherwise it will be closed. LAN file/print sharing is required.
Depends on the service of this item: Computer Browser
Default: Automatic
Setting suggestion: Disable

Display name: Shell Hardware Detection
Process name: svchost.exe -k netsvcs
Microsoft Description: Provides notifications for automatic playback of hardware events.
Supplementary explanation: It is generally used in mobile storage or CD devices, DVD devices, and can be turned off.
Reliance on this service: Remote Procedure Call (RPC)
Default: Auto
Setting Suggestion: Disabled unless you want to keep the autoplay feature.

Display Name: Smart Card
Process Name: SCardSvr.exe
Microsoft Description: Manage this computer's access to the smart card. If this service is terminated, this computer will not be able to read the smart card. If this service is disabled, any services that depend on it will not be able to start.
Supplementary note: smart card. Enables Windows XP to support smart card devices and manage access between PCs and smart cards. If your computer does not have a peripheral such as a smart card reader, you can turn it off, accounting for 1.4 megabytes of memory.
Depends on the service of this item: Plug and Play
Default: Manual
Setting suggestion: Disable without smart card

Display name: Smart Card Helper
Process name: SCardSvr.exe < BR>Microsoft Description: Enables support for legacy non-Plug and Play smart card readers used on this computer. If this service is terminated, this computer will not be able to support legacy readers. If this service is disabled, any services that depend on it will not be able to start.
Supplementary note: smart card. Enables Windows XP to support smart card devices and manage access between PCs and smart cards. If your computer does not have a peripheral such as a smart card reader, you can turn it off.
Default: Manual
setting suggestion: no smart card is disabled

Display name: SSDP Discovery Service
Process name: svchost.exe -k LocalService
Microsoft Description: Start your home Discovery of UPnP devices on the machine network.
Additional note: Universal Plug and Play (UPnP) allows computers to find and use devices on the network, search for devices via TCP/IP via a network connection, like a scanner on the network, Digital cameras or printers use the UPnP function, which is largely unusable based on security. But now digital devices are very popular and users who need them can keep it.
Dependent on this service: Universal Plug and Play Device Host
Default: Manual
Setting suggestion: Disabled without home multi-machine network

Display name: System Event Notification
Process Name: svchost.exe -k netsvcs
Microsoft Description: Track system events, such as logging in to Windows, networking and power events. These events are notified to the COM+ event system "subscriber".
Supplementary note: System event notification. Record user login/logout/restart/shutdown information (I know what's the use of this?), but it's especially important for servers.
Depends on the service of this item: COM+ Event System
Default: Automatic
Setting suggestion: Automatic

Display name: System Restore Service
Process name: svchost.exe -k netsvcs < BR>Microsoft Description: Perform system restore function. To stop the service, please turn off System Restore from the System Restore tab in the properties of "My Computer".
Supplement: System Restore, depending on the person, I feel that it is a waste of resources and can be turned off.
Depends on the service of this item: Remote Procedure Call (RPC)
Default: Automatic
Setting suggestion: Disable