By Scott Lowe
One of the most effective ways to secure a Windows workstation is to turn off unnecessary services. This reference sheet lists the Windows XP SP 2 services, describes each service's function, specifies whether you can safely disable the service, and outlines the ramifications of disabling the service. The list assumes the machines is running Windows XP SP2 in a corporate network environment. The list offers one of the following three possibilities for safely disabling each service:
• YES = You can disable the service without causing any problems.
• MAYBE = The computer's role dictates whether you should or should not disable the service--read the special considerations for further information.
• NO = The service is critical to proper Windows operation and should not be disabled.
Service
Description
Safely Disable?
Ramifications if disabled
Suggested setting
Special Considerations
Alerter
Notifies selected users and computers of administrative alerts
Yes
Programs that use administrative alerts will not receive them.
Disable
Application Layer Gateway
Provides support for application-level protocol plug-ins and enables network/protocol connectivity
Maybe
Programs that rely on this service, such as MSN Messenger and Windows Messenger will not function.
Enable
Only enable when using the Windows firewall or another firewall. Failure to do so can result in a significant security hole.
Application Management
Processes installation, removal, and enumeration requests for Active Directory IntelliMirror group policy programs
Yes
Users will be unable to install, remove, or enumerate any IntelliMirror programs.
Disable
Automatic Updates
Enables the download and installation of critical Windows updates
Yes
The operating system cannot automatically install updates, but can still be manually updated at the Windows Update Web site.
Enable
Automatic updates help keep your computer current. If you do disable the service, perform regular, manual updates.
Background Intelligent Transfer
Transfers data between clients and servers in the background
Yes
Features such as Windows Update will not work properly.
Disable
Enable this services if you enable Automatic Updates.