Windows services
These are some recommended settings for your Windows services:
Start Automatically:
Cryptographic Services
DHCP Client (only required if you are using a DHCP server).
DNS Client
Event Log
Plug and Play
Protected Storage
Remote Procedure Call (RPC)
System Event Notification
Task Scheduler
Themes
Windows Audio
Windows Management Instrumentation
Windows Time
 
Disable (or start manually)
Alerter
Automatic Updates (manually update using Internet Explorer>Tools>Windows Update)
Clipbook
Error Reporting Service
Fast User Switching Compatibility
Help and Support
Human Device Interface Access
IMAPI CD-Burning COM Service
Indexing Service
IPSEC Services
NetMeeting Remote Desktop Sharing
Network DDE
Network DDE DSM
Performance Logs and Alerts
Portable Media Serial Number
Print Spooler (Set to Automatic if you have a printer installed)
Remote Desktop Help Session Manager
Remote Registry
Routing and Remote Access
Secondary Logon
Security Accounts Manager
Smart Card
Smart Card Helper
System Restore Service
TCP/IP NetBIOS Helper
Telnet
Uninterruptible Power Supply
Upload Manager
Volume Shadow Copy
WebClient
Wireless Zero Configuration
WMDM PMSP Service

WMI Performance Adapter


If in doubt, set a service to "Manual", and only start it when you actually need it.

Every process is allocated a fixed priority by Windows-XP. To change a processes priority, open the Task Manager and Right-Click on a process and select "Set Priority".

Before stopping a Service, Right-Click on it and select "Properties" and "Dependencies", and examine which others could be effected.

Note: Many people make use of Windows DNS functionality (that is integrated with the domain services), however you should be aware that Windows 2000 DNS zones will happily transfer any zone information they have to any server that asks for it. You should always alter the options to limit the servers it will respond to.

On XP-Home you can disable:
Alter - Receives Network Alerts. Not needed unless you are on a network
Automatic Updates
Computer Browser - Keeps a list of Network PC's, not needed unless on a network
DHCP Client
Distributed Transaction Coordinator - Manages transactions that span multiple resources
Indexing Service - Indexes files on local and remote computers. A single PC or a small network won't use it.
Net Login - Used for logging-in to a domain
Secondary Login - Do you need to carry out tasks under an alias.
SSDP Discovery Service - Enables detection of certain devices on a home network.
Task Scheduler - like cron, can be disabled.
Web Client - If you don't have a website and you don't have a website and don't need to modify files, you can remove it.
Wireless Zero Configuration - Not required unless you have a wireless network

Unless you are on a network you can disable:
Alerter
Net Login
DHCP Client
Computer Browser
Wireless Zero (unless on a wireless network).
Messenger

NB: Windows 2003 now comes with all locks engaged and asks you which ones you want to open.

Firewalls
If this server is to be used as a firewall, remove as much software as possible, and open the "Network Neighborhoodà Properties", and select "Services". Remove the following services:

RPC Configuration
Net BIOS Interface
Workstation, Server
Computer Browser

If required, leave the "SNMP Service". Remember that the SNMP community string should not be set to anything obvious.

Start->Programs->Administrative Tools (Common)->Windows-NT Diagnostics - Gives vital information about your computer.

Glossary of Windows 2000/XP Services
www.microsoft.com/windows2000/techinfo/howitworks/management/w2kservices.sap

BIOSCentral Beep codes: www.bioscentral.com/beepcodes/amibeep.htm