Path: csiph.com!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!eternal-september.org!.POSTED!not-for-mail From: Paul Newsgroups: alt.comp.os.windows-10 Subject: Re: Disabling unneeded services in Windows 10 Date: Fri, 17 Jan 2025 21:07:47 -0500 Organization: A noiseless patient Spider Lines: 54 Message-ID: References: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Injection-Date: Sat, 18 Jan 2025 03:07:50 +0100 (CET) Injection-Info: dont-email.me; posting-host="1f9033e5c9efe9dd8685b726c5f9909b"; logging-data="416748"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18gloZFZMaNwNh7XMtY33PRbY14lV9WQCs=" User-Agent: Ratcatcher/2.0.0.25 (Windows/20130802) Cancel-Lock: sha1:iQhUVe3wbX5X8o2JiDLj1m5O0OI= Content-Language: en-US In-Reply-To: Xref: csiph.com alt.comp.os.windows-10:181517 On Fri, 1/17/2025 7:25 PM, Steve Hayes wrote: > On Fri, 17 Jan 2025 08:18:44 -0500, Newyana2 > wrote: > >> On 1/16/2025 8:32 PM, MR wrote: >>> On 16/01/2025 11:44, John C. wrote: >>>> I am planning on disabling unnecessary services on my Windows 10 Pro >>>> computer. >>> >>> Very good idea. You can then blame Indians and Chinese if your computer >>> doesn't work as expected. >>> >> >> Do you just assume that Microsoft knows best in all things? >> Did you know that "Retail Demo" service is enabled by default? >> That's for setting a computer to be a sample in Staples. Windows >> computers are assumed to be corporate workstations (or retail >> demos). Even the "Home" version. They're set up accordingly. For >> better security and efficiency, adjusting services can be useful. > > Though that is true, I look at the list of Windows services and have > no idea what most of them are used for. I'm reluctant to mess with > things that I know too little about. Just the names are annoying. They changed one of them to "SysMain". https://en.wikipedia.org/wiki/List_of_Microsoft_Windows_components "Superfetch SysMain Monitors file usage patterns and boosts system speed by caching frequently accessed files to RAM[19]" If you have a SATA SSD or an NVMe, then you could disable that without too much of an issue. I sometimes shut that down, when a Windows Update is not progressing at an acceptable speed. That's when I start pushing buttons on my Fisher Price operating panel :-) One you *can't* shut down is RPC. First of all, it won't let you. Second of all, if you attack while the OS is offline, then it's not going to finish booting. That is Remote Procedure Call, and when it makes a remote call to 127.0.0.1 then it is a Local Procedure Call in effect. Because RPC is "used for everything", it is now so indispensable, it cannot be removed. That is some examples of the extremes. If you damage LSASS or CSRSS, the OS shuts down in 60 seconds. The Sasser malware attacked one of those, years ago. The list is huge, and I expect this will make an excellent hobby for someone :-) Paul