> For the complete documentation index, see [llms.txt](https://windows.dfirhandbook.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://windows.dfirhandbook.com/windows-artifacts/windows-services.md). # Windows Services | ActiveX Installer (AxInstSV) | [AxInstSV](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=AxInstSV+service+site:microsoft.com) | UAC validation to control the installation of Active-X controls via the internet. | Manual | | ---------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------- | | Agent Activation Runtime\_????? | [AarSvc\_?????](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=AarSvc_+service+site:microsoft.com) | Chatbot Runtime for activating Conversational agent applications - Clippy returns. | Manual | | AllJoyn Router Service | [AJRouter](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=AJRouter+service+site:microsoft.com) | IoT integration. | Manual (Trigger Start) | | App Readiness | [AppReadiness](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=AppReadiness+service+site:microsoft.com) | Runs at first logon to prepare apps for use. | Manual | | Application Identity | [AppIDSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=AppIDSvc+service+site:microsoft.com) | Verify Application identity, used by AppLocker. | Manual (Trigger Start) | | Application Information | [Appinfo](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=Appinfo+service+site:microsoft.com) | Facilitates running applications with additional administrative privileges. If disabled those additional privileges will not be available. | Manual (Trigger Start, Running) | | Application Layer Gateway Service | [ALG](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=ALG+service+site:microsoft.com) | Enables plugins for the now ancient internet connection sharing. | Manual | | Application Management | [AppMgmt](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=AppMgmt+service+site:microsoft.com) | Required for Group Policy software management, Not Available in Win 10 home. | Manual | | AppX Deployment Service (AppXSVC) | [AppXSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=AppXSvc+service+site:microsoft.com) | Windows Store integration. Cannot be disabled. | Manual | | AssignedAccessManager Service | [AssignedAccessManagerSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=AssignedAccessManagerSvc+service+site:microsoft.com) | Kiosk mode, Not Available in Win 10 home. | Manual | | Auto Time Zone Updater | [tzautoupdate](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=tzautoupdate+service+site:microsoft.com) | Automatically set the Time Zone. | Disabled | | AVCTP service | [BthAvctpSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=BthAvctpSvc+service+site:microsoft.com) | Audio Video Control TP service - Bluetooth / Wireless. | Manual (Trigger Start) | | Background Intelligent Transfer Service | [BITS](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=BITS+service+site:microsoft.com) | Transfer files. | Manual or Automatic (Delayed Start, Running) | | Background Tasks Infrastructure Service | [BrokerInfrastructure](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=BrokerInfrastructure+service+site:microsoft.com) | Cannot be disabled. | Automatic (Running) | | Base Filtering Engine | [BFE](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=BFE+service+site:microsoft.com) | Manage Windows Firewall and IPsec policies and implements user mode filtering. Do not disable. | Automatic (Running) | | BitLocker Drive Encryption Service | [BDESVC](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=BDESVC+service+site:microsoft.com) | Secure startup and volume encryption. | Manual (Trigger Start) | | Block Level Backup Engine Service | [wbengine](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=wbengine+service+site:microsoft.com) | Used by Windows Backup. | Manual | | Bluetooth Audio Gateway Service | [BTAGService](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=BTAGService+service+site:microsoft.com) | Bluetooth Audio - Wireless headsets. | Manual (Trigger Start) | | Bluetooth Support Service | [bthserv](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=bthserv+service+site:microsoft.com) | Discovery of Bluetooth devices. | Manual (Trigger Start) | | Bluetooth User Support Service\_????? | [BluetoothUserService\_?????](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=BluetoothUserService_+service+site:microsoft.com) | Bluetooth features. | Manual (Trigger Start) | | BranchCache | [PeerDistSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=PeerDistSvc+service+site:microsoft.com) | Used by Windows Update for download sharing on the local subnet. | Manual | | Capability Access Manager Service | [camsvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=camsvc+service+site:microsoft.com) | Manage UWP apps. | Manual | | CaptureService\_????? | [CaptureService\_?????](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=CaptureService_+service+site:microsoft.com) | Screen Capture Service via the Windows.Grapics.Capture API. | Manual | | Cellular Time | [autotimesvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=autotimesvc+service+site:microsoft.com) | Set the time based on NITZ messages from a mobile network. | Manual | | Certificate Propagation | [CertPropSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=CertPropSvc+service+site:microsoft.com) | Manage certificates for Smart Card login. | Manual (Trigger Start) | | Client License Service (ClipSVC) | [ClipSVC](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=ClipSVC+service+site:microsoft.com) | Support for Microsoft store, cannot be disabled. | Manual (Trigger Start) | | Clipboard User Service\_????? | [cbdhsvc\_?????](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=cbdhsvc_+service+site:microsoft.com) | Clipboard. | Manual | | CNG Key Isolation | [KeyIso](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=KeyIso+service+site:microsoft.com) | Secure long lived keys for cryptographic operations. | Manual (Trigger Start, Running) | | COM+ Event System | [EventSystem](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=EventSystem+service+site:microsoft.com) | COM Event notification service, required for COM+ | Manual | | COM+ System Application | [COMSysApp](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=COMSysApp+service+site:microsoft.com) | Network discovery of systems on local network. | Manual (Trigger Start) | | Connected Devices Platform Service | [CDPSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=CDPSvc+service+site:microsoft.com) | Connected Devices Platform. | Automatic (Delayed Start, Trigger Start) | | Connected Devices Platform User Service\_????? | [CDPUserSvc\_?????](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=CDPUserSvc_+service+site:microsoft.com) | Connected Devices Platform. | Automatic (Running) | | Connected User Experiences and Telemetry | [DiagTrack](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=DiagTrack+service+site:microsoft.com) | Feedback and Diagnostics. | Automatic (Running) | | ConsentUX\_????? | [ConsentUxUserSvc\_?????](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=ConsentUxUserSvc_+service+site:microsoft.com) | Connect and pair WiFi and Bluetooth devices, ConnectUX. | Manual | | Contact Data\_????? | [PimIndexMaintenanceSvc\_?????](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=PimIndexMaintenanceSvc_+service+site:microsoft.com) | Indexes contact data for fast contact searching. | Manual | | CoreMessaging | [CoreMessagingRegistrar](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=CoreMessagingRegistrar+service+site:microsoft.com) | Cannot be disabled. Manages communication between system components. | Automatic (Running) | | Credential Manager | [VaultSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=VaultSvc+service+site:microsoft.com) | Secure storage and retrieval of credentials. Control Panel: Credential Manager. | Manual | | CredentialEnrollmentManagerUserSvc\_????? | [CredentialEnrollmentManagerUserSvc\_?????](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=CredentialEnrollmentManagerUserSvc_+service+site:microsoft.com) | Credential Enrolment Manager. | Manual | | Cryptographic Services | [CryptSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=CryptSvc+service+site:microsoft.com) | Manage root certificates. | Automatic (Running) | | Data Sharing Service | [DsSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=DsSvc+service+site:microsoft.com) | Data brokering between applications. | Manual (Trigger Start) | | Data Usage | [DusmSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=DusmSvc+service+site:microsoft.com) | Network data usage,data limit/metered networks. | Automatic (Running) | | DCOM Server Process Launcher | [DcomLaunch](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=DcomLaunch+service+site:microsoft.com) | Required for COM and DCOM object activation requests. | Automatic (Running) | | Delivery Optimization | [DoSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=DoSvc+service+site:microsoft.com) | Content delivery Optimisation. | Automatic (Delayed Start) | | Device Association Service | [DeviceAssociationService](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=DeviceAssociationService+service+site:microsoft.com) | Pairing between the system and wired or wireless devices. | Manual (Trigger Start) | | Device Install Service | [DeviceInstall](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=DeviceInstall+service+site:microsoft.com) | Recognise new hardware, do not disable. | Manual (Trigger Start) | | Device Management Enrollment Service | [DmEnrollmentSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=DmEnrollmentSvc+service+site:microsoft.com) | Device enrolment/management. | Manual | | Device Management Wireless Application Protocol (WAP) Push message Routing Service | [dmwappushservice](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=dmwappushservice+service+site:microsoft.com) | WAP - Sync device sessions. | Manual | | Device Setup Manager | [DsmSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=DsmSvc+service+site:microsoft.com) | Install device drivers. | Manual (Trigger Start) | | DeviceAssociationBroker\_????? | [DeviceAssociationBrokerSvc\_?????](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=DeviceAssociationBrokerSvc_+service+site:microsoft.com) | Pair devices. | Manual | | DevicePicker\_????? | [DevicePickerUserSvc\_?????](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=DevicePickerUserSvc_+service+site:microsoft.com) | Manage Miracast DLNA and DIAL UI. | Manual | | DevicesFlow\_????? | [DevicesFlowUserSvc\_?????](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=DevicesFlowUserSvc_+service+site:microsoft.com) | Connect and pair WiFi and Bluetooth devices, ConnectUX/PC settings. | Manual | | DevQuery Background Discovery Broker | [DevQueryBroker](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=DevQueryBroker+service+site:microsoft.com) | Enable apps to discover devices with a background task. | Manual (Trigger Start) | | DHCP Client | [Dhcp](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=Dhcp+service+site:microsoft.com) | Allocate an IP address to this computer automatically. | Automatic (Running) | | Diagnostic Execution Service | [diagsvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=diagsvc+service+site:microsoft.com) | Enable troubleshooting support. | Manual (Trigger Start) | | Diagnostic Policy Service | [DPS](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=DPS+service+site:microsoft.com) | Enable problem detection, troubleshooting and resolution for Windows components. | Automatic (Running) | | Diagnostic Service Host | [WdiServiceHost](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=WdiServiceHost+service+site:microsoft.com) | Diagnostics for Local Services. | Manual (Running) | | Diagnostic System Host | [WdiSystemHost](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=WdiSystemHost+service+site:microsoft.com) | Diagnostics for the Local System. | Manual | | DialogBlockingService | [DialogBlockingService](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=DialogBlockingService+service+site:microsoft.com) | DialogBlockingService | Disabled | | Display Enhancement Service | [DisplayEnhancementService](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=DisplayEnhancementService+service+site:microsoft.com) | Brightness. | Manual (Trigger Start) | | Display Policy Service | [DispBrokerDesktopSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=DispBrokerDesktopSvc+service+site:microsoft.com) | Connection and configuration of local and remote displays. | Automatic (Delayed Start) | | Distributed Link Tracking Client | [TrkWks](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=TrkWks+service+site:microsoft.com) | Attempt to maintain valid links between NTFS files across a network. | Automatic (Running) | | Distributed Transaction Coordinator | [MSDTC](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=MSDTC+service+site:microsoft.com) | Co-ordinate transactions between resource managers, database, file and message queues. | Manual | | DNS Client | [Dnscache](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=Dnscache+service+site:microsoft.com) | Cache DNS queries and register the computername. | Automatic (Trigger Start, Running) | | Downloaded Maps Manager | [MapsBroker](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=MapsBroker+service+site:microsoft.com) | Windows/Bing maps. | Automatic (Delayed Start) | | Embedded Mode | [embeddedmode](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=embeddedmode+service+site:microsoft.com) | Activate background applications. | Manual (Trigger Start) | | Encrypting File System (EFS) | [EFS](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=EFS+service+site:microsoft.com) | Allow storage of encrypted files on NTFS file systems. | Manual (Trigger Start) | | Enterprise App Management Service | [EntAppSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=EntAppSvc+service+site:microsoft.com) | Cannot be disabled. Enterprise Application management. | Manual | | Extensible Authentication Protocol | [Eaphost](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=Eaphost+service+site:microsoft.com) | Network Authentication - VPN NAP and Wireless. | Manual | | File History Service | [fhsvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=fhsvc+service+site:microsoft.com) | Used by Windows Backup. | Manual (Trigger Start) | | Function Discovery Provider Host | [fdPHost](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=fdPHost+service+site:microsoft.com) | Network discovery and Web Service discovery. | Manual | | Function Discovery Resource Publication | [FDResPub](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=FDResPub+service+site:microsoft.com) | Publish this computer and resources over the network. | Manual (Running) | | GameDVR and Broadcast User Service\_????? | [BcastDVRUserService\_?????](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=BcastDVRUserService_+service+site:microsoft.com) | Game recordings and Live broadcasts. Cannot be disabled. | Manual (Trigger Start) | | Geolocation Service | [lfsvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=lfsvc+service+site:microsoft.com) | Manage Geofences - a geographic location with associated events. | Manual (Trigger Start, Running) | | GraphicsPerfSvc | [GraphicsPerfSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=GraphicsPerfSvc+service+site:microsoft.com) | Monitor graphics performance. | Manual (Trigger Start) | | Group Policy Client | [gpsvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=gpsvc+service+site:microsoft.com) | Cannot be disabled. Apply admin settings through group policy. | Automatic (Trigger Start) | | Human Interface Device Service | [hidserv](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=hidserv+service+site:microsoft.com) | Activate and maintain hot buttons on keyboards and other controls. | Manual (Trigger Start) | | HV Host Service | [HvHost](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=HvHost+service+site:microsoft.com) | Hyper-V interface for performance counters. | Manual (Trigger Start) | | Hyper-V Data Exchange Service | [vmickvpexchange](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=vmickvpexchange+service+site:microsoft.com) | Hyper-V interface for data exchange. | Manual (Trigger Start) | | Hyper-V Guest Service Interface | [vmicguestinterface](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=vmicguestinterface+service+site:microsoft.com) | Hyper-V interface for VM services. | Manual (Trigger Start) | | Hyper-V Guest Shutdown Service | [vmicshutdown](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=vmicshutdown+service+site:microsoft.com) | Hyper-V interface for VM shutdown. | Manual (Trigger Start) | | Hyper-V Heartbeat Service | [vmicheartbeat](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=vmicheartbeat+service+site:microsoft.com) | Hyper-V identify frozen VMs. | Manual (Trigger Start) | | Hyper-V PowerShell Direct Service | [vmicvmsession](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=vmicvmsession+service+site:microsoft.com) | Hyper-V interface for PowerShell. | Manual (Trigger Start) | | Hyper-V Remote Desktop Virtualization Service | [vmicrdv](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=vmicrdv+service+site:microsoft.com) | Hyper-V desktop interface. Not Available in Win 10 home. | Manual (Trigger Start) | | Hyper-V Time Synchronization Service | [vmictimesync](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=vmictimesync+service+site:microsoft.com) | Hyper-V time sync. | Manual (Trigger Start) | | Hyper-V Volume Shadow Copy Requestor | [vmicvss](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=vmicvss+service+site:microsoft.com) | Hyper-V shadow copy/backup. | Manual (Trigger Start) | | IKE and AuthIP IPsec Keying Modules | [IKEEXT](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=IKEEXT+service+site:microsoft.com) | Internet Key exchange. | Manual (Trigger Start) | | Internet Connection Sharing (ICS) | [SharedAccess](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=SharedAccess+service+site:microsoft.com) | Provides NAT/name resolution for small office networks. Very rarely needed. | Manual (Trigger Start) | | IP Helper | [iphlpsvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=iphlpsvc+service+site:microsoft.com) | IPv6 translation. | Automatic (Running) | | IP Translation Configuration Service | [IpxlatCfgSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=IpxlatCfgSvc+service+site:microsoft.com) | IPv6 translation. | Manual (Trigger Start) | | IPsec Policy Agent | [PolicyAgent](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=PolicyAgent+service+site:microsoft.com) | Network level peer authentication. Enforces IPsec policies. | Manual (Trigger Start) | | KtmRm for Distributed Transaction Coordinator | [KtmRm](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=KtmRm+service+site:microsoft.com) | Co-ordinates distributed transactions. MSDTC/KTM. | Manual (Trigger Start) | | Language Experience Service | [LxpSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=LxpSvc+service+site:microsoft.com) | Deployment infrastructure for configuring additional languages. | Manual | | Link-Layer Topology Discovery Mapper | [lltdsvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=lltdsvc+service+site:microsoft.com) | Creates a Network map describing each PC and device. | Manual | | Local Profile Assistant Service | [wlpasvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=wlpasvc+service+site:microsoft.com) | Profile management for local subscriber identity modules. | Manual (Trigger Start) | | Local Session Manager | [LSM](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=LSM+service+site:microsoft.com) | Cannot be disabled. Manage local user sessions. | Automatic (Running) | | MessagingService\_????? | [MessagingService\_?????](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=MessagingService_+service+site:microsoft.com) | Text Messaging. | Manual (Trigger Start) | | Microsoft (R) Diagnostics Hub Standard Collector Service | [diagnosticshub.standardcollector.service](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=diagnosticshub.standardcollector.service+service+site:microsoft.com) | Collect real-time Event Tracing for Windows (ETW) events. | Manual | | Microsoft Account Sign-in Assistant | [wlidsvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=wlidsvc+service+site:microsoft.com) | Running if using MS account to log in to computer. | Manual (Trigger Start) | | Microsoft App-V Client | [AppVClient](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=AppVClient+service+site:microsoft.com) | Manage App-V users and virtual applications. Not Available in Win 10 home. | Disabled | | Microsoft iSCSI Initiator Service | [MSiSCSI](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=MSiSCSI+service+site:microsoft.com) | Manage iSCSI devices. | Manual | | Microsoft Keyboard Filter | [MsKeyboardFilter](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=MsKeyboardFilter+service+site:microsoft.com) | Control keystroke filtering and mapping. | Not Installed (Disabled) | | Microsoft Passport | [NgcSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=NgcSvc+service+site:microsoft.com) | Process isolation for cryptographic keys. Cannot be disabled. | Manual (Trigger Start) | | Microsoft Passport Container | [NgcCtnrSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=NgcCtnrSvc+service+site:microsoft.com) | Manage Local user identity keys and smartcard access. Cannot be disabled. | Manual (Trigger Start) | | Microsoft Software Shadow Copy Provider | [swprv](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=swprv+service+site:microsoft.com) | Volume Shadow Copy. Used by Windows Backup. | Manual (Runs at boot, then stops) | | Microsoft Storage Spaces SMP | [smphost](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=smphost+service+site:microsoft.com) | Manage storage pools with multiple disks (WSS). | Manual | | Microsoft Store Install Service | [InstallService](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=InstallService+service+site:microsoft.com) | Microsoft Store. | Manual | | Microsoft Windows SMS Router Service. | [SmsRouter](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=SmsRouter+service+site:microsoft.com) | Route messages. | Manual (Trigger Start) | | Natural Authentication | [NaturalAuthentication](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=NaturalAuthentication+service+site:microsoft.com) | Signal aggregator service for automatic device lock/unlock. | Manual (Trigger Start) | | Net.Msmq/Net.Pipe/Net.Tcp Listener Adapter | NetMsmqActivator/NetPipeActivator/NetTcpActivator | | Not installed | | Net.Tcp Port Sharing Service | | Provides ability to share TCP ports over net.tcp | Disabled | | Netlogon | [Netlogon](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=Netlogon+service+site:microsoft.com) | Connect to a domain controller. | Manual | | Network Connected Devices Auto-Setup | [NcdAutoSetup](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=NcdAutoSetup+service+site:microsoft.com) | Discover and install qualified devices. | Manual (Trigger Start, Running) | | Network Connection Broker | [NcbService](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=NcbService+service+site:microsoft.com) | Broker connections between Windows store apps and the internet. | Manual (Trigger Start, Running) | | Network Connections | [Netman](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=Netman+service+site:microsoft.com) | Manage network and Dial-up connections. | Manual | | Network Connectivity Assistant | [NcaSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=NcaSvc+service+site:microsoft.com) | DirectAccess status notification. | Manual (Trigger Start) | | Network List Service | [netprofm](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=netprofm+service+site:microsoft.com) | Identify networks. | Manual (Running) | | Network Location Awareness | [NlaSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=NlaSvc+service+site:microsoft.com) | Notify changes in the network configuration. | Automatic (Running) | | Network Setup Service | [NetSetupSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=NetSetupSvc+service+site:microsoft.com) | Manage installation and configuration of network drivers. | Manual (Trigger Start) | | Network Store Interface Service | [nsi](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=nsi+service+site:microsoft.com) | Network notifications for user mode clients. | Automatic (Running) | | Offline Files | [CscService](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=CscService+service+site:microsoft.com) | Perform offline maintenance on the offline files cache. Not Available in Win 10 home. | Manual (Trigger Start) | | OpenSSH Authentication Agent | [ssh-agent](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=ssh-agent+service+site:microsoft.com) | Agent to hold private keys used for public key authentication. | Manual | | Optimize drives | [defragsvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=defragsvc+service+site:microsoft.com) | Optimise file storage by defragmenting on disc. | Manual | | Parental Controls | [WpcMonSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=WpcMonSvc+service+site:microsoft.com) | Enforces parental controls in Windows. | Manual | | Payments and NFC/SE Manager | [SEMgrSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=SEMgrSvc+service+site:microsoft.com) | Manage payments and Near Field Communication (NFC) based secure elements. | Manual (Trigger Start) | | Peer Name Resolution Protocol | [PNRPsvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=PNRPsvc+service+site:microsoft.com) | Enable serverless peer name resolution over the internet (Remote Assistance). | Manual | | Peer Networking Grouping | [p2psvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=p2psvc+service+site:microsoft.com) | Enables multi-party communication using peer-peer grouping. (Home Group). | Manual | | Peer Networking Identity Manager | [p2pimsvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=p2pimsvc+service+site:microsoft.com) | Identity services for peer Name resolution and peer-peer grouping services. | Manual | | Performance Counter DLL Host | [PerfHost](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=PerfHost+service+site:microsoft.com) | Enable remote users and 64 bit processes to query perf counters provided by 32-bit DLLs. | Manual | | Performance Logs & Alerts | [pla](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=pla+service+site:microsoft.com) | Collect performance data from local or remote computers. | Manual | | Phone Service | [PhoneSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=PhoneSvc+service+site:microsoft.com) | Manage the telephony state. | Manual (Trigger Start) | | Plug and Play | [PlugPlay](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=PlugPlay+service+site:microsoft.com) | Recognise new hardware. Do not disable. | Manual (Running) | | PNRP Machine Name Publication Service | [PNRPAutoReg](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=PNRPAutoReg+service+site:microsoft.com) | Publish a machine name using Peer name resolution protocol. | Manual | | Portable Device Enumerator Service | [WPDBusEnum](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=WPDBusEnum+service+site:microsoft.com) | Enforce group policy for removable mass storage devices. Enables transferring and synchronising content. | Manual (Trigger Start) | | Power | [Power](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=Power+service+site:microsoft.com) | Manage power policy and power policy notifications. | Automatic (Running) | | Print Spooler | [Spooler](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=Spooler+service+site:microsoft.com) | Spool print jobs. Do not disable. | Automatic (Running) | | Printer Extensions and Notifications | [PrintNotify](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=PrintNotify+service+site:microsoft.com) | Open custom printer dialogue boxes and handle notifications from a remote print server or printer. | Manual | | PrintWorkflow\_????? | [PrintWorkflowUserSvc\_?????](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=PrintWorkflowUserSvc_+service+site:microsoft.com) | Print Workflow. Cannot be disabled. | Manual | | Problem Reports and Solutions Control Panel Support | [wercplsupport](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=wercplsupport+service+site:microsoft.com) | System level problem reports. | Manual | | Program Compatibility Assistant Service | [PcaSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=PcaSvc+service+site:microsoft.com) | Program Compatibility Assistant (PCA) | Automatic (Running) | | Quality Windows Audio Video Experience | [QWAVE](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=QWAVE+service+site:microsoft.com) | Platform for A/V streaming applications on IP home networks. | Manual | | Radio Management Service | [RmSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=RmSvc+service+site:microsoft.com) | Radio Management and Airplane Mode - wireless comms / Bluetooth. | Manual | | Recommended Troubleshooting Service | [TroubleshootingSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=TroubleshootingSvc+service+site:microsoft.com) | Automatic mitigation for known problems and recommended troubleshooting options. | Manual | | Remote Access Auto Connection Manager | [RasAuto](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=RasAuto+service+site:microsoft.com) | Automatically connect to a remote network whenever a DNS name is used. | Manual | | Remote Access Connection Manager | [RasMan](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=RasMan+service+site:microsoft.com) | Manage Dial-Up and VPM connections. | Manual | | Remote Desktop Configuration | [SessionEnv](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=SessionEnv+service+site:microsoft.com) | Remote Desktop related activities, temporary folders,themes and certificates. | Manual | | Remote Desktop Services | [TermService](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=TermService+service+site:microsoft.com) | Allow users to connect interactively with a remote computer. To prevent remote use of this computer clear the checkboxes on the Remote tab of the system properties control panel item. | Manual | | Remote Desktop Services UserMode Port Redirector | [UmRdpService](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=UmRdpService+service+site:microsoft.com) | Allow redirection of Printers/Drivers/Ports for RDP connections. | Manual | | Remote Procedure Call (RPC) | [RpcSs](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=RpcSs+service+site:microsoft.com) | Object activation for COM and DCOM. Cannot be disabled. | Automatic (Running) | | Remote Procedure Call (RPC) Locator | [RpcLocator](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=RpcLocator+service+site:microsoft.com) | No functionality in Windows 10, this is provided for Application Compatibility. | Manual | | Remote Registry | [RemoteRegistry](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=RemoteRegistry+service+site:microsoft.com) | Enable remote users to modify the registry on this computer. | Disabled | | Retail Demo Service | [RetailDemo](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=RetailDemo+service+site:microsoft.com) | Allows running the [Retail Demo mode](https://www.howtogeek.com/329152/stupid-geek-tricks-how-to-enable-windows-10s-hidden-retail-demo-mode/) which will erase all files and restore Windows to a factory default. You may prefer to disable this. | Manual | | Routing and Remote Access | [RemoteAccess](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=RemoteAccess+service+site:microsoft.com) | LAN and WAN routing to other businesses. | Disabled | | RPC Endpoint Mapper | [RpcEptMapper](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=RpcEptMapper+service+site:microsoft.com) | Resolve RPC interface identifiers to a transport endpoint. Cannot be disabled. | Automatic (Running) | | Runtime Broker | [RuntimeBroker](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=RuntimeBroker+service+site:microsoft.com) | Microsoft core process, manages permissions for all universal (Windows Store) apps. | Automatic (Running) | | Secondary Logon | [seclogon](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=seclogon+service+site:microsoft.com) | Enable starting processes under alternate credentials. | Manual | | Secure Socket Tunneling Protocol Service | [SstpSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=SstpSvc+service+site:microsoft.com) | SSTP VPN Capability. | Manual | | Security Accounts Manager | [SamSs](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=SamSs+service+site:microsoft.com) | Allows SAM to accept request from other services. | Automatic (Running) | | Security Center | [wscsvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=wscsvc+service+site:microsoft.com) | Monitor and report security health settings: Firewall, Anti-Virus,Anti-Spyware. | Automatic (Delayed Start, Running) | | Sensor Data Service | [SensorDataService](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=SensorDataService+service+site:microsoft.com) | Delivers data from a variety of sensors. | Manual (Trigger Start) | | Sensor Monitoring Service | [SensrSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=SensrSvc+service+site:microsoft.com) | Monitor sensors to expose data and user state e.g. Adjust brightness. | Manual (Trigger Start) | | Sensor Service | [SensorService](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=SensorService+service+site:microsoft.com) | Manage Simple Device Orientation (SDO) and History for sensors. Reports device orientation changes. | Manual (Trigger Start) | | Server | [LanmanServer](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=LanmanServer+service+site:microsoft.com) | File, Print and named pipe sharing over the network. | Automatic (Running) | | Shared PC Account Manager | [shpamsvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=shpamsvc+service+site:microsoft.com) | Manage profiles and accounts on a SharedPC configured device. | Disabled | | Shell Hardware Detection | [ShellHWDetection](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=ShellHWDetection+service+site:microsoft.com) | Autoplay notification. | Automatic (Running) | | Smart Card | [SCardSvr](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=SCardSvr+service+site:microsoft.com) | Support for Smart Card login/logout. | Disabled | | Smart Card Device Enumeration Service | [ScDeviceEnum](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=ScDeviceEnum+service+site:microsoft.com) | Support for Smart Card login/logout. | Manual (Trigger Start) | | Smart Card Removal Policy | [SCPolicySvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=SCPolicySvc+service+site:microsoft.com) | Support for Smart Card login/logout. | Manual | | SNMP Trap | [SNMPTRAP](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=SNMPTRAP+service+site:microsoft.com) | Handle Simple Network Management Protocol (SNMP) agent messages. | Manual | | Software Protection | [sppsvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=sppsvc+service+site:microsoft.com) | Download and install Digital Licences. Cannot be disabled. | Automatic (Delayed Start,Trigger Start) | | Spatial Data Service | [SharedRealitySvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=SharedRealitySvc+service+site:microsoft.com) | Virtual Reality data manager. | Manual | | Spot Verifier | [svsvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=svsvc+service+site:microsoft.com) | Verify potential file system corruptions. | Manual (Trigger Start) | | SSDP Discovery | [SSDPSRV](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=SSDPSRV+service+site:microsoft.com) | Discover UPnP /SSDP devices. Enables SSDP device discovery. Can be disabled. | Manual (Running) | | State Repository Service | [StateRepository](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=StateRepository+service+site:microsoft.com) | Reports Application State. Cannot be disabled. | Manual (Running) | | Still Image Acquisition Events | [WiaRpc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=WiaRpc+service+site:microsoft.com) | Launch applications associated with still image acquisition. | Manual | | Storage Service | [StorSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=StorSvc+service+site:microsoft.com) | Adds 'System Volume Information' folder to external USB memory devices. Required for Windows Store. | Manual (Trigger Start) | | Storage Tiers Management | [TieringEngineService](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=TieringEngineService+service+site:microsoft.com) | Optimise the placement of data in storage tiers on all tiered storage spaces. | Manual | | Sync Host\_????? | [OneSyncSvc\_?????](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=OneSyncSvc_+service+site:microsoft.com) | Sync mail, contacts calendar and other user data. | Automatic (Delayed Start) | | SysMain | [SysMain](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=SysMain+service+site:microsoft.com) | Tune system performance over time. | Automatic (Running) | | System Event Notification Service | [SENS](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=SENS+service+site:microsoft.com) | Monitor system events and notify COM+ subscribers. | Automatic (Running) | | System Events Broker | [SystemEventsBroker](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=SystemEventsBroker+service+site:microsoft.com) | Co-ordinates background work for WinRT. Cannot be disabled. | Automatic (Trigger Start, Running) | | System Guard Runtime Monitor Broker | [SgrmBroker](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=SgrmBroker+service+site:microsoft.com) | Attests to Windows platform integrity. | Automatic (Delayed Start, Running) | | Task Scheduler | [Schedule](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=Schedule+service+site:microsoft.com) | Schedule Automated Tasks. Cannot be Stopped or disabled. | Automatic (Running) | | TCP/IP NetBIOS Helper | [lmhosts](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=lmhosts+service+site:microsoft.com) | Provides NetBIOS over TCP/IP (NetBT) Enables sharing Files, Printers and logon to the network. | Manual (Trigger Start, Running) | | Telephony | [TapiSrv](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=TapiSrv+service+site:microsoft.com) | Support for programs that control telephony devices. | Manual | | Themes | [Themes](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=Themes+service+site:microsoft.com) | User Theme Management. | Automatic (Running) | | Time Broker | [TimeBrokerSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=TimeBrokerSvc+service+site:microsoft.com) | Background work for WinRT application. | Manual (Trigger Start, Running) | | Touch Keyboard and Handwriting Panel Service | [TabletInputService](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=TabletInputService+service+site:microsoft.com) | Enables touch keyboard and handwriting panel pan and ink functionality. | Manual (Trigger Start) | | Update Orchestrator Service | [UsoSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=UsoSvc+service+site:microsoft.com) | Manages Windows Updates. | Manual (Running) | | UPnP Device Host | [upnphost](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=upnphost+service+site:microsoft.com) | Allows UPnP devices to be hosted on this computer. | Manual | | User Data Access\_????? | [UserDataSvc\_?????](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=UserDataSvc_+service+site:microsoft.com) | Provides apps access to structured user data, including contact info, calendars, messages. Cannot be disabled. | Manual (Running) | | User Data Storage\_????? | [UnistoreSvc\_?????](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=UnistoreSvc_+service+site:microsoft.com) | Handles storage of structured user data, including contact info, calendars, messages.Cannot be disabled. | Manual (Running) | | User Experience Virtualization Service | [UevAgentService](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=UevAgentService+service+site:microsoft.com) | Support for the roaming of OS and application settings. Not Available in Win 10 home. | Disabled | | User Manager | [UserManager](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=UserManager+service+site:microsoft.com) | Support for Multi-User interaction. | Automatic (Trigger Start, Running) | | User Profile Service | [ProfSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=ProfSvc+service+site:microsoft.com) | Loading and unloading of user profiles. | Automatic (Running) | | Virtual Disk | [vds](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=vds+service+site:microsoft.com) | Magagement of disks and volumes. | Manual | | Volume Shadow Copy | [VSS](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=VSS+service+site:microsoft.com) | Manages and implements Volume Shadow copies used for backup and other purposes. | Manual | | Volumetric Audio Compositor Service | [VacSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=VacSvc+service+site:microsoft.com) | Hosts spacial analysis for mixed reality audio simulation. | Not Installed | | WalletService | [WalletService](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=WalletService+service+site:microsoft.com) | Objects used by clients of the wallet. | Manual | | WarpJITSvc | [WarpJITSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=WarpJITSvc+service+site:microsoft.com) | JIT out of process service for Windows Advanced Rasterization Platform (WARP) when running with Arbitrary Code Guard (ACG) enabled. | Manual (Trigger Start) | | Web Account Manager | [TokenBroker](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=TokenBroker+service+site:microsoft.com) | Provide single sign on to apps and services. | Manual (Running) | | WebClient | [WebClient](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=WebClient+service+site:microsoft.com) | Enable Windows based programs to create access and modify internet based files. | Manual (Trigger Start) | | Wi-Fi Direct Services Connection Manager Service | [WFDSConMgrSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=WFDSConMgrSvc+service+site:microsoft.com) | Connect to wireless display and/or dock. | Manual (Trigger Start) | | Windows Audio | [Audiosrv](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=Audiosrv+service+site:microsoft.com) | Manage Audio. | Automatic (Running) | | Windows Audio Endpoint Builder | [AudioEndpointBuilder](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=AudioEndpointBuilder+service+site:microsoft.com) | Manage Audio devices. | Automatic (Running) | | Windows Backup | [SDRSVC](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=SDRSVC+service+site:microsoft.com) | Windows Backup. | Manual | | Windows Biometric Service | [WbioSrvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=WbioSrvc+service+site:microsoft.com) | Capture and edit biometric data without gaining direct access to any biometric hardware or samples. | Manual (Trigger Start) | | Windows Camera Frame Server | [FrameServer](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=FrameServer+service+site:microsoft.com) | Access video frames from camera devices. | Manual (Trigger Start) | | Windows Connect Now - Config Registrar | [wcncsvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=wcncsvc+service+site:microsoft.com) | Wireless Protected Setup (WPS) protocol. | Manual | | Windows Connection Manager | [Wcmsvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=Wcmsvc+service+site:microsoft.com) | Makes automatic connect/disconnect decisions based on the network connectivity options currently available to the PC. | Automatic (Trigger Start, Running) | | Windows Defender Advanced Threat Protection Service | [Sense](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=Sense+service+site:microsoft.com) | Security event monitor. Not Available in Win 10 home | Manual | | Windows Defender Antivirus Network Inspection Service | [WdNisSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=WdNisSvc+service+site:microsoft.com) | Anti-Virus Cannot be disabled. | Manual (Running) | | Windows Defender Antivirus Service | [WinDefend](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=WinDefend+service+site:microsoft.com) | Malware detection. Cannot be disabled. | Automatic (Running) | | Windows Defender Firewall | [mpssvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=mpssvc+service+site:microsoft.com) | Firewall. Cannot be disabled. | Automatic (Running) | | Windows Encryption Provider Host Service | [WEPHOSTSVC](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=WEPHOSTSVC+service+site:microsoft.com) | Exchange Active Sync (EAS) policies for Email encryption with 3rd parties. | Manual (Trigger Start) | | Windows Error Reporting Service | [WerSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=WerSvc+service+site:microsoft.com) | Allows errors to be reported. | Manual (Trigger Start) | | Windows Event Collector | [Wecsvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=Wecsvc+service+site:microsoft.com) | Remote event log management. | Manual | | Windows Event Log | [EventLog](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=EventLog+service+site:microsoft.com) | Manage and query event logs. | Automatic (Running) | | Windows Font Cache Service | [FontCache](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=FontCache+service+site:microsoft.com) | Cache font data. | Automatic (Running) | | Windows Image Acquisition (WIA) | [stisvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=stisvc+service+site:microsoft.com) | Image acquisition for scanners and cameras. | Manual | | Windows Insider Service | [wisvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=wisvc+service+site:microsoft.com) | Used only for Windows insider - beta testing of new versions of Windows. | Manual (Trigger Start) | | Windows Installer | [msiserver](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=msiserver+service+site:microsoft.com) | Install applications from an .MSI or .MSP package. Cannot be disabled. | Manual | | Windows License Manager Service | [LicenseManager](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=LicenseManager+service+site:microsoft.com) | Windows Store. | Manual (Trigger Start) | | Windows Management Instrumentation | [Winmgmt](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=Winmgmt+service+site:microsoft.com) | Windows Management Instrumentation (WMI). | Automatic (Running) | | Windows Management Service | [WManSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=WManSvc+service+site:microsoft.com) | Provisioning and enrolment services. | Manual | | Windows Media Player Network Sharing Service | [WMPNetworkSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=WMPNetworkSvc+service+site:microsoft.com) | Share Windows Media Player libraries with other devices using PnP. | Disabled | | Windows Mixed Reality OpenXR Service | [MixedRealityOpenXRSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=MixedRealityOpenXRSvc+service+site:microsoft.com) | Enable Mixed reality OpenXR runtime. | Manual | | Windows Mobile Hotspot Service | [icssvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=icssvc+service+site:microsoft.com) | Share a Mobile Data Connection with another device. | Manual (Trigger Start) | | Windows Modules Installer | [TrustedInstaller](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=TrustedInstaller+service+site:microsoft.com) | Windows Update, installer service. | Manual | | Windows Perception Service | [spectrum](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=spectrum+service+site:microsoft.com) | Virtual Reality Service. | Manual (Trigger Start) | | Windows Perception Simulation Service | [perceptionsimulation](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=perceptionsimulation+service+site:microsoft.com) | Enables spatial perception simulation - camera and spatial input simulation. | Manual | | Windows Presentation Foundation Font Cache 3.0.0.0 | [FontCache3.0.0.0](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=FontCache3.0+service+site:microsoft.com) | Optimise the performance of WPF applications by caching commonly used files. | Not Installed (Manual) | | Windows Push Notifications System Service | [WpnService](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=WpnService+service+site:microsoft.com) | Push Notifications. | Automatic (Running) | | Windows Push Notifications User Service\_????? | [WpnUserService\_?????](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=WpnUserService_+service+site:microsoft.com) | Local and push notifications: tile, toast and raw. | Automatic (Running) | | Windows PushToInstall Service | [PushToInstall](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=PushToInstall+service+site:microsoft.com) | Windows Store. | Manual | | Windows Remote Management (WS-Management) | [WinRM](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=WinRM+service+site:microsoft.com) | Remote Management. | Manual | | Windows Search | [WSearch](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=WSearch+service+site:microsoft.com) | Search content indexing. | Automatic (Delayed Start, Running) | | Windows Security Service | [SecurityHealthService](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=SecurityHealthService+service+site:microsoft.com) | Device protection. | Manual | | Windows Time | [W32Time](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=W32Time+service+site:microsoft.com) | Date and Time Synchronisation. | Manual (Trigger Start) | | Windows Update | [wuauserv](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=wuauserv+service+site:microsoft.com) | Windows Update. | Manual (Trigger Start) | | Windows Update Medic Service | [WaaSMedicSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=WaaSMedicSvc+service+site:microsoft.com) | Remediation and protection of Windows Update components. | Manual | | WinHTTP Web Proxy Auto-Discovery Service | [WinHttpAutoProxySvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=WinHttpAutoProxySvc+service+site:microsoft.com) | Web Proxy Auto-Discovery over HTTP. | Manual (Running) | | Wired AutoConfig | [dot3svc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=dot3svc+service+site:microsoft.com) | IEEE 802.1 authentication over Ethernet. | Manual | | WLAN AutoConfig | [WlanSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=WlanSvc+service+site:microsoft.com) | Connect and Disconnect from a Wireless LAN, it is strongly recommended that this service is left set to Automatic if a Wireless Card is installed. | Automatic | | WMI Performance Adapter | [wmiApSrv](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=wmiApSrv+service+site:microsoft.com) | Provide performance information from WMI providers to clients on the network. | Manual | | Work Folders | [workfolderssvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=workfolderssvc+service+site:microsoft.com) | Sync files with the Work Folders server enabling you to use the files on any PC where you have setup Work Folders. | Manual | | Workstation | [LanmanWorkstation](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=LanmanWorkstation+service+site:microsoft.com) | Connect to remote servers using SMB 2.0 or 3.0 | Automatic (Running) | | WWAN AutoConfig | [WwanSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=WwanSvc+service+site:microsoft.com) | Manages Mobile [Broadband](https://virginmedia-is-evil.com/) Data Connections (GSM and CDMA) by auto-configuring the network. | Manual | | Xbox Accessory Management Service | [XboxGipSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=XboxGipSvc+service+site:microsoft.com) | Xbox Accessories. | Manual (Trigger Start) | | Xbox Live Auth Manager | [XblAuthManager](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=XblAuthManager+service+site:microsoft.com) | Xbox Authentication. | Manual | | Xbox Live Game Save | [XblGameSave](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=XblGameSave+service+site:microsoft.com) | Xbox sync with game server. | Manual (Trigger Start) | | Xbox Live Networking Service | [XboxNetApiSvc](https://www.google.com/search?hl=en\&ie=utf-8\&oe=utf-8\&q=XboxNetApiSvc+service+site:microsoft.com) | Xbox API. | Manual |