Which Windows Services Are Safe to Disable & When?
I would like to help you decide which Windows 7 and Windows 8 services are safe to disable and when. While disabling unneeded services can have a positive impact on performance, disabling the wrong services can have a big negative impact on the overall performance and stability of your system. I will do my best to guide you and provide balanced and useful advice.
IMPORTANT NOTE: Before you start making changes, you should first create a system restore point. This way, if something doesn’t work, you can always reverse the changes you made.
LESS IMPORTANT NOTE: This guide has been updated to include Windows 8 specific information, on top of what was already existing for Windows 7.
The List with "SAFE to Disable" Services
Let’s see what Windows services might not be absolutely necessary, and which of them you can disable without ruining your computing experience. I recommend that you read everything we share before making any decisions.
- Tablet PC Input Service (in Windows 7) / Touch Keyboard and Handwriting Panel Service (Windows 8): you can safely disable this service, unless you use Tablet PC. Some "Tablet PC Components" like the Snipping tool or Windows Journal will continue to function, while the Tablet PC Input Panel will not. The default startup type is Manual. You can set it even to Disabled without negatively impacting your computing experience;
- Windows Time: if your computer doesn’t have access to the Internet then you don’t need to update the system time from online servers. You can safely disable this service. But if you do, then this service will keep your system time accurate. Safe setting: Manual;
- Secondary logon: if you are the only user of your computer, it can be disabled. But only if you don’t plan to use more than one user account. Safe setting: Manual;
- Fax: unless you use your computer to send or receive faxes using fax resources available on your system (for ex. by using a fax-modem), you can disable it. Safe setting: Manual;
- Print Spooler: if you don’t have a printer attached to your computer and you don’t use virtual printers (e.g.: PDF creator, Microsoft XPS Document Writer, Snagit, etc) you can disable it. Safe setting: Manual;
- Offline Files: unless you use the Offline Files functionality from Windows, you can disable it. Safe setting: Manual;
NOTE: This service is available only in Windows 7 Professional, Ultimate and Enterprise. In Windows 8 it is available only in the Pro and Enterprise editions.
- Routing and Remote Access Service: This service offers routing services to businesses in local area and wide area networks. It allows computers to dial in to the local computer in order for it to get access to the local network. On a home computer you won’t need such features. Safe setting: Manual;
- Bluetooth Support Service: unless you use Bluetooth devices such as keyboards, mice, printers or phones, you can disable this service. Keep in mind that, if you choose to disable this service, then no Bluetooth devices will be recognized. Also, the already connected Bluetooth devices may fail to work properly. Safe setting: Manual;
- BitLocker Drive Encryption Service: unless you use Microsoft’s Encryption Software (included in Windows 7 Ultimate and Enterprise Edition, and in Windows 8 Pro and Enterprise), you can disable this service. BitLocker Drive Encryption is a feature that allows users to protect data by providing encryption for entire volumes. Safe setting: Manual;
- Encrypting File System:EFS provides file encryption technology for storing encrypted files on NTFS file systems. If you don’t need to encrypt data on your hard drives, it is OK to disable it. Safe setting: Manual;
- Certificate Propagation: if you don’t use SmartCards (sometimes used in large organizations), it is safe to disable this service. Safe setting: Manual;
- Microsoft iSCSI Initiator Service: iSCSI is an abbreviation for Internet Small Computer System Interface - an IP-based storage networking standard for linking data storage facilities. It allows client computers to access data over long distances on remote data centers, by using existing infrastructure (ex. over LAN, Internet). iSCSI devices are disks, tapes, CDs, and other storage devices on another networked computer that you can connect to. Sometimes these storage devices are part of a network called a storage area network (SAN). Unless you need to connect to iSCSI devices, it is safe to disable this service. Safe setting: Manual;
- Netlogon: this service is not needed in a home computer. It maintains a secure channel between the local computer and the domain controller for authenticating users. Unless you are connecting to a network domain, this service will never be used. Safe setting: Manual;
- Parental Controls (in Windows 7) / Family Safety (in Windows 8): unless you have children using your computer and you want to monitor and control their activities, this service is not required. Safe setting: Manual;
- Remote Desktop Configuration: Remote Desktop Protocol is a protocol developed by Microsoft which provides Windows users with a graphical interface to another computer. The client used by Microsoft is called Remote Desktop Connection. If you don’t need to connect remotely to another computer or allow incoming remote connections to yours, then it is safe to disable this service. Safe setting: Manual;
- Remote Desktop Services: same as above. Safe setting: Manual;
- Remote Desktop Services UserMode Port Redirector: same as above. Safe setting: Manual;
- Smart Card: Smart Cards are generally used for safety reasons in large organizations or corporations. The typical home user won’t probably need this service to be running. Safe setting: Manual;
- Smart Card Removal Policy: same as above. Safe setting: Manual;
- Windows Connect Now: this service is used by laptops and other mobile computers to connect to Wireless Networks. If you are on a desktop computer, you can disable this service. Safe setting: Manual;
- Windows Firewall: This service should be disabled only if you are using a third-party security solution that provides firewall protection. Safe setting: Manual;
- Windows Error Reporting Service: this service is used to report system errors to Microsoft. Although disabling this service won’t affect your Windows computer, letting it run when needed may help you solve problems and issues that occur on your system, by searching solutions available from Microsoft. Safe setting: Manual;
- Remote Registry: this service enables remote users to modify the Windows Registry. Some say that having this service turned on can pose security issues, and therefore, choose to disable it. In Windows Vista and Windows 7, this service is set to a manual start by default, while in Windows 8 it is disabled. After disabling it, I encountered some problems while updating my system, so I really think that it is safe to leave it set to Manual, at least in Windows 7. Safe setting: Manual;
- Windows Defender: if you use a third-party security solution (antivirus and antispyware), then disabling this service is a safe choice. You should also check this tutorial: Windows Defender - How to Turn it On or Off. Safe setting: Manual.
If you read the list above, you notice that we always mention the safest setting to be a Manual startup type. As I mentioned before, Manual startups provide a good balance. Manual services start only if they are used by your system and you won’t encounter problems. Disabling services should be done with care, only after documenting yourself and experimenting, to make sure your system is not negatively impacted.
However, there are some services that are safe to disable, depending on how you use your computer. If you don’t use certain features and you are sure you won’t use them in the future, go ahead and disable those services that you won’t need.