Ce site est optimisé pour être consulté depuis un navigateur moderne dans lequel JavaScript est activé.

Windows 10 - Which services and Windows fonctionnalités and so on are unnecesary and can be safely désactiverd?

ayi

Je suis a Windows power utilisateur, tweaker, and tinkerer. I use Windows Explorer, cmd, Panneau de configuration, PowerShell and tout that can be accessed depuis le Panneau de configuration very often.

Récemment J'ai done a repair installer/mise à jour sur mon ordinateur, updated my système d'exploitation from Windows 10 2009 to Windows 10 20H2 (Windows 10 Pro N for Workstations x64), parce que J'ai exécutez le following:

dism /online /cleanup-image /scanhealth
dism /online /cleanup-image /restorehealth
dism /online /cleanup-image /restorehealth /source:D:\sources\install.wim
sfc /scannow

Over and over again and they kept saying my "système is fine, tout is corrigé..." despite the fact that my système n'était pas fine and tout remained unfixed...

There existed a myriad small problèmes, and J'ai tried tout Je peux find online except reinstalling OS parce que Je n'ai pas want to reinstall Windows again. Je soupçonne they doit être related to registry, caused by my modifying du système, parce que my matériel is potato (underpowered), having seulement 4 GB RAM avec Intel HD Graphics, total usable primary mémoire 3798 MB, and a 2.00 GHz quad-core CPU...

So far these are what I did to my système. I désactivé dozens of unnecessary services and fonctionnalités, parce que Je sais I ne need them.

Je sun'est pas administrating a server of any kind. Je n'utilise pas streaming services, I ne encrypt my hard disk, and Je n'ai pas any Bluetooth périphérique or Xbox or any other toys.

Je sun'est pas in a homegroup, Je sun'est pas fichier sharing, Je n'utilise pas NFS, Je n'ai pas any contacts, Je suis using wired broadband PPPoE Ethernet connection, my ordinateur is desktop, and Je n'utilise pas imprimantes.

Je n'utilise pas any human interface périphériques, J'ai no smart card, I ne sync paramètres, and Je n'utilise pas autoplay and autorun...

Fichier WindowsServicesToBeDisabled.txt/

AppHostSvc
BDESVC
BthAvctpSvc
CDPSvc
CertPropSvc
CscService
DPS
DeviceAssociationService
DiagTrack
DusmSvc
EFS
FDResPub
FontCache
FontCache3.0.0.0
IISADMIN
MSMQ
MSMQTriggers
NetMsmqActivator
NfsClnt
PcaSvc
PhoneSvc
PrintNotify
QWAVE
RemoteAccess
RemoteRegistry
RmSvc
SCPolicySvc
SCardSvr
SSDPSRV
ScDeviceEnum
SessionEnv
SharedAccess
ShellHWDetection
Spooler
SysMain
TabletInputService
TapiSrv
TermService
UmRdpService
WSearch
WbioSrvc
WdiServiceHost
WdiSystemHost
WerSvc
WlanSvc
WwanSvc
autotimesvc
bthserv
fdPHost
ftpsvc
hidserv
icssvc
vds
wercplsupport

Fichier WindowsFeaturesToBeDisabled.txt

Printing-PrintToPDFServices-Features
Printing-XPSServices-Features
SearchEngine-Client-Package
MSRDC-Infrastructure
TelnetClient
TFTP
TIFFIFilter
Printing-Foundation-Features
Printing-Foundation-InternetPrinting-Client
Printing-Foundation-LPDPrintService
Printing-Foundation-LPRPortMonitor
Windows-Identity-Foundation
WCF-HTTP-Activation
WCF-NonHTTP-Activation
IIS-WebServerRole
IIS-WebServer
IIS-CommonHttpFeatures
IIS-HttpErrors
IIS-HttpRedirect
IIS-ApplicationDevelopment
IIS-Security
IIS-RequestFiltering
IIS-NetFxExtensibility
IIS-NetFxExtensibility45
IIS-HealthAndDiagnostics
IIS-HttpLogging
IIS-LoggingLibraries
IIS-RequestMonitor
IIS-HttpTracing
IIS-URLAuthorization
IIS-IPSecurity
IIS-Performance
IIS-HttpCompressionDynamic
IIS-WebServerManagementTools
IIS-ManagementScriptingTools
IIS-IIS6ManagementCompatibility
IIS-Metabase
WAS-WindowsActivationService
WAS-ProcessModel
WAS-NetFxEnvironment
WAS-ConfigurationAPI
IIS-HostableWebCore
WCF-HTTP-Activation45
WCF-TCP-Activation45
WCF-Pipe-Activation45
WCF-MSMQ-Activation45
IIS-StaticContent
IIS-DefaultDocument
IIS-DirectoryBrowsing
IIS-WebDAV
IIS-WebSockets
IIS-ApplicationInit
IIS-ASPNET
IIS-ASPNET45
IIS-ASP
IIS-CGI
IIS-ISAPIExtensions
IIS-ISAPIFilter
IIS-ServerSideIncludes
IIS-CustomLogging
IIS-BasicAuthentication
IIS-HttpCompressionStatic
IIS-ManagementConsole
IIS-ManagementService
IIS-WMICompatibility
IIS-LegacyScripts
IIS-LegacySnapIn
IIS-FTPServer
IIS-FTPSvc
IIS-FTPExtensibility
MSMQ-Container
MSMQ-DCOMProxy
MSMQ-Server
MSMQ-ADIntegration
MSMQ-HTTP
MSMQ-Multicast
MSMQ-Triggers
IIS-CertProvider
IIS-WindowsAuthentication
IIS-DigestAuthentication
IIS-ClientCertificateMappingAuthentication
IIS-IISCertificateMappingAuthentication
IIS-ODBCLogging
DataCenterBridging
SmbDirect
HostGuardian
MultiPoint-Connector
MultiPoint-Connector-Services
MultiPoint-Tools
Windows-Defender-Default-Definitions
WorkFolders-Client
HypervisorPlatform
VirtualMachinePlatform
Client-ProjFS
Containers-DisposableClientVM
Microsoft-Hyper-V-All
Microsoft-Hyper-V
Microsoft-Hyper-V-Tools-All
Microsoft-Hyper-V-Management-PowerShell
Microsoft-Hyper-V-Hypervisor
Microsoft-Hyper-V-Services
Microsoft-Hyper-V-Management-Clients
Client-DeviceLockdown
Client-EmbeddedShellLauncher
Client-EmbeddedBootExp
Client-EmbeddedLogon
Client-KeyboardFilter
Client-UnifiedWriteFilter
DirectoryServices-ADAM-Client
Windows-Defender-ApplicationGuard
ServicesForNFS-ClientOnly
ClientForNFS-Infrastructure
NFS-Administration
Containers
SMB1Protocol
SMB1Protocol-Client
SMB1Protocol-Server
SMB1Protocol-Deprecation

Invite de commandes (Je peux use PowerShell, but cmd is simpler and Je peux just double click a .bat fichier to run them...):

for /f "delims=" %%i in (%CD%\WindowsFeaturesToBeDisabled.txt) do (
  echo %%i
  dism /online /disable-feature /featurename:%%i
)
for /f "delims=" %%i in (%CD%\WindowsServicesToBeDisabled.txt) do (
  echo %%i
  sc config %%i start=disabled
)
reg add HKLM\SYSTEM\CurrentControlSet\Services\BluetoothUserService_1bb7a33 /v Start /t REG_dword /d 4 /f
reg add HKLM\SYSTEM\CurrentControlSet\Services\CDPUserSvc_1bb7a33 /v Start /t REG_dword /d 4 /f
reg add HKLM\SYSTEM\CurrentControlSet\Services\ConsentUxUserSvc_1bb7a33 /v Start /t REG_dword /d 4 /f
reg add HKLM\SYSTEM\CurrentControlSet\Services\PimIndexMaintenanceSvc_1bb7a33 /v Start /t REG_dword /d 4 /f
reg add HKLM\SYSTEM\CurrentControlSet\Services\OneSyncSvc_1bb7a33 /v Start /t REG_dword /d 4 /f
reg add HKLM\SYSTEM\CurrentControlSet\Services\wscsvc /v Start /t REG_dword /d 3 /f
REG ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments /v SaveZoneInformation /t REG_dword /d 00000001 /f
REG ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations /v LowRiskFileTypes /t REG_SZ /d ".avi;.bat;.com;.cmd;.exe;.htm;.html;.lnk;.mpg;.mpeg;.mov;.mp3;.msi;.m3u;.rar;.reg;.txt;.vbs;.wav;.zip;" /f
REG delete HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations /v ModRiskFileTypes /f
REG ADD "HKCU\Environment" /V SEE_MASK_NOZONECHECKS /T REG_SZ /D 1 /F
REG ADD "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment" /V SEE_MASK_NOZONECHECKS /T REG_SZ /D 1 /F

To date Je n'ai pas found a way to directly modify stratégie de groupe paramètres and modifying le registre ne change qu'est-ce que set in gpedit.msc, so I will just list the I changes made:

\Windows Components\Autoplay Policies     disabled
\Windows Components\Biometrics     disabled
*SmartScreen  all Turned off
\Windows Components\OneDrive     disabled
\Windows Components\Search     all disabled
\Windows Components\Sync your settings     all "Do not sync" enabled
\Windows Components\Windows Mobility Center     turned off

Maintenant did I désactiver anything that is absolutely necessary to Windows. Sans it, will Windows become unstable, behave erratically and even shut down instantly, or will it cause Windows to freeze randomly and become completely unresponsive every 6 hours or so or cause Windows Paramètres to detect a stack-based buffer overrun and crash or be unable to run all UWP appx'es? What have I done wrong...

Mise à jour: Maintenant J'ai finally remembered! The mémoire just suddenly struck après evading me for so long... Maintenant Je peux confirm none du problèmes stemmed from my modifying du système. I googled every one dum and made sure I ne need them, and my système was fine sans them...

No, all duse came shortly après I interrupted running Windows Mise à jour, parce que it auto-updated sans my consent or even knowledge, and Windows Module Installer Worker used 50% du HDD (J'ai un external 2 TB HDD), hundreds of mebibytes RAM, 33% CPU and slows down my PC horribly, and it just kept running...

So I killed it; I stopped WMIW (TiWorker.exe)... I said to myself it was fine, tout is going to be OK... But c'est ensuite when the système went south... Maintenant I ne understand. Pourquoi ne puis-je pas DISM and SFC fix the échoué Windows Mise à jour?

Mise à jour: Someone wanted to know the exact make of my ordinateur, though Je voudrais valeur my privacy and I personally think c'est irrelevant. I will post my ordinateur's système specification below (in pictures, parce que pictures say more than words):

And about storage:

ayi

Don't waste your time disabling services. It will seulement make it crawl a tiny bit faster at the cost of reliability, sécurité and ease of use. Par défaut configuration is fine.

You need more RAM. 4 GB is just not enough these days and vous êtes sharing it avec iGPU. Avec less than 4 GB of RAM the système will heavily rely on paging which is will lent tout down.

Your motherboard is using DDR3 mémoire in laptop form factor (SODIMM). Add extra 4 GB to get dual channel fonctionnel for extra performances.

Your current mémoire module is DDR3 (not DDR3L) and so devrait être the other one. The current one is capable of fonctionnel at 1600 MHz, but the motherboard limits it to 1333 MHz, so no need to pay extra for more than that (it ne va pas hurt to have a faster one though, you just ne va pas benefit from it but resell valeur may be higher). Price of such module is about $12 where I live if vous êtes fine avec buying used parts.

Regarding Defender, it gets auto-désactivé when another AV is installé, so c'est either déjà désactivé or vous n'avez pas have better logiciel that does the same thing.

I really am an expert so I ne serait pas let virus and malware go through me

Experts know they ne peut pas trust themselves 100%. They use real-time AV scanners, unless they're considered a risk dans leir model. For most dum they're not. Vous êtes not a sécurité professional, so you definitely devrait être using an AV.