2 questions about Services

[allisd00m]

just a couple quick questions that I'm stumped on and hoping someone can give me some simple answers

I was going through all services the other night, reading up about every one and testing them, so I can be sure which ones I can remove, or disable in my nLited install

first I'll post the settings I did with the services

DISABLED

• ALERTER

• APPLICATION LAYER GATEWAY

• APPLICATION MANAGEMENT

• AUTOMATIC UPDATES

• BACKGROUND INTELLIGENT TRANSFER

• CLIPBOOK

• COM+ EVENT SYSTEM

• COM+ SYSTEM APPLICATION

• COMPUTER BROWSER

• DISTRIBUTED LINK TRACKING CLIENT

• DISTRIBUTED TRANSACTION COORDINATOR

• DNS CLIENT

• ERROR REPORTING

• FAST USER SWITCHING COMPATIBILITY

• HELP AND SUPPORT

• HUMAN INTERFACE DEVICE ACCESS

• IMAPI CD-BURNING COM

• INTERNET CONNECTION - FIREWALL (ICF) / SHARING (ICS) SERVICE

• IPSEC SERVICE

• MESSENGER SERVICE

• MS SOFTWARE SHADOW COPY PROVIDER SERVICE

• NETMEETING REMOTE DESKTOP SHARING SERVICE

• NETWORK CONNECTION SERVICE

• NETWORK DDE

• NETWORK DDE DSDM

• NETWORK LOCATION AWARENESS (NLA)

• NETWORK PROVISIONING

• NT LM SECURITY SUPPORT PROVIDER

• PERFORMANCE LOGS AND ALERTS

• PRINT SPOOLER

• PROTECTED STORAGE

• QOS RSVP

• REMOTE ACCESS AUTO CONNECTION MANAGER

• REMOTE ACCESS CONNECTION MANAGER

• REMOTE DESKTOP HELP SESSION MANAGER

• REMOTE REGISTRY

• REMOVABLE STORAGE

• ROUTING AND REMOTE ACCESS

• SECONDARY LOGON

• SECURITY ACCOUNTS MANAGER

• SERVER

• SHELL HARDWARE DETECTION

• SMART CARD

• SSDP DISCOVERY SERVICE

• SYSTEM RESTORE

• TASK SCHEDULER

• TCP/IP NETBIOS HELPER

• TELEPHONY

• TELNET

• TERMINAL SERVICES

• UNINTERRUPTIBLE POWER SUPPLY

• UNIVERSAL PLUG AND PLAY DEVICE HOST

• UPLOAD MANAGER

• VOLUME SHADOW COPY

• WEBCLIENT

• WINDOWS FIREWALL/INTERNET CONNECTION SHARING (ICS)

• WINDOWS IMAGE ACQUISITION (WIA)

• WINDOWS TIME

• WIRELESS ZERO CONFIGURATION

• WMI PERFORMANCE ADAPTER

MANUAL

• CRYPTOGRAPHIC SERVICES

• HTTP SLL

• LOGICAL DISK MANAGER

• LOGICAL DISK MANAGER ADMINISTRATIVE SERVICE

• NET LOGON

• REMOTE PROCEDURE CALL (RPC) LOCATOR

• WINDOWS INSTALLER

• WINDOWS MANAGEMENT INSTRUMENTATION DRIVER EXTENSIONS

AUTOMATIC

• DCOM SERVER PROCESS LAUNCHER

• DHCP CLIENT SERVICE

• EVENT LOG

• PLUG AND PLAY

• REMOTE PROCEDURE CALL (RPC)

• SYSTEM EVENT NOTIFICATION (SENS)

• THEMES

• WINDOWS AUDIO

• WINDOWS MANAGEMENT INSTRUMENTATION

• WORKSTATION

bascially, everything's been running smoothly, just 2 problems

1. after I did these changes, wmiprvse seems to be starting up with Windows. I noticed this process (whive I've never seen before) when I made an nLited XP to test, and was confused because I had never seen it before and when it started popping up again after changing settings with services, I knew that's why (because my nLited install removed a lot of services)

I've looking around and it seems that wmiprvse can come from a lot of things (like certain software installs) but I'm 100% positive that it has something also to do with services after the tests I've done, and I'm wondering if anyone knows which services cause this to start up? at first I automatically assumed WMI Performance Adapter, but after switching that to manual, wmiprsve was still booting with Windows so I ruled that out. what's weird though, is I can't remember where I left off with looking into this, and I just checked my Task Manager and wmiprvse isn't running anymore :S so does it only start when running certain programs or what? I'm stumped, hoping someone can shed some light on it (also thought I would point out, it's never been an option to enable or disable this start up in msconfig)

and secondly, a lot more straight forward but I'm no longer getting any tooltips telling me when I cut disconnected (Network Area Cable is unplugged, or whatever that balloon tip thing is that shows), was wondering if anybody knows which service controls this?

thanks

oh and I'm using XP Pro SP2 x86 if it helps

Edited January 8, 2008 by allisd00m

[GrofLuigi]

1. It's definitely WMI (the exe is even in that folder).

2a.

REGEDIT4

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]
"DisableDHCPMediaSense"=dword:0
"DisableMediaSenseEventLog"=dword:0

2b. Set Network Connections and/or Network Location Awareness to Auto

3. Suggestions:

WMI and SENS always invite their friend Com+ Event System to join in. Set it to manual and see for yourself. I always enable/disable all three together.

Same for Browser, Server & Workstation (maybe even NetBios Helper if you use Microsoft Networking) - one is pointless without the others.

GL

[allisd00m]

great reply, thanks a lot for all the info