XP Pro Unneeded Services?

[Mike]

I have a linksys router which provides a screen for incoming unwanted packets
and use Symantec Personal Firewall to monitor incoming/outgoing packets on the
XP system. My approach has been to try to block everything, turn it on as
needed, and find out why some things are trying to go out. Evidently XP likes
to talk to the world around it. Based on what I am seeing in my logs, I have
adjusted the services accordingly. Here is what I have done so far:

Running, but are they needed ?
Computer Browser - Started Automatic - I do share files on the intranet
DHCP Client - Started Automatic -- I have a static ip address, do I really
need a DHCP client?
Smart Card - Manual

Turned off, but are they needed?
Messenger - Disabled
Remote Registry - Disabled
Routing and Remote Access - Disabled
SSDP Discovery Service - Disabled
Telnet - Disabled
Terminal Services - Disabled
Windows Firewall/Internet Connection Sharing (ICS) - Stopped/Manual
Windows Time - Disabled - I use Dimension D4 to sync my time with the outside

I have also made the following registry change

System Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectPlayNATHelp\DPNHUPnP]
Value Name: UPnPMode
Data Type: REG_DWORD (DWORD Value)
Value Data: (2 = disable UPnP broadcasts)

Any comments about what I have done or need to do?

I will say that these changes have reduced the activity significantly.

 

[Ron Martell]

I have a linksys router which provides a screen for incoming unwanted packets
and use Symantec Personal Firewall to monitor incoming/outgoing packets on the
XP system. My approach has been to try to block everything, turn it on as
needed, and find out why some things are trying to go out. Evidently XP likes
to talk to the world around it. Based on what I am seeing in my logs, I have
adjusted the services accordingly. Here is what I have done so far:

Running, but are they needed ?
Computer Browser - Started Automatic - I do share files on the intranet
DHCP Client - Started Automatic -- I have a static ip address, do I really
need a DHCP client?
Smart Card - Manual

Turned off, but are they needed?
Messenger - Disabled
Remote Registry - Disabled
Routing and Remote Access - Disabled
SSDP Discovery Service - Disabled
Telnet - Disabled
Terminal Services - Disabled
Windows Firewall/Internet Connection Sharing (ICS) - Stopped/Manual
Windows Time - Disabled - I use Dimension D4 to sync my time with the outside

I have also made the following registry change

System Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectPlayNATHelp\DPNHUPnP]
Value Name: UPnPMode
Data Type: REG_DWORD (DWORD Value)
Value Data: (2 = disable UPnP broadcasts)

Any comments about what I have done or need to do?

I will say that these changes have reduced the activity significantly.

See http://www.blackviper.com/WinXP/servicecfg.htm

Good luck


Ron Martell Duncan B.C. Canada
--
Microsoft MVP
On-Line Help Computer Service
http://onlinehelp.bc.ca

"The reason computer chips are so small is computers don't eat much."

 

[Mike]

I have a linksys router which provides a screen for incoming unwanted packets
and use Symantec Personal Firewall to monitor incoming/outgoing packets on the
XP system. My approach has been to try to block everything, turn it on as
needed, and find out why some things are trying to go out. Evidently XP likes
to talk to the world around it. Based on what I am seeing in my logs, I have
adjusted the services accordingly. Here is what I have done so far:
Running, but are they needed ?
Computer Browser - Started Automatic - I do share files on the intranet
DHCP Client - Started Automatic -- I have a static ip address, do I really
need a DHCP client?
Smart Card - Manual
Turned off, but are they needed?
Messenger - Disabled
Remote Registry - Disabled
Routing and Remote Access - Disabled
SSDP Discovery Service - Disabled
Telnet - Disabled
Terminal Services - Disabled
Windows Firewall/Internet Connection Sharing (ICS) - Stopped/Manual
Windows Time - Disabled - I use Dimension D4 to sync my time with the outside
I have also made the following registry change
System Key: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectPlayNATHelp\DPNHUPnP]
Value Name: UPnPMode
Data Type: REG_DWORD (DWORD Value)
Value Data: (2 = disable UPnP broadcasts)
Any comments about what I have done or need to do?
I will say that these changes have reduced the activity significantly.

See http://www.blackviper.com/WinXP/servicecfg.htm

Thanks. He has certainly put in a lot of work to provide that information.
Looks like I am on the right track although I see a couple of others I can
disable. The less the better.

Happy holidays.