Advice Request Which Windows 11 Services Are Safe to Disable?

[lokamoka820]

I want to optimize my Windows 11 device for better performance and disabling services that I don't use or need, and to enhance privacy in the second place.

I tried some system optimizers, but I always find something not working properly so I reset back to default settings and try other product which gives me different errors, now to be fair nothing is serious about the errors, but when use a product describe itself as safe and disable just known unnecessary services then this is something need to rethink about it from quality perspective.

And the odd is that none of the products I tested share the same list of unnecessary services, so what one product disable the other enable and so on.

So I want advice about which services I can disable safely.

Thank you.

 

[Bot]

While it's generally not recommended to disable Windows services as it can lead to system instability, there are some that you can consider disabling if you're sure you don't need them. These include:

1. Print Spooler (if you don't use a printer)
2. Fax (if you don't use a fax machine)
3. Remote Registry (enhances security)
4. Windows Search (only if you don't use Windows' built-in search function)
5. Windows Insider Service (if you're not a Windows Insider)

Remember, always create a system restore point before making any changes. And if you're unsure about a service, it's best to leave it enabled.

 

[Zero Knowledge]

I used to disable services this but now I don't see much of a point. BlackViper had a good online tutorial, not sure if he still does it for latest Windows versions, search and you shall find.

 

[rashmi]

@lokamoka820, I also manually tweak Windows 11's settings, including Group Policy, Explorer, optional features, and more. I, too, am looking into disabling unneeded Windows services.

Currently, I have disabled the following services. I will disable more and update here.

BitLocker Drive Encryption Service:
Connected User Experiences and Telemetry
SynTPEnh Caller Service
Windows Error Reporting Service
Windows Insider Service
Windows Search

 

[brambedkar59]

Currently, I have disabled Windows Search and Remote Registry services.

I don't think the disabling services affect performance that much.

 

[lokamoka820]

@rashmi you can check Pegasun System Utilities, it is the best tool I used so far, thanks for @roger_m for recommending it, it finds 40 services to optimize on my device in safe mode and 53 services in maximum mode, and there is noticeable performance improvement, but the only issue I found is that it shows my internet disconnected on the settings app while it is not, I couldn't find the service responsible about this to re-enable it.

 

[rashmi]

@lokamoka820, One can disable a few services safely. Previously, I disabled over 35 services. After reinstalling Windows, I'm mainly looking into disabling "automatic" services and then some manual services. Some manual services often start, perform their functions, and stop. Some manual services are for specific cases only, for example, Smart Card services.

 

[Zero Knowledge]

The problem with disabling 35 services is that you will run into dependency conflicts eventually if you don't know what your doing. You need to be careful if you wan to run M365/CoPilot or any new services or software packages. You will mess up your system without a doubt and will be back here crying about how you can't run this or that. If you want security then OSA System Hardener has a good list of services to disable, paid program but the dev knows what he is doing. Sadly it hasn't been updated in awhile but it's still a good piece of kit.

This reminds me of why you should probably use Debian or Ubuntu. None of this services crap.

 

[lokamoka820]

Thanks for the advice, I just try software with roll back functionality or has option to reset to windows defaults to be safe if something go wrong, and to be more sure I use the "Reset Local Group Policy" tool in Winaero Tweaker which reset everything in windows back to defaults.

 

[rashmi]

After checking all the Windows services, I disabled the following and set two to manual.
BitLocker Drive Encryption Service
Connected User Experiences and Telemetry
Downloaded Maps Manager
Intel Graphics Command Center Service
Intel HD Graphics Control Panel Service
Microsoft Account Sign-in Assistant
Print Spooler
Program Compatibility Assistant Service
SynTPEnh Caller Service
SysMain
Themes
Windows Biometric Service
Windows Error Reporting Service
Windows Insider Service
Windows Search
Workstation
Connected Devices Platform Service (Set to Manual)
Intel Bluetooth Service (Set to Manual)

 

[Jan Willy]

Sooner or later you will come back here with complaints about something that doesn't work as it should be.

 

[rashmi]

Not necessarily. It depends on your usage. Know what you are disabling before proceeding. That's why I avoid automated solutions. I disabled services I don't need (like biometric services, Synaptics, and Intel services). These services were problematic or unnecessary. After checking info, I disabled the services and set some to manual mode. Disabling more wouldn't help.

 

[lokamoka820]

@rashmi thank you so much, your list is very helpful for me, it intersects with most if not all what automated solutions recommend, which makes it the most reliable list I found till now.

 

[Parkinsond]

AVCTP service

Bluetooth support service

BitLocker drive encryption service

Connected user experiences and telemetry

Data usage

Geolocation

IP Helper

Print device configuration service

Print spooler

Program compatibility assistant service

Radio management service

Remote access connection manager

Server

SSDP discovery

Sysmain

TCP/IP NetBIOS Helper

Windows search

 

[oldschool]

AskVG suggests setting services to manual, and not disabled. Here's his info.

[Guide] Windows 10 and Windows 11 Services that can be Disabled Safely

UPDATE: This tutorial will also work in latest Windows 11 operating system. This tutorial is the 5th addition to our exclusive “Which Windows services are

www.askvg.com

 

[Jonny Quest]

AskVG suggests setting services to manual, and not disabled. Here's his info.

[Guide] Windows 10 and Windows 11 Services that can be Disabled Safely

UPDATE: This tutorial will also work in latest Windows 11 operating system. This tutorial is the 5th addition to our exclusive “Which Windows services are

www.askvg.com

That makes wonderful sense, nice link

NOTE: Always set a service’s startup type to MANUAL and never set it to DISABLED. We suggest this because if a service is set to MANUAL start and Windows needs the service, it’ll be able to start the service and there will be no affect on OS functionality. But if a service is set to DISABLED and Windows requires that service, it’ll not be able to start the service and you may face problems.

 

[oldschool]

That makes wonderful sense, nice link

Be aware that it says the info was updated, but doesn't say when, unless I missed it.

 

[rashmi]

@rashmi thank you so much, your list is very helpful for me, it intersects with most if not all what automated solutions recommend, which makes it the most reliable list I found till now.

I only disabled services that either auto-start or run manually for their operations. I find these services unnecessary or don't need them. Disabling additional services might not significantly influence performance, as many only activate during relevant operations. For security and privacy reasons, you may disable services such as Remote Desktop and Geolocation.

 

[Victor M]

Secondary Logon Service - if you want your standard users not to be able promote to admin. I use the standard account daily; and when I need to go to the admin account, I disconnect the Ethernet and then log in. Unless I really need to be online, like when using an online installer, I normally do not go online with the admin account.

 

[Zero Knowledge]

Secondary Logon - if you want your standard users not to be able promote to admin. I use the standard account daily; and when I need to go to the admin account, I disconnect the Ethernet and then log in. Unless I really need to be online, like when using an online installer, I normally do not go online with the admin account.

This. Probably 1 of the very few services I disable.

What you actually need to do is not to disable multiple services but to use Hard_Configurator or some other tool to block user access to services.msc. That is what I would do