有关在带有桌面体验的 Windows Server 2016 中禁用系统服务的指南Guidance on disabling system services on Windows Server 2016 with Desktop Experience

适用于:Windows Server 2016Applies to: Windows Server 2016

Windows 操作系统包含许多提供重要功能的系统服务。The Windows operating system includes many system services that provide important functionality. 不同的服务具有不同的默认启动策略:有些服务默认会自动启动,有些服务按需启动(手动),还有一些服务默认已禁用,只有在显式启用之后才能运行。Different services have different default startup policies: some are started by default (automatic), some when needed (manual), and some are disabled by default and must be explicitly enabled before they can run. 这些默认设置是为每个服务精心选择的,目的是为典型的客户找到性能、功能与安全性之间的平衡。These defaults were chosen carefully for each service to balance performance, functionality, and security for typical customers.

但是,某些企业客户可能偏向于对其 Windows 电脑和服务器采用注重于安全的配置,这种配置可将受攻击面减至绝对最小。因此,这些客户可能想要完全禁用其特定环境中不需要的所有服务。However, some enterprise customers may prefer a more security-focused balance for their Windows PCs and servers, one that reduces their attack surface to the absolute minimum, and may therefore wish to fully disable all services that are not needed in their specific environments. 对于这些客户,Microsoft® 将提供随附的指南,说明可以出于此目的安全禁用哪些服务。For those customers, Microsoft® is providing the accompanying guidance regarding which services can safely be disabled for this purpose.

本指南仅适用于带有桌面体验的 Windows Server 2016(除非用作最终用户的桌面替代版本)。The guidance is only for Windows Server 2016 with Desktop Experience (unless used as a desktop replacement for end users). 从 Windows Server 2019 开始,默认会配置这些指导原则。Beginning with Windows Server 2019, these guidelines are configured by default. 系统上每个服务的分类如下:Each service on the system is categorized as follows:

  • 应该禁用: 注重于安全的企业很可能想要禁用此服务并放弃其功能(请参阅下面的附加详细信息)。Should Disable: A security-focused enterprise will most likely prefer to disable this service and forego its functionality (see additional details below).
  • 可以禁用: 此服务提供的功能对某些(但不是所有)企业有用,如果企业不使用此服务且注重安全,可以安全禁用它。OK to Disable: This service provides functionality that is useful to some but not all enterprises, and security-focused enterprises that don't use it can safely disable it.
  • 不要禁用: 禁用此服务会影响基本功能,或导致特定的角色或功能无法正常运行。Do Not Disable: Disabling this service will impact essential functionality or prevent specific roles or features from functioning correctly. 因此不应禁用它。Therefore it should not be disabled.
  • (无指导): 尚未完全评估禁用这些服务的影响。(No guidance): The impact of disabling these services has not been fully evaluated. 因此,不应更改这些服务的默认配置。Therefore, the default configuration of these services should not be changed.

客户可以使用其组策略中的安全模板或使用 PowerShell 自动化将其 Windows 电脑和服务器配置为禁用所选的服务。Customers can configure their Windows PCs and servers to disable selected services using the Security Templates in their Group Policies or using PowerShell automation. 在某些情况下,指南中包含用于直接禁用服务功能的特定组策略设置,作为禁用服务本身的替代方法。In some cases, the guidance includes specific Group Policy settings that disable the service's functionality directly, as an alternative to disabling the service itself.

Microsoft 建议客户在带有桌面体验的 Windows Server 2016 中禁用以下服务及其相应的计划任务:Microsoft recommends that customers disable the following services and their respective scheduled tasks on Windows Server 2016 with Desktop Experience:

服务:Services:

  1. Xbox Live 身份验证管理器Xbox Live Auth Manager
  2. Xbox Live 游戏保存Xbox Live Game Save

计划的任务:Scheduled tasks:

  1. \Microsoft\XblGameSave\XblGameSaveTask\Microsoft\XblGameSave\XblGameSaveTask
  2. \Microsoft\XblGameSave\XblGameSaveTaskLogon\Microsoft\XblGameSave\XblGameSaveTaskLogon

(还可以通过查看附加的 Microsoft Excel 电子表格,来访问有关本文中详述的所有服务的信息:有关在带有桌面体验的 Windows Server 2016 中禁用系统服务的指南(You can also access the information on all services detailed in this article by viewing the attached Microsoft Excel spreadsheet: Guidance on Disabling System Services on Windows Server 2016 with Desktop Experience)

禁用非默认安装的服务Disabling services not installed by default

Microsoft 建议不要应用策略来禁用非默认安装的服务。Microsoft recommends against applying policies to disable services that are not installed by default.

  • 如果安装了相应的功能,则通常需要这些服务。The service is usually needed if the feature is installed. 安装服务或功能需要管理权限。Installing the service or the feature requires administrative rights. 禁止安装功能,但不要禁止启动服务。Disallow the feature installation, not the service startup.
  • 阻止 Microsoft Windows 服务不会阻止管理员(在某些情况下为非管理员)安装类似的第三方服务(可能是安全风险更高的服务)。Blocking the Microsoft Windows service doesn't stop an admin (or non-admin in some cases) from installing a similar third-party equivalent, perhaps one with a higher security risk.
  • 禁用非默认 Windows 服务(例如 W3SVC)的基线或基准会给某些审核员带来这样一种错觉:该技术(例如 IIS)在本质上就是不安全的,永远不可使用它。A baseline or benchmark that disables a non-default Windows service (for example, W3SVC) will give some auditors the mistaken impression that the technology (for example, IIS) is inherently insecure and should never be used.
  • 如果永远不安装该功能(和服务),只会不必要地增大基线测试和验证的工作量。If the feature (and service) is never installed, this just adds unnecessary bulk to the baseline and to verification work.

对于本文档中列出的所有系统服务,下面两份表格提供了列的说明,以及有关在带有桌面体验的 Windows Server 2016 中启用和禁用系统服务的 Microsoft 建议:For all system services listed in this document, the two tables that follow offer an explanation of columns and Microsoft recommendations for enabling and disabling system services in Windows Server 2016 with Desktop Experience:

列的说明Explanation of columns

服务名称Service name 服务的键(内部)名称Key (internal) name of the service
描述Description 服务的说明,摘自 sc.exe 说明。The service's description, from sc.exe qdescription.
安装Installation 始终安装:服务安装在 Windows Server 2016 Core 和带有桌面体验的 Windows Server 2016 上。Always installed: Service is installed on Windows Server 2016 Core and Windows Server 2016 with Desktop Experience. 仅用于桌面体验:服务位于带有桌面体验的 Windows Server 2016 上,但不安装在 Server Core 上。Only with Desktop Experience: Service is on Windows Server 2016 with Desktop Experience, but is not installed on Server Core.
启动类型Startup type Windows Server 2016 上的服务启动类型Service Startup type on Windows Server 2016
建议Recommendation 有关妥善管理的典型企业部署中的、其服务器不是用作最终用户桌面替代版本的 Windows Server 2016 上禁用此服务的 Microsoft 建议。Microsoft recommendation/advice about disabling this service on Windows Server 2016 in a typical, well-managed enterprise deployment and where the server is not being used as an end-user desktop replacement.
备注Comments 附加说明Additional explanation

Microsoft 建议说明Explanation of Microsoft recommendations

不要禁用Do not disable 不应禁用此服务This service should not be disabled
可以禁用OK to disable 如果未使用此服务支持的功能,则可以禁用此服务。This service can be disabled if the feature it supports is not being used.
已禁用Already disabled 此服务默认已禁用;无需使用策略强制禁用This service is disabled by default; no need to enforce with policy
应该禁用Should be disabled 在妥善管理的企业系统中永远不应该启用此服务。This service should never be enabled on a well-managed enterprise system.

下表提供了有关在带有桌面体验的 Windows Server 2016 中禁用系统服务的 Microsoft 指导:The following tables offer Microsoft guidance on disabling system services on Windows Server 2016 with Desktop Experience:

ActiveX 安装程序 (AxInstSV)ActiveX Installer (AxInstSV)

服务名称Service name AxInstSVAxInstSV
描述Description 针对从 Internet 安装的 ActiveX 控件提供用户帐户控制验证,并启用基于组策略设置的 ActiveX 控件安装管理。Provides User Account Control validation for the installation of ActiveX controls from the Internet and enables management of ActiveX control installation based on Group Policy settings. 此服务按需启动,如果已禁用,则 ActiveX 控件安装行为遵循默认的浏览器设置。This service is started on demand and if disabled the installation of ActiveX controls will behave according to default browser settings.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments 如果不需要相关的功能,则可以禁用OK to disable if feature not needed

AllJoyn 路由器服务AllJoyn Router Service

服务名称Service name AJRouterAJRouter
描述Description 路由本地 AllJoyn 客户端的 AllJoyn 消息。Routes AllJoyn messages for the local AllJoyn clients. 如果此服务已停止,则没有自身捆绑路由器的 AllJoyn 客户端将无法运行。If this service is stopped the AllJoyn clients that do not have their own bundled routers will be unable to run.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

应用就绪状态App Readiness

服务名称Service name AppReadinessAppReadiness
描述Description 使应用在用户首次登录此电脑以及添加新应用时可供使用。Gets apps ready for use the first time a user signs in to this PC and when adding new apps.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 不要禁用Do not disable
备注Comments

应用程序标识Application Identity

服务名称Service name AppIDSvcAppIDSvc
描述Description 确定并验证应用程序的标识。Determines and verifies the identity of an application. 禁用此服务会阻止实施 AppLocker。Disabling this service will prevent AppLocker from being enforced.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

应用程序信息Application Information

服务名称Service name AppinfoAppinfo
描述Description 方便使用附加的管理特权运行交互式应用程序。Facilitates the running of interactive applications with additional administrative privileges. 如果此服务已停止,则用户无法使用执行所需用户任务而要提供的附加管理特权启动应用程序。If this service is stopped, users will be unable to launch applications with the additional administrative privileges they may require to perform desired user tasks.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments 支持 UAC 相同桌面提升Supports UAC same-desktop elevation

应用程序层网关服务Application Layer Gateway Service

服务名称Service name ALGALG
描述Description 提供用于 Internet 连接共享的第三方协议插件的支持Provides support for third-party protocol plug-ins for Internet Connection Sharing
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

应用程序管理Application Management

服务名称Service name AppMgmtAppMgmt
描述Description 处理通过组策略部署的软件的安装、删除和枚举请求。Processes installation, removal, and enumeration requests for software deployed through Group Policy. 如果禁用该服务,则用户无法安装、删除或枚举通过组策略部署的软件。If the service is disabled, users will be unable to install, remove, or enumerate software deployed through Group Policy. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

AppX 部署服务 (AppXSVC)AppX Deployment Service (AppXSVC)

服务名称Service name AppXSvcAppXSvc
描述Description 提供用于部署 Store 应用程序的基础结构支持。Provides infrastructure support for deploying Store applications. 此服务按需启动,如果已禁用,则 Store 应用程序将不会部署到系统,并且可能无法正常运行。This service is started on demand and if disabled Store applications will not be deployed to the system, and may not function properly.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

自动时区更新程序Auto Time Zone Updater

服务名称Service name tzautoupdatetzautoupdate
描述Description 自动设置系统时区。Automatically sets the system time zone.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type 禁用Disabled
建议Recommendation 已禁用Already disabled
备注Comments

后台智能传送服务Background Intelligent Transfer Service

服务名称Service name BITSBITS
描述Description 使用空闲网络带宽在后台传输文件。Transfers files in the background using idle network bandwidth. 如果该服务已禁用,则依赖于 BITS 的任何应用程序(例如 Windows 更新或 MSN Explorer)将无法自动下载程序和其他信息。If the service is disabled, then any applications that depend on BITS, such as Windows Update or MSN Explorer, will be unable to automatically download programs and other information.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

后台任务基础结构服务Background Tasks Infrastructure Service

服务名称Service name BrokerInfrastructureBrokerInfrastructure
描述Description 控制哪些后台任务可在系统上运行的 Windows 基础结构服务。Windows infrastructure service that controls which background tasks can run on the system.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

基本筛选引擎Base Filtering Engine

服务名称Service name BFEBFE
描述Description 基本筛选引擎 (BFE) 服务管理防火墙和 Internet 协议安全性 (IPsec) 策略,以及实现用户模式筛选。The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. 停止或禁用 BFE 服务会明显降低系统的安全性。Stopping or disabling the BFE service will significantly reduce the security of the system. 此外,还会导致 IPsec 管理和防火墙应用程序中出现不可预测的行为。It will also result in unpredictable behavior in IPsec management and firewall applications.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

蓝牙支持服务Bluetooth Support Service

服务名称Service name bthservbthserv
描述Description 蓝牙服务支持远程蓝牙设备的发现和关联。The Bluetooth service supports discovery and association of remote Bluetooth devices. 停止或禁用此服务可能会导致已安装的蓝牙设备无法正常运行,并阻止发现或关联新设备。Stopping or disabling this service may cause already installed Bluetooth devices to fail to operate properly and prevent new devices from being discovered or associated.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments 如果不使用,则可以禁用。OK to disable if not used. 另一种禁用机制: https://technet.microsoft.com/library/dd252791.aspxAnother disabling mechanism: https://technet.microsoft.com/library/dd252791.aspx

CDPUserSvcCDPUserSvc

服务名称Service name CDPUserSvcCDPUserSvc
描述Description 此用户服务用于互联设备平台方案This user service is used for Connected Devices Platform scenarios
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type 自动Automatic
建议Recommendation 可以禁用OK to disable
备注Comments 用户服务模板User service template

证书传播Certificate Propagation

服务名称Service name CertPropSvcCertPropSvc
描述Description 将智能卡中的用户证书和根证书复制到当前用户的证书存储,检测智能卡何时已插入到智能卡读卡器,并根据需要安装智能卡即插即用微型驱动程序。Copies user certificates and root certificates from smart cards into the current user's certificate store, detects when a smart card is inserted into a smart card reader, and if needed, installs the smart card Plug and Play minidriver.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

客户端许可证服务 (ClipSVC)Client License Service (ClipSVC)

服务名称Service name ClipSVCClipSVC
描述Description 提供 Microsoft Store 的基础结构支持。Provides infrastructure support for the Microsoft Store. 此服务按需启动,如果已禁用,则通过 Microsoft Store 购买的应用程序将行为异常。This service is started on demand and if disabled applications bought using Microsoft Store will not behave correctly.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

CNG 密钥隔离CNG Key Isolation

服务名称Service name KeyIsoKeyIso
描述Description CNG 密钥隔离服务托管在 LSA 进程中。The CNG key isolation service is hosted in the LSA process. 该服务根据通用准则的要求,针对私钥和关联的加密操作提供密钥进程隔离。The service provides key process isolation to private keys and associated cryptographic operations as required by the Common Criteria. 该服务在符合通用准则要求的安全进程中存储并使用长期生存的密钥。The service stores and uses long-lived keys in a secure process complying with Common Criteria requirements.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

COM+ 事件系统COM+ Event System

服务名称Service name EventSystemEventSystem
描述Description 支持系统事件通知服务 (SENS),该服务可自动将事件分发到组件对象模型 (COM) 订阅组件。Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. 如果该服务已停止,则 SENS 将会关闭,无法提供登录和注销通知。If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

COM+ 系统应用程序COM+ System Application

服务名称Service name COMSysAppCOMSysApp
描述Description 管理基于组件对象模型 (COM)+ 的组件的配置和跟踪。Manages the configuration and tracking of Component Object Model (COM)+-based components. 如果该服务已停止,大多数基于 COM+ 的组件将无法正常运行。If the service is stopped, most COM+-based components will not function properly. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

计算机浏览器Computer Browser

服务名称Service name 浏览器Browser
描述Description 维护更新的网络中计算机列表,并将此列表提供给指定为浏览器的计算机。Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. 如果此服务已停止,则不会更新或维护此列表。If this service is stopped, this list will not be updated or maintained. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type 禁用Disabled
建议Recommendation 已禁用Already disabled
备注Comments

互联设备平台服务Connected Devices Platform Service

服务名称Service name CDPSvcCDPSvc
描述Description 此服务用于互联设备和 Universal Glass 方案This service is used for Connected Devices and Universal Glass scenarios
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

已连接的用户体验和遥测Connected User Experiences and Telemetry

服务名称Service name DiagTrackDiagTrack
描述Description 已连接的用户体验和遥测服务启用支持应用程序内部体验和已连接用户体验的功能。The Connected User Experiences and Telemetry service enables features that support in-application and connected user experiences. 此外,如果在“反馈和诊断”中启用了诊断和使用情况隐私选项设置,则此服务会管理诊断和使用情况信息的事件驱动式收集与传输(用于改进 Windows 平台的体验和质量)。Additionally, this service manages the event-driven collection and transmission of diagnostic and usage information (used to improve the experience and quality of the Windows Platform) when the diagnostics and usage privacy option settings are enabled under Feedback and Diagnostics.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

联系人数据Contact Data

服务名称Service name PimIndexMaintenanceSvcPimIndexMaintenanceSvc
描述Description 为联系人数据编制索引以加速联系人搜索。Indexes contact data for fast contact searching. 如果停止或禁用此服务,搜索结果中可能会缺少联系人。If you stop or disable this service, contacts might be missing from your search results.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments 用户服务模板User service template

CoreMessagingCoreMessaging

服务名称Service name CoreMessagingRegistrarCoreMessagingRegistrar
描述Description 管理系统组件之间的通信。Manages communication between system components.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

凭据管理器Credential Manager

服务名称Service name VaultSvcVaultSvc
描述Description 提供用户、应用程序和安全服务包凭据的安全存储和检索。Provides secure storage and retrieval of credentials to users, applications and security service packages.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

加密服务Cryptographic Services

服务名称Service name CryptSvcCryptSvc
描述Description 提供三个管理服务:目录数据库服务:确认 Windows 文件的签名,并允许安装新的程序;受保护的根服务:在此计算机中添加和删除受信任的根证书颁发机构证书;自动根证书更新服务:从 Windows 更新检索根证书,并实现 SSL 等方案。Provides three management services: Catalog Database Service, which confirms the signatures of Windows files and allows new programs to be installed; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Automatic Root Certificate Update Service, which retrieves root certificates from Windows Update and enable scenarios such as SSL. 如果此服务已停止,则这些管理服务将无法正常运行。If this service is stopped, these management services will not function properly. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

数据共享服务Data Sharing Service

服务名称Service name DsSvcDsSvc
描述Description 在应用程序之间提供数据中转。Provides data brokering between applications.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

DataCollectionPublishingServiceDataCollectionPublishingService

服务名称Service name DcpSvcDcpSvc
描述Description DCP(数据收集和发布)服务支持第一方应用向云上传数据。The DCP (Data Collection and Publishing) service supports first-party apps to upload data to cloud.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

DCOM 服务器进程启动器DCOM Server Process Launcher

服务名称Service name DcomLaunchDcomLaunch
描述Description DCOMLAUNCH 服务启动 COM 和 DCOM 服务器以响应对象激活请求。The DCOMLAUNCH service launches COM and DCOM servers in response to object activation requests. 如果此服务已停止或禁用,则使用 COM 或 DCOM 的程序将无法正常运行。If this service is stopped or disabled, programs using COM or DCOM will not function properly. 强烈建议使 DCOMLAUNCH 服务保持运行。It is strongly recommended that you have the DCOMLAUNCH service running.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

设备关联服务Device Association Service

服务名称Service name DeviceAssociationServiceDeviceAssociationService
描述Description 在系统与有线或无线设备之间启用配对。Enables pairing between the system and wired or wireless devices.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

设备安装服务Device Install Service

服务名称Service name DeviceInstallDeviceInstall
描述Description 使计算机能够识别和适应硬件更改,而且只需用户提供少量的输入或者根本不需要输入。Enables a computer to recognize and adapt to hardware changes with little or no user input. 停止或禁用此服务会导致系统不稳定。Stopping or disabling this service will result in system instability.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

设备管理注册服务Device Management Enrollment Service

服务名称Service name DmEnrollmentSvcDmEnrollmentSvc
描述Description 执行设备管理的设备注册活动Performs Device Enrollment Activities for Device Management
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

设备安装管理器Device Setup Manager

服务名称Service name DsmSvcDsmSvc
描述Description 启用设备相关软件的检测、下载和安装。Enables the detection, download and installation of device-related software. 如果此服务已禁用,则可能会使用过期的软件配置设备,因此设备可能无法正常工作。If this service is disabled, devices may be configured with outdated software, and may not work correctly.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

DevQuery 后台发现代理DevQuery Background Discovery Broker

服务名称Service name DevQueryBrokerDevQueryBroker
描述Description 使应用能够使用后台任务发现设备Enables apps to discover devices with a backgroud task
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

DHCP 客户端DHCP Client

服务名称Service name DhcpDhcp
描述Description 注册和更新此计算机的 IP 地址与 DNS 记录。Registers and updates IP addresses and DNS records for this computer. 如果此服务已停止,则此计算机不会接收动态 IP 地址和 DNS 更新。If this service is stopped, this computer will not receive dynamic IP addresses and DNS updates. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

诊断策略服务Diagnostic Policy Service

服务名称Service name DPSDPS
描述Description 诊断策略服务启用 Windows 组件的问题检测、故障排除和解决。The Diagnostic Policy Service enables problem detection, troubleshooting and resolution for Windows components. 如果此服务已停止,则诊断将不再正常运行。If this service is stopped, diagnostics will no longer function.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

诊断服务主机Diagnostic Service Host

服务名称Service name WdiServiceHostWdiServiceHost
描述Description 诊断策略服务使用诊断服务主机来托管需要在本地服务上下文中运行的诊断。The Diagnostic Service Host is used by the Diagnostic Policy Service to host diagnostics that need to run in a Local Service context. 如果此服务已停止,则依赖于它的任何诊断将不再正常运行。If this service is stopped, any diagnostics that depend on it will no longer function.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

诊断系统主机Diagnostic System Host

服务名称Service name WdiSystemHostWdiSystemHost
描述Description 诊断策略服务使用诊断系统主机来托管需要在本地系统上下文中运行的诊断。The Diagnostic System Host is used by the Diagnostic Policy Service to host diagnostics that need to run in a Local System context. 如果此服务已停止,则依赖于它的任何诊断将不再正常运行。If this service is stopped, any diagnostics that depend on it will no longer function.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments
服务名称Service name TrkWksTrkWks
描述Description 维护一台计算机中或者网络上不同计算机中 NTFS 文件之间的链接。Maintains links between NTFS files within a computer or across computers in a network.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

分布式事务处理协调器Distributed Transaction Coordinator

服务名称Service name MSDTCMSDTC
描述Description 协调跨多个资源管理器(例如数据库、消息队列和文件系统)的事务。Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. 如果此服务已停止,这些事务将会失败。If this service is stopped, these transactions will fail. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

dmwappushsvcdmwappushsvc

服务名称Service name dmwappushservicedmwappushservice
描述Description WAP 推送消息路由服务WAP Push Message Routing Service
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments Intune、MDM 和类似管理技术以及统一写入筛选器的客户端设备上所需的服务。Service required on client devices for Intune, MDM and similar management technologies, and for Unified Write Filter. Windows Server 不需要此服务。Not needed for Server.

DNS 客户端的运行情况DNS Client

服务名称Service name DnscacheDnscache
描述Description DNS 客户端服务(dnscache)缓存域名系统(DNS)名称并注册此计算机的计算机全名。The DNS Client service (dnscache) caches Domain Name System (DNS) names and registers the full computer name for this computer. 如果该服务已停止,将继续解析 DNS 名称。If the service is stopped, DNS names will continue to be resolved. 但是,将不会缓存 DNS 名称队列的结果,且不注册计算机名称。However, the results of DNS name queries will not be cached and the computer's name will not be registered. 如果该服务已禁用,将无法启动显式依赖它的服务。If the service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

已下载的地图管理器Downloaded Maps Manager

服务名称Service name MapsBrokerMapsBroker
描述Description 可让应用程序访问已下载的地图的 Windows 服务。Windows service for application access to downloaded maps. 应用程序在访问下载的地图时会按需启动此服务。This service is started on-demand by application accessing downloaded maps. 禁用此服务可防止应用访问地图。Disabling this service will prevent apps from accessing maps.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type 自动Automatic
建议Recommendation 可以禁用OK to disable
备注Comments 禁用该服务会中断依赖于它的应用;如果应用不依赖于它,则可将其禁用Disabling breaks apps that rely on the service; OK to disable if apps not relying on it

嵌入模式Embedded Mode

服务名称Service name embeddedmodeembeddedmode
描述Description 嵌入模式服务实现后台应用程序相关的方案。The Embedded Mode service enables scenarios related to Background Applications. 禁用此服务会阻止激活后台应用程序。Disabling this service will prevent Background Applications from being activated.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

加密文件系统 (EFS)Encrypting File System (EFS)

服务名称Service name EFSEFS
描述Description 提供用于在 NTFS 文件系统卷上存储加密文件的核心文件加密技术。Provides the core file encryption technology used to store encrypted files on NTFS file system volumes. 如果此服务已停止或禁用,应用程序将无法访问加密的文件。If this service is stopped or disabled, applications will be unable to access encrypted files.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

企业应用管理服务Enterprise App Management Service

服务名称Service name EntAppSvcEntAppSvc
描述Description 启用企业应用程序管理。Enables enterprise application management.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

可扩展身份验证协议Extensible Authentication Protocol

服务名称Service name EapHostEapHost
描述Description 可扩展身份验证协议 (EAP) 服务在 802.1x 有线和无线、VPN 和网络访问保护 (NAP) 等方案中提供网络身份验证。The Extensible Authentication Protocol (EAP) service provides network authentication in such scenarios as 802.1x wired and wireless, VPN, and Network Access Protection (NAP). EAP 还提供应用程序编程接口 (API),在身份验证过程中,网络访问客户端(包括无线和 VPN 客户端)将使用这些 API。EAP also provides application programming interfaces (APIs) that are used by network access clients, including wireless and VPN clients, during the authentication process. 如果禁用此服务,则会阻止此计算机访问需要 EAP 身份验证的网络。If you disable this service, this computer is prevented from accessing networks that require EAP authentication.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

功能发现提供程序主机服务Function Discovery Provider Host

服务名称Service name fdPHostfdPHost
描述Description FDPHOST 服务托管功能发现 (FD) 网络发现提供程序。The FDPHOST service hosts the Function Discovery (FD) network discovery providers. 这些 FD 提供程序为简单服务发现协议 (SSDP) 和 Web 服务 - 发现 (WS-D) 协议提供网络发现服务。These FD providers supply network discovery services for the Simple Services Discovery Protocol (SSDP) and Web Services - Discovery (WS-D) protocol. 停止或禁用 FDPHOST 服务会在使用 FD 时禁用这些协议的网络发现。Stopping or disabling the FDPHOST service will disable network discovery for these protocols when using FD. 如果此服务不可用,使用 FD 并依赖于这些发现协议的网络服务将无法查找网络设备或资源。When this service is unavailable, network services using FD and relying on these discovery protocols will be unable to find network devices or resources.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

功能发现资源发布服务Function Discovery Resource Publication

服务名称Service name FDResPubFDResPub
描述Description 发布此计算机以及附加到此计算机的资源,以便可以通过网络发现它们。Publishes this computer and resources attached to this computer so they can be discovered over the network. 如果此服务已停止,则不再会发布网络资源,网络中的其他计算机不会发现它们。If this service is stopped, network resources will no longer be published and they will not be discovered by other computers on the network.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

地理定位服务Geolocation Service

服务名称Service name lfsvclfsvc
描述Description 此服务监视系统的当前位置并管理地理围栏(具有关联事件的地理位置)。This service monitors the current location of the system and manages geofences (a geographical location with associated events). 如果关闭此服务,应用程序将无法使用或接收有关地理位置或地理围栏的通知。If you turn off this service, applications will be unable to use or receive notifications for geolocation or geofences.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments 禁用该服务会中断依赖于它的应用;如果应用不依赖于它,则可将其禁用Disabling breaks apps that rely on the service; OK to disable if apps not relying on it

组策略客户端Group Policy Client

服务名称Service name gpsvcgpsvc
描述Description 该服务负责应用管理员通过组策略组件为计算机和用户配置的设置。The service is responsible for applying settings configured by administrators for the computer and users through the Group Policy component. 如果该服务已禁用,则不会应用这些设置,并且无法通过组策略管理应用程序和组件。If the service is disabled, the settings will not be applied and applications and components will not be manageable through Group Policy. 如果该服务已禁用,依赖于组策略组件的组件或应用程序可能无法正常运行。Any components or applications that depend on the Group Policy component might not be functional if the service is disabled.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

人机接口设备服务Human Interface Device Service

服务名称Service name hidservhidserv
描述Description 激活并保持使用键盘、遥控器和其他多媒体设备上的热按钮。Activates and maintains the use of hot buttons on keyboards, remote controls, and other multimedia devices. 建议使此服务保持运行。It is recommended that you keep this service running.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

HV 主机服务HV Host Service

服务名称Service name HvHostHvHost
描述Description 提供 Hyper-V 虚拟机监控程序的接口,以便为主机操作系统提供每个分区的性能计数器。Provides an interface for the Hyper-V hypervisor to provide per-partition performance counters to the host operating system.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 不要禁用Do not disable
备注Comments 来宾 VM 的性能增强器。Performance enhancers for guest VMs. 目前只在显式填充的 VM 上使用,但会在应用程序防护中使用Not used today except for explicitly populated VMs, but will be used in Application Guard

Hyper-V 数据交换服务Hyper-V Data Exchange Service

服务名称Service name vmickvpexchangevmickvpexchange
描述Description 提供了一种在虚拟机和运行在物理计算机上的操作系统之间交换数据的机制。Provides a mechanism to exchange data between the virtual machine and the operating system running on the physical computer.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 不要禁用Do not disable
备注Comments 请参阅 HvHostSee HvHost

Hyper-V 来宾服务接口Hyper-V Guest Service Interface

服务名称Service name vmicguestinterfacevmicguestinterface
描述Description 为 Hyper-V 主机提供接口,以便与虚拟机内运行的特定服务进行交互。Provides an interface for the Hyper-V host to interact with specific services running inside the virtual machine.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 不要禁用Do not disable
备注Comments 请参阅 HvHostSee HvHost

Hyper-V 来宾关闭服务Hyper-V Guest Shutdown Service

服务名称Service name vmicshutdownvmicshutdown
描述Description 提供一种机制用于从物理计算机上的管理界面关闭此虚拟机的操作系统。Provides a mechanism to shut down the operating system of this virtual machine from the management interfaces on the physical computer.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 不要禁用Do not disable
备注Comments 请参阅 HvHostSee HvHost

Hyper-V 检测信号服务Hyper-V Heartbeat Service

服务名称Service name vmicheartbeatvmicheartbeat
描述Description 通过定期报告检测信号来监视此虚拟机的状态。Monitors the state of this virtual machine by reporting a heartbeat at regular intervals. 此服务可帮助识别正在运行的但已停止响应的虚拟机。This service helps you identify running virtual machines that have stopped responding.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 不要禁用Do not disable
备注Comments 请参阅 HvHostSee HvHost

Hyper-V PowerShell Direct 服务Hyper-V PowerShell Direct Service

服务名称Service name vmicvmsessionvmicvmsession
描述Description 提供在没有虚拟网络的情况下,通过 VM 会话使用 PowerShell 管理虚拟机的机制。Provides a mechanism to manage virtual machine with PowerShell via VM session without a virtual network.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 不要禁用Do not disable
备注Comments 请参阅 HvHostSee HvHost

Hyper-V 远程桌面虚拟化服务Hyper-V Remote Desktop Virtualization Service

服务名称Service name vmicrdvvmicrdv
描述Description 提供一个平台用于在虚拟机与运行于物理计算机上的操作系统之间通信。Provides a platform for communication between the virtual machine and the operating system running on the physical computer.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 不要禁用Do not disable
备注Comments 请参阅 HvHostSee HvHost

Hyper-V 时间同步服务Hyper-V Time Synchronization Service

服务名称Service name vmictimesyncvmictimesync
描述Description 将此虚拟机的系统时间与物理计算机的系统时间同步。Synchronizes the system time of this virtual machine with the system time of the physical computer.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 不要禁用Do not disable
备注Comments 请参阅 HvHostSee HvHost

Hyper-V 卷影复制请求程序Hyper-V Volume Shadow Copy Requestor

服务名称Service name vmicvssvmicvss
描述Description 协调需要使用卷影复制服务通过物理计算机上的操作系统备份此虚拟机上的应用程序和数据的通信。Coordinates the communications that are required to use Volume Shadow Copy Service to back up applications and data on this virtual machine from the operating system on the physical computer.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 不要禁用Do not disable
备注Comments 请参阅 HvHostSee HvHost

IKE 和 AuthIP IPsec 密钥模块IKE and AuthIP IPsec Keying Modules

服务名称Service name IKEEXTIKEEXT
描述Description IKEEXT 服务托管 Internet 密钥交换 (IKE) 和身份验证 Internet 协议 (AuthIP) 密钥模块。The IKEEXT service hosts the Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) keying modules. 这些密钥模块用于 Internet 协议安全性 (IPsec) 中的身份验证和密钥交换。These keying modules are used for authentication and key exchange in Internet Protocol security (IPsec). 停止或禁用 IKEEXT 服务会禁用对等计算机上的 IKE 和 AuthIP 密钥交换。Stopping or disabling the IKEEXT service will disable IKE and AuthIP key exchange with peer computers. IPsec 通常配置为使用 IKE 或 AuthIP;因此,停止或禁用 IKEEXT 服务可能会导致 IPsec 失败,并损害系统的安全性。IPsec is typically configured to use IKE or AuthIP; therefore, stopping or disabling the IKEEXT service might result in an IPsec failure and might compromise the security of the system. 强烈建议使 IKEEXT 服务保持运行。It is strongly recommended that you have the IKEEXT service running.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

交互服务检测Interactive Services Detection

服务名称Service name UI0DetectUI0Detect
描述Description 为交互式服务启用用户输入通知,以便在显示交互式服务创建的对话框时可以访问这些对话框。Enables user notification of user input for interactive services, which enables access to dialogs created by interactive services when they appear. 如果此服务已停止,新交互式服务对话框通知将不再运行,并且可能无法访问交互式服务对话框。If this service is stopped, notifications of new interactive service dialogs will no longer function and there might not be access to interactive service dialogs. 如果此服务已禁用,新交互式服务对话框的通知和访问将不再运行。If this service is disabled, both notifications of and access to new interactive service dialogs will no longer function.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

Internet 连接共享(ICS)Internet Connection Sharing (ICS)

服务名称Service name SharedAccessSharedAccess
描述Description 为家庭或小型办公网络提供网络地址转换、寻址、名称解析和/或入侵防护服务。Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments 客户端需要将 ICS 用作 WiFi 热点;ICS 还会在 Miracast 投影的两端使用。Required for clients used as WiFi hotspots, and also on both ends of Miracast projection. 可能无法使用 GPO 设置“禁止在 DNS 域网络上使用 Internet 连接共享”来阻止 ICSICS can be blocked with GPO setting, "Prohibit use of Internet Connection Sharing on your DNS domain network"

IP 帮助程序IP Helper

服务名称Service name iphlpsvciphlpsvc
描述Description 使用 IPv6 转换技术(6to4、ISATAP、端口代理和 Teredo)和 IP-HTTPS 提供隧道连接。Provides tunnel connectivity using IPv6 transition technologies (6to4, ISATAP, Port Proxy, and Teredo), and IP-HTTPS. 如果此服务已停止,计算机将不会获得这些技术提供的增强型连接优势。If this service is stopped, the computer will not have the enhanced connectivity benefits that these technologies offer.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

IPsec 策略代理IPsec Policy Agent

服务名称Service name PolicyAgentPolicyAgent
描述Description Internet 协议安全性 (IPSec) 支持网络级对等身份验证、数据源身份验证、数据完整性、数据保密性(加密)和重播保护。Internet Protocol security (IPsec) supports network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and replay protection. 此服务实施通过“IP 安全策略”管理单元或命令行工具“netsh ipsec”创建的 IPsec 策略。This service enforces IPsec policies created through the IP Security Policies snap-in or the command-line tool "netsh ipsec". 如果停止此服务,当策略要求连接使用 IPsec 时,你可能会遇到网络连接问题。If you stop this service, you may experience network connectivity issues if your policy requires that connections use IPsec. 此外,停止此服务时,Windows 防火墙远程管理不可用。Also, remote management of Windows Firewall is not available when this service is stopped.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

KDC 代理服务器服务 (KPS)KDC Proxy Server service (KPS)

服务名称Service name KPSSVCKPSSVC
描述Description KDC 代理服务器服务在边缘服务器上运行,用于将 Kerberos 协议消息中转到企业网络上的域控制器。KDC Proxy Server service runs on edge servers to proxy Kerberos protocol messages to domain controllers on the corporate network.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

适用于分布式事务处理协调器的 KtmRmKtmRm for Distributed Transaction Coordinator

服务名称Service name KtmRmKtmRm
描述Description 协调分布式事务处理协调器 (MSDTC) 与内核事务管理器 (KTM) 之间的事务。Coordinates transactions between the Distributed Transaction Coordinator (MSDTC) and the Kernel Transaction Manager (KTM). 如果不需要此服务,建议将其保留停止状态。If it is not needed, it is recommended that this service remain stopped. 如果需要,MSDTC 和 KTM 会自动启动此服务。If it is needed, both MSDTC and KTM will start this service automatically. 如果此服务已禁用,与内核资源管理器交互的任何 MSDTC 事务都将失败,而显式依赖于此服务的任何服务将无法启动。If this service is disabled, any MSDTC transaction interacting with a Kernel Resource Manager will fail and any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments
服务名称Service name lltdsvclltdsvc
描述Description 创建网络映射,该映射由电脑和设备拓扑(连接)信息,以及描述每台电脑和设备的元数据组成。Creates a Network Map, consisting of PC and device topology (connectivity) information, and metadata describing each PC and device. 如果此服务已禁用,网络映射将无法正常运行。If this service is disabled, the Network Map will not function properly.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments 如果不依赖于网络映射,则可以禁用OK to disable if no dependencies on Network Map

本地会话管理器Local Session Manager

服务名称Service name LSMLSM
描述Description 管理本地用户会话的核心 Windows 服务。Core Windows Service that manages local user sessions. 停止或禁用此服务会导致系统不稳定。Stopping or disabling this service will result in system instability.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

Microsoft (R) 诊断中心标准收集器Microsoft (R) Diagnostics Hub Standard Collector

服务名称Service name diagnosticshub.standardcollector.servicediagnosticshub.standardcollector.service
描述Description 诊断中心标准收集器服务。Diagnostics Hub Standard Collector Service. 运行时,此服务将收集实时 ETW 事件并对其进行处理。When running, this service collects real time ETW events and processes them.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

Microsoft 帐户登录助手Microsoft Account Sign-in Assistant

服务名称Service name wlidsvcwlidsvc
描述Description 使用户能够通过 Microsoft 帐户标识服务登录。Enables user sign-in through Microsoft account identity services. 如果此服务已停止,则用户无法使用其 Microsoft 帐户登录到计算机。If this service is stopped, users will not be able to log on to the computer with their Microsoft account.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments Microsoft 帐户在 Windows Server 上为 N/AMicrosoft Accounts are N/A on Windows Server

Microsoft App-V 客户端Microsoft App-V Client

服务名称Service name AppVClientAppVClient
描述Description 管理 App-V 用户和虚拟应用程序Manages App-V users and virtual applications
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type 禁用Disabled
建议Recommendation 已禁用Already disabled
备注Comments

Microsoft iSCSI 发起程序服务Microsoft iSCSI Initiator Service

服务名称Service name MSiSCSIMSiSCSI
描述Description 管理从此计算机与远程 iSCSI 目标设备建立的 Internet SCSI (iSCSI) 会话。Manages Internet SCSI (iSCSI) sessions from this computer to remote iSCSI target devices. 如果此服务已停止,则此计算机无法登录或访问 iSCSI 目标。If this service is stopped, this computer will not be able to login or access iSCSI targets. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 不要禁用Do not disable
备注Comments 我们的诊断数据表明,此服务会在客户端和服务器上使用。Our diagnostic data indicates this is used on client as well as server. 禁用此服务并无好处。No benefit to disabling this.

Microsoft PassportMicrosoft Passport

服务名称Service name NgcSvcNgcSvc
描述Description 为用于对用户关联的标识提供者进行身份验证的加密密钥提供进程隔离。Provides process isolation for cryptographic keys used to authenticate to a user's associated identity providers. 如果此服务已禁用,则无法使用和管理这些密钥,包括无法登录计算机以及单一登录到应用和网站。If this service is disabled, all uses and management of these keys will not be available, which includes machine logon and single-sign on for apps and websites. 此服务会自动启动和停止。This service starts and stops automatically. 建议不要重新配置此服务。It is recommended that you do not reconfigure this service.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments PIN/Hello 登录需要此服务,在 Windows Server 上不受支持Needed for PIN/Hello logons, which aren't supported on Server

Microsoft Passport 容器Microsoft Passport Container

服务名称Service name NgcCtnrSvcNgcCtnrSvc
描述Description 管理用于在标识提供者中对用户进行身份验证的本地用户标识密钥以及 TPM 虚拟智能卡。Manages local user identity keys used to authenticate user to identity providers as well as TPM virtual smart cards. 如果此服务已禁用,将无法访问本地用户标识密钥和 TPM 虚拟智能卡。If this service is disabled, local user identity keys and TPM virtual smart cards will not be accessible. 建议不要重新配置此服务。It is recommended that you do not reconfigure this service.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments

Microsoft 软件卷影复制提供程序Microsoft Software Shadow Copy Provider

服务名称Service name swprvswprv
描述Description 管理卷影复制服务创建的基于软件的卷影副本。Manages software-based volume shadow copies taken by the Volume Shadow Copy service. 如果此服务已停止,则无法管理基于软件的卷影副本。If this service is stopped, software-based volume shadow copies cannot be managed. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

Microsoft 存储空间 SMPMicrosoft Storage Spaces SMP

服务名称Service name smphostsmphost
描述Description Microsoft 存储空间管理提供程序的宿主服务。Host service for the Microsoft Storage Spaces management provider. 如果此服务已停止或禁用,则无法管理存储空间。If this service is stopped or disabled, Storage Spaces cannot be managed.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 不要禁用Do not disable
备注Comments 如果没有此服务,存储管理 API 将会失败。Storage management APIs fail without this service. 例如:"Get-WmiObject -class MSFT_Disk -Namespace Root\Microsoft\Windows\Storage"。Example: "Get-WmiObject -class MSFT_Disk -Namespace Root\Microsoft\Windows\Storage".

Net.Tcp 端口共享服务Net.Tcp Port Sharing Service

服务名称Service name NetTcpPortSharingNetTcpPortSharing
描述Description 提供通过 net.tcp 协议共享 TCP 端口的功能。Provides ability to share TCP ports over the net.tcp protocol.
安装Installation 始终安装Always installed
启动类型Startup type 禁用Disabled
建议Recommendation 已禁用Already disabled
备注Comments

NetlogonNetlogon

服务名称Service name NetlogonNetlogon
描述Description 在此计算机与用来对用户和服务进行身份验证的域控制器之间维持一个安全通道。Maintains a secure channel between this computer and the domain controller for authenticating users and services. 如果此服务已停止,则该计算机将无法对用户和服务进行身份验证,并且该域控制器无法注册 DNS 记录。If this service is stopped, the computer may not authenticate users and services and the domain controller cannot register DNS records. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

网络连接代理Network Connection Broker

服务名称Service name NcbServiceNcbService
描述Description 可让 Microsoft Store 应用从 Internet 接收通知的代理连接。Brokers connections that allow Microsoft Store Apps to receive notifications from the internet.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments

网络连接Network Connections

服务名称Service name NetmanNetman
描述Description 管理“网络和拨号连接”文件夹中的对象,在其中可以查看局域网和远程连接。Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

网络连接助手Network Connectivity Assistant

服务名称Service name NcaSvcNcaSvc
描述Description 提供 UI 组件的 DirectAccess 状态通知Provides DirectAccess status notification for UI components
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

网络列表服务Network List Service

服务名称Service name netprofmnetprofm
描述Description 标识计算机连接到的网络,收集和存储这些网络的属性,并在这些属性发生更改时通知应用程序。Identifies the networks to which the computer has connected, collects and stores properties for these networks, and notifies applications when these properties change.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

网络位置感知Network Location Awareness

服务名称Service name NlaSvcNlaSvc
描述Description 收集和存储网络的配置信息,并在这些信息发生更改时通知程序。Collects and stores configuration information for the network and notifies programs when this information is modified. 如果此服务已停止,则可能不会提供配置信息。If this service is stopped, configuration information might be unavailable. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

网络安装服务Network Setup Service

服务名称Service name NetSetupSvcNetSetupSvc
描述Description 网络安装服务管理网络驱动程序的安装,并允许配置低级别的网络设置。The Network Setup Service manages the installation of network drivers and permits the configuration of low-level network settings. 如果此服务已停止,正在进行的任何驱动程序安装可能会被取消。If this service is stopped, any driver installations that are in-progress may be cancelled.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

网络存储接口服务Network Store Interface Service

服务名称Service name nsinsi
描述Description 此服务向用户模式客户端传送网络通知(例如接口添加/删除等)。This service delivers network notifications (e.g. interface addition/deleting etc) to user mode clients. 停止此服务会导致网络连接断开。Stopping this service will cause loss of network connectivity. 如果此服务已禁用,显式依赖此服务的任何其他服务将无法启动。If this service is disabled, any other services that explicitly depend on this service will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

脱机文件Offline Files

服务名称Service name CscServiceCscService
描述Description 脱机文件服务对脱机文件缓存执行维护活动,响应用户登录和注销事件,实现公共 API 的内部功能,并将所需的事件分发到想要了解脱机文件活动和缓存状态更改的用户。The Offline Files service performs maintenance activities on the Offline Files cache, responds to user logon and logoff events, implements the internals of the public API, and dispatches interesting events to those interested in Offline Files activities and changes in cache state.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type 禁用Disabled
建议Recommendation 已禁用Already disabled
备注Comments

优化驱动器Optimize drives

服务名称Service name defragsvcdefragsvc
描述Description 通过优化存储驱动器上的文件,帮助计算机更有效地运行。Helps the computer run more efficiently by optimizing files on storage drives.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

性能计数器 DLL 宿主Performance Counter DLL Host

服务名称Service name PerfHostPerfHost
描述Description 使远程用户和 64 位进程能够查询 32 位 DLL 提供的性能计数器。Enables remote users and 64-bit processes to query performance counters provided by 32-bit DLLs. 如果此服务已停止,则只有本地用户和 32 位进程可以查询 32 位 DLL 提供的性能计数器。If this service is stopped, only local users and 32-bit processes will be able to query performance counters provided by 32-bit DLLs.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

性能日志和警报Performance Logs & Alerts

服务名称Service name plapla
描述Description 性能日志和警报根据预配置的计划参数从本地或远程计算机收集性能数据,然后将数据写入日志或触发警报。Performance Logs and Alerts Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. 如果此服务已停止,则不会收集性能信息。If this service is stopped, performance information will not be collected. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

电话服务Phone Service

服务名称Service name PhoneSvcPhoneSvc
描述Description 管理设备上的电话状态Manages the telephony state on the device
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments 由新式 VoIP 应用使用Used by modern VoIP apps

即插即用Plug and Play

服务名称Service name PlugPlayPlugPlay
描述Description 使计算机能够识别和适应硬件更改,而且只需用户提供少量的输入或者根本不需要输入。Enables a computer to recognize and adapt to hardware changes with little or no user input. 停止或禁用此服务会导致系统不稳定。Stopping or disabling this service will result in system instability.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

便携设备枚举器服务Portable Device Enumerator Service

服务名称Service name WPDBusEnumWPDBusEnum
描述Description 对可移动大容量存储设备实施组策略。Enforces group policy for removable mass-storage devices. 使 Windows Media Player 和映像导入向导等应用程序能够使用可移动大容量存储设备传输与同步内容。Enables applications such as Windows Media Player and Image Import Wizard to transfer and synchronize content using removable mass-storage devices.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

强力Power

服务名称Service name 强力Power
描述Description 管理电源策略和电源策略通知传送。Manages power policy and power policy notification delivery.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments
服务名称Service name 后台处理程序Spooler
描述Description 此服务在后台处理打印作业,并处理与打印机之间的交互。This service spools print jobs and handles interaction with the printer. 如果关闭此服务,将无法打印或查看打印机。If you turn off this service, you won't be able to print or see your printers.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 如果不是打印服务器或 DC,则可以禁用OK to disable if not a print server or a DC
备注Comments 在域控制器上,安装 DC 角色会将一个线程添加到负责执行打印修剪(从 Active Directory 中删除过时的打印队列对象)的后台处理程序服务。On a domain controller, the installation of the DC role adds a thread to the spooler service that is responsible for performing print pruning – removing the stale print queue objects from the Active Directory. 如果后台处理程序服务未在每个站点中的至少一个 DC 上运行,则 AD 无法删除不再存在的旧队列。If the spooler service is not running on at least one DC in each site, then the AD has no means to remove old queues that no longer exist. https://blogs.technet.microsoft.com/askperf/2008/11/18/disabling-unnecessary-services-a-word-to-the-wise/https://blogs.technet.microsoft.com/askperf/2008/11/18/disabling-unnecessary-services-a-word-to-the-wise/

打印机扩展和通知Printer Extensions and Notifications

服务名称Service name PrintNotifyPrintNotify
描述Description 此服务打开自定义打印机对话框,并处理来自远程打印服务器或打印机的通知。This service opens custom printer dialog boxes and handles notifications from a remote print server or a printer. 如果关闭此服务,将无法查看打印机扩展或通知。If you turn off this service, you won't be able to see printer extensions or notifications.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 如果不是打印服务器,则可以禁用OK to disable if not a print server
备注Comments

问题报告和解决方法控件面板支持Problem Reports and Solutions Control Panel Support

服务名称Service name wercplsupportwercplsupport
描述Description 此服务为“问题报告和解决方法”控制面板提供查看、发送和删除系统级问题报告的支持。This service provides support for viewing, sending and deletion of system-level problem reports for the Problem Reports and Solutions control panel.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

程序兼容性助手服务Program Compatibility Assistant Service

服务名称Service name PcaSvcPcaSvc
描述Description 此服务提供程序兼容性助手 (PCA) 的支持。This service provides support for the Program Compatibility Assistant (PCA). PCA 监视用户安装和运行的程序,并检测已知的兼容性问题。PCA monitors programs installed and run by the user and detects known compatibility problems. 如果此服务已停止,PCA 将无法正常运行。If this service is stopped, PCA will not function properly.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type 自动Automatic
建议Recommendation 可以禁用OK to disable
备注Comments

优质 Windows 音频视频体验Quality Windows Audio Video Experience

服务名称Service name QWAVEQWAVE
描述Description 高质量 Windows 音频视频体验 (qWave) 是适用于 IP 家庭网络中音频视频 (AV) 流应用程序的网络平台。Quality Windows Audio Video Experience (qWave) is a networking platform for Audio Video (AV) streaming applications on IP home networks. qWave 确保 AV 应用程序的网络服务质量 (QoS),增强了 AV 流的性能和可靠性。qWave enhances AV streaming performance and reliability by ensuring network quality-of-service (QoS) for AV applications. 它提供许可控制、运行时监视和实施、应用程序反馈和流量优先级的机制。It provides mechanisms for admission control, run time monitoring and enforcement, application feedback, and traffic prioritization.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments 客户端 QoS 服务Client-side QoS service

无线电管理服务Radio Management Service

服务名称Service name RmSvcRmSvc
描述Description 无线电管理和飞行模式服务Radio Management and Airplane Mode Service
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments

远程访问自动连接管理器Remote Access Auto Connection Manager

服务名称Service name RasAutoRasAuto
描述Description 每当程序引用远程 DNS 或者 NetBIOS 名称或地址时,都会与远程网络建立连接。Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

远程访问连接管理器Remote Access Connection Manager

服务名称Service name RasManRasMan
描述Description 管理从此计算机与 Internet 或其他远程网络建立的拨号和虚拟专用网 (VPN) 连接。Manages dial-up and virtual private network (VPN) connections from this computer to the Internet or other remote networks. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

远程桌面配置Remote Desktop Configuration

服务名称Service name SessionEnvSessionEnv
描述Description 远程桌面配置服务 (RDCS) 负责需要系统上下文的所有远程桌面服务和远程桌面相关配置和会话维护活动。Remote Desktop Configuration service (RDCS) is responsible for all Remote Desktop Services and Remote Desktop related configuration and session maintenance activities that require SYSTEM context. 这包括每个会话的临时文件夹、远程桌面主题和 RD 证书。These include per-session temporary folders, RD themes, and RD certificates.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 不要禁用Do not disable
备注Comments

远程桌面服务Remote Desktop Services

服务名称Service name TermServiceTermService
描述Description 允许用户以交互方式连接到远程计算机。Allows users to connect interactively to a remote computer. 远程桌面和远程桌面会话主机服务器依赖于此服务。Remote Desktop and Remote Desktop Session Host Server depend on this service. 若要防止远程使用此计算机,请清除“系统属性”控制面板项的“远程”选项卡中的复选框。To prevent remote use of this computer, clear the checkboxes on the Remote tab of the System properties control panel item.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 不要禁用Do not disable
备注Comments

远程桌面服务用户模式端口重定向程序Remote Desktop Services UserMode Port Redirector

服务名称Service name UmRdpServiceUmRdpService
描述Description 允许重定向 RDP 连接的打印机/驱动器/端口Allows the redirection of Printers/Drives/Ports for RDP connections
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 不要禁用Do not disable
备注Comments 支持连接的服务器端上的重定向。Supports redirections on the server side of the connection.

远程过程调用 (RPC)Remote Procedure Call (RPC)

服务名称Service name RpcSsRpcSs
描述Description RPCSS 服务是 COM 和 DCOM 服务器的服务控制管理器。The RPCSS service is the Service Control Manager for COM and DCOM servers. 它会执行 COM 和 DCOM 服务器的对象激活请求、对象导出程序解决方案和分布式垃圾回收。It performs object activations requests, object exporter resolutions and distributed garbage collection for COM and DCOM servers. 如果此服务已停止或禁用,则使用 COM 或 DCOM 的程序将无法正常运行。If this service is stopped or disabled, programs using COM or DCOM will not function properly. 强烈建议使 RPCSS 服务保持运行。It is strongly recommended that you have the RPCSS service running.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

远程过程调用 (RPC) 定位器Remote Procedure Call (RPC) Locator

服务名称Service name RpcLocatorRpcLocator
描述Description 在 Windows 2003 和早期版本的 Windows 中,远程过程调用 (RPC) 定位器服务管理 RPC 名称服务数据库。In Windows 2003 and earlier versions of Windows, the Remote Procedure Call (RPC) Locator service manages the RPC name service database. 在 Windows Vista 和更高版本的 Windows 中,此服务不提供任何功能,只用于确保应用程序兼容性。In Windows Vista and later versions of Windows, this service does not provide any functionality and is present for application compatibility.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

远程注册表Remote Registry

服务名称Service name RemoteRegistryRemoteRegistry
描述Description 使远程用户能够修改此计算机上的注册表设置。Enables remote users to modify registry settings on this computer. 如果此服务已停止,则注册表只能由此计算机上的用户修改。If this service is stopped, the registry can be modified only by users on this computer. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 不要禁用Do not disable
备注Comments

策略提供程序的结果集Resultant Set of Policy Provider

服务名称Service name RSoPProvRSoPProv
描述Description 提供一个网络服务用于处理在各种情况下针对目标用户或计算机模拟应用组策略设置的请求,以及计算策略设置的结果集。Provides a network service that processes requests to simulate application of Group Policy settings for a target user or computer in various situations and computes the Resultant Set of Policy settings.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

路由和远程访问Routing and Remote Access

服务名称Service name RemoteAccessRemoteAccess
描述Description 为局域网和广域网环境中的企业提供路由服务。Offers routing services to businesses in local area and wide area network environments.
安装Installation 始终安装Always installed
启动类型Startup type 禁用Disabled
建议Recommendation 已禁用Already disabled
备注Comments 已禁用Already disabled

RPC 终结点映射程序RPC Endpoint Mapper

服务名称Service name RpcEptMapperRpcEptMapper
描述Description 将 RPC 接口标识符解析为传输终结点。Resolves RPC interfaces identifiers to transport endpoints. 如果此服务已停止或禁用,则使用远程过程调用 (RPC) 的程序将无法正常运行。If this service is stopped or disabled, programs using Remote Procedure Call (RPC) services will not function properly.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

辅助登录Secondary Logon

服务名称Service name seclogonseclogon
描述Description 允许使用备用凭据启动进程。Enables starting processes under alternate credentials. 如果此服务已停止,则无法使用此类登录访问。If this service is stopped, this type of logon access will be unavailable. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

安全套接字隧道协议服务Secure Socket Tunneling Protocol Service

服务名称Service name SstpSvcSstpSvc
描述Description 提供使用 VPN 连接到远程计算机的安全套接字隧道协议 (SSTP) 支持。Provides support for the Secure Socket Tunneling Protocol (SSTP) to connect to remote computers using VPN. 如果此服务已禁用,则用户无法使用 SSTP 访问远程服务器。If this service is disabled, users will not be able to use SSTP to access remote servers.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 不要禁用Do not disable
备注Comments 禁用此服务会中断 RRASDisabling breaks RRAS

安全帐户管理器Security Accounts Manager

服务名称Service name SamSsSamSs
描述Description 启动此服务会告知其他服务,安全帐户管理器 (SAM) 已准备好接受请求。The startup of this service signals other services that the Security Accounts Manager (SAM) is ready to accept requests. 如果禁用此服务,当 SAM 准备就绪时,系统中的其他服务将收不到通知,从而可能导致这些服务无法正常启动。Disabling this service will prevent other services in the system from being notified when the SAM is ready, which may in turn cause those services to fail to start correctly. 不应禁用此服务。This service should not be disabled.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 不要禁用Do not disable
备注Comments

传感器数据服务Sensor Data Service

服务名称Service name SensorDataServiceSensorDataService
描述Description 传送各种传感器的数据Delivers data from a variety of sensors
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments

传感器监视服务Sensor Monitoring Service

服务名称Service name SensrSvcSensrSvc
描述Description 监视各种传感器,以公开数据以及适应系统和用户状态。Monitors various sensors in order to expose data and adapt to system and user state. 如果此服务已停止或禁用,将不会根据光照条件调整显示器亮度。If this service is stopped or disabled, the display brightness will not adapt to lighting conditions. 停止此服务也可能会影响其他系统功能和特性。Stopping this service may affect other system functionality and features as well.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments

传感器服务Sensor Service

服务名称Service name SensorServiceSensorService
描述Description 用于管理不同传感器的功能的传感器服务。A service for sensors that manages the functionality of different sensors. 管理传感器的简单设备方向 (SDO) 和历史记录。Manages Simple Device Orientation (SDO) and History for sensors. 加载报告设备方向更改的 SDO 传感器。Loads the SDO sensor that reports device orientation changes. 如果此服务已停止或禁用,则不会加载 SDO 传感器,因此自动旋转不会发生。If this service is stopped or disabled, the SDO sensor will not be loaded and so auto-rotation will not occur. 此外还会停止从传感器收集历史记录。History collection from Sensors will also be stopped.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments

Server (服务器)Server

服务名称Service name LanmanServerLanmanServer
描述Description 支持通过此计算机的网络进行文件、打印和命名管道共享。Supports file, print, and named-pipe sharing over the network for this computer. 如果此服务已停止,则这些功能将不可用。If this service is stopped, these functions will be unavailable. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 不要禁用Do not disable
备注Comments 远程管理、IPC$ 和 SMB 文件共享需要此服务Needed for remote management, IPC$, SMB file sharing

Shell 硬件检测Shell Hardware Detection

服务名称Service name ShellHWDetectionShellHWDetection
描述Description 提供自动播放硬件事件的通知。Provides notifications for AutoPlay hardware events.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type 自动Automatic
建议Recommendation 可以禁用OK to disable
备注Comments

智能卡Smart Card

服务名称Service name SCardSvrSCardSvr
描述Description 管理对此计算机读取的智能卡的访问。Manages access to smart cards read by this computer. 如果此服务已停止,则此计算机无法读取智能卡。If this service is stopped, this computer will be unable to read smart cards. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type 禁用Disabled
建议Recommendation 已禁用Already disabled
备注Comments

智能卡设备枚举服务Smart Card Device Enumeration Service

服务名称Service name ScDeviceEnumScDeviceEnum
描述Description 为给定会话可访问的所有智能卡读卡器创建软件设备节点。Creates software device nodes for all smart card readers accessible to a given session. 如果此服务已禁用,则 WinRT API 无法枚举智能卡读卡器。If this service is disabled, WinRT APIs will not be able to enumerate smart card readers.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments 基本上仅供 WinRT 应用使用Needed almost exclusively for WinRT apps

智能卡移除策略Smart Card Removal Policy

服务名称Service name SCPolicySvcSCPolicySvc
描述Description 允许将系统配置为在移除智能卡后锁定用户桌面。Allows the system to be configured to lock the user desktop upon smart card removal.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

SNMP 陷阱SNMP Trap

服务名称Service name SNMPTRAPSNMPTRAP
描述Description 接收本地或远程简单网络管理协议 (SNMP) 代理生成的陷阱消息,并将消息转发到此计算机上运行的 SNMP 管理程序。Receives trap messages generated by local or remote Simple Network Management Protocol (SNMP) agents and forwards the messages to SNMP management programs running on this computer. 如果此服务已停止,则此计算机上的基于 SNMP 的程序将不会接收 SNMP 陷阱消息。If this service is stopped, SNMP-based programs on this computer will not receive SNMP trap messages. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

软件保护Software Protection

服务名称Service name sppsvcsppsvc
描述Description 启用对 Windows 和 Windows 应用程序下载、安装和实施数字许可证。Enables the download, installation and enforcement of digital licenses for Windows and Windows applications. 如果该服务已禁用,则操作系统和许可的应用程序可在通知模式下运行。If the service is disabled, the operating system and licensed applications may run in a notification mode. 强烈建议不要禁用软件保护服务。It is strongly recommended that you not disable the Software Protection service.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

特殊管理控制台帮助程序Special Administration Console Helper

服务名称Service name sacsvrsacsvr
描述Description 允许管理员使用紧急管理服务远程访问命令提示符。Allows administrators to remotely access a command prompt using Emergency Management Services.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

错误校验程序Spot Verifier

服务名称Service name svsvcsvsvc
描述Description 验证潜在的文件系统损坏。Verifies potential file system corruptions.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

SSDP 发现SSDP Discovery

服务名称Service name SSDPSRVSSDPSRV
描述Description 发现使用 SSDP 发现协议的联网设备和服务,例如 UPnP 设备。Discovers networked devices and services that use the SSDP discovery protocol, such as UPnP devices. 此外声明本地计算机上运行的 SSDP 设备和服务。Also announces SSDP devices and services running on the local computer. 如果此服务已停止,则不会发现基于 SSDP 的设备。If this service is stopped, SSDP-based devices will not be discovered. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments

状态存储库服务State Repository Service

服务名称Service name StateRepositoryStateRepository
描述Description 提供应用程序模型所需的基础结构支持。Provides required infrastructure support for the application model.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

静止图像采集事件Still Image Acquisition Events

服务名称Service name WiaRpcWiaRpc
描述Description 启动与静止图像采集事件关联的应用程序。Launches applications associated with still image acquisition events.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments

存储服务Storage Service

服务名称Service name StorSvcStorSvc
描述Description 提供用于存储设置和外部存储扩展的启用服务Provides enabling services for storage settings and external storage expansion
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

存储层管理Storage Tiers Management

服务名称Service name TieringEngineServiceTieringEngineService
描述Description 优化系统中所有分层存储空间上的存储层中的数据位置。Optimizes the placement of data in storage tiers on all tiered storage spaces in the system.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

SuperfetchSuperfetch

服务名称Service name SysMainSysMain
描述Description 维持和不断改进系统性能。Maintains and improves system performance over time.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

同步主机Sync Host

服务名称Service name OneSyncSvcOneSyncSvc
描述Description 此服务同步邮件、联系人、日历和其他各种用户数据。This service synchronizes mail, contacts, calendar and various other user data. 如果此服务未运行,依赖于此功能的邮件和其他应用程序将无法正常工作。Mail and other applications dependent on this functionality will not work properly when this service is not running.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type 自动Automatic
建议Recommendation 可以禁用OK to disable
备注Comments 用户服务模板User service template

系统事件通知服务System Event Notification Service

服务名称Service name SENSSENS
描述Description 监视系统事件,并通知订阅者 COM+ 事件系统中发生了这些事件。Monitors system events and notifies subscribers to COM+ Event System of these events.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

系统事件代理System Events Broker

服务名称Service name SystemEventsBrokerSystemEventsBroker
描述Description 协调 WinRT 应用程序的后台工作执行。Coordinates execution of background work for WinRT application. 如果此服务已停止或禁用,则可能不会触发后台工作。If this service is stopped or disabled, then background work might not be triggered.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 不要禁用Do not disable
备注Comments 虽然此服务的说明暗示着它仅适用于 WinRT 应用,但任务计划程序、代理基础结构服务和其他内部组件也需要此服务。In spite of the fact that its description implies it is only for WinRT apps, it's needed for task scheduler, broker infrastructure service, and other internal components.

任务计划程序Task Scheduler

服务名称Service name 计划Schedule
描述Description 使用户能够在此计算机上配置和计划自动化任务。Enables a user to configure and schedule automated tasks on this computer. 该服务还托管多个 Windows 系统关键任务。The service also hosts multiple Windows system-critical tasks. 如果此服务已停止或禁用,则不会按计划时间运行这些任务。If this service is stopped or disabled, these tasks will not be run at their scheduled times. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

TCP/IP NetBIOS 帮助程序TCP/IP NetBIOS Helper

服务名称Service name lmhostslmhosts
描述Description 提供对网络中客户端的 TCP/IP 上的 NetBIOS (NetBT) 服务和 NetBIOS 名称解析的支持,因此可让用户共享文件、打印和登录到网络。Provides support for the NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution for clients on the network, therefore enabling users to share files, print, and log on to the network. 如果此服务已停止,则这些功能可能不可用。If this service is stopped, these functions might be unavailable. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

TelephonyTelephony

服务名称Service name TapiSrvTapiSrv
描述Description 为控制本地计算机上的电话设备,以及通过 LAN 控制同样运行该服务的服务器上的电话服务的程序提供电话 API (TAPI) 支持。Provides Telephony API (TAPI) support for programs that control telephony devices on the local computer and, through the LAN, on servers that are also running the service.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 不要禁用Do not disable
备注Comments 禁用此服务会中断 RRASDisabling breaks RRAS

主题Themes

服务名称Service name 主题Themes
描述Description 提供用户体验主题管理。Provides user experience theme management.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type 自动Automatic
建议Recommendation 不要禁用Do not disable
备注Comments 禁用此服务时,无法设置辅助功能主题Can't set accessibility themes when this service is disabled

图块数据模型服务器Tile Data model server

服务名称Service name tiledatamodelsvctiledatamodelsvc
描述Description 用于图块更新的图块服务器。Tile Server for tile updates.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type 自动Automatic
建议Recommendation 不要禁用Do not disable
备注Comments 如果此服务已禁用,“开始”菜单将会损坏Start menu breaks if this service is disabled

计时代理Time Broker

服务名称Service name TimeBrokerSvcTimeBrokerSvc
描述Description 协调 WinRT 应用程序的后台工作执行。Coordinates execution of background work for WinRT application. 如果此服务已停止或禁用,则可能不会触发后台工作。If this service is stopped or disabled, then background work might not be triggered.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 不要禁用Do not disable
备注Comments 虽然此服务的说明暗示着它仅适用于 WinRT 应用,但任务计划程序、代理基础结构服务和其他内部组件也需要此服务。In spite of the fact that its description implies it is only for WinRT apps, it's needed for task scheduler, broker infrastructure service, and other internal components.

触摸键盘和手写面板服务Touch Keyboard and Handwriting Panel Service

服务名称Service name TabletInputServiceTabletInputService
描述Description 启用触摸键盘、手写面板笔和墨迹功能Enables Touch Keyboard and Handwriting Panel pen and ink functionality
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments

Windows 更新的更新业务流程协调程序服务Update Orchestrator Service for Windows Update

服务名称Service name UsoSvcUsoSvc
描述Description 管理 Windows 更新。Manages Windows Updates. 如果停止该服务,则设备无法下载和安装最新的更新。If stopped, your devices will not be able to download and install latest updates.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 不要禁用Do not disable
备注Comments v1607 中缺少服务说明;Windows 更新(包括 WSUS)依赖此服务。Service description was missing in v1607; Windows Update (incl. WSUS) depends on this service.

UPnP 设备主机UPnP Device Host

服务名称Service name upnphostupnphost
描述Description 允许在此计算机上托管 UPnP 设备。Allows UPnP devices to be hosted on this computer. 如果此服务已停止,则任何托管的 UPnP 设备将停止运行,且无法添加其他托管设备。If this service is stopped, any hosted UPnP devices will stop functioning and no additional hosted devices can be added. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments

用户访问日志记录服务User Access Logging Service

服务名称Service name UALSVCUALSVC
描述Description 此服务记录本地服务器上已安装的产品和角色的唯一客户端访问请求(采用 IP 地址和用户名格式)。This service logs unique client access requests, in the form of IP addresses and user names, of installed products and roles on the local server. 需要量化脱机客户端访问许可证 (CAL) 管理的服务器软件客户端需求的管理员可以通过 Powershell 查询此信息。This information can be queried, via Powershell, by administrators needing to quantify client demand of server software for offline Client Access License (CAL) management. 如果该服务已禁用,则不会记录客户端请求,且无法通过 Powershell 查询检索此类请求。If the service is disabled, client requests will not be logged and will not be retrievable via Powershell queries. 停止该服务不会影响历史数据的查询(有关删除历史数据的步骤,请参阅支持文档)。Stopping the service will not affect query of historical data (see supporting documentation for steps to delete historical data). 本地系统管理员必须查阅其 Windows Server 许可条款来确定需要适当许可的服务器软件所需的 CAL 数目;使用 UAL 服务和数据不会改变此义务。The local system administrator must consult his, or her, Windows Server license terms to determine the number of CALs that are required for the server software to be appropriately licensed; use of the UAL service and data does not alter this obligation.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

用户数据访问User Data Access

服务名称Service name UserDataSvcUserDataSvc
描述Description 使应用能够访问结构化的用户数据,包括联系人信息、日历、邮件和其他内容。Provides apps access to structured user data, including contact info, calendars, messages, and other content. 如果停止或禁用此服务,则使用此数据的应用可能无法正常工作。If you stop or disable this service, apps that use this data might not work correctly.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments 用户服务模板User service template

用户数据存储User Data Storage

服务名称Service name UnistoreSvcUnistoreSvc
描述Description 处理结构化用户数据(包括联系人信息、日历、邮件和其他内容)的存储。Handles storage of structured user data, including contact info, calendars, messages, and other content. 如果停止或禁用此服务,则使用此数据的应用可能无法正常工作。If you stop or disable this service, apps that use this data might not work correctly.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments 用户服务模板User service template

用户体验虚拟化服务User Experience Virtualization Service

服务名称Service name UevAgentServiceUevAgentService
描述Description 提供应用程序和 OS 设置漫游的支持Provides support for application and OS settings roaming
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type 禁用Disabled
建议Recommendation 已禁用Already disabled
备注Comments

用户管理器User Manager

服务名称Service name UserManagerUserManager
描述Description 用户管理器提供多用户交互所需的运行时组件。User Manager provides the runtime components required for multi-user interaction. 如果此服务已停止,某些应用程序可能无法正常运行。If this service is stopped, some applications may not operate correctly.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

用户配置文件服务User Profile Service

服务名称Service name ProfSvcProfSvc
描述Description 此服务负责加载和卸载用户配置文件。This service is responsible for loading and unloading user profiles. 如果此服务已停止或禁用,用户将不再能够成功登录或注销,应用在获取用户数据时可能会遇到问题,注册为接收配置文件事件通知的组件将收不到这些通知。If this service is stopped or disabled, users will no longer be able to successfully sign in or sign out, apps might have problems getting to users' data, and components registered to receive profile event notifications won't receive them.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

虚拟磁盘Virtual Disk

服务名称Service name vdsvds
描述Description 提供磁盘、卷、文件系统和存储阵列的管理服务。Provides management services for disks, volumes, file systems, and storage arrays.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

卷影复制Volume Shadow Copy

服务名称Service name VSSVSS
描述Description 管理和实施用于备份和其他目的的卷影副本。Manages and implements Volume Shadow Copies used for backup and other purposes. 如果此服务已停止,卷影副本将不可用于备份,并且备份可能会失败。If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

WalletServiceWalletService

服务名称Service name WalletServiceWalletService
描述Description 托管 wallet 客户端使用的对象Hosts objects used by clients of the wallet
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments

Windows 音频Windows Audio

服务名称Service name AudiosrvAudiosrv
描述Description 管理基于 Windows 的程序的音频。Manages audio for Windows-based programs. 如果此服务已停止,音频设备和音效将无法正常运行。If this service is stopped, audio devices and effects will not function properly. 如果此服务已禁用,显式依赖它的任何服务将无法启动If this service is disabled, any services that explicitly depend on it will fail to start
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments

Windows 音频终结点生成器Windows Audio Endpoint Builder

服务名称Service name AudioEndpointBuilderAudioEndpointBuilder
描述Description 管理 Windows 音频服务的音频设备。Manages audio devices for the Windows Audio service. 如果此服务已停止,音频设备和音效将无法正常运行。If this service is stopped, audio devices and effects will not function properly. 如果此服务已禁用,显式依赖它的任何服务将无法启动If this service is disabled, any services that explicitly depend on it will fail to start
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments

Windows 生物识别服务Windows Biometric Service

服务名称Service name WbioSrvcWbioSrvc
描述Description Windows 生物识别服务为客户端应用程序提供无需获取对任何生物识别硬件或样本的直接访问权限就可捕获、比较、处理和存储生物识别数据的功能。The Windows biometric service gives client applications the ability to capture, compare, manipulate, and store biometric data without gaining direct access to any biometric hardware or samples. 该服务托管在特权 SVCHOST 进程中。The service is hosted in a privileged SVCHOST process.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

Windows 相机帧服务器Windows Camera Frame Server

服务名称Service name FrameServerFrameServer
描述Description 使多个客户端能够从相机设备访问视频帧。Enables multiple clients to access video frames from camera devices.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments

Windows 连接管理器Windows Connection Manager

服务名称Service name WcmsvcWcmsvc
描述Description 根据电脑当前可用的网络连接选项做出自动连接/断开连接决策,并支持根据组策略设置管理网络连接。Makes automatic connect/disconnect decisions based on the network connectivity options currently available to the PC and enables management of network connectivity based on Group Policy settings.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

Windows Defender 网络检查服务Windows Defender Network Inspection Service

服务名称Service name WdNisSvcWdNisSvc
描述Description 帮助抵御针对网络协议中已知和新发现的漏洞发起的入侵企图Helps guard against intrusion attempts targeting known and newly discovered vulnerabilities in network protocols
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

Windows Defender 服务Windows Defender Service

服务名称Service name WinDefendWinDefend
描述Description 帮助防范恶意软件和其他潜在有害软件对用户造成影响Helps protect users from malware and other potentially unwanted software
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

Windows Driver Foundation - 用户模式驱动程序框架Windows Driver Foundation - User-mode Driver Framework

服务名称Service name wudfsvcwudfsvc
描述Description 创建和管理用户模式驱动程序进程。Creates and manages user-mode driver processes. 不能停止此服务。This service cannot be stopped.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

Windows 加密提供程序主机服务Windows Encryption Provider Host Service

服务名称Service name WEPHOSTSVCWEPHOSTSVC
描述Description Windows 加密提供程序主机服务将第三方加密提供程序中的加密相关功能中转到需要评估和应用 EAS 策略的进程。Windows Encryption Provider Host Service brokers encryption related functionalities from third-party Encryption Providers to processes that need to evaluate and apply EAS policies. 停止此服务会破坏已连接邮件帐户建立的 EAS 合规性检查Stopping this will compromise EAS compliancy checks that have been established by the connected Mail Accounts
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

Windows 错误报告服务Windows Error Reporting Service

服务名称Service name WerSvcWerSvc
描述Description 允许在程序停止运行或无响应时报告错误,并允许传送现有的解决方案。Allows errors to be reported when programs stop working or responding and allows existing solutions to be delivered. 此外,允许生成诊断和修复服务的日志。Also allows logs to be generated for diagnostic and repair services. 如果此服务已停止,错误报告可能无法正常工作,并且诊断服务和修复结果可能不会显示。If this service is stopped, error reporting might not work correctly and results of diagnostic services and repairs might not be displayed.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 不要禁用Do not disable
备注Comments 收集并发送 MS 和第三方 ISV/IHV 使用的崩溃/挂起数据。Collects and sends crash/hang data used by both MS and third party ISVs/IHVs. 该数据用于诊断崩溃造成的 bug,其中可能包括安全 bug。The data is used to diagnose crash-inducing bugs, which may include security bugs. 企业错误报告也需要此服务Also needed for Corporate Error Reporting

Windows 事件收集器Windows Event Collector

服务名称Service name WecsvcWecsvc
描述Description 此服务管理支持 WS-Management 协议的远程源发出的事件的持久订阅。This service manages persistent subscriptions to events from remote sources that support WS-Management protocol. 这包括 Windows Vista 事件日志、硬件和支持 IPMI 的事件源。This includes Windows Vista event logs, hardware and IPMI-enabled event sources. 该服务在本地事件日志中存储转发的事件。The service stores forwarded events in a local Event Log. 如果此服务已停止或禁用,则无法创建事件订阅,且无法接受转发的事件。If this service is stopped or disabled event subscriptions cannot be created and forwarded events cannot be accepted.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 不要禁用Do not disable
备注Comments 收集 ETW 事件(包括安全事件)以方便管理和诊断。Collects ETW events (including security events) for manageability, diagnostics. 有大量的功能和第三方工具依赖此服务,其中包括安全审核工具Lots of features and third-party tools rely on it, including security audit tools

Windows 事件日志Windows Event Log

服务名称Service name EventLogEventLog
描述Description 此服务管理事件和事件日志。This service manages events and event logs. 它支持记录事件、查询事件、订阅事件、存档事件日志和管理事件元数据。It supports logging events, querying events, subscribing to events, archiving event logs, and managing event metadata. 它可以 XML 和纯文本格式显示事件。It can display events in both XML and plain text format. 停止此服务可能会损害系统的安全性和可靠性。Stopping this service may compromise security and reliability of the system.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

Windows 防火墙Windows Firewall

服务名称Service name MpsSvcMpsSvc
描述Description Windows 防火墙会阻止未经授权的用户通过互联网或网络访问你的计算机,因而可以帮助保护你的计算机。Windows Firewall helps protect your computer by preventing unauthorized users from gaining access to your computer through the Internet or a network.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

Windows 字体缓存服务Windows Font Cache Service

服务名称Service name FontCacheFontCache
描述Description 通过缓存常用的字体数据来优化应用程序的性能。Optimizes performance of applications by caching commonly used font data. 如果此服务尚未运行,应用程序会将其启动。Applications will start this service if it is not already running. 可将其禁用,不过,这样做会降低应用程序的性能。It can be disabled, though doing so will degrade application performance.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

Windows 图像采集 (WIA)Windows Image Acquisition (WIA)

服务名称Service name stisvcstisvc
描述Description 为扫描仪和照相机提供图像采集服务Provides image acquisition services for scanners and cameras
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments

Windows Insider 服务Windows Insider Service

服务名称Service name wisvcwisvc
描述Description wisvcwisvc
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments Windows Server 不支持外部测试,因此,此服务在 Windows Server 不会运行。Server doesn't support flighting, so it's a no-op on Server. 也可以通过 GP 禁用功能。Feature can be disabled via GP as well.

Windows InstallerWindows Installer

服务名称Service name msiservermsiserver
描述Description 添加、修改和删除作为 Windows Installer(*.msi、*.msp)包提供的应用程序。Adds, modifies, and removes applications provided as a Windows Installer (*.msi, *.msp) package. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

Windows 许可证管理器服务Windows License Manager Service

服务名称Service name LicenseManagerLicenseManager
描述Description 提供 Microsoft Store 的基础结构支持。Provides infrastructure support for the Microsoft Store. 此服务按需启动,如果已禁用,则通过 Microsoft Store 获取的内容将无法正常运行。This service is started on demand and if disabled then content acquired through the Microsoft Store will not function properly.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

Windows Management InstrumentationWindows Management Instrumentation

服务名称Service name WinmgmtWinmgmt
描述Description 提供一个通用接口和对象模型用于访问有关操作系统、设备、应用程序和服务的管理信息。Provides a common interface and object model to access management information about operating system, devices, applications and services. 如果此服务已停止,则大多数基于 Windows 的软件将无法正常运行。If this service is stopped, most Windows-based software will not function properly. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

Windows 移动热点服务Windows Mobile Hotspot Service

服务名称Service name icssvcicssvc
描述Description 提供与另一台设备共享手机网络数据连接的功能。Provides the ability to share a cellular data connection with another device.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments

Windows 模块安装程序Windows Modules Installer

服务名称Service name TrustedInstallerTrustedInstaller
描述Description 启用 Windows 更新和可选组件的安装、修改与删除。Enables installation, modification, and removal of Windows updates and optional components. 如果此服务已禁用,在此计算机上安装或卸载 Windows 更新可能会失败。If this service is disabled, install or uninstall of Windows updates might fail for this computer.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

Windows 推送通知系统服务Windows Push Notifications System Service

服务名称Service name WpnServiceWpnService
描述Description 此服务在会话 0 中运行,托管通知平台以及用于处理设备与 WNS 服务器之间的连接的连接提供程序。This service runs in session 0 and hosts the notification platform and connection provider which handles the connection between the device and WNS server.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type 自动Automatic
建议Recommendation 可以禁用OK to disable
备注Comments 动态磁贴和其他功能需要此服务Needed for live tiles and other features

Windows 推送通知用户服务Windows Push Notifications User Service

服务名称Service name WpnUserServiceWpnUserService
描述Description 此服务托管提供本地和推送通知支持的 Windows 通知平台。This service hosts Windows notification platform which provides support for local and push notifications. 支持的通知包括磁贴、toast 和原始。Supported notifications are tile, toast and raw.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 可以禁用OK to disable
备注Comments 用户服务模板User service template

Windows 远程管理 (WS-Management)Windows Remote Management (WS-Management)

服务名称Service name WinRMWinRM
描述Description Windows 远程管理 (WinRM) 服务为远程管理实施 WS-Management 协议。Windows Remote Management (WinRM) service implements the WS-Management protocol for remote management. WS-Management 是一个用于远程软件和硬件管理的标准 Web 服务协议。WS-Management is a standard web services protocol used for remote software and hardware management. WinRM 服务为 WS-Management 请求监听网络并处理它们。The WinRM service listens on the network for WS-Management requests and processes them. WinRM 服务需要使用 winrm.cmd 命令行工具或通过组策略配置侦听器,以在网络上进行监听。The WinRM Service needs to be configured with a listener using winrm.cmd command line tool or through Group Policy in order for it to listen over the network. WinRM 服务提供对 WMI 数据的访问并启用事件收集。The WinRM service provides access to WMI data and enables event collection. 事件收集和事件订阅要求服务正在运行。Event collection and subscription to events require that the service is running. WinRM 消息使用 HTTP 和 HTTPS 作为传输器。WinRM messages use HTTP and HTTPS as transports. WinRM 服务不依赖于 IIS 但预配置与同一台机器上的 IIS 共享一个端口。The WinRM service does not depend on IIS but is preconfigured to share a port with IIS on the same machine. WinRM 服务保留 /wsman URL 前缀。The WinRM service reserves the /wsman URL prefix. 为了防止与 IIS 冲突,管理员应确保 IIS 上托管的任何网站不使用 /wsman URL 前缀。To prevent conflicts with IIS, administrators should ensure that any websites hosted on IIS do not use the /wsman URL prefix.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 不要禁用Do not disable
备注Comments 远程管理需要此服务Needed for remote management
服务名称Service name WSearchWSearch
描述Description 提供文件、电子邮件和其他内容的内容索引、属性缓存和搜索结果。Provides content indexing, property caching, and search results for files, e-mail, and other content.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type 禁用Disabled
建议Recommendation 已禁用Already disabled
备注Comments

Windows 时间Windows Time

服务名称Service name W32TimeW32Time
描述Description 在网络中的所有客户端和服务器上保持日期与时间同步。Maintains date and time synchronization on all clients and servers in the network. 如果此服务已停止,日期和时间同步将不可用。If this service is stopped, date and time synchronization will be unavailable. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

Windows 更新Windows Update

服务名称Service name wuauservwuauserv
描述Description 启用 Windows 和其他程序的更新检测、下载和安装。Enables the detection, download, and installation of updates for Windows and other programs. 如果此服务已禁用,则此计算机的用户将无法使用 Windows 更新或其自动更新功能,程序将无法使用 Windows 更新代理 (WUA) API。If this service is disabled, users of this computer will not be able to use Windows Update or its automatic updating feature, and programs will not be able to use the Windows Update Agent (WUA) API.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

WinHTTP Web 代理自动发现服务WinHTTP Web Proxy Auto-Discovery Service

服务名称Service name WinHttpAutoProxySvcWinHttpAutoProxySvc
描述Description WinHTTP 实现客户端 HTTP 堆栈,为开发人员提供 Win32 API 和 COM 自动化组件用于发送 HTTP 请求及接收响应。WinHTTP implements the client HTTP stack and provides developers with a Win32 API and COM Automation component for sending HTTP requests and receiving responses. 此外,WinHTTP 通过其 Web 代理自动发现 (WPAD) 协议的实现提供自动发现代理配置的支持。In addition, WinHTTP provides support for auto-discovering a proxy configuration via its implementation of the Web Proxy Auto-Discovery (WPAD) protocol.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 不要禁用Do not disable
备注Comments 使用网络堆栈的任何组件都可能在功能上依赖于此服务。Anything that uses the network stack can have a functional dependency on this service. 许多组织依赖于此服务来配置其内部网络的 HTTP 代理路由。Many organizations rely on this to configure their internal networks' HTTP proxy routing. 如果没有此服务,从内部向 Internet 发起的 HTTP 连接都会失败。Without it, internally-originating HTTP connections to the Internet will all fail.

有线自动配置Wired AutoConfig

服务名称Service name dot3svcdot3svc
描述Description 有线自动配置 (DOT3SVC) 服务负责对以太网接口执行 IEEE 802.1X 身份验证。The Wired AutoConfig (DOT3SVC) service is responsible for performing IEEE 802.1X authentication on Ethernet interfaces. 如果当前有线网络部署实施 802.1X 身份验证,则应配置为运行 DOT3SVC 服务,以建立第 2 层连接和/或提供对网络资源的访问。If your current wired network deployment enforces 802.1X authentication, the DOT3SVC service should be configured to run for establishing Layer 2 connectivity and/or providing access to network resources. 不实施 802.1X 身份验证的有线网络不会受到 DOT3SVC 服务的影响。Wired networks that do not enforce 802.1X authentication are unaffected by the DOT3SVC service.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

WMI 性能适配器WMI Performance Adapter

服务名称Service name wmiApSrvwmiApSrv
描述Description 提供从 Windows Management Instrumentation (WMI) 提供程序到网络中客户端的性能库信息。Provides performance library information from Windows Management Instrumentation (WMI) providers to clients on the network. 仅当已激活性能数据帮助程序时,此服务才会运行。This service only runs when Performance Data Helper is activated.
安装Installation 始终安装Always installed
启动类型Startup type ManualManual
建议Recommendation 无指导No guidance
备注Comments

工作站Workstation

服务名称Service name LanmanWorkstationLanmanWorkstation
描述Description 使用 SMB 协议来与远程服务器建立并保持客户端网络连接。Creates and maintains client network connections to remote servers using the SMB protocol. 如果此服务已停止,则这些连接将不可用。If this service is stopped, these connections will be unavailable. 如果此服务已禁用,显式依赖它的任何服务将无法启动。If this service is disabled, any services that explicitly depend on it will fail to start.
安装Installation 始终安装Always installed
启动类型Startup type 自动Automatic
建议Recommendation 无指导No guidance
备注Comments

Xbox Live 身份验证管理器Xbox Live Auth Manager

服务名称Service name XblAuthManagerXblAuthManager
描述Description 提供用来与 Xbox Live 交互的身份验证和授权服务。Provides authentication and authorization services for interacting with Xbox Live. 如果此服务已停止,某些应用程序可能无法正常运行。If this service is stopped, some applications may not operate correctly.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 应该禁用Should be disabled
备注Comments

Xbox Live 游戏保存Xbox Live Game Save

服务名称Service name XblGameSaveXblGameSave
描述Description 此服务用于同步支持 Xbox Live“保存”的游戏的保存数据。This service syncs save data for Xbox Live save enabled games. 如果此服务已停止,则不会向/从 Xbox Live 上传/下载游戏保存数据。If this service is stopped, game save data will not upload to or download from Xbox Live.
安装Installation 仅用于桌面体验Only with Desktop Experience
启动类型Startup type ManualManual
建议Recommendation 应该禁用Should be disabled
备注Comments 此服务用于同步支持 Xbox Live“保存”的游戏的保存数据。This service syncs save data for Xbox Live save enabled games. 如果此服务已停止,则不会向/从 Xbox Live 上传/下载游戏保存数据。If this service is stopped, game save data will not upload to or download from Xbox Live.