Microsoft Microsoft Maximum Custom Choose default settings that are independent of the current state of the machine and void of any assumptions about how the machine is used. With this option, you will need to explicitly enable the features and functionality that are required. Typical Typical Choose default settings based on the current configuration of the machine and the most typical deployment scenarios. With this option, you will need to disable unnecessary features and functionality in order to improve the security of your system. Core EventLog PlugPlay RPCSs SamSs Security CryptSvc NtLmSSP PolicyAgent ProtectedStorage SCardDrv SCardSvr seclogon Infrastructure Netman NLA wmi WinMgmt WmiApSrv Independent AudioSrv ClipSrv HidServ ImapiService mnmsrvc NetDDE NetDDEDSDM RasAuto RPCLocator RSVP sptimer stisvc Themes Trksvr Webclient WmdmPmSp CertServer CertSvc ClusterServer ClusSvc W32Time EventSystem SENS DFSServer DFS lanmanserver lanmanworkstation DHCPServer DHCPServer EventSystem SENS DNSServer DNS DomainController DNSCache NTfrs lanmanserver lanmanworkstation kdc netlogon W32Time DomainMember lanmanworkstation Netlogon W32Time File lanmanserver lanmanworkstation FTPServer IISAdmin MSFTPSVC InternetGateway SharedAccess UPnPHost SSDPSRV ALG RasMan TAPISrv MediaServer WMServer AudioSrv MSMQ lanmanserver MSDTC MSMQ NNTPServer IISAdmin NNTPSVC Print Spooler lanmanserver lanmanworkstation Radius IAS RIS BINLSVC Groveler lanmanserver TFTPD RRAS RemoteAccess RasMan TAPISrv SMTPServer IISAdmin SMTPSVC Telnet TlntSvr TSAppMode TermService MSIServer ShellHWDetection WEB IISAdmin HTTPFilter W3SVC WINS WINS lmhosts WINSClient lmhosts DHCPClient DHCP DNSClient DNSCache RASClient RasMan TAPISrv NWClient NWCWorkstation Alerter Alerter Messenger Workstation lmhosts AppDeploy DomainMember AppMgmt MSIServer AutoUpdate BITS wuauserv Browser browser lanmanserver lanmanworkstation lmhosts COMPlus COMSysApp MSDTC EventSystem SENS ContentIndexing cisvc DebugCLR CORRTSvc EMS sacsvr ErrorReporting ERSvc uploadmgr HelpSvc HelpSvc Install MSIServer LDM dmserver dmadmin vds LicenseLogging LicenseService LinkTracking File TrkWks LPD Print LPDSVC Spooler MacPrint Print MacPrint Spooler MailBasedRepl DomainController IsmServ SMTPSVC IISAdmin Messenger Messenger Workstation lmhosts MSClient lanmanworkstation MSMQTriggers MSMQ MSMQ MSMQTriggers MQDS MSMQ MQDS NetBTForDNS DNSServer lmhosts PerfMon SysmonLog ProcCon ProcCon RemoteAssistance helpsvc RDSessMgr RemoteRegistry lanmanserver RemoteRegistry RemoteStorage File Remote_Storage_Server Remote_Storage_User_Link NtmsSvc EventSystem SENS RemoteWindowsAdministration lanmanserver RemovableMedia1 NtmsSvc RemovableMedia2 NtmsSvc RSoPProv DomainController RSoPProv Schedule Schedule Snapshot SwPrv VSS EventSystem SENS TSAdminMode TermService TSLicense TermServLicensing RemoteRegistry TSCluster Tssdis UPS UPS WebEnrollment CertServer IISAdmin W3SVC Wireless WZCSVC WPA RasMan TAPISrv Alerter FALSE Automatic ALG FALSE Manual AppMgmt FALSE Manual Browser FALSE Automatic BINLSVC TRUE Manual BITS FALSE Manual CertSvc TRUE Automatic cisvc FALSE Manual ClipSrv FALSE Manual ClusSvc TRUE Automatic CORRTSvc TRUE Manual ComSysApp FALSE Manual CryptSvc FALSE Automatic DFS FALSE Automatic DHCP TRUE Automatic DHCPServer TRUE Automatic dmadmin FALSE Manual dmserver FALSE Automatic DNS TRUE Automatic DNSCache FALSE Automatic EventLog FALSE Automatic EventSystem FALSE Manual Groveler TRUE Automatic helpsvc FALSE Automatic HTTPFilter FALSE Manual IsmServ FALSE Automatic IISAdmin TRUE Automatic kdc FALSE Automatic lanmanserver FALSE Automatic lanmanworkstation FALSE Automatic lmhosts FALSE Automatic LPDSVC TRUE Automatic MacPrint TRUE Automatic Messenger FALSE Automatic mnmsrvc FALSE Manual MSDTC FALSE Automatic MSMQ TRUE Automatic MSMQTriggers TRUE Automatic MQDS TRUE Automatic MSFTPSVC TRUE Automatic MSIServer FALSE Manual NetDDE FALSE Manual NetDDEdsdm FALSE Manual Netman FALSE Manual NLA FALSE Manual NNTPSVC TRUE Automatic NTfrs FALSE Automatic NtLmSSP FALSE Manual NtmsSvc FALSE Manual NWCWorkstation TRUE Automatic PolicyAgent FALSE Automatic PlugPlay FALSE Automatic ProcCon FALSE Automatic ProtectedStorage FALSE Automatic RasAuto FALSE Manual RasMan FALSE Manual RemoteAccess FALSE Automatic RemoteRegistry FALSE Automatic Remote_Storage_Server TRUE Automatic Remote_Storage_User_Link TRUE Automatic RPCLocator FALSE Automatic RPCSs FALSE Automatic RSVP FALSE Manual RSoPProv FALSE Manual SacSvr FALSE Manual SamSs FALSE Automatic SCardDrv FALSE Manual SCardSvr FALSE Manual Schedule FALSE Automatic seclogon FALSE Automatic SENS FALSE Automatic ShellHWDetection FALSE Automatic SharedAccess FALSE Automatic SMTPSVC TRUE Automatic Spooler FALSE Automatic sptimer FALSE Automatic SSDPSRV FALSE Manual SwPrv FALSE Manual SysmonLog FALSE Manual TAPISrv FALSE Manual TermService FALSE Automatic TermServLicensing TRUE Automatic TFTPD TRUE Manual TlntSvr FALSE Automatic Trksvr FALSE Automatic Trkwks FALSE Automatic Tssdis FALSE Automatic uploadmgr FALSE Automatic UPNPHost FALSE Manual UPS FALSE Manual VDS FALSE Manual VSS FALSE Manual W3SVC TRUE Automatic W32Time FALSE Manual WebClient FALSE Automatic WinMgmt FALSE Automatic WINS TRUE Automatic wmi FALSE Manual WmiApSrv FALSE Manual wuauserv FALSE Automatic WZCSVC FALSE Manual Core Core Fundamental services required for all roles CertServer Certificate Server Select this role if this server is a certificate authority for your PKI infrastructure ClusterServer Cluster Server Select this role if this server is part of a cluster of servers DHCPClient DHCP Client Select this role if the server automatically receives its IP Addresses from a DHCP Server DFSServer DFS (Distributed File System) Server Select this role to share distributed filesystem data under a single namespace DHCPServer DHCP Server Select this role to provide automatic IP Addressing for clients on your network DNSClient DNS Client Select this role if this server needs to initiate connections to other hosts and you use DNS-based name resolution to resolve machine names into IP Addresses DNSServer DNS Server Select this role to provide name resolution services for clients on your network DomainController Domain Controller Select this role if this server hosts or will host the Active Directory for a domain DomainMember Domain Member Select this role if this machine is or will be joined to a domain File File Server Select this role to allow users to store or retrieve files on this machine FTPServer FTP Server Select this role to allow users to download or upload files using the File Transfer Protocol Infrastructure Infrastructure Infrastructure Services leveraged by numerous components InternetGateway Internet Gateway for Small Business or Home Network Select this role to share this server's internet connection with other computers in your home or small business. You should NOT select this role if this server is on a network with other Domain Controllers, DNS Servers, Gateways, DHCP Servers or systems using static IP addresses. MediaServer Windows Media Server Select this role to provide streaming media MSMQ Microsoft Message Queueing Server Select this role to enable distributed message based applications NWClient Netware Client Select this role if this server needs to connect to Netware servers. NNTPServer NNTP (Usenet News) Server Select this role to distribute, query, retrieve or post Usenet news articles on the internet Print Print Server Select this role to allow users to submit print jobs to this machine Radius RADIUS Server Select this role for servers that use the Microsoft Internet Authentication Service to provide authentication for VPN and dial-up users via the RADIUS protocol RASClient RAS Client Select this role to initiate connections to other networks over dial-up or VPN. RIS RIS (Remote Installation) Server Select this role for servers that remotely install Windows onto clients that are remote boot enabled. RRAS Routing and Remote Access Server Select this role to support incomming dial-up and VPN connections or to support various IP routing protocols Security Security Security Services SMTPServer SMTP Server Select this role to allow the server to transfer electronic mail according to the Simple Mail Transfer Protocol. It is also possible for Domain Controller's to use mail based replication over SMTP. TSAppMode Terminal Server for Application Sharing Select this role to allow multiple clients to remotely run applications that execute on this server WEB WEB (HTTP) Server Select this role if you want this server to host a web site WINS WINS Server Select this role if you want this server to provide NetBIOS\WINS-based name resolution services for clients. WINSClient WINS Client Select this role if you use NetBIOS\WINS-based name resolution. This allows other WINS clients to locate this server and this server to locate other WINS clients Alerter Sending Alerts Allow applications such as performance monitor to raise alerts that can be sent as message pop-ups to other computers or users AppDeploy Application Deployment Have applications deployed to this machine from Active Directory Autoupdate Patch management via Windows update Detect, download, and install hotfixes from Windows Update or Corporate Software Update Servers Browser Browse the network Select this task if you want this server to collect the names of other machines in the domain or workgroup for the purposes of browsing them COMPlus Run COM+ applications. Select this task if you want the server to run COM+ Applications ContentIndexing Index Content Select this task if you want the server to index file contents and properties on local or remote computers for rapid searching DebugCLR Debugging CLR Apps Attach a Debugger to CLR Applications EMS Emergency Management Services Select this task to support remote console administration via Emergency Management Services ErrorReporting Reporting System Errors back to Microsoft Improve Windows reliability by reporting critical error information to Microsoft HelpSvc Help and Support Launch help or collect historical machine data on a daily basis for PSS incident escalation Install Installing\Uninstalling Applications Install\Uninstall applications or components on this server in the future without having to enable the Microsoft Installer service LDM Disk Management Configure disk drives and partitions including autodetection of plug and play hard drives LicenseTracking Tracking Client Access Licenses Track the useage of client access licenses LinkTracking Shortcut and OLE Link Tracking Track renamed and relocated files for users that have short cuts or OLE links to them LPDSVC LPD (Unix Printing) Allows Unix Clients to print to any printer that is available to this server MacPrint Macintosh Print Support Allow Macintosh Users to submit print jobs to this server MailBasedRepl Mail-based Replication Select this task for Domain Controller machines that need to replicate Active Directory data over SMTP Messenger Sending Pop-up Messages Send message pop-ups from this server to other computers or users MSClient Microsoft Networking Client Select this task if you want this machine to connect to other Windows Machines MSMQTriggers MSMQ Triggers Allows arrival of incomming messages to trigger a COM component or executable program. MQDS Downlevel MSMQ Client Support Allows downlevel MSMQ clients to recognize sites and access AD NetBTForDNS DNS\WINS Integration Integrating DNS with WINS NetDDE NetDDE Applications use Network DDE as an interprocess communication mechanism PerfMon Collecting performance data Use this system to background collect performance data from this machine or other machines ProcCon Managing process restrictions on Data Center Servers Manage process restrictions (Data Center Servers only) RemoteAssistance Remote Assistance Allow the Remote Assistance feature to be used against this machine RemoteRegistry Remote Registry Access Remotely access this servers registry RemoteStorage Secondary storage Store infrequently used data on secondary storage media RemoteWindowsAdministration Remote Windows Administration Enables the SMB Server which allows Windows Administrative tools to remotely run against the server. Enabling the SMB server also enables file sharing. RemovableMedia1 Backing up the system locally Perform local backups RemovableMedia2 Managing removable media Use an automated removable media device (e.g. Tape Autoloader or CD Jukebox) attached to this system RSoPProv RSoP Planning Mode Use RSoP planning mode to simulate the application of Group Policy settings Schedule Scheduling Tasks Run Batch Jobs on this machine Snapshot Taking snapshots of the file system Leverage NTFS snapshot capabilities for the purposes of backup or timewarp file versioning TSAdminMode Remote Desktop Administration Remotely manage this server via Terminal Services Remote Desktop Administration TSLicense Terminal Server Licensing Use this server as a licensing server for a Terminal Server deployment TSCluster Terminal Server Clustering Use this server as a session server for a "cluster" of Terminal Servers UPnP Universal Plug and Play Advertise and discover peer-to-peer Universal Plug and Play (UPnP) network devices UPS UPS Use an uninterruptible power supply (UPS) WebEnrollment Web based certificate enrollment Use IIS to provide web based certificate enrollment on this server Wireless Wireless or WAP Connect to a wireless network or use 802.11 authentication protocol Alerter Alerter The Alerter Service ... ALG Application Layer Gateway Service The Application Layer Gateway Service ... AppMgmt Application Management The Application Management Service AudioSrv Windows Audio The Windows Audio Service ... BINLSVC Remote Installation The Remote Installation Service ... BITS Background Intelligent Transfer Service The BITS service ... Browser Computer Browser The Computer Browser service ... CertServer Certificate Services Certificate Services provides ... cisvc Indexing Service The Indexing Service ... ClusSvc Cluster Service The Cluster Service ... ClipSrv Clip Book The Clip Book Service ... ComSysApp COM+ System Application The COM+ System Application service ... COORTSvc .NET Framework Support Service The .NET Framework Support Service ... CryptSvc Cryptographic Services Cryptographic Services ... DFS Distributed File System The Distributed File System Service ... DHCPServer DHCP Server The DHCP Server Service ... DNSCache DNS Client The DNS Client Service ... dmadmin Logical Disk Manager Administrative Service The Logical Disk Manager Administrative Service ... dmserver Logical Disk Manager The Logical Disk Manager service ... ERSvc Error Reporting Service The Error Reporting Service ... EventLog Event Log The Event Log Service ... EventSystem COM+ Event System The COM+ Event System ... Groveler Single Instance Storage Groveler The Single Instance Storage Groveler helpsvc Help and Support The Help and Support Service HidSrv Human Interface Device Access The Human Interface Device Access Service ... HTTPFilter SSL For HTTP.sys The SSL For HTTP.sys service ... ImapiService IMAPI CD-Burning COM Service The IMAPI CD-Burning COM Service Service ... IsmServ Intersite Messaging The Intersite Messaging Service ... IISAdmin IIS Admin The IIS Admin Service ... kdc Kerberos Key Distribution Center The Kerberos Key Distribution Center ... lanmanserver Server The Server Service ... lanmanworkstation Workstation The Workstation Service ... LicenseService License Logging The License Logging Service ... lmhosts TCP/IP NetBIOS helper Provides support for user mode NetBT services that can't be implemented in the kernel ... LPDSVC TCP/IP Print Server The LPD (TCP\IP) Print Server service allows Unix clients to print to any printer available to this server. MacPrint Print Server for Macintosh Print Services for Macintosh ... Messenger Messenger The Messenger Service ... mnmsrvc NetMeeting Remote Desktop Sharing The NetMeeting Remote Desktop Sharing Service ... MQDS Message Queue Downlevel Client The Message Queue Downlevel Client Service ... MSDTC Distributed Transaction Coordinator The Distributed Transaction Coordinator ... MSFTPSVC FTP Publishing The FTP Publishing Service ... MSMQ Microsoft Message Queue The MSMQ Service ... MSMQTriggers Message Queue Triggers The Message Queue Triggers Service ... MSIServer Windows Installer The Windows Installer Service ... NetDDE Network DDE The Network DDE Service ... NetDDEdsdm Network DDE DSDM The Network DDE DSDM Service ... Netman Network Connections The Network Connections Service ... NLA Network Location Awareness The Network Location Awareness Service ... NNTPSVC Network News Transfer Protocol (NNTP) The Network News Transfer Protocol (NNTP) service ... NTfrs File Replication The File Replication Service ... NtLmSSP NT LM Security Support Provider The NTLM SSP ... NtmsSvc Removable Storage The Removable Storage Service ... PolicyAgent IPSec Services IPSec Services ... PlugPlay Plug and Play The Plug and Play Service ... ProcCon Process Control Service The Process Control Service ... ProtectedStorage Protected Storage The Protected Storage Service ... RasAuto Remote Access Auto Connection Manager The Remote Access Auto Connection Manager Service ... RasMan Remote Access Connection Manager The Remote Access Connection Manager Service ... RemoteAccess Routing and Remote Access The Routing and Remote Access Service ... RemoteRegistry Remote Registry The Remote Registry Service ... RPCSs Remote Procedure Call (RPC) The RPC Service ... RPCLocator Remote Procedure Call (RPC) Locator The RPC Locator Service ... RSVP QOS RSVP The RSVP Service ... RSoPProv Resultant Set of Policy Provider The RSoP Provider SacSvr Special Administrative Console Helper The Special Administrative Console Helper Service ... SamSs Security Accounts Manager The SAM Service ... SCardDrv Smart Card Helper The Smart Card Helper Service ... SCardSvr Smart Card The Smart Card Service ... Schedule Task Scheduler The Task Scheduler Service ... seclogon Secondary Logon The Secondary Logon Service ... SENS System Event Notification The System Event Notification Service ... SharedAccess Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS) The Secondary Logon Service ... ShellHWDetection Shell Hardware Detection The Shell Hardware Detection Service ... SMTPSVC Simple Mail Transfer Protocol (SMTP) The Simple Mail Transfer Protocol (SMTP) service ... Spooler Print Spooler The Print Spooler ... Sptimer Sharepoint Timer Service The Sharepoint Timer Service ... SSDPSRV SSDP Discovery Service The SSDP Discovery Service ... stisvc Windows Image Acquisition (WIA) The Windows Image Acquisition (WIA) Service ... SwPrv MS Software Snapshot Provider The MS Software Snapshot Provider ... SysmonLog Performance Logs and Alerts Performance Logs and Alerts allows ... TAPISrv Telephony The Telophony Service ... TermService Terminal Services The Terminal Services Service ... TermServLicensing Terminal Service Licensing The Terminal Service Licensing Service ... TFTPD Trivial FTP Daemon The Trivial FTP Daemon ... Themes Themes The Themes Service ... TlntSvr Telnet The Telnet service allows ... TrkSvr Distributed Link Tracking Server The Distributed Link Tracking Server service allows ... TrkWks Distributed Link Tracking Client The Distributed Link Tracking Client service allows ... Tssdis Terminal Services Session Directory The Terminal Services Session Directory Service ... uploadmgr Upload Manager The Upload Manager Service ... UPNPHost Universal Plug and Play Host The UPNP Host Service ... UPS Uninterruptible Power Supply The UPS Service ... VDS Virtual Disk Service The Virtual Disk Service ... VSS Volume Snapshot The Volume Snapshot service ... W3SSL SSL for World Wide Web Publishing The SSL for World Wide Web Publishing Service... W3SVC World Wide Web Publishing The World Wide Web Publishing Service... W32Time Windows Time The Windows Time Service ... WinMgmt Windows Management Instrumentation (WMI) The WMI Service ... WINS Windows Internet Name Service (WINS) The Windows Internet Name Service ... WmdmPmSp Portable Media Serial Number The Portable Media Serial Number Service ... wmi Windows Management Instrumentation Driver Extensions The WMI Driver Extensions service ... WmiApSrv WMI Performance Adapter The WMI Performance Adapter service ... WMServer Windows Media Server The Windows Media Server ... wuauserv Automatic Updates The Automatic Update Service ... WZCSVC Wireless Zero Configuration The Wireless Zero Configuration service ...