Running Windows With No Services
mattOzan writes "So how many of the almost 4 dozen default-enabled services does Windows XP really need in order to preserve basic functioning, like web surfing and running applications?
Zero, as it turns out.
Mark Russinovich at Sysinternals demonstrates that if certain steps are followed, Windows XP will still run with only two active processes: System and Csrss.exe. No Smss.exe, Winlogon.exe, Services.exe, Lsass.exe...
And, contrary to the expectations of various lead engineers at Microsoft, even Internet Explorer will still work under such conditions."
The bottom line is that this stripped-down Windows configuration is not practical, but makes a cool demonstration of just how little of Windows is required for basic functionality.
- There will be a delay before Explorer redraws the desktop
- won't be able to logoff
- Networking is also crippled
I don't think this stripped-down Windows provides even the most basic functionality expected by many users nowadays.It's like patients are treated as long as their hearts are beating, even though everything else has shut down.
Rock that crushes, Paper & Scissors that don't matter.
I hope that message wasn't indicative of what happens when you try not to run any Windows services...
Anywho, of course most of the services aren't needed at all times, but if they aren't turned on by default, a lot of extraneous apps that expect them will either not install or not work correctly. Hence, they are turned on. Are not most services blazing along on Linux by default to the glee of OpenBSD booster?
Alright then. Don't want em, kill em. It's easy, but the average user would have to read up and learn to do it. On whatever OS. Probably easier to leave them running by default so as not to fark things later. Or not because of the inherent security holes. Up to you. I'm ambivalent as long as my Windows boxes are behind a sharing router on private IPs without a lot of forwarding and firewall software.
With respect to resources, I'll check it out some time to see if there's really any improvement. Filed under "Review Later"....
If my grammar and spelling are off, I am [distracted/tired/careless] (take your pick)
Take a look at Black Viper's list of WinXP SP2 services.
Do you know who Mark Russinovich is? Besides writing key books on windows published by Microsoft themselves he is also a very important member of the windows developer community. There is no way in hell Microsoft would want to make him an unsatisfied customer. If they really didn't like what he is doing I bet that they would try to bribe him with large sums of money to stop instead.
Philosophy.
Apparently Microsoft Genuine Advantage is one of the services you can disable.
Any man who afflicts the human race with ideas must be prepared to see them misunderstood. -- H. L. Mencken
Really? Does it? Isn't this just an old joke with not much fact to back it up anymore?
You clearly haven't been using a system recently that's been riddled with spyware, I've just had a hell of a time trying to get rid of some stuff on a friends pc that constantly kept rebooting the pc, restarting explorer and crashing winlogon.
The problem with slashdot is that most of its users were bullied and stuffed into lockers as kids!
Sysinternals is teh r0ks0rz!
No, seriously. If you don't know this, they have a utility called "Process Explorer" for Win32. It's like top on steroids. Actually, its vastly better than top, or any other process monitor I've ever seen. It will show you pretty much everything there is to know about a running Windows process; file handles, TCP connections, you name it. Its small, fast, mercifully lacking a "setup" and free.
They've got a bunch of other stuff for Windows I now consider essential. Check them out.
Lurking at the bottom of the gravity well, getting old
Open up the run box and type in msconfig.
This handy utility will allow you to disable all the annoying tasks you don't need on boot-up.
Well Windows "shutsdown" on its own accord often enough, so that isn't a big problem (well it isn't a NEW problem)
Such a wonderful attempt at "humor"/trolling/zealotry.
If it actually happened, it'd be funny, but it doesn't anymore (did it ever?) - not unless you have severe hardware problems or you're so clueless that you let your machine get overrun with viruses and spyware.
Unless of course you kill the mingetty daemons . . .
Init won't let you (it auto-respawns them), and you can't kill init for technical reasons.
The parent was joking.
-William Brendel
I don't think I've ever had Windows shutdown of its own accord since Windows 2000 SP1.
What you say was certainly true in the Windows 98/ME days, but NT based systems are much more stable.
1. Right click on My Computer, and select Manage.
2. Under Storage, select Logical Disk Management.
3. Right click the drive you want to mount under a folder, and click "Change Drive Letters and Paths".
4. Click on Add.
5. Select the option to mount in an empty NTFS folder, and put the folder in.
If you aren't using NTFS, this may not work. I don't have a FAT32 machine handy, though!
No Start menu necessary! You just need to know the right options to rundll.
For instance, in Windows 98, it's:
C:\WINDOWS\RUNDLL32.EXE user,exitwindows
Google (along with a bit of experimentation) can help for other versions of Windows.
"I assumed blithely that there were no elves out there in the darkness"
You still can. I've never met a Linux distribution that installs more than what you tell it to. Granted, some are leaner than others, but I hate it when people bitch about a distribution and how much "bloat" it comes with when they picked the full install option and fed it four disks.
If your Linux has 10,000 daemons running on it when you first boot it up, it's because you told it to.
At the login window, enter ">console" for the user, no password. Then use your regular l/p to get a bare Darwin shell. On my dual G4, top shows 99.8% idle when I'm on the console.
Facts do not cease to exist because they are ignored. - Aldous Huxley
Someone mod parent AC up.
One of the the comments posted to TFA specifically states that winlogon.exe is still running in safe mode – sure it is, how would you otherwise log in? – and killing it as explained in the article enables removing of viruses that attach themselves to winlogon.exe, without a need to boot from external media.
This means that grandparent is simply wrong, safe mode won't kill winlogon.
“Wait for Hurd if you want something real” –Linus
Process != service!
What you wrote is s essentially correct, but is a feature of NTFS, so FAT32 is out of the question.
The 'subst' command also works, as does the ResKit's 'linkd' and Sysinternals 'junction'. All of these, however, have limitations that aren't readily apparent, so none is a substitute for the 'Map Drive to Folder' approach (as though that isn't limited as well).
The feature is a welcome addition, though lame compared to what's possible in *nix. I won't hold my breath waiting for DOS remnants like drive letters will go away any time soon.
You could create a batch file to turn off/on services to a level that suited your particular needs at that moment. just create a batch file like so:
echo Closing Down...
net stop "Help and Support"
net stop "IIS Admin"
net stop "Messenger"
when you're done playing your game or whatever, you can start 'em back up with another batch file:
echo Starting Up...
net start "Help and Support"
net start "IIS Admin"
net start "Messenger"
(new-school guys could probably do this easily with a neato vbs script.)
I have a couple of batch files that I use for just this purpose. I work with a few different server setups like, Apache + MySQL, IIS + SQL Server, etc. When I'm working on one, I can turn off all the other stuff I don't need.
TODO: come up with a clever sig
Supposedly - IF you run Task Manager from PowerPrompt which starts up a shell with System privilege.
Hard to find a downloadable copy of PowerPrompt though, you really have to search Google for it.
Great tool for trashing spyware that's protected by Windows itself.
Richard Steven Hack - This sig is TOO GODDAMN SHORT TO DO ANYTHING USEFUL WITH! MORONS!
The parent post is not entirely true. Either that or he/she is running Mac OS X 10.4 on a G3 300Mhz beige desktop system with a multiple year old video card. Even on moderate hardware (G3/G4 1Ghz+) with a moderate video card (Radeon/GeForce) OS X 10.4 has been nothing but exceptional for me. It is ridiculous how many non-OS X using Mods moderate posts.
/etc/hostconfig) As an added note, you can control almost all of your services from the hostconfig file.
/Library/StartupItems/ and /System/Library/StartupItems/ for other startup services
If you are really having trouble with OS X 10.4, you can do a couple of things:
1) Upgrade from 5-10+ year-old Apple hardware (most complaints about OS X are from extremely underpowered hardware...Even new Linux distributions choke on underpowered hardware)
2) Start from a clean 10.4 installation. Most upgrades from 10.3.x tend to have a problem or two associated with the upgrade. And upgrading to a clean install is incredibly easy with OS X. Just use the option to do so from the Installer.
3) Turn off all Dashboard Widgets (with no Widgets active, Dashboard takes essentially 0 RAM or CPU)
4) You can even turn off Dashboard (you can find the utilities on VersionTracker)
5) Although I have never yet had a problem with it, and I absolutely love its search capabilties, you can turn off SpotLight (Change SPOTLIGHT=-YES- to SPOTLIGHT=-NO- in
6) Look in
7) Wait for future updates to 10.4 as Quartz 2D Extreme and other video enhancements/improvements are disabled right now for more testing and will be re-enabled in the future.
Simply bad-mouthing OS X 10.4 is wrong. It works perfectly on my iBook and PowerMac and works for millions of other people as well. On a brand-new, default installation of 10.4.2 on my iBook I am averaging 42.91MB of RAM usage. Not exactly RAM intensive. The CPU is never peaked out except under extremely heavy usage (you can use the Activity Monitor application to permanently place a CPU meter on your desktop or in your Dock). While there are reports on the internet that some people are saying they had better video performance under 10.3.9, it would be a better comparison between the two when 10.4.9 comes out, because 10.3.9 is highly optimized at this point. Also, try searching Google for some optimization tips, there are a ton of Mac-centric website full of little performance tips for OS X.
The daemons are not what is slowing you down, unless they're polling.
Most of what the perceptual slowness is in Linux comes from a couple things.
* Inefficient GUI software. GNOME 2 software simply starts up and runs more slowly than GNOME 1 software.
* Heavyweight desktop managers and similar programs. I use sawfish, have a copy of gkrellm running, and use xbindkeys to launch all my programs Most of what I have open at any one time are Firefox windows, xterms (not the far slower gnome-terminals), and xemacs windows. These are all interactive programs, but things are much snappier when running these than when running the GNOME or KDE suites.
* Use accelerated drivers. There aren't that many that have RENDER acceleration, for example, and without that, all the antialised character blits to the screen are unaccelerated -- one reason why the antialiasing in GTK/GNOME 2 "felt" so slow. I use a Radeon 9250/128 bit data path and have no problems.
For all that, there's still a few things I'd like to point out.
* As a kernel, Linux *is* generally faster than Windows. You might be using slower userspace software, though.
* In The Olden Days, Linux distros tended to have an awful lot more daemons running out of box -- my Red Hat 5.2 box, IIRC, ran fingerd, ftp, ssh, telnet, and I think even a web server by default. There might be more -- talk might have been in there as well.
* Linux does a pretty good job of paging. If a daemon isn't doing anything, it isn't going to be consuming your resources.
Any program relying on (nontrivial) preemptive multithreading will be buggy.
2k3 Server. Then again, I built it from scrach and installed the OS, so it had half a chance :).
(FreeBSD admin by choice, Windows admin by necessity)
Yep, I wholeheartedly aggree with your whole message.
Once Linux started shipping on CD's, as opposed to the early stack-o-floppies installs, the first reaction was to install and activate everything they could possibly download and pack on that CD.
(And I suppose the fact that at the time the flamewar was "but my Linux system gives me more free stuff than your Windows comes with", also didn't help the cause. Everyone just _had_ to pack 5 web servers and 20 IRC clients on a CD, and offer to install them by default, just to brag about how much more stuff they include than MS does.)
I didn't use RH at the time, but I do still remember installing SuSE in 1999. (Although I did briefly have Linux installed too, the stack-o-floppies way, prior to 1999 I was by and large an OS/2 fanboy.)
Ooer. Now that offered to install everything and the kitchen sink by default, and pretty much everything depended on everything else. I _know_ at least Apache was installed and started by default, because some documentation module depended on it. But it's more like it offered to install and start by default some 2-3 web servers, _and_ MySQL and god knows what else.
By comparison, nowadays most distros got a bit more clue. And then there's Gentoo. I'm not the biggest fan of Gentoo generally, but there you only have the stuff you've emerged, and the stuff it had a dependency on. If you haven't explicitly emerged Apache or PHP or such, there's just no way you'll have a web server on that machine.
And, yeah, you're right about the heavyweight GUIs and desktop managers. Looking back in retrospect at the times when we used to brag "my Linux starts faster and uses less memory" with a straight face, I have to wonder where and what went wrong.
I still remember compiling and starting KDE 2.0 on my old 128 MB K6-III. I mean, gah, all my memory was used up with just that and X before I even started any programs. And it just went downhill from there. Nowadays Windows XP actually loads faster, used up less RAM and is more responsive than a KDE 3.x desktop, and that's just bloody sad.
Mind you, I too use a more lightweight desktop, which keeps things a lot snappier. I'm on XFCE at the moment, and for a long time I was a IceWM+DFM proponent. Gave me something pretty close to a Windows desktop (DFM managed the desktop nicely, IceWM took care of the task bar and menu) on a couple of megs RAM.
But still, as soon as I load a couple of programs, I get all the GNOME2 and KDE libraries in RAM anyway.
A polar bear is a cartesian bear after a coordinate transform.