win2k and zonealarm..

holycow

Senior member
Feb 28, 2001
330
0
0
hi,

i was wondering what does service.exe do? i'm using a dialup connection to the internet and everytime i'm on the net, services.exe kept on wanting to have the permission to become a server.. should i allow it to act as a server?
 

jaywallen

Golden Member
Sep 24, 2000
1,227
0
0
Hi, holycow.

Unless you actually want to allow people or other machines on the Internet to access your file system, then you do not want to allow the Services and Controller App to act as a server. Bring up your ZoneAlarm configuration applet, select the Programs page, and look down the list of programs that have access to Local and Internet. (Local refers to your LAN, if any, and Internet refers to... well, you already know.) Unless you know for a fact that you wish to allow external access to files or services on your computer via your dial-up connection, the put red Xs all the way down in the server column. It's one thing to allow something on your PC to have access to the Internet, but it's quite another to allow it to act as a server. Some of the chat clients and Napster-style programs may require you to allow them to act as servers. In that case, I'd suggest using the question-mark setting for them. That means that ZoneAlarm asks you each time the app tries to access the Internet or make itself available as a server, and you have to answer in order to allow it to happen.

ZoneAlarm, or any other firewall or NAT or Proxy or whatever you use to try to isolate your machine from wide-open access by those on the Internet will only protect you if you don't defeat all of the protective mechanisms. So, be careful when you're answering those ZoneAlarm popup dialogs or changing settings in the ZoneAlarm configuration dialog. ZoneAlarm actually has a pretty decent help file, and there's an online knowledge base at their site. Common sense will also help guide you. Just remember, any time something asks you if it can be a server, you want to ask yourself if you want to allow others access to that item on your computer. The answer should be no unless you really know what the entity is, and exactly why it wants this type of access, and exactly what it's going to do with that access.

Hope this is helpful.

Regards,
Jim
 

chuckieland

Diamond Member
Sep 30, 2000
3,148
0
0
would put a big red X on the internet for service and app controller disalbe my internet share?
i use sygate by the way
 

holycow

Senior member
Feb 28, 2001
330
0
0
hi jaywallen,

thx for the info. it really helps.. i just got win2k installed a few days ago and am still trying to figure out how things works..

sorry to bug you again.. i have some more questions regarding to the services that windows runs during the startup.. do you know any sites that had detail description on the default services that window runs during the startup? i realized some of the services are pretty useless to me since my computer isn't connected to any types of network.. therefore, it's waste of resources running these services..
 

jaywallen

Golden Member
Sep 24, 2000
1,227
0
0
Hi,

Actually, holycow, I don't think I'd recommend that you look for services to turn off. You'd be far better off learning the OS before you start to turn parts of it off.

I'm not dismissing your idea here, but hoping to point you toward a better, more cautious way of looking at this. After you've booted your system, start Task Manager. Look on the Processes list to see how much in the way of "resources" the various running services are taking. You'll note that the largest percentage of CPU time is being taken by the Idle process, unless you've got a hell-bent-for-leather program running concurrently. Look at the various service processes. When they're not actually doing something, they don't take any processing time. And they taked darned little memory.

Now look at the flip side. If you set an auto-starting service to manual (or worse yet, disable it) and your system needs it, your system will at the very least suffer some process failures. At the worst, the whole thing will collapse like a stack of wet cardboard.

The best reason for turning off the auto-starting behavior of some services would be for security-related issues. But, again, it's best to really learn something about the OS and its security features before you do this.

There are lots of people who will tell you that you don't need this service or that service. But they don't know what you need, because a) they're probably not as expert as they think they are, and b) they're not sitting at your computer. You have to know an individual system, its configuration, and the installed software, AND even the user's habits to know which services can be safely set to manual or disabled.

Balance the risk you take by turning of what might be a vital set of features for your system against the only actual savings you'll see performance-wise -- a few seconds of boot time. That's usually the only performance benefit you can realize by turning off an auto-starting service. This isn't like Win9X where every open process has staked out an unrecoverable portion of a limited resource stack. W2K doesn't ordinarily fully enable device drivers until they're actually needed by the system, it doesn't let idle services chew up CPU time or memory, and it doesn't have the piddly few K of resource stack that plagues Win9X users.

If you want to experiment a little to see what I'm talking about, you might go to this site. If you decide to try some of that stuff, please be conservative in your approach. Try changing one item at a time and testing your system. My guess is that, if you make the changes they suggest, you'll see a small improvement in boot time and no noticeable effect in general performance. I guess the one exception would be with the indexing service. Depending on the hard drive / partitions, the complexity of the directory structures on the system, and your use patterns, turning that service off (setting it to manual) can offer an improvement in some application start times and in responsiveness of Explorer. However, should your normal use patterns make use of indexing, you'll be faced with a long wait for the service to start, and probably at a time when you don't want to be waiting for a service to start.

Have fun!

Regards,
Jim