Colama

Sr.

Service Name

Description

1.

Windows Search

This service consumes a lot of CPU and writes a lot of data which might choke the network in RDP deployment. Data generated by this service also ends up using lots of disk space.

2.

Windows Update

In RDP environment, updates are pushed centrally by updating golden images

3.

Superfetch

Although superfetch on systems with individual hard disk makes sense, it will actually slow down the overall performance in RDP environment.

4.

IP Helper

Many organizations haven't even started testing IPv6, much less fully deployed it. As indicated in the service description, the IP Helper service is leveraged in IPv4-to-IPv6 transitions.

5.

Network Access Protection Agent

If you're not doing network-based remediation or if you're doing remediation with a third-party tool that doesn't leverage the NAP client, this service can be disabled.

6.

Parental Controls

This service is a stub for Windows Parental Control functionality that existed in Vista. It is provided for backward compatibility only.Corporate networks rarely used Vista's Parental Control functionality. Further, this is a legacy service from Windows Vista.

7.

Smart Card

If your organization does not use smart cards for authentication purposes, you can safely disable this service.

8.

Smart Card Removal Policy

Same as above

9.

Windows Media Center Receiver Service

In most corporate environments, TV and FM broadcast reception on desktop computers is not considered a "business critical" item that needs support, and it's often not allowed anyway. You can disable this service to save some resources.

10.

Windows Media Center Scheduler Service

Same as above

11.

Fax

If your organization is not using a network-based faxing service, disabling this service will have no business impact.

12.

Tablet PC Input Service

The vast majority of PCs that are deployed to users do not have hardware that can leverage tablet-like capability. This service simply uses system resources with no possible benefit.

13.

Background Intelligent Transfer Service

This service is used by windows to download updates. Since we have disabled updates, this service can be disabled

Sr.

Tweak

Procedure

1.

Limit size of windows event logs

1. open "Edit group policy" application by providing the same in  Start Menu search box

2. on the left side bar navigate to Computer Configuration\Administrative Templates\Windows Components\Event Log Service

3. you will find four subfolders namely Application, Security, Setup and System

4. click on  each of the folders in turn and do the the following on the righ panel:

1. double click on Maximum Log Size item

2. in the new window that just opened select Enabled radio button

3. make sure the value of Maximum Log Size (KB) is set to 1024

4. press OK

5. double click on Retain Old Events item

6. in the new window that just opened select Disabled radio button

7. press OK

2.

Disable startup and recovery logging

1. Right-click My Computer.

2. Select Properties > Advanced System Settings

3. Select startup & recovery -> settings -> system failure

4. Uncheck write an event to the system log and set   write debugging info to none

3.

Improve performance tuning

1. Click start- Right click on "Computer"- Click "Properties" in popup menu

2. Click "Advanced System settings" from left bar

3. In popup window select "Advanced" Tab

4. Click "Settings" in "Performance" sectionvisual effects -> adjust for best performance from control panel -> programs -> programs & features

5. Turn windows features on/off and uncheck :

1. remote differential compression

2. tablet pc components

4.

Turn off periodic defrag

1. Open the properties for the C:\ drive

2. Select the Tools tab

3. Click Defragment now to display the Disk Defragmenter dialog box

4. Click Configure schedule

5. Clear the Run on a schedule checkbox

5.

Disable System Restore

1. Open Control Panel, switch to all items view and click on System

2. In the next window click on the System Protection link

3. The System Properties dialog box opens where you will want to select your system disc and click the Configure button

4. Under Restore Settings select “Turn off system protection” and click Apply

6.

Disable Drive Indexing

1. Open up Computer in the Start menu

2. Right-click your drive and select Properties

3. Uncheck the box marked "Allow files on this drive to have contents indexed in addition to file properties"

4. A pop-up screen may appear, stating there is an error applying attributes. This is normal. You should select "Ignore All" and continue.

7.

Disable Hibernation

1. In the Start menu search box, type "cmd" without the quotes

2. Right-click the cmd program and select Run as Administrator

3. In the command line, type "powercfg -h off", again without the quotes

4. Once completed, the command prompt returns.

8.

Disable Prefetch and SuperFetch

1. Type regedit into the Start menu's Search box

2. Select the file path HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SessionManager\Memory Management\PrefetchParameters

3. Right-click on both EnablePrefetcher and EnableSuperfetch one at a time and Select Modify on each of these to change the value from 1 (or 3) to 0

9.

Ntfs Disable Last Access Update

1. Type regedit into the Start menu's Search box

2. Select the file path HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem

3. Right-click on NtfsDisableLastAccessUpdate and set it to type dword with value 00000001

10.

Disable readyboot.etl

1. Click start, click control panel

2. Click administrative tools, performance monitor

3. Expand left side tree entry for Data Collection Sets

4. Highlight Startup Event Trace Sessions

5. Open the ReadyBoot line (double click it)

6. Click on trace session tab and  uncheck "enabled"

11.

Disable paging

NOTE: paging can't be disabled if memory is less then 2GB

1. Click on Start go to computer, right click on it and click on properly
2. In System dialog box click on link "System protection"
   
3. In System protection dialog box, click on Advanced tab, in that click on Settings... button in performance section.
4. It will open new dialog box "Performance Option" in same click on Advanced tab.
5. Click on Change... button in "Virtual memory" section.
6. Here uncheck of "Automatcally manage paging file size for all devices" and select "No paging file"      radio button, and then click on Set button.
7. It will display warning dialog box, click Yes. then click Ok