Trimming Windows for unnecessities

Hello tenforums.

My current system is going to transition into a media system when I'm doing my upgrade.
And I don't want to buy an extra HDD so I can use unRAID, FreeNAS or whatever else there's out there.
So I'm going with Windows. And since it's only going to be used as a media system, I wanna trim I'm down as much as I can.
I've looked at the tutorials to get an idea of what I could use, but there's a lot to look through.
So I wanna hear if anyone has done something similar, and what you've done to remove things you don't need in Windows?

Things like statistics, privacy settings, visual effect etc.

Preferably something I can just run with PowerShell and/or CMD so I don't have to change the setting in the GUI.
I don't need the script myself since I can write that, I'd just like settings I can change with PowerShell or CMD.

So, what settings and apps do I need to change and remove?

You can disable services Windows 10 and you don't need.


1. Click “Start Menu”
2. Type Services.msc
To edit a service right click it

3. Select Properties.

4. Edit the Startup type.

The List of Services SAFE to Disable

I recommend that you read everything before making any decisions.

• Adaptive Brightness: This service can be disabled when the monitor doesn't support detection of ambient light with sensors to adjus the display brightness depending on the lighting conditions.
• Application Experience: Investigates the compatibility of older programs and searches for updates for known problems. Although disabling this service doesn't have negative side effects, it is better to keep it unchanged.
• BitLocker Drive Encryption Service: Unless you use Microsoft’s Encryption Software (included in Windows 7 Ultimate and Enterprise Edition, and in Windows 8, 8.1, 10 Pro and Enterprise), you can disable this service. BitLocker Drive Encryption is a feature that allows users to protect data by providing encryption for entire volumes. Safe setting: Manual;
• Bluetooth Support Service: Unless you use Bluetooth devices such as keyboards, mice, printers or phones, you can disable this service. Keep in mind that, if you choose to disable this service, then no Bluetooth devices will be recognized. Also, the already connected Bluetooth devices may fail to work properly. Safe setting: Manual;
• Computer browser: Tracks the computers (and files) on the network and maintains an updated list. This service is only useful in case of a LAN where the computers share files with each other. After disabling this service, it is still possible to browse the network. The service depends on the services Server and Workstation.
• Certificate Propagation: If you don’t use SmartCards (sometimes used in large organizations), it is safe to disable this service. Safe setting: Manual;
• Desktop Window Manager Session Manager: Necessary for the new Aero Glass-interface. Only disable this service if the new Aero Glass-interface is not used.
• Diagnostic Policy-service and Diagnostic System Host: For the detection of problems, troubleshooting and presenting known resolutions for Window components. If there are no problems expected anymore, it is safe to disable the service.
• Disk Defragmenter: This services provides (automatic) defragmentation of the partitions. When this service is disabled, disable the defragmentation task as well (control panel, item Administrative Tools, Task Scheduler, Task Scheduler Library, Microsoft, Windows, Defrag).
• Distributed Link Tracking Client: Makes sure that linked files on multiple computers in a network stay linked. This service can be disabled safely, because in most home situations, this option is not used at all.
• Encrypting File System: EFS provides file encryption technology for storing encrypted files on NTFS file systems. If you don’t need to encrypt data on your hard drives, it is OK to disable it. Safe setting: Manual;
• Function Discovery Provider Host: Enables sharing files over the network with other computers. If this service is disabled, the shared files are no longer visible by other computers in the network. Disabling this service is also possible by disabling the option Network discovery in the Network and Sharing Center in the Control Panel.
• Function Discovery Resource Publication: This service publishes the shared files and printers so they can be discovered by other computers in the network. Disable this service if it is not necessary that other computers are able to discover shared resources. This service can be disabled as well by disabling the option Network discovery.
• Fax: unless you use your computer to send or receive faxes using fax resources available on your system (for ex. by using a fax-modem), you can disable it. Safe setting: Manual;
• HomeGroup Listener and HomeGroup Provider: Services for sharing personal files using the HomeGroup. When the HomeGroup is not used, both services can be disabled.
• Human Interface Device Access: Support for a multimedia device like a remote control and hot buttons on keyboards (like the volume and e-mail button).
• Offline Files: Unless you use the Offline Files functionality from Windows, you can disable it. Safe setting: Manual;
NOTE: This service is available only in Windows 7 Professional, Ultimate and Enterprise. In Windows 8 it is available only in the Pro and Enterprise editions.
• Parental Controls (in Windows 7) / Family Safety (in Windows 8): Unless you have children using your computer and you want to monitor and control their activities, this service is not required. Safe setting: Manual;
• Print Spooler: If you don’t have a printer attached to your computer and you don’t use virtual printers (e.g.: PDF creator, Microsoft XPS Document Writer, Snagit, etc) you can disable it. Safe setting: Manual;
• Internet Connection Sharing (ICS): For sharing the internet connection with other computers in the network (this computer operates as a router). If a router is used to connect all the computers to the internet, this service is not needed.
• IP Helper: Support for an IPv6 connection over a IPv4 network. IPv6 is the new connection type of the future which makes it possible to give every computer connected to the internet a unique IP address instead of one single IP address for the internet connection (where the connected router uses special IP addresses for home use). The use of IPv6 has some advantages (but also disadvantages) but at the moment, there are not many providers supporting this new connection type. If IPv6 is not supported or used, disable the service for security reasons.
• Microsoft iSCSI Initiator Service: iSCSI is an abbreviation for Internet Small Computer System Interface - an IP-based storage networking standard for linking data storage facilities. It allows client computers to access data over long distances on remote data centers, by using existing infrastructure (ex. over LAN, Internet). iSCSI devices are disks, tapes, CDs, and other storage devices on another networked computer that you can connect to. Sometimes these storage devices are part of a network called a storage area network (SAN). Unless you need to connect to iSCSI devices, it is safe to disable this service. Safe setting: Manual;
• Netlogon: this service is not needed in a home computer. It maintains a secure channel between the local computer and the domain controller for authenticating users. Unless you are connecting to a network domain, this service will never be used. Safe setting: Manual;
• Network List-service and Network Location Awareness: Without these services, the network connection still works fine, but it is no longer possible to show the status in the system tray and the Network and Sharing Center. To keep this functionality, it is better not to disable these services.
• Offline Files: Makes the network shares also available when the share is offline. The edited files will be synchronized automatically the first time the network share has become available. If this option is not desired, then it is better to disable this service.
• Portable Device Enumerator Service: Enforces group policy for removable mass-storage devices. If this service is disabled, it is no longer possible to read/write protected devices. If it is not necessary to access removable mass-storage device using group policy, it is safe to disable the service (the removable media will still be accessible by applications which don't rely on this service).
• Remote Access Connection Manager: Necessary for managing dial-up and virtual private network (VPN) connections. If the computer is connected to a router and no VPN connection is needed, this service can be disabled safely. Because the service Remote Access Auto Connection Manager depends on this service, it can be disabled as well.
• Remote Desktop Configuration: Remote Desktop Protocol is a protocol developed by Microsoft which provides Windows users with a graphical interface to another computer. The client used by Microsoft is called Remote Desktop Connection. If you don’t need to connect remotely to another computer or allow incoming remote connections to yours, then it is safe to disable this service. Safe setting: Manual;
• Remote Desktop Services: Same as above. Safe setting: Manual;
• Remote Desktop Services UserMode Port Redirector: Same as above. Safe setting: Manual;
• Remote Registry: This service enables remote users to modify the Windows Registry. Some say that having this service turned on can pose security issues, and therefore, choose to disable it. In Windows Vista and Windows 7, this service is set to a manual start by default, while in Windows 8 it is disabled. After disabling it, I encountered some problems while updating my system, so I really think that it is safe to leave it set to Manual, at least in Windows 7. Safe setting: Manual;
• Routing and Remote Access Service: This service offers routing services to businesses in local area and wide area networks. It allows computers to dial in to the local computer in order for it to get access to the local network. On a home computer you won’t need such features. Safe setting: Manual;
• Routing and Remote Access: Disable this service if it is not desired that other computers are able to dial in to get access to the local network.
• Smart Card: Smart Cards are generally used for safety reasons in large organizations or corporations. The typical home user won’t probably need this service to be running. Safe setting: Manual
• Secondary logon: If you are the only user of your computer, it can be disabled. But only if you don’t plan to use more than one user account. Safe setting: Manual;
• Server and Workstation: Necessary to share files and printers with other computes within a network. If this is not the case, it is safe to disable these services. After disabling the services, it is still possible to access shared folders on other computers. If these services are disabled, it is no longer possible to activate the option File and printer sharing in the Network and Sharing Center, task Change advanced sharing settings.
• Shell Hardware Detection: This service starts the auto play of devices like DVD drives and memory cards. This service is also responsible for showing a window with the options which action to take with a certain type of file. If you don't like this function, disable this service. Because the service Windows Image Acquisition (WIA) depends on it, it has to be disabled as well.
• Tablet PC Input Service (in Windows 7) / Touch Keyboard and Handwriting Panel Service (Windows 8): You can safely disable this service, unless you use Tablet PC. Some "Tablet PC Components" like the Snipping tool or Windows Journal will continue to function, while the Tablet PC Input Panel will not. The default startup type is Manual. You can set it even to Disabled without negatively impacting your computing experience;
• Themes: Disable this service if there is no need for the visual effects like the new Aero interface. Disabling is only advised for slow computers because the new interface is one of the most important reasons to upgrade to Windows Vista or Windows 7. To disable visual settings manually, go to System in the Control Panel, Advanced system settings (in the left task pane), tab Advanced, button Settings (sub Performance).
• WWAN AutoConfig: Service for connecting the computer to a network (internet included) by a mobile broadband service like GSM and CDMA.
• Windows Biometric Service: This service is used for capturing, comparing, manipulating and storing biometric data (like finger prints or iris scan).
• Windows Connect Now: This service is used by laptops and other mobile computers to connect to Wireless Networks. If you are on a desktop computer, you can disable this service. Safe setting: Manual;
• Windows Defender: Additional scanning software for unwanted, malicious software. When Windows Defender is turned off (control panel, item Windows Defender, option Tools, link Options, task Administrator), the startup type is set to manual automatically. If this service is disabled, Windows Defender can no longer be opened by the control panel!
• Windows Error Reporting Service: This service is used to report system errors to Microsoft. Although disabling this service won’t affect your Windows computer, letting it run when needed may help you solve problems and issues that occur on your system, by searching solutions available from Microsoft. Safe setting: Manual;
• Windows Firewall: This service should be disabled only if you are using a third-party security solution that provides firewall protection. Safe setting: Manual;
• Windows Image Acquisition (WIA): For transferring images from a scanner or camera to the computer.
• Windows Media Player Network Sharing-service: If it is not desired to share Windows Media Player libraries, it is safe to disable this service.
• Windows Search: Provides content indexing (like personal files and e-mail) to speed up searching this content. Disabling this service will slow down the search process to a file by file search. Indexing takes place in the background at a moment the computer is not used, for this reason it is not necessary to disable the service.
• Windows Time: If your computer doesn’t have access to the Internet then you don’t need to update the system time from online servers. You can safely disable this service. But if you do, then this service will keep your system time accurate. Safe setting: Manual;





You can disable pagefile and hibernate feature.

Open Command Prompt as a administrator and execute Powercfg /H off command to disable hibernate feature.

When Windows starts, you might see the loading bar and the Windows logo. This is the GUI boot. However, this is useless and can lengthen the boot of Windows. To disable GUI boot, press the WinKey+R simultaneously to open the Run dialog. Type MSCONFIG into the Run dialog and click OK. In Microsoft Configuration Utility, click the Boot tab and check /NOGUIBOOT.


On Windows 10, numerous apps you download from the Microsoft Store will keep on running out of sight to exploit extra features, for example, the capacity to download data, refresh Live Tiles, and show notifications.

Although these features can be useful in a number of scenarios, apps running in the background can drain battery, waste bandwidth and system resources.

To disable apps from running in the background wasting system resources, use these steps:

1. Open Settings.

2. Click on Privacy.

3. Click on Background apps.

4. Under the "Choose which apps can run in the background" section, turn off the toggle switch for the apps you want to restrict.


Alternatively, under the "Background Apps" section, you can turn off the Let apps run in the background toggle switch to prevent any app from running in the background.



Uninstall Unused Applications

This is one of the most overlooked things you can do to speed up your PC and free up disk space.

1. Click Start Menu
2. Click Control Panel
3. Click Add or Remove Programs or Programs and Features
4. Uninstall programs haven’t used for a long time and that you know you will not use again. They are just sitting there, wasting disk space and possibly decreasing your overall computer performance.
5. Uninstall these programs by selecting the specific program with your mouse and then clicking on the ‘Remove’ button.


Uninstall Apps in Windows 10


Disabling Unneeded Visual Effects

Visual effects are the nice effects you see when a window is minimized, maximized, etc.. they can seriously use up precious resources that your computer needs, so turning off unneeded visual effects is in your computers best interest.

1. Click "Start Menu".
2. Then click right click on "My Computer"
3. Select Properties
4. Select "Advanced" tab.
5. Then in the "Performance" section select "Settings" button.
6. Click “Visual Effects” tab.

You can if select "Adjust for best performance" or choice individual effects yourself to increases Windows responsiveness.




If you want to turn off individual effects yourself then these are the animations and special effects you’ll probably want to turn off, because they have the greatest effect on system performance:

• Animate controls and elements inside windows
• Animate windows when minimizing and maximizing
• Animations in the taskbar
• Fade or slide menus into view
• Fade or slide Tool Tips into view
• Fade out menu items after clicking
• Show shadows under windows

However, it’s probably a lot easier to just select “Adjust for best performance” at the top of the screen and then click OK. Windows OS will then turn off the effects that slow down your system.

Good morning.
Sorry for the slow reply.

FreeBooter, thank you for the great feedback!
I was looking for a "package" of things I could do, instead of looking everything through one by one.
I did look at the tutorials, but there's more than a few pages, so I eventually gave up a bit. That's the main reason why I asked about this, so thank you!

Nanobug said:

Good morning.
Sorry for the slow reply.

FreeBooter, thank you for the great feedback!
I was looking for a "package" of things I could do, instead of looking everything through one by one.
I did look at the tutorials, but there's more than a few pages, so I eventually gave up a bit. That's the main reason why I asked about this, so thank you!

You are very welcome!