Download the Flash player at www.macromedia.com.
Home
Solutions
Solution Archives
Software Products
Site Search

 

03-Apr-05, ZWDynaUser Article posted! (Pt. 1)

28-Mar-05, Windows Process Authority article posted!

28-Mar-05, ZWXPDrive article posted!

22-Mar-05, ZENworks Enhancement Software Posted!

22-Mar-05, Site Updated!

Legacy Article - Information may be dated.

NT Workstation’s Personnel Dept.

Just because your computer LOOKS idle, does not mean it IS idle. A whole array of various services and internal NT functions are running in the background. Some may use CPU utilization or memory. Others may unnecessarily step in while performing other operations and thus slow those operations down. Below is a list of a few of these items, what they do, and a way to turn them off if they are not needed or wanted. Also, quite a few resources may not be properly allocated to start. Depending on how much memory your PC has and how it is used, it may not be used efficiently and by tweaking a few parameters, you may see a very significant performance boost!

(Note: As with all registry and system updates, these changes should be tested before being used on any production system.)

Common Services that may be disabled depending on client requirements:

Scheduler – This service is required for NT’s AT command to function properly. The AT command allows for event to be schedule to occur at specific times. Actions run by the AT command are executed with system authority.

Server Service – The server service allows the PC to share resources such as hard drives, CD-ROMs, or printers. This service also allows the PC’s registry and services to be manipulated remotely via tools such as regedt32 and server manager. Even though the PC may not need to share resources, the server service may be useful in assisting the helpdesk staff to remotely administer and troubleshoot a PC via the "Hidden Shares", Regedit32, and the server manager.

Browser Service – This service requires the "server service" to run. The browser service allows the workstation to act as a browser to allow other workstations to find MS resources on the network. The browser service is required to run on a very limited number of workstations on each network segment to allow for the proper browsing of MS resources. If MS networking is not used, such as LANs with only Novell, Unix, or Web servers, (May include NT web servers that do not require share access) then the browser service is not needed at all.

Workstation Service – This service allows the PC to access Microsoft network resources such Win95/98 shares, NT shares or MS network printers. The workstation server is also required to run regedt32 or server manager to access a remote workstation. The workstation service is not needed on the target workstation, just the station performing the action. Thus for remote management of PCs using regedt32, server manager, and hidden shares, the PCs to be managed do not require the workstation servrice, but do require the server service. The managing PCs do not require the server service, but do require the workstation service. If the workstation service is not enabled, then only local NT accounts will be usable. It will not be possible to use domain accounts on the local workstation.

Messenger Service – This allows the computer to send/receive broadcast messages sent via the "Net Send" command. This service is dependent upon the Workstation service. If the workstation service is disabled, then this service should also be disabled.

Net Logon – This is required to logon to the local PC using an MS domain account. It is still possible without this service to logon to the PC with a local account and then access other resources using a domain account after supplying the correct domain name and password. This service requires the workstation service and should be disabled if the workstation service is disabled or if local accounts are used.

Registry Keys to Disable Unwanted Services:

(A value of "3" will set the service to manual which is usually sufficient. "4" will disable the service.  I have provided the registry key values to allow for ease of use in a managed network with SMS, WINSTALL, or ZENWorks)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser]
"Start"=dword:00000003

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer]
"Start"=dword:00000003

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation]
"Start"=dword:00000003

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Messenger]
"Start"=dword:00000003

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon]
"Start"=dword:00000003

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Schedule]
"Start"=dword:00000003

Registry Tweaks

IoPageLockLimit – This setting determines the number of bytes that can be locked for I/O functions. Increasing the value from the default (512) can have a big boost on the performance on machines with a large amount of disk I/O. The example below increases the value to 4096bytes.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management]
"IoPageLockLimit"=dword:00001000

LargeSystemCache – This entry will cause NT Workstation to use the same "LargeSystemCache" model used by NT server. This is recommended with systems with extra available RAM to increase the effectiveness of the system cache.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management]
"LargeSystemCache"=dword:00000001

DisablePagingExecutive – This entry will prevent the system kernel from being swapped to disk. NT will slow down significantly if the kernel is swapped to disk.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory
"DisablePagingExecutive"=dword:00000001

NTFSDisableLastAccessUpdate – By disabling this option, NTFS will not record the last time a file was accessed. This can speed up disk operations if applications are written to access many small files very frequently as is found in many pseudo database applications. (Modification timestamps will still be made)

REGEDIT4

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem]

"NtfsDisableLastAccessUpdate"=dword:00000001

Along with the items discussed above, a client with excessive network protocols or located on a LAN segment  with excessive traffic can also see performance degradation.