|
NT Workstation’s Personnel Dept.
Just because your computer LOOKS idle, does not mean
it IS idle. A whole array of various services and internal NT
functions are running in the background. Some may use CPU
utilization or memory. Others may unnecessarily step in while
performing other operations and thus slow those operations down.
Below is a list of a few of these items, what they do, and a way to
turn them off if they are not needed or wanted. Also, quite a few
resources may not be properly allocated to start. Depending on how
much memory your PC has and how it is used, it may not be used
efficiently and by tweaking a few parameters, you may see a very
significant performance boost!
(Note: As with all registry and system updates, these changes
should be tested before being used on any production system.)
Common Services that may be
disabled depending on client requirements:
Scheduler – This service is required
for NT’s AT command to function properly. The AT command allows for
event to be schedule to occur at specific times. Actions run by the
AT command are executed with system authority.
Server Service – The server service allows the PC to share
resources such as hard drives, CD-ROMs, or printers. This service
also allows the PC’s registry and services to be manipulated
remotely via tools such as regedt32 and server manager. Even though
the PC may not need to share resources, the server service may be
useful in assisting the helpdesk staff to remotely administer and
troubleshoot a PC via the "Hidden Shares", Regedit32, and the server
manager.
Browser Service – This service requires the "server
service" to run. The browser service allows the workstation to act
as a browser to allow other workstations to find MS resources on the
network. The browser service is required to run on a very limited
number of workstations on each network segment to allow for the
proper browsing of MS resources. If MS networking is not used, such
as LANs with only Novell, Unix, or Web servers, (May include NT web
servers that do not require share access) then the browser service
is not needed at all.
Workstation Service – This service allows the PC to access
Microsoft network resources such Win95/98 shares, NT shares or MS
network printers. The workstation server is also required to run
regedt32 or server manager to access a remote workstation. The
workstation service is not needed on the target workstation, just
the station performing the action. Thus for remote management of PCs
using regedt32, server manager, and hidden shares, the PCs to be
managed do not require the workstation servrice, but do require the
server service. The managing PCs do not require the server service,
but do require the workstation service. If the workstation service
is not enabled, then only local NT accounts will be usable. It will
not be possible to use domain accounts on the local workstation.
Messenger Service – This allows the computer to send/receive
broadcast messages sent via the "Net Send" command. This service is
dependent upon the Workstation service. If the workstation service
is disabled, then this service should also be disabled.
Net Logon – This is required to logon to the local PC
using an MS domain account. It is still possible without this
service to logon to the PC with a local account and then access
other resources using a domain account after supplying the correct
domain name and password. This service requires the workstation
service and should be disabled if the workstation service is
disabled or if local accounts are used.
Registry Keys to Disable Unwanted
Services:
(A value of "3" will set the service to manual which is usually
sufficient. "4" will disable the service. I have provided the
registry key values to allow for ease of use in a managed network
with SMS, WINSTALL, or ZENWorks)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser]
"Start"=dword:00000003
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer]
"Start"=dword:00000003
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation]
"Start"=dword:00000003
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Messenger]
"Start"=dword:00000003
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon]
"Start"=dword:00000003
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Schedule]
"Start"=dword:00000003
Registry Tweaks
IoPageLockLimit – This setting
determines the number of bytes that can be locked for I/O functions.
Increasing the value from the default (512) can have a big boost on
the performance on machines with a large amount of disk I/O. The
example below increases the value to 4096bytes.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session
Manager\Memory Management]
"IoPageLockLimit"=dword:00001000
LargeSystemCache – This entry will cause NT Workstation to
use the same "LargeSystemCache" model used by NT server. This is
recommended with systems with extra available RAM to increase the
effectiveness of the system cache.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session
Manager\Memory Management]
"LargeSystemCache"=dword:00000001
DisablePagingExecutive – This entry will prevent the system
kernel from being swapped to disk. NT will slow down significantly
if the kernel is swapped to disk.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session
Manager\Memory
"DisablePagingExecutive"=dword:00000001
NTFSDisableLastAccessUpdate – By disabling this option, NTFS
will not record the last time a file was accessed. This can speed up
disk operations if applications are written to access many small
files very frequently as is found in many pseudo database
applications. (Modification timestamps will still be made)
REGEDIT4
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem]
"NtfsDisableLastAccessUpdate"=dword:00000001
Along with the items discussed above, a client with excessive
network protocols or located on a LAN segment with excessive
traffic can also see performance degradation.
|