Minimalist network configuration for WLAN and Ethernet

V

vigan1

New Member
Hello. I use my computer only for WIFI (access to internet only, and wifi printer)
And also ETHERNET, access to internet only. And BLUETOOTH.

I don't need anything else, I just need autoconfig and network access (no workgroup, no DNS, no remote access... nothing the bare minimum)
No server stuff, no advanced use of the network, only internet access and internet printing.

What can I disable in the network tab ?
What is the bare minimum I should keep activated ?

Windows 10 1709

Thank you.
 
Last edited:
same question i put up when i purchased NTLite app subscription.
after hard efforts of 3-4 months i got everything done with help of community members as well as my knowledge too :)
 
There is no correct answer to every "What is the bare minimum?" question. This entirely depends on what apps you use (or might want).
Here is my suggestions for the basic home user, who isn't part of a domain.

Sorted from safest to less safe. Look at NTLite's Extra info column.

Nobody uses this crap.
Code: 
                <c>openssh</c>
                <c>payments</c>
                <c>simpletcp 'Simple TCP/IP services'</c>
                <c>telnetclient 'Telnet Client'</c>
                <c>tftpclient 'TFTP client'</c>
                <c>trkwks 'Distributed Link Tracking Client'</c>

No LTE or SMS features.
Code: 
                <c>messagingsvc 'Messaging Service'</c>
                <c>smsrouter 'SMS Router Service'</c>

SMB1 is deprecated, it's gone in 22H2.
Code: 
                <c>smbv1 'SMB v1'</c>

Not using Office/Office 365 or desktop mail clients.
Code: 
                <c>activedirectory 'Active Directory'</c>
                <c>adamclient 'Active Directory Lightweight Directory Services (AD LDS)'</c>
                <c>azuread 'Azure Active Directory'</c>
                <c>exchangeactivesync 'Exchange ActiveSync (EAS)'</c>
                <c>mailcommdll 'Windows Mail Communications Library'</c>
                <c>microsoft.windowscommunicationsapps 'Windows Mail'</c>
                <c>netlogon</c>

Not using MS browsers.
Code: 
                <c>axinstall 'ActiveX Installer Service'</c>
                <c>edgeupdate 'Microsoft Edge Update'</c>
                <c>internetexplorer 'Internet Explorer'</c>
                <c>internetexplorer32 'Internet Explorer - 32 bit'</c>
                <c>microsoft.microsoftedge.stable 'Microsoft Edge (Chromium)'</c>

Not using VPN.
Code: 
                <c>driver_eaphost.inf</c>
                <c>eaphost 'Extensible Authentication Protocol (EAP)'</c>
                <c>ias 'Internet Authentication Service (IAS)'</c>
                <c>rascmd 'Remote Access Service Client Tools'</c>
                <c>rasmans 'Remote Access Connection Manager'</c>
                <c>remoteaccessservice 'Routing and Remote Access Service'</c>
                <c>remoteaccesssupport 'Routing and Remote Access support'</c>
                <c>vpn 'Virtual Private Network (VPN) support'</c>

Not using any virtualization (Hyper-V, Containers, WDAC) or Remote Desktop.
Code: 
                <c>ndisimplat 'Network Adapter Multiplexor Protocol'</c>
                <c>offlinefiles 'Offline Files'</c>
                <c>rdpclient 'Remote Desktop Client'</c>
                <c>rdpclient32 'Remote Desktop Client - 32 bit'</c>
                <c>remoteactivex 'Remote Desktop Services ActiveX Client'</c>
                <c>remoteactivex32 'Remote Desktop Services ActiveX Client - 32 bit'</c>
                <c>sharedaccess 'Internet Connection Sharing (ICS)'</c>
                <c>synccenter 'Sync Center'</c>

NDIS is a commonly used network driver used by network traffic snooping, PC security and some 3rd-party management tools. Leave it alone.
Everything past this suggested list will start causing major problems.
 
garlin said:
There is no correct answer to every "What is the bare minimum?" question.
Click to expand...
Users should look online for "windows X safe to disable services", batcmd.com and black viper(and others) have excellent information about what services do. If a service can be "safely" disabled can its component be removed and if it cant be removed can it be disabled instead?

Maybe a Windows Firewall Compatibility option would be useful.
 
Or just nuhi change the Template Not Recommended (Red) to comply with Compatibility Recommended = problem solved!
Why adverse users to "gameraddicts" problems by template?
 
You must log in or register to reply here.
Back
Top