Share via

grayed out services in Windows 10

Anonymous
2017-11-05T18:37:05+00:00

I am running Windows 10 Home 1709 version. I just cleanly installed it from scratch and have not connected to internet yet. For now, I am only trying to harden the system first from within its only admin account I create as part of setup.

As part of this hardening, I normally disable some of the services. With this Windows version, however, I noticed a couple of those are grayed out when I go to disable them and so I cannot change their default Automatic settings.

Specifically, "DNS Client" and" WinHTTP Web Proxy Auto Discovery" services are grayed out from being able to be disabled.

I had no issues disabling these on earlier version of Windows 10 Home (I think it was 16xx).

I tried stopping real-time anti-virus protection from Windows Defender but that did not help.

Questions:

(1) Why are some services grayed out from being disabled by admin?

(2) What's special about these 2 services now that they are grayed out?

(3) What's the best workaround?

I've seen one via registry changes (HKLM\SYSTEM\CurrentControlSet\Services\ -> find your service name (folder) -> set Start entry to 4) but have not tried it yet, as I figured maybe I must have these running now, unlike before.

In addition, "Xbox Game Monitoring" service is not grayed out but when trying to Disable it and clicking Ok or Apply button, I get error message saying "Access is denied". So again, unclear why that is.

Thanks!

Moved From:

Windows for home | Windows 10 | Settings

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

11 answers

Sort by: Most helpful
  1. Anonymous
    2018-03-12T00:04:41+00:00

    Hello All,

    I found the I was able to use regedit to disable dnscache.

    I will say that it is ridiculous to lose the ability to change this from the services control panel. I also tried disabling it using msconfig and even unchecking the box didn't disable it. 

    Here are the directions the finally worked.

    win+x run regedit

    Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Dnscache and

    locate Start registry key

    Change Startup type :

    Automatic -2

    Manual -3

    Disabled -4

    Automatic (Delayed Start) -2

    I found the directions for changing this registry value at this link

    https://computerstepbystep.com/dns\_client\_service.html

    There are nice screen shots provided on their webpage.

    The webpage and screen shots are for windows 7 however the directions for editing the registry  worked for Windows 10.

    Was this answer helpful?

    30+ people found this answer helpful.
    0 comments No comments
  2. Anonymous
    2018-01-04T20:25:53+00:00

    Meliton,

    This is a new issue. As the opening thread stated, even in previous versions of Windows 10 (1607) this used to work -- I just verified this. However, in 1709 the service is greyed out, and you can not control it from services.msc or by using "net stop dnscache" / "net start dnscache" which is a common operation in troubleshooting and just testing changes to DNS.

    As a network/system/dns administrator of 15+ years, I feel I have a relatively good idea of what this service does, and how it has been operated in the past. "By design" we used to be able to do this as administrators, and personally is an important task in my day to day job. You will find numerous articles explaining how to restart the service, and why you might want to. I have enough road blocks in resolving issues without Microsoft arbitrarily deciding to disable control of the DNS caching service. And until an explanation can be given, from my perspective it is arbitrary and unnecessary from Microsoft's/Window's position. In particular in this case we have a production server that is obtaining an IPv6 tunnel address (which doesn't work) and registering it in DNS. Since IPv6 is preferred over IPv4 by default, the first thing systems do when trying to reach the service is timeout and then revert to IPv4. Simply running "ipconfig /flushdns" as administrator is not enough to clear the discovered IPv4 preference for the particular host. It would be nice to have a consistent way to test if this is happening or not with a simple ping command, after disabling IPv6 on the server and cleaning up DNS after business hours (which is a necessity since they're production servers). This change is not wanted, acceptable, or as far as I can tell, necessary in any way.

    -Matt P.

    Was this answer helpful?

    30+ people found this answer helpful.
    0 comments No comments
  3. Anonymous
    2017-11-07T04:07:35+00:00

    Hi Mayra, I installed Windows 10 Pro and still having the same issue. I connected to internet and installed all windows updates and still the issue is there. I created a new Admin account as you suggested and that account has the same issue.

    While these 3 services are useful, I don't believe they are critical for running Windows. I want to run least number of services necessary (for security considerations) and have read recommendations to disable these services for such setups.

    Thanks!

    P.S. on a side note, I went through your links as well as other microsoft ones on these services:

    • DNS Client it seems is used to cache DNS entries - so disabling it may lead to slow downs in page loading but not much more then that in "regular" configurations using only TCP/IP (no netbios or multiple networks involved here). To quote one source, this service is a "target of attacks which poisons the cache with fake DNS entries" sometimes.
    • WinHTTP Proxy is useful when behind corporate firewall for web proxy but not so much for home setup it seems.
    • Xbox Game Monitoring ... well, I don't even have an XBox...

    Was this answer helpful?

    3 people found this answer helpful.
    0 comments No comments
  4. Anonymous
    2017-11-09T23:46:08+00:00

    DNS Client does more than cache DNS records, it gets them in the 1st place so disabling it limits internet access.

    Xbox code is used in a number of places, the most obvious being the Tile based menus. On balance there should be no reason to prevent it being disabled but Microsoft have blocked a number of things for "user experience" reasons but if the condition has changed with updates then presumably something will hang off that service.

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments No comments
  5. Anonymous
    2017-11-09T23:17:16+00:00

    Hello Justin,

    Disabling Windows services should only be done if you are familiar with the function of each services that you will modify.

    The reason why you are unable to disable the DNS Client, and WinHTTP Web Proxy Auto Discovery services is because it is by design that even the administrator will not be able to change its configuration.

    You may check this similar thread with a workaround regarding your concern. Please refer to the answer of the user named No.Compromise on September 10, 2009. Also, be advised that it requires a third-party tool to have this accomplished.

    Feel free to let us know if it works for you.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments