The Connected User Experiences and Telemetry service enables features that support in-application and connected user experiences.

Provides User Account Control validation for the installation of Active X controls from the Internet and enables management of Active X control installation based on Group Policy settings.

This service is started on demand and if disabled the installation of Active X controls will behave according to default browser settings.

These defaults were chosen carefully for each service to balance performance, functionality, and security for typical customers.

However, some enterprise customers may prefer a more security-focused balance for their Windows PCs and servers, one that reduces their attack surface to the absolute minimum, and may therefore wish to fully disable all services that are not needed in their specific environments.

Manages the configuration and tracking of Component Object Model (COM) -based components.

If the service is stopped, most COM -based components will not function properly.

Microsoft recommends that customers disable the following services and their respective scheduled tasks on Windows Server 2016 with Desktop Experience: Services: (You can also access the information on all services detailed in this article by viewing the attached Microsoft Excel spreadsheet: Guidance on Disabling System Services on Windows Server 2016 with Desktop Experience) Microsoft recommends against applying policies to disable services that are not installed by default.

For all system services listed in this document, the two tables that follow offer an explanation of columns and Microsoft recommendations for enabling and disabling system services in Windows Server 2016 with Desktop Experience: Microsoft recommendation/advice about disabling this service on Windows Server 2016 in a typical, well-managed enterprise deployment and where the server is not being used as an end-user desktop replacement.

Stopping or disabling the BFE service will significantly reduce the security of the system.

It will also result in unpredictable behavior in IPsec management and firewall applications.

Copies user certificates and root certificates from smart cards into the current user's certificate store, detects when a smart card is inserted into a smart card reader, and if needed, installs the smart card Plug and Play minidriver.