Internet Protocol security (IPsec) supports network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and replay protection. This service enforces IPsec policies created through the IP Security Policies snap-in or the command-line tool "netsh ipsec". If you stop this service, you may experience network connectivity issues if your policy requires that connections use IPsec. Also,remote management of Windows Firewall is not available when this service is stopped.
Most home networks do not use IPsec as it is used for remote VPN connections among other things.
If you use an external hardware firewall/gateway/router between your computer and the internet, do not use IPsec (VPN tunneling, etc) and Internet Connection Sharing (ICS), then this service and the following group of services can be disabled:
I highly recommend that you do not disable the Windows Firewall unless you use a different software firewall or external hardware solution, but the services listed above are all involved with each other.
Default Vista Home Basic: Automatic (Started)
Default Vista Home Premium: Automatic (Started)
Default Vista Business: Automatic (Started)
Default Vista Ultimate: Automatic (Started)
Safe Setting: Automatic
Service Name (registry): PolicyAgent
Display Name: IPsec Policy Agent
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
Account: Network Service
What service IPsec Policy Agent needs to function properly:
What other service require IPsec Policy Agent to function properly:
Welcome Guest!
"Have you tweaked your OS lately?"
Choose the look:
Windows Service Configurations!
Includes explanations of each service and advice on which services you can safely disable.