| Application Experience Service |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\system32\svchost.exe -k netsvcs |
SeTcbPrivilege
SeImpersonatePrivilege |
| Executable File Name |
c:\windows\system32\aelupsvc.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AeLookupSvc |
| Full Description |
Processes application compatibility cache requests for applications as they are launched |
| Application Information Service |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\system32\svchost.exe -k netsvcs |
SeAssignPrimaryTokenPrivilege
SeIncreaseQuotaPrivilege
SeTcbPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeChangeNotifyPrivilege
SeImpersonatePrivilege |
| Executable File Name |
c:\windows\system32\appinfo.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Appinfo |
| Full Description |
Facilitates the running of interactive applications with additional administrative privileges. If this service is stopped, users will be unable to launch applications with the additional administrative privileges they may require to perform desired user |
| Software installation Service |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\system32\svchost.exe -k netsvcs |
SeCreateGlobalPrivilege
SeImpersonatePrivilege
SeIncreaseQuotaPrivilege
SeShutdownPrivilege
SeTakeOwnershipPrivilege |
| Executable File Name |
c:\windows\system32\appmgmts.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AppMgmt |
| Full Description |
Processes installation, removal, and enumeration requests for software deployed through Group Policy. If the service is disabled, users will be unable to install, remove, or enumerate software deployed through Group Policy. If this service is disabled, an |
| BDE Service |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\System32\svchost.exe -k netsvcs |
SeChangeNotifyPrivilege
SeImpersonatePrivilege |
| Executable File Name |
c:\windows\system32\bdesvc.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BDESVC |
| Full Description |
BDESVC hosts the BitLocker Drive Encryption service. BitLocker Drive Encryption provides secure startup for the operating system, as well as full volume encryption for OS, fixed or removable volumes. This service allows BitLocker to prompt users for vario |
| Background Intelligent Transfer Service |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\System32\svchost.exe -k netsvcs |
SeCreateGlobalPrivilege
SeImpersonatePrivilege
SeTcbPrivilege
SeAssignPrimaryTokenPrivilege
SeIncreaseQuotaPrivilege |
| Executable File Name |
c:\windows\system32\qmgr.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS |
| Full Description |
Transfers files in the background using idle network bandwidth. If the service is disabled, then any applications that depend on BITS, such as Windows Update or MSN Explorer, will be unable to automatically download programs and other information. |
| Computer Browser Service DLL |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\System32\svchost.exe -k netsvcs |
|
| Executable File Name |
c:\windows\system32\browser.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser |
| Full Description |
Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on |
| Microsoft Smartcard Certificate Propagation Service |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\system32\svchost.exe -k netsvcs |
SeCreateGlobalPrivilege
SeTcbPrivilege
SeChangeNotifyPrivilege
SeImpersonatePrivilege
SeTakeOwnershipPrivilege
SeSecurityPrivilege |
| Executable File Name |
c:\windows\system32\certprop.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CertPropSvc |
| Full Description |
Copies user certificates and root certificates from smart cards into the current users certificate store, detects when a smart card is inserted into a smart card reader, and, if needed, installs the smart card Plug and Play minidriver. |
| Microsoft EAPHost service |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\System32\svchost.exe -k netsvcs |
SeTcbPrivilege
SeDebugPrivilege
SeImpersonatePrivilege |
| Executable File Name |
c:\windows\system32\eapsvc.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EapHost |
| Full Description |
The Extensible Authentication Protocol (EAP) service provides network authentication in such scenarios as 802.1x wired and wireless, VPN, and Network Access Protection (NAP). EAP also provides application programming interfaces (APIs) that are used by ne |
| Group Policy Client API |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\system32\svchost.exe -k netsvcs |
SeImpersonatePrivilege
SeTcbPrivilege
SeTakeOwnershipPrivilege
SeIncreaseQuotaPrivilege
SeAssignPrimaryTokenPrivilege
SeSecurityPrivilege
SeChangeNotifyPrivilege
SeCreatePermanentPrivilege
SeShutdownPrivilege
SeLoadDriverPrivilege
SeRestorePrivilege
SeBackupPrivilege |
| Executable File Name |
c:\windows\system32\gpapi.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gpsvc |
| Full Description |
The service is responsible for applying settings configured by administrators for the computer and users through the Group Policy component. If the service is stopped or disabled, the settings will not be applied and applications and components will not b |
| Key Management Service |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\System32\svchost.exe -k netsvcs |
SeChangeNotifyPrivilege
SeImpersonatePrivilege |
| Executable File Name |
c:\windows\system32\kmsvc.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hkmsvc |
| Full Description |
Provides X.509 certificate and key management services for the Network Access Protection Agent (NAPAgent). Enforcement technologies that use X.509 certificates may not function properly without this service |
| IKE extension |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\system32\svchost.exe -k netsvcs |
SeAuditPrivilege
SeImpersonatePrivilege
SeTcbPrivilege
SeDebugPrivilege |
| Executable File Name |
c:\windows\system32\ikeext.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IKEEXT |
| Full Description |
The IKEEXT service hosts the Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) keying modules. These keying modules are used for authentication and key exchange in Internet Protocol security (IPsec). Stopping or disabling the IKEEXT |
| Server Service DLL |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\system32\svchost.exe -k netsvcs |
SeChangeNotifyPrivilege
SeImpersonatePrivilege
SeAuditPrivilege
SeLoadDriverPrivilege |
| Executable File Name |
c:\windows\system32\srvsvc.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer |
| Full Description |
Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. |
| Multimedia Class Scheduler Service |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\system32\svchost.exe -k netsvcs |
SeIncreaseBasePriorityPrivilege
SeImpersonatePrivilege |
| Executable File Name |
c:\windows\system32\mmcss.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MMCSS |
| Full Description |
Enables relative prioritization of work based on system-wide task priorities. This is intended mainly for multimedia applications. If this service is stopped, individual tasks resort to their default priority. |
| iSCSI Discovery api |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\system32\svchost.exe -k netsvcs |
SeAuditPrivilege
SeChangeNotifyPrivilege
SeCreateGlobalPrivilege
SeCreatePermanentPrivilege
SeImpersonatePrivilege
SeTcbPrivilege |
| Executable File Name |
c:\windows\system32\iscsidsc.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSiSCSI |
| Full Description |
Manages Internet SCSI (iSCSI) sessions from this computer to remote iSCSI target devices. If this service is stopped, this computer will not be able to login or access iSCSI targets. If this service is disabled, any services that explicitly depend on it w |
| ProfSvc |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\system32\svchost.exe -k netsvcs |
SeBackupPrivilege
SeRestorePrivilege
SeTakeOwnershipPrivilege
SeDebugPrivilege
SeImpersonatePrivilege |
| Executable File Name |
c:\windows\system32\profsvc.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ProfSvc |
| Full Description |
This service is responsible for loading and unloading user profiles. If this service is stopped or disabled, users will no longer be able to successfully logon or logoff, applications may have problems getting to users data, and components registered to |
| Remote Access AutoDial Manager |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\System32\svchost.exe -k netsvcs |
SeImpersonatePrivilege
SeTcbPrivilege
SeIncreaseQuotaPrivilege
SeChangeNotifyPrivilege
SeCreateGlobalPrivilege
SeAssignPrimaryTokenPrivilege |
| Executable File Name |
c:\windows\system32\rasauto.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasAuto |
| Full Description |
Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address. |
| Remote Access Connection Manager |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\System32\svchost.exe -k netsvcs |
SeImpersonatePrivilege
SeIncreaseQuotaPrivilege
SeTcbPrivilege
SeChangeNotifyPrivilege
SeCreateGlobalPrivilege
SeAssignPrimaryTokenPrivilege |
| Executable File Name |
c:\windows\system32\rasmans.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan |
| Full Description |
Manages dial-up and virtual private network (VPN) connections from this computer to the Internet or other remote networks. If this service is disabled, any services that explicitly depend on it will fail to start. |
| Dynamic Interface Manager |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\System32\svchost.exe -k netsvcs |
SeChangeNotifyPrivilege
SeLoadDriverPrivilege
SeImpersonatePrivilege
SeAuditPrivilege |
| Executable File Name |
c:\windows\system32\mprdim.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess |
| Full Description |
Offers routing services to businesses in local area and wide area network environments. |
| Task Scheduler Service |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\system32\svchost.exe -k netsvcs |
SeIncreaseQuotaPrivilege
SeChangeNotifyPrivilege
SeAuditPrivilege
SeImpersonatePrivilege
SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeRestorePrivilege |
| Executable File Name |
c:\windows\system32\schedsvc.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Schedule |
| Full Description |
Enables a user to configure and schedule automated tasks on this computer. The service also hosts multiple Windows system-critical tasks. If this service is stopped or disabled, these tasks will not be run at their scheduled times. If this service is disa |
| Microsoft Smartcard Certificate Propagation Service |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\system32\svchost.exe -k netsvcs |
SeCreateGlobalPrivilege
SeTcbPrivilege
SeChangeNotifyPrivilege
SeImpersonatePrivilege |
| Executable File Name |
c:\windows\system32\certprop.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SCPolicySvc |
| Full Description |
Allows the system to be configured to lock the user desktop upon smart card removal. |
| Secondary Logon Service DLL |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\system32\svchost.exe -k netsvcs |
SeTcbPrivilege
SeRestorePrivilege
SeBackupPrivilege
SeAssignPrimaryTokenPrivilege
SeIncreaseQuotaPrivilege
SeImpersonatePrivilege |
| Executable File Name |
c:\windows\system32\seclogon.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\seclogon |
| Full Description |
Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. |
| System Event Notification Service (SENS) |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\system32\svchost.exe -k netsvcs |
SeAuditPrivilege
SeChangeNotifyPrivilege
SeCreateGlobalPrivilege
SeImpersonatePrivilege
SeTcbPrivilege |
| Executable File Name |
c:\windows\system32\sens.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SENS |
| Full Description |
Monitors system events and notifies subscribers to COM+ Event System of these events. |
| Remote Desktop Configuration service |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\System32\svchost.exe -k netsvcs |
SeBackupPrivilege
SeRestorePrivilege
SeTakeOwnershipPrivilege
SeImpersonatePrivilege |
| Executable File Name |
c:\windows\system32\sessenv.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SessionEnv |
| Full Description |
Remote Desktop Configuration service (RDCS) is responsible for all Remote Desktop Services and Remote Desktop related configuration and session maintenance activities that require SYSTEM context. These include per-session temporary folders, RD themes, and |
| Microsoft NAT Helper Components |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\System32\svchost.exe -k netsvcs |
SeChangeNotifyPrivilege
SeCreateGlobalPrivilege
SeImpersonatePrivilege
SeLoadDriverPrivilege
SeTakeOwnershipPrivilege |
| Executable File Name |
c:\windows\system32\ipnathlp.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess |
| Full Description |
Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network. |
| Windows Shell Services Dll |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\System32\svchost.exe -k netsvcs |
SeImpersonatePrivilege |
| Executable File Name |
c:\windows\system32\shsvcs.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ShellHWDetection |
| Full Description |
Provides notifications for AutoPlay hardware events. |
| Windows Shell Theme Service Dll |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\System32\svchost.exe -k netsvcs |
SeAssignPrimaryTokenPrivilege
SeDebugPrivilege
SeImpersonatePrivilege |
| Executable File Name |
c:\windows\system32\themeservice.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Themes |
| Full Description |
Provides user experience theme management. |
| Problem Reports and Solutions |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\System32\svchost.exe -k netsvcs |
SeImpersonatePrivilege
SeTcbPrivilege |
| Executable File Name |
c:\windows\system32\wercplsupport.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wercplsupport |
| Full Description |
This service provides support for viewing, sending and deletion of system-level problem reports for the Problem Reports and Solutions control panel. |
| WMI |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\system32\svchost.exe -k netsvcs |
|
| Executable File Name |
c:\windows\system32\wbem\wmisvc.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Winmgmt |
| Full Description |
Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any |
| Windows Update Agent |
| Svchost Group |
netsvcs |
Privileges |
| Svchost Command |
C:\Windows\system32\svchost.exe -k netsvcs |
SeAuditPrivilege
SeCreateGlobalPrivilege
SeCreatePageFilePrivilege
SeTcbPrivilege
SeAssignPrimaryTokenPrivilege
SeImpersonatePrivilege
SeIncreaseQuotaPrivilege
SeShutdownPrivilege |
| Executable File Name |
c:\windows\system32\wuaueng.dll |
| Registry Key |
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv |
| Full Description |
Enables the detection, download, and installation of updates for Windows and other programs. If this service is disabled, users of this computer will not be able to use Windows Update or its automatic updating feature, and programs will not be able to use |
