Windows.XP.in.a.Nutshell.1002005.2Ed [Electronic resources] نسخه متنی

Alerter

svchost.exe

Notifies selected users and computers of administrative alerts. If
the service is stopped, programs that use administrative alerts will
not receive them. If this service is disabled, any services that
explicitly depend on it will fail to start.

Application Layer
Gateway Service

alg.exe

Provides support for third-party protocol plug-ins for Internet
Connection Sharing and the Internet Connection Firewall.

Application Management

svchost.exe

Provides software installation services such as Assign, Publish, and
Remove.

ATM ARP Client Protocol

atmarpc.sys

ATM ARP Client Protocol.

Automatic Updates

svchost.exe

Enables the download and installation of critical Windows updates. If
the service is disabled, the operating system can be manually updated
at the Windows Update web site.

Background
Intelligent Transfer Service

svchost.exe

Uses idle network bandwidth to transfer data.

ClipBook

clipsrv.exe

Enables ClipBook Viewer to store information and share it with remote
computers. If the service is stopped, ClipBook Viewer will not be
able to share information with remote computers. If this service is
disabled, any services that explicitly depend on it will fail to
start.

COM+ Event System

svchost.exe

Supports System Event Notification Service (SENS), which provides
automatic distribution of events to subscribing Component Object
Model (COM) components. If the service is stopped, SENS will close
and will not be able to provide logon and logoff notifications. If
this service is disabled, any services that explicitly depend on it
will fail to start.

COM+ System
Application

dllhost.exe

Manages the configuration and tracking of Component Object Model
(COM)+-based components. If the service is stopped, most COM+-based
components will not function properly. If this service is disabled,
any services that explicitly depend on it will fail to start.

Computer Browser

svchost.exe

Maintains an updated list of computers on the network and supplies
this list to computers designated as browsers. If this service is
stopped, this list will not be updated or maintained. If this service
is disabled, any services that explicitly depend on it will fail to
start.

Cryptographic
Services

svchost.exe

Provides three management services: Catalog Database Service, which
confirms the signatures of Windows files; Protected Root Service,
which adds and removes Trusted Root Certification Authority
certificates from this computer; and Key Service, which helps enroll
this computer for certificates. If this service is stopped, these
management services will not function properly. If this service is
disabled, any services that explicitly depend on it will fail to
start.

DHCP Client

svchost.exe

Manages network configuration by registering and updating IP
addresses and DNS names.

Direct Parallel

raspti.sys

Direct Parallel.

Direct Parallel
Link Driver

ptilink.sys

Direct Parallel Link Driver.

Distributed Link Tracking
Client

svchost.exe

Maintains links between NTFS files within a computer or across
computers in a network domain.

Distributed
Transaction Coordinator

msdtc.exe

Coordinates transactions that span multiple resource managers, such
as databases, message queues, and filesystems. If this service is
stopped, these transactions will not occur. If this service is
disabled, any services that explicitly depend on it will fail to
start.

DNS Client

svchost.exe

Resolves and caches Domain Name System (DNS) names for this computer.
If this service is stopped, this computer will not be able to resolve
DNS names and locate Active Directory domain controllers. If this
service is disabled, any services that explicitly depend on it will
fail to start.

Error Reporting Service

svchost.exe

Allows error reporting for services and applications running in
non-standard environments.

Event Log

services.exe

Enables event log messages issued by Windows-based programs and
components to be viewed in Event Viewer. This service cannot be
stopped.

Fast User Switching
Compatibility

svchost.exe

Provides management for applications that require assistance in a
multiple user environment.

Fax

fxssvc.exe

Enables you to send and receive faxes, utilizing fax resources
available on this computer or on the network.

Generic Packet
Classifier

msgpc.sys

Generic Packet Classifier.

Help and Support

svchost.exe

Enables Help and Support Center to run on this computer. If this
service is stopped, Help and Support Center will be unavailable. If
this service is disabled, any services that explicitly depend on it
will fail to start.

Human Interface Device Access

svchost.exe

Enables generic input access to Human Interface Devices (HID), which
activates and maintains the use of predefined hot buttons on
keyboards, remote controls, and other multimedia devices. If this
service is stopped, hot buttons controlled by this service will no
longer function. If this service is disabled, any services that
explicitly depend on it will fail to start.

IMAPI CD-Burning COM Service

imapi.exe

Manages CD recording using Image Mastering Applications Programming
Interface (IMAPI). If this service is stopped, this computer will be
unable to record CDs. If this service is disabled, any services that
explicitly depend on it will fail to start.

Indexing Service

cisvc.exe

Indexes contents and properties of files on local and remote
computers; provides rapid access to files through flexible querying
language.

Internet
Connection Firewall (ICF) /

Internet Connection Sharing
(ICS)

svchost.exe

Provides network address translation, addressing, name resolution
and/or intrusion prevention services for a home or small office
network.

IP in IP Tunnel Driver

ipinip.sys

IP in IP Tunnel Driver.

IP Network Address
Translator

ipnat.sys

IP Network Address Translator.

IP Traffic Filter Driver

ipfltdrv.sys

IP Traffic Filter Driver.

IPSEC Services

lsass.exe

Manages IP security policy and starts the ISAKMP/Oakley (IKE) and the
IP security driver.

IPX Traffic
Filter Driver

nwlnkflt.sys

IPX Traffic Filter Driver.

IPX Traffic
Forwarder Driver

nwlnkfwd.sys

IPX Traffic Forwarder Driver.

Logical Disk Manager

svchost.exe

Detects and monitors new hard disk drives and sends disk volume
information to Logical Disk Manager Administrative Service for
configuration. If this service is stopped, dynamic disk status and
configuration information may become out of date. If this service is
disabled, any services that explicitly depend on it will fail to
start.

Logical Disk
Manager Administrative Service

dmadmin.exe

Configures hard disk drives and volumes. The service runs only for
configuration processes and then stops.

Messenger

svchost.exe

Transmits net send and Alerter service messages between clients and
servers. This service is not related to Windows Messenger. If this
service is stopped, Alerter messages will not be transmitted. If this
service is disabled, any services that explicitly depend on it will
fail to start.

MS Software Shadow Copy Provider

dllhost.exe

Manages software-based volume shadow copies taken by the Volume
Shadow Copy service. If this service is stopped, software-based
volume shadow copies cannot be managed. If this service is disabled,
any services that explicitly depend on it will fail to start.

NDIS Usermode I/O Protocol

ndisuio.sys

NDIS Usermode I/O Protocol.

Net Logon

lsass.exe

Supports pass-through authentication of account logon events for
computers in a domain.

NetBIOS
Interface

netbios.sys

NetBIOS Interface.

NetMeeting Remote
Desktop Sharing

mnmsrvc.exe

Enables an authorized user to access this computer remotely by using
NetMeeting over a corporate intranet. If this service is stopped,
remote Desktop sharing will be unavailable. If this service is
disabled, any services that explicitly depend on it will fail to
start.

Network Connections

svchost.exe

Manages objects in the Network and Dial-Up Connections folder, in
which you can view both local area network and remote connections.

Network DDE

netdde.exe

Provides network transport and security for Dynamic Data Exchange
(DDE) for programs running on the same computer or on different
computers. If this service is stopped, DDE transport and security
will be unavailable. If this service is disabled, any services that
explicitly depend on it will fail to start.

Network DDE
DSDM

netdde.exe

Manages Dynamic Data Exchange (DDE) network shares. If this service
is stopped, DDE network shares will be unavailable. If this service
is disabled, any services that explicitly depend on it will fail to
start.

Network Location Awareness
(NLA)

svchost.exe

Collects and stores network configuration and location information,
and notifies applications when this information changes.

NT LM Security
Support Provider

lsass.exe

Provides security to remote procedure call (RPC) programs that use
transports other than named pipes.

Performance
Logs and Alerts

smlogsvc.exe

Collects performance data from local or remote computers based on
preconfigured schedule parameters, then writes the data to a log or
triggers an alert. If this service is stopped, performance
information will not be collected. If this service is disabled, any
services that explicitly depend on it will fail to start.

Plug and
Play

services.exe

Enables a computer to recognize and adapt to hardware changes with
little or no user input. Stopping or disabling this service will
result in system instability.

Portable Media Serial Number

svchost.exe

Retrieves the serial number of any portable music player connected to
your computer.

Print Spooler

spoolsv.exe

Loads files to memory for later printing.

Protected
Storage

lsass.exe

Provides protected storage for sensitive data, such as private keys,
to prevent access by unauthorized services, processes, or users.

QoS RSVP

rsvp.exe

Provides network signaling and local traffic control setup
functionality for QoS-aware programs and control applets.

RAS
Asynchronous Media Driver

asyncmac.sys

RAS Asynchronous Media Driver.

Rdbss

rdbss.sys

Rdbss.

Remote Access Auto Connection Driver

rasacd.sys

Remote Access Auto Connection Driver.

Remote Access Auto
Connection Manager

svchost.exe

Creates a connection to a remote network whenever a program
references a remote DNS or NetBIOS name or address.

Remote Access Connection Manager

svchost.exe

Creates a network connection.

Remote
Access IP ARP Driver

wanarp.sys

Remote Access IP ARP Driver.

Remote Access NDIS TAPI Driver

ndistapi.sys

Remote Access NDIS TAPI Driver.

Remote Access NDIS WAN Driver

ndiswan.sys

Remote Access NDIS WAN Driver.

Remote Access PPPOE Driver

raspppoe.sys

Remote Access PPPOE Driver.

Remote Desktop Help Session Manager

sessmgr.exe

Manages and controls Remote Assistance. If this service is stopped,
Remote Assistance will be unavailable. Before stopping this service,
see the Dependencies tab of the Properties dialog box.

Remote Procedure Call (RPC)

svchost

Provides the endpoint mapper and other miscellaneous RPC services.

Remote Procedure
Call (RPC) Locator

locator.exe

Manages the RPC name service database.

Remote Registry

svchost.exe

Enables remote users to modify registry settings on this computer. If
this service is stopped, the registry can be modified only by users
on this computer. If this service is disabled, any services that
explicitly depend on it will fail to start.

Routing and Remote Access

svchost.exe

Offers routing services to businesses in local area and wide area
network environments.

Secdrv

secdrv.sys

SafeDisc driver.

Secondary Logon

svchost.exe

Enables starting processes under alternate credentials. If this
service is stopped, this type of logon access will be unavailable. If
this service is disabled, any services that explicitly depend on it
will fail to start.

Security Accounts
Manager

lsass.exe

Stores security information for local user accounts.

Server

svchost.exe

Supports file, print, and named-pipe sharing over the network for
this computer. If this service is stopped, these functions will be
unavailable. If this service is disabled, any services that
explicitly depend on it will fail to start.

Shell Hardware Detection

svchost.exe

Provides notifications for AutoPlay hardware events.

Smart Card

SCardSvr.exe

Manages access to smart cards read by this computer. If this service
is stopped, this computer will be unable to read smart cards. If this
service is disabled, any services that explicitly depend on it will
fail to start.

Smart Card
Helper

SCardSvr.exe

Enables support for legacy nonplug and play smart-card readers used
by this computer. If this service is stopped, this computer will not
support legacy reader. If this service is disabled, any services that
explicitly depend on it will fail to start.

SSDP Discovery Service

svchost.exe

Enables discovery of UPnP devices on your home network.

System Event Notification

svchost.exe

Tracks system events such as Windows logon, network, and power
events. Notifies COM+ Event System subscribers of these events.

System Restore Service

svchost.exe

Performs system restore functions. To stop service, turn off System
Restore from the System Restore tab in My Computer
Properties.

Task Scheduler

svchost.exe

Enables a user to configure and schedule automated tasks on this
computer. If this service is stopped, these tasks will not be run at
their scheduled times. If this service is disabled, any services that
explicitly depend on it will fail to start.

TCP/IP NetBIOS Helper

svchost.exe

Enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS
name resolution.

TCP/IP Protocol Driver

tcpip.sys

TCP/IP Protocol Driver.

Telephony

svchost.exe

Provides Telephony API (TAPI) support for programs that control
telephony devices and IP-based voice connections on the local
computer and, through the LAN, on servers that are also running the
service.

Telnet

tlntsvr.exe

Enables a remote user to log on to this computer and run programs,
and supports various TCP/IP Telnet clients, including Unix-based and
Windows-based computers. If this service is stopped, remote user
access to programs might be unavailable. If this service is disabled,
any services that explicitly depend on it will fail to start.

Terminal Services

svchost.exe

Allows multiple users to be connected interactively to a machine as
well as the display of Desktops and applications to remote computers.
The underpinning of Remote Desktop (including RD for Administrators),
Fast User Switching, Remote Assistance, and Terminal Server.

Themes

svchost.exe

Provides user experience theme management.

Uninterruptible Power Supply

ups.exe

Manages an uninterruptible power supply (UPS) connected to the
computer.

Universal Plug and Play
Device Host

svchost.exe

Provides support to host Universal Plug and Play devices.

Upload Manager

svchost.exe

Manages synchronous and asynchronous file transfers between clients
and servers on the network. If this service is stopped, synchronous
and asynchronous file transfers between clients and servers on the
network will not occur. If this service is disabled, any services
that explicitly depend on it will fail to start.

Volume Shadow Copy

vssvc.exe

Manages and implements Volume Shadow Copies used for backup and other
purposes. If this service is stopped, shadow copies will be
unavailable for backup and the backup may fail. If this service is
disabled, any services that explicitly depend on it will fail to
start.

WAN Miniport
(L2TP)

rasl2tp.sys

WAN Miniport (L2TP).

WAN
Miniport (PPTP)

raspptp.sys

WAN Miniport (PPTP).

WebClient

svchost.exe

Enables Windows-based programs to create, access, and modify
Internet-based files. If this service is stopped, these functions
will not be available. If this service is disabled, any services that
explicitly depend on it will fail to start.

WebDav Client Redirector

mrxdav.sys

WebDav Client Redirector.

Windows Audio

svchost.exe

Manages audio devices for Windows-based programs. If this service is
stopped, audio devices and effects will not function properly. If
this service is disabled, any services that explicitly depend on it
will fail to start.

Windows Image Acquisition
(WIA)

svchost.exe

Provides image acquisition services for scanners and cameras.

Windows
Installer

msiexec.exe

Installs, repairs and removes software according to instructions
contained in .MSI files.

Windows
Management Instrumentation

svchost.exe

Provides a common interface and object model to access management
information about operating systems, devices, applications and
services. If this service is stopped, most Windows-based software
will not function properly. If this service is disabled, any services
that explicitly depend on it will fail to start.

Windows
Management Instrumentation Driver Extensions

svchost.exe

Provides systems management information to and from drivers.

Windows Time

svchost.exe

Maintains date and time synchronization on all clients and servers in
the network. If this service is stopped, date and time
synchronization will be unavailable. If this service is disabled, any
services that explicitly depend on it will fail to start.

Wireless Zero Configuration

svchost.exe

Provides automatic configuration for the 802.11 adapters.

WMI Performance Adapter

wmiapsrv.exe

Provides performance library information from WMI HiPerf providers.

Workstation

svchost.exe

Creates and maintains client network connections to remote servers.
If this service is stopped, these connections will be unavailable. If
this service is disabled, any services that explicitly depend on
it will fail to start.