Windows.XP.in.a.Nutshell.1002005.2Ed [Electronic resources]

Alerter

svchost.exe

Notifies selected users and computers of administrative alerts. If the service is stopped, programs that use administrative alerts will not receive them. If this service is disabled, any services that explicitly depend on it will fail to start.

Application Layer Gateway Service

alg.exe

Provides support for third-party protocol plug-ins for Internet Connection Sharing and the Internet Connection Firewall.

Application Management

svchost.exe

Provides software installation services such as Assign, Publish, and Remove.

ATM ARP Client Protocol

atmarpc.sys

ATM ARP Client Protocol.

Automatic Updates

svchost.exe

Enables the download and installation of critical Windows updates. If the service is disabled, the operating system can be manually updated at the Windows Update web site.

Background Intelligent Transfer Service

svchost.exe

Uses idle network bandwidth to transfer data.

ClipBook

clipsrv.exe

Enables ClipBook Viewer to store information and share it with remote computers. If the service is stopped, ClipBook Viewer will not be able to share information with remote computers. If this service is disabled, any services that explicitly depend on it will fail to start.

COM+ Event System

svchost.exe

Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start.

COM+ System Application

dllhost.exe

Manages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.

Computer Browser

svchost.exe

Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start.

Cryptographic Services

svchost.exe

Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.

DHCP Client

svchost.exe

Manages network configuration by registering and updating IP addresses and DNS names.

Direct Parallel

raspti.sys

Direct Parallel.

Direct Parallel Link Driver

ptilink.sys

Direct Parallel Link Driver.

Distributed Link Tracking Client

svchost.exe

Maintains links between NTFS files within a computer or across computers in a network domain.

Distributed Transaction Coordinator

msdtc.exe

Coordinates transactions that span multiple resource managers, such as databases, message queues, and filesystems. If this service is stopped, these transactions will not occur. If this service is disabled, any services that explicitly depend on it will fail to start.

DNS Client

svchost.exe

Resolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start.

Error Reporting Service

svchost.exe

Allows error reporting for services and applications running in non-standard environments.

Event Log

services.exe

Enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped.

Fast User Switching Compatibility

svchost.exe

Provides management for applications that require assistance in a multiple user environment.

Fax

fxssvc.exe

Enables you to send and receive faxes, utilizing fax resources available on this computer or on the network.

Generic Packet Classifier

msgpc.sys

Generic Packet Classifier.

Help and Support

svchost.exe

Enables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.

Human Interface Device Access

svchost.exe

Enables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices. If this service is stopped, hot buttons controlled by this service will no longer function. If this service is disabled, any services that explicitly depend on it will fail to start.

IMAPI CD-Burning COM Service

imapi.exe

Manages CD recording using Image Mastering Applications Programming Interface (IMAPI). If this service is stopped, this computer will be unable to record CDs. If this service is disabled, any services that explicitly depend on it will fail to start.

Indexing Service

cisvc.exe

Indexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language.

Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS)

svchost.exe

Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network.

IP in IP Tunnel Driver

ipinip.sys

IP in IP Tunnel Driver.

IP Network Address Translator

ipnat.sys

IP Network Address Translator.

IP Traffic Filter Driver

ipfltdrv.sys

IP Traffic Filter Driver.

IPSEC Services

lsass.exe

Manages IP security policy and starts the ISAKMP/Oakley (IKE) and the IP security driver.

IPX Traffic Filter Driver

nwlnkflt.sys

IPX Traffic Filter Driver.

IPX Traffic Forwarder Driver

nwlnkfwd.sys

IPX Traffic Forwarder Driver.

Logical Disk Manager

svchost.exe

Detects and monitors new hard disk drives and sends disk volume information to Logical Disk Manager Administrative Service for configuration. If this service is stopped, dynamic disk status and configuration information may become out of date. If this service is disabled, any services that explicitly depend on it will fail to start.

Logical Disk Manager Administrative Service

dmadmin.exe

Configures hard disk drives and volumes. The service runs only for configuration processes and then stops.

Messenger

svchost.exe

Transmits net send and Alerter service messages between clients and servers. This service is not related to Windows Messenger. If this service is stopped, Alerter messages will not be transmitted. If this service is disabled, any services that explicitly depend on it will fail to start.

MS Software Shadow Copy Provider

dllhost.exe

Manages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start.

NDIS Usermode I/O Protocol

ndisuio.sys

NDIS Usermode I/O Protocol.

Net Logon

lsass.exe

Supports pass-through authentication of account logon events for computers in a domain.

NetBIOS Interface

netbios.sys

NetBIOS Interface.

NetMeeting Remote Desktop Sharing

mnmsrvc.exe

Enables an authorized user to access this computer remotely by using NetMeeting over a corporate intranet. If this service is stopped, remote Desktop sharing will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.

Network Connections

svchost.exe

Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections.

Network DDE

netdde.exe

Provides network transport and security for Dynamic Data Exchange (DDE) for programs running on the same computer or on different computers. If this service is stopped, DDE transport and security will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.

Network DDE DSDM

netdde.exe

Manages Dynamic Data Exchange (DDE) network shares. If this service is stopped, DDE network shares will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.

Network Location Awareness (NLA)

svchost.exe

Collects and stores network configuration and location information, and notifies applications when this information changes.

NT LM Security Support Provider

lsass.exe

Provides security to remote procedure call (RPC) programs that use transports other than named pipes.

Performance Logs and Alerts

smlogsvc.exe

Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start.

Plug and Play

services.exe

Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.

Portable Media Serial Number

svchost.exe

Retrieves the serial number of any portable music player connected to your computer.

Print Spooler

spoolsv.exe

Loads files to memory for later printing.

Protected Storage

lsass.exe

Provides protected storage for sensitive data, such as private keys, to prevent access by unauthorized services, processes, or users.

QoS RSVP

rsvp.exe

Provides network signaling and local traffic control setup functionality for QoS-aware programs and control applets.

RAS Asynchronous Media Driver

asyncmac.sys

RAS Asynchronous Media Driver.

Rdbss

rdbss.sys

Rdbss.

Remote Access Auto Connection Driver

rasacd.sys

Remote Access Auto Connection Driver.

Remote Access Auto Connection Manager

svchost.exe

Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address.

Remote Access Connection Manager

svchost.exe

Creates a network connection.

Remote Access IP ARP Driver

wanarp.sys

Remote Access IP ARP Driver.

Remote Access NDIS TAPI Driver

ndistapi.sys

Remote Access NDIS TAPI Driver.

Remote Access NDIS WAN Driver

ndiswan.sys

Remote Access NDIS WAN Driver.

Remote Access PPPOE Driver

raspppoe.sys

Remote Access PPPOE Driver.

Remote Desktop Help Session Manager

sessmgr.exe

Manages and controls Remote Assistance. If this service is stopped, Remote Assistance will be unavailable. Before stopping this service, see the Dependencies tab of the Properties dialog box.

Remote Procedure Call (RPC)

svchost

Provides the endpoint mapper and other miscellaneous RPC services.

Remote Procedure Call (RPC) Locator

locator.exe

Manages the RPC name service database.

Remote Registry

svchost.exe

Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start.

Routing and Remote Access

svchost.exe

Offers routing services to businesses in local area and wide area network environments.

Secdrv

secdrv.sys

SafeDisc driver.

Secondary Logon

svchost.exe

Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.

Security Accounts Manager

lsass.exe

Stores security information for local user accounts.

Server

svchost.exe

Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.

Shell Hardware Detection

svchost.exe

Provides notifications for AutoPlay hardware events.

Smart Card

SCardSvr.exe

Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start.

Smart Card Helper

SCardSvr.exe

Enables support for legacy nonplug and play smart-card readers used by this computer. If this service is stopped, this computer will not support legacy reader. If this service is disabled, any services that explicitly depend on it will fail to start.

SSDP Discovery Service

svchost.exe

Enables discovery of UPnP devices on your home network.

System Event Notification

svchost.exe

Tracks system events such as Windows logon, network, and power events. Notifies COM+ Event System subscribers of these events.

System Restore Service

svchost.exe

Performs system restore functions. To stop service, turn off System Restore from the System Restore tab in My Computer Properties.

Task Scheduler

svchost.exe

Enables a user to configure and schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start.

TCP/IP NetBIOS Helper

svchost.exe

Enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution.

TCP/IP Protocol Driver

tcpip.sys

TCP/IP Protocol Driver.

Telephony

svchost.exe

Provides Telephony API (TAPI) support for programs that control telephony devices and IP-based voice connections on the local computer and, through the LAN, on servers that are also running the service.

Telnet

tlntsvr.exe

Enables a remote user to log on to this computer and run programs, and supports various TCP/IP Telnet clients, including Unix-based and Windows-based computers. If this service is stopped, remote user access to programs might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.

Terminal Services

svchost.exe

Allows multiple users to be connected interactively to a machine as well as the display of Desktops and applications to remote computers. The underpinning of Remote Desktop (including RD for Administrators), Fast User Switching, Remote Assistance, and Terminal Server.

Themes

svchost.exe

Provides user experience theme management.

Uninterruptible Power Supply

ups.exe

Manages an uninterruptible power supply (UPS) connected to the computer.

Universal Plug and Play Device Host

svchost.exe

Provides support to host Universal Plug and Play devices.

Upload Manager

svchost.exe

Manages synchronous and asynchronous file transfers between clients and servers on the network. If this service is stopped, synchronous and asynchronous file transfers between clients and servers on the network will not occur. If this service is disabled, any services that explicitly depend on it will fail to start.

Volume Shadow Copy

vssvc.exe

Manages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start.

WAN Miniport (L2TP)

rasl2tp.sys

WAN Miniport (L2TP).

WAN Miniport (PPTP)

raspptp.sys

WAN Miniport (PPTP).

WebClient

svchost.exe

Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start.

WebDav Client Redirector

mrxdav.sys

WebDav Client Redirector.

Windows Audio

svchost.exe

Manages audio devices for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.

Windows Image Acquisition (WIA)

svchost.exe

Provides image acquisition services for scanners and cameras.

Windows Installer

msiexec.exe

Installs, repairs and removes software according to instructions contained in .MSI files.

Windows Management Instrumentation

svchost.exe

Provides a common interface and object model to access management information about operating systems, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.

Windows Management Instrumentation Driver Extensions

svchost.exe

Provides systems management information to and from drivers.

Windows Time

svchost.exe

Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.

Wireless Zero Configuration

svchost.exe

Provides automatic configuration for the 802.11 adapters.

WMI Performance Adapter

wmiapsrv.exe

Provides performance library information from WMI HiPerf providers.

Workstation

svchost.exe

Creates and maintains client network connections to remote servers. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.