Componentized Windows Services
The Windows operating system provides numerous services that may be required to support the capabilities of any given run-time image. This topic contains a summary that relates Windows services to the files that implement them, and to the components that provide those files. This is not an exhaustive listing.
Some Windows services run within the context of other processes, including the following:
- Service Host Process, which is contained in the svchost.exe file
- Windows Service Controller, which is contained in the services.exe file
- Local Security Authority Subsystem (LSASS), which is contained in the lsass.exe file
The Service Host Process is a generic host process for services that run from dynamic-link libraries. The Windows Service Controller is an application that starts, stops, and interacts with system services. LSASS manages Windows security mechanisms.
A Windows service that runs within the context of a process may have a dependency on that process or require that process to run.
The following table lists Windows Services and the components that provide them. For more information about the components, see the Component Help Reference in Windows XP Embedded Studio Help.
| Windows service | File name | Component name |
|---|---|---|
| Alerter | AlrSvc.dll
This service runs within the context of SvcHost.exe. |
Alerter Service |
| Application Layer Gateway Service | Alg.exe | Windows Firewall/Internet Connection Sharing (ICS) |
| Application Management | AppMgmts.dll
This service runs within the context of SvcHost.exe. |
Software Installation Group Policy Extension |
| ASP.NET State Service | Aspnet_state.exe | ASP.NET 1.1 |
| Automatic Updates | WuauServ.dll
This service runs within the context of SvcHost.exe. |
Windows Update Agent |
| Background Intelligent Transfer Service | Qmgr.dll
This service runs within the context of SvcHost.exe. |
Background Intelligent Transfer Service |
| Bluetooth Support Service (BthServ) | Bthci.dll | Class Install Library - Bluetooth |
| ClipBook | ClipSrv.exe | Accessories/System Tools |
| COM+ Event System | Es.dll
This service runs within the context of SvcHost.exe. |
COM+ Services |
| COM+ System Application | DllHost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} | COM+ Services |
| Computer Browser | Browser.dll
This service runs within the context of SvcHost.exe. |
Computer Browser Service |
| Cryptographic Services | CryptSvc.dll
This service runs within the context of SvcHost.exe. |
Core Certificate Services |
| Device Update Agent | Duagent.exe | Device Update Agent |
| DHCP Client | DhcpcSvc.dll
This service runs within the context of SvcHost.exe. |
DHCP Client Service |
| Distributed Transaction Coordinator | MsDtc.exe | Distributed Transaction Coordinator (MSDTC) |
| DNS Client | DHCPSvc.dll
This service runs within the context of SvcHost.exe. |
DHCP Client Service |
| Enhanced Write Filter | Ewfdll.dll | Enhanced Write Filter |
| Error Reporting Service | ErSvd.dll
This service runs within the context of SvcHost.exe. |
Error Reporting |
| Event Log | EventLog.dll
This service runs within the context of Services.exe. |
Event Log |
| Fast User Switching Compatibility | Shsvcs.dll
This service runs within the context of SvcHost.exe. |
User Interface |
| Help and Support | HelpSvc.exe
This service runs within the context of SvcHost.exe. |
Help and Support Services |
| Human Interface Device Access | HidServ.dll
This service runs within the context of SvcHost.exe. |
In Target Designer, all components under Hardware | Devices | Human Interface Devices |
| IIS Admin | INetInfo.exe | IIS Core Libraries |
| IMAPI CD-Burning COM Service | Imapi.exe | IMAPI - CD Burning |
| Indexing Service | CiSvc.exe | Indexing Service |
| Internet Connection Firewall (ICP) / Internet Connection Sharing | Fwcfg.dll
This service runs within the context of SvcHost.exe. |
Windows Firewall/Internet Connection Sharing (ICS) |
| Policy Agent (IPSec Services) | This service is installed by Nettcpip.inf.
This service runs within the context of Lsass.exe. |
IP Security Tools and User Interface |
| Logical Disk Manager | DmServer.dll
This service runs within the context of SvcHost.exe. |
Disk Management Services |
| Logical Disk Manager Administrative Service | DmAdmin.exe | Disk Management Services |
| Messenger | MsgSvc.dll
This service runs within the context of SvcHost.exe. |
Messenger Service (Net Send) |
| MS Software Shadow Copy Provider | DllHost.exe /Processid:{6C9935F1-B492-4EFD-95D2-E00161E84328} | COM Base |
| Net Logon | NetLogon.dll
This service runs within the context of Lsass.exe. |
NetLogon/NetJoin |
| NetMeeting Remote Desktop Sharing | MnmSrvc.exe | NetMeeting |
| Network Connections | Netman.dll
This service runs within the context of SvcHost.exe. |
Primitive: Netman |
| Network DDE | NetDDE.exe | Network Dynamic Data Exchange (NetDDE) |
| Network DDE DSDM | NetDDE.exe | Network Dynamic Data Exchange (NetDDE) |
| Network Location Awareness (NLA) | Mswsock.dll
This service runs within the context of SvcHost.exe. |
Network Location Awareness Service |
| Performance Logs and Alerts | SmLogSvc.exe | Performance Logs and Alerts Service |
| Portable Media Serial Number | Mspmsnsv.dll
This service runs within the context of SvcHost.exe. |
Windows Media Player 10 Technologies |
| Print Spooler | SpoolSv.exe | Print Spooler |
| Protected Storage | Pstorec.dll
This service runs within the context of Lsass.exe. |
Protected Storage Service |
| QoS RSVP | Rsvp.exe | Quality of Service RSVP |
| Remote Access Auto Connection Manager | Rasmans.dll
This service runs within the context of SvcHost.exe. |
Dial-Up Networking Common Libraries |
| Remote Access Connection Manager | SessMgr.exe
This service runs within the context of SvcHost.exe. |
Terminal Services Remote Assistance Component |
| Remote Desktop Help Session Manager | SessMgr.exe | Terminal Services Remote Assistance Component |
| Remote Procedure Call (RPC) | Rpcss.dll
This service runs within the context of SvcHost.exe. |
RPC Server |
| Remote Procedure Call (RPC) Locator | Locator.exe | RPC Named Service |
| Remote Registry | RegSvc.dll
This service runs within the context of SvcHost.exe. |
Remote Registry Service |
| Removable Storage | Ntmssvc.dll
This service runs within the context of SvcHost.exe. |
Removable Storage Service |
| Routing and Remote Access | Mprdim.dll
This service runs within the context of SvcHost.exe. |
Dial-up Server for Windows |
| Secondary Logon | SecLogon.dll
This service runs within the context of SvcHost.exe. |
RunAs Service |
| Security Accounts Manager | SamLib.dll
This service runs within the context of Lsass.exe. |
Security Accounts Manager Client |
| Server | SrvSvc.dll
This service runs within the context of SvcHost.exe. |
File Sharing |
| Shell Hardware Detection | ShSvcs.dll
This service runs within the context of SvcHost.exe. |
User Interface Core |
| Simple Mail Transfer Protocol (SMTP) | INetInfo.exe | IIS Core Libraries |
| Smart Card | SCardSvr.exe | Smart Card Subsystem |
| Smart Card Helper | SCardSvr.exe | Smart Card Subsystem |
| SSDP Discovery Service | SsdpSrv.dll
This service runs within the context of SvcHost.exe. |
Universal Plug & Play |
| System Event Notification | Sens.dll
This service runs within the context of SvcHost.exe. |
System Event Notification Service (SENS) |
| System Restore Service | SrSvc.dll
This service runs within the context of SvcHost.exe. |
System Restore Core |
| Task Scheduler | SchedSvc.dll
This service runs within the context of SvcHost.exe. |
Task Scheduler |
| TCP/IP NetBIOS Helper | ImhSvc.dll
This service runs within the context of SvcHost.exe. |
NetBIOS over TCP/IP |
| Telephony | TapiSrv.dll
This service runs within the context of SvcHost.exe. |
Telephony |
| Telnet | Tlntsvr.exe | Telnet Server |
| Terminal Services | TermSrv.dll
This service runs within the context of SvcHost.exe. |
Terminal Services Core |
| Themes | UxTheme.dll
This service runs within the context of SvcHost.exe. |
Primitive: Uxtheme |
| Uninterruptible Power Supply | Ups.exe | Uninterruptible Power Supply Service |
| Universal Plug and Play Device Host | UPnPHost.dll
This service runs within the context of SvcHost.exe. |
Universal Plug & Play Device Host |
| Volume Shadow Copy | VsSvc.exe | Volume Shadow Copy Service |
| WebClient | Webclnt.dll
This service runs within the context of SvcHost.exe. |
Webdav Client Redirector |
| Windows Audio | AudioSrv.dll
This service runs within the context of SvcHost.exe. |
Microsoft Audio Compression Manager (MME Core) |
| Windows Image Acquisition (WIA) | WIAservc.dll
This service runs within the context of SvcHost.exe. |
Windows Image Acquisition Core |
| Windows Installer | MsiExec.exe | Windows Installer Service |
| Windows Management Instrumentation | WMIsvc.dll
This service runs within the context of SvcHost.exe. |
WMI Core |
| Windows Management Instrumentation Driver Extensions | Advapi32.dll
This service runs within the context of SvcHost.exe. |
Windows API - Advanced |
| Windows Time | W32Time.dll
This service runs within the context of SvcHost.exe. |
Time Service Core |
| Wireless Zero Configuration | WzcSvc.dll
This service runs within the context of SvcHost.exe. |
Primitive: Wzcsvc |
| WMI Performance Adapter | WMIapsrv.exe | WMI Core |
| Workstation | WksSvc.dll
This service runs within the context of SvcHost.exe. |
Workstation Service |
| World Wide Web Publishing | INetInfo.exe | IIS Core Libraries |
Last updated on Wednesday, October 18, 2006
© 2006 Microsoft Corporation. All rights reserved.