Appendix F. List of Default Services


Table F-1 contains a list of the default services you'll find installed on a Windows Server 2003 system and their default startup type and status.

Table F-1. List of default services in Windows Server 2003

Display name

Service name

Startup type/status

Description

Alerter

alerter

Disabled/Stopped

Notifies selected users and computers of administrative alerts. If the service is stopped, programs that use administrative alerts will not receive them.

Application Layer Gateway Service

alg

Manual/Stopped

Provides support for application-level protocol plug-ins and enables network connectivity.

Application Management

appmgmt

Manual/Stopped

Processes installation, removal, and enumeration requests for Active Directory IntelliMirror group policy programs. If the service is disabled, users will be unable to install, remove, or enumerate any IntelliMirror programs.

Automatic Updates

wuauserv

Automatic/Started

Enables the download and installation of critical Windows updates. If the service is disabled, the operating system can be manually updated at the Windows Update Web site.

Background Intelligent Transfer Service

bits

Manual/Started

Transfers data between clients and servers in the background. If BITS is disabled, features such as Windows Update will not work correctly.

ClipBook

clipsrv

Disabled/Stopped

Enables ClipBook Viewer to store information and share it with remote computers.

COM+ Event System

eventsystem

Manual/Started

Supports System Event Notification Service (SENS), which distributes events to subscribing Component Object Model (COM) components.

COM+ System Application

comsysapp

Manual/Stopped

Manages the configuration and tracking of COM+-based components. If the service is stopped, most COM+-based components will not function properly.

Computer Browser

browser

Automatic/Started

Maintains an updated list of computers on the local network and supplies this list to computers designated as browsers.

Cryptographic Services

cryptsvc

Automatic/Started

Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates.

DHCP Client

dhcp

Automatic/Started

Registers and updates IP addresses and Domain Name System (DNS) records for this computer. If this service is stopped, this computer will not receive dynamic IP addresses and DNS updates.

Distributed File System

dfs

Automatic/Started

Integrates disparate file shares into a single, logical namespace and manages these logical volumes distributed across a local or wide area network.

Distributed Link Tracking Client

trkwks

Automatic/Started

Enables client programs to track linked files that are moved within an NTFS volume, to another NTFS volume on the same computer, or to an NTFS volume on another computer.

Distributed Link Tracking Server

trksvr

Disabled/Stopped

Enables the Distributed Link Tracking Client service within the same domain to provide more reliable and efficient maintenance of links within the domain.

Distributed Transaction Coordinator

msdtc

Automatic/Started

Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems.

DNS Client

dnscache

Automatic/Started

Resolves and caches DNS names for this computer.

Error Reporting Service

ersvc

Automatic/Started

Collects, stores, and reports unexpected application crashes to Microsoft. If this service is stopped, Error Reporting will occur only for kernel faults and some types of user mode faults.

Event Log

eventlog

Automatic/Started

Enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped.

File Replication

ntfrs

Manual/Stopped

Allows files to be automatically copied and maintained simultaneously on multiple servers.

Help and Support

helpsvc

Automatic/Started

Enables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable.

HTTP SSL

httpfilter

Manual/Stopped

Implements the secure hypertext transfer protocol (HTTPS) for the HTTP service, using the Secure Socket Layer (SSL).

Human Interface Device Access

hidserv

Disabled/Stopped

Enables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices. If this service is stopped, hot buttons controlled by this service will no longer function.

IMAPI CD-Burning COM Service

imapiservice

Disabled/Stopped

Manages CD recording using Image Mastering Applications Programming Interface (IMAPI). If this service is stopped, this computer will be unable to record CDs.

Indexing Service

cisvc

Disabled/Stopped

Indexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language.

Internet Connection Firewall (ICF)/Internet Connection Sharing (ICS)

sharedaccess

Disabled/Stopped

Provides network address translation, addressing, name resolution, and/or intrusion prevention services for a home or small office network.

Intersite Messaging

ismserv

Disabled/Stopped

Controls the exchange of messages (i.e., replication) between domain controllers using either remote procedure call (RPC) or SMTP.

IPSEC Services

policyagent

Automatic/Started

Provides end-to-end security between clients and servers on TCP/IP networks.

Kerberos Key Distribution Center

kdc

Disabled/Stopped

On domain controllers, this service enables users to log on to the network using the Kerberos authentication protocol. If this service is stopped on a domain controller, users will be unable to log on to the network using that DC.

License Logging

licenseservice

Disabled/Stopped

Monitors and records client access licensing for portions of the operating system (such as IIS, Terminal Server, and File/Print) as well as products that aren't a part of the OS, such as SQL and Exchange Server. If this service is stopped, licensing will be enforced, but will not be monitored.

Logical Disk Manager

dmserver

Automatic/Started

Detects and monitors new hard disk drives and sends disk volume information to Logical Disk Manager Administrative Service for configuration. If this service is stopped, dynamic disk status and configuration information may become out of date.

Logical Disk Manager Administrative Service

dmadmin

Manual/Stopped

Configures hard disk drives and volumes.

Messenger

messenger

Disabled/Stopped

Transmits net send and Alerter service messages between clients and servers. This service is not related to Windows Messenger.

Microsoft Software Shadow Copy Provider

swprv

Manual/Stopped

Manages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed.

Net Logon

netlogon

Manual/Stopped

Maintains a secure channel between this computer and the domain controller for authenticating users and services. If this service is stopped, the computer may not authenticate users and services and the domain controller cannot register DNS records.

NetMeeting Remote Desktop Sharing

mnmsrvc

Disabled/Stopped

Enables an authorized user to access this computer remotely by using NetMeeting over a corporate intranet. If this service is stopped, remote desktop sharing will be unavailable.

Network Connections

netman

Manual/Started

Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections. If this service is disabled, you will not be able to view local area network and remote connections.

Network DDE

netdde

Disabled/Stopped

Provides network transport and security for DDE for programs running on the same computer or on different computers. If this service is stopped, DDE transport and security will be unavailable.

Network DDE DSDM

netddedsdm

Disabled/Stopped

Manages Dynamic Data Exchange (DDE) network shares. If this service is stopped, DDE network shares will be unavailable.

Network Location Awareness (NLA)

nla

Manual/Started

Collects and stores network configuration and location information, and notifies applications when this information changes.

NT LM Security Support Provider

ntlmssp

Manual/Stopped

Provides security to RPC programs that use transports other than named pipes.

Performance Logs and Alerts

sysmonlog

Manual/Stopped

Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected.

Plug and Play

plugplay

Automatic/Started

Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.

Portable Media Serial Number

wmdmpmsn

Manual/Stopped

Retrieves the serial number of any portable media player connected to this computer. If this service is stopped, protected content might not be downloaded to the device.

Print Spooler

spooler

Automatic/Started

Manages all local and network print queues and controls all printing jobs. If this service is stopped, printing on the local machine will be unavailable.

Protected Storage

protectedstorage

Automatic/Started

Protects storage of sensitive information, such as private keys, and prevents access by unauthorized services, processes, or users. If this service is stopped, protected storage will be unavailable.

Remote Access Auto Connection Manager

rasauto

Manual/Stopped

Detects unsuccessful attempts to connect to a remote network or computer and provides alternative methods for connection. If this service is stopped, users will need to manually connect.

Remote Access Connection Manager

rasman

Manual/Stopped

Manages dial-up and virtual private network (VPN) connections from this computer to the Internet or other remote networks. If this service is stopped, the operating system might not function properly.

Remote Desktop Help Session Manager

rdsessmgr

Manual/Stopped

Manages and controls Remote Assistance. If this service is stopped, Remote Assistance will be unavailable.

Remote Procedure Call (RPC)

rpcss

Automatic/Started

Serves as the endpoint mapper and COM Service Control Manager. If this service is stopped or disabled, programs using COM or RPC services will not function properly.

Remote Procedure Call (RPC) Locator

rpclocator

Manual/Stopped

Enables RPC clients using the RpcNs* family of APIs to locate RPC servers. If this service is stopped or disabled, RPC clients using RpcNs* APIs may be unable to locate servers or fail to start.

Remote Registry

remoteregistry

Automatic/Started

Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on the local computer.

Removable Storage

nlmssvc

Manual/Stopped

Manages and catalogs removable media and operates automated removable media devices. If this service is stopped, programs that are dependent on Removable Storage, such as Backup and Remote Storage, will operate more slowly.

Resultant Set of Policy Provider

rsopprov

Manual/Stopped

Enables a user to connect to a remote computer, access the Windows Management Instrumentation database for that computer, and either verify the current Group Policy settings made for the computer or check settings before they are applied. If this service is stopped, remote verification will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.

Routing and Remote Access

remoteaccess

Disabled/Stopped

Enables multiprotocol LAN-to-LAN, LAN-to-WAN, VPN, and network address translation (NAT) routing services for clients and servers on this network.

Secondary Logon

seclogon

Automatic/Started

Lets processes start under alternate credentials. If this service is stopped, this type of logon access will be unavailable.

Security Accounts Manager

samss

Automatic/Started

The startup of this service signals other services that the Security Accounts Manager (SAM) is ready to accept requests. Disabling this service will prevent other services in the system from being notified when the SAM is ready, which may in turn prevent those services from starting correctly.

Server

lanmanserver

Automatic/Started

Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable.

Shell Hardware Detection

shellhwdetection

Automatic/Started

Provides notifications for AutoPlay hardware events.

Smart Card

scardsvr

Manual/Stopped

Manages access to smart cards read by this computer. If this service is stopped, the computer will be unable to read smart cards.

Special Administration Console Helper

sacsvr

Manual/Stopped

Allows administrators to remotely access a command prompt using Emergency Management Services.

System Event Notification

sens

Automatic/Started

Monitors system events and notifies subscribers to COM+ Event System of these events. If this service is stopped, COM+ Event System subscribers will not receive system event notifications.

Task Scheduler

schedule

Automatic/Started

Enables a user to configure and schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times.

TCP/IP NetBIOS Helper

lmhosts

Automatic/Started

Provides support for the NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution for clients on the network, therefore enabling users to share files, print, and log on to the network.

Telephony

tapisrv

Manual/Stopped

Provides Telephony API (TAPI) support for clients using programs that control telephony devices and IP-based voice connections.

Telnet

tlntsvr

Disabled/Stopped

Enables a remote user to log on to this computer and run programs, and supports various TCP/IP Telnet clients, including UNIX-based and Windows-based computers.

Terminal Services

termservice

Manual/Started

Allows users to connect interactively to a remote computer. Remote Desktop, Fast User Switching, Remote Assistance, and Terminal Server depend on this service. Stopping or disabling this service may make your computer unreliable. To prevent remote use of this computer, clear the checkboxes on the Remote tab of the System properties control panel item.

Terminal Services Session Directory

tssdis

Disabled/Stopped

Enables a user connection request to be routed to the appropriate terminal server in a cluster. If this service is stopped, connection requests will be routed to the first available server.

Themes

themes

Disabled/Stopped

Provides user experience theme management.

Uninterruptible Power Supply

ups

Manual/Stopped

Manages an uninterruptible power supply (UPS) connected to the computer.

Upload Manager

uploadmgr

Manual/Stopped

Manages synchronous and asynchronous file transfers between clients and servers on the network. If this service is stopped, synchronous and asynchronous file transfers between clients and servers on the network will not occur.

Virtual Disk Service

vds

Manual/Stopped

Provides software volume and hardware volume management service.

Volume Shadow Copy

vss

Manual/Stopped

Manages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail.

WebClient

webclient

Disabled/Stopped

Provides WebDAV integration into the Explorer shell.

Windows Audio

audiosrv

Automatic/Started

Manages audio devices for Windows-based programs. If this service is stopped, audio devices and effects will not function properly.

Windows Image Acquisition (WIA)

stisvc

Disabled/Stopped

Provides image acquisition services for scanners and cameras.

Windows Installer

msiserver

Manual/Stopped

Adds, modifies, and removes applications provided as a Windows Installer (*.msi) package.

Windows Management Instrumentation

winmgmt

Automatic/Started

Provides a common interface and object model to access management information about operating system, devices, applications, and services. If this service is stopped, most Windows-based software will not function properly.

Windows Management Instrumentation Driver Extensions

wmi

Manual/Stopped

Monitors all drivers and event trace providers that are configured to publish Windows Management Instrumentation (WMI) or event trace information.

Windows Time

w32time

Automatic/Started

Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable.

WinHTTP Web Proxy Auto-Discovery Service

winhttpautoproxysvc

Manual/Stopped

Implements the Web Proxy Auto-Discovery (WPAD) protocol for Windows HTTP Services (WinHTTP). WPAD is a protocol to enable an HTTP client to automatically discover a proxy configuration. If this service is stopped or disabled, the WPAD protocol will be executed within the HTTP client's process instead of an external service process; there would be no loss of functionality as a result.

Wireless Configuration

wzcsvc

Automatic/Started

Enables automatic configuration for IEEE 802.11 adapters. If this service is stopped, automatic configuration will be unavailable.

WMI Performance Adapter

wmiapsrv

Manual/Stopped

Provides performance library information from WMI providers to clients on the network. This service runs only when Performance Data Helper is activated.

Workstation

lanmanworkstation

Automatic/Started

Creates and maintains client network connections to remote servers. If this service is stopped, these connections will be unavailable .




Windows Server Cookbook
Windows Server Cookbook for Windows Server 2003 and Windows 2000
ISBN: 0596006330
EAN: 2147483647
Year: 2006
Pages: 380
Authors: Robbie Allen

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net