| Display Name | Name | State | Startup Type | Service Type | Controls Accepted | Executable | Description | Log On As | Group | Error Control | Exit Code |
| Alerter | Alerter | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\svchost.exe -k LocalService | Notifies selected users and computers of administrative alerts. If the service is stopped, programs that use administrative alerts will not receive them. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\LocalService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Application Layer Gateway Service | ALG | Running | Manual | Own Process | Stop | C:\WINDOWS\System32\alg.exe | Provides support for 3rd party protocol plug-ins for Internet Connection Sharing and the Windows Firewall. | NT AUTHORITY\LocalService | | Normal | The operation completed successfully (0) |
| Application Management | AppMgmt | Stopped | Manual | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | Provides software installation services such as Assign, Publish, and Remove. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| ASP.NET State Service | aspnet_state | Stopped | Manual | Own Process | | C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe | Provides support for out-of-process session states for ASP.NET. If this service is stopped, out-of-process requests will not be processed. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\NetworkService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Automatic Updates | wuauserv | Running | Automatic | Share Process | Stop, Shutdown, Power Event, Session Change | C:\WINDOWS\system32\svchost.exe -k netsvcs | Enables the download and installation of Windows updates. If this service is disabled, this computer will not be able to use the Automatic Updates feature or the Windows Update Web site. | LocalSystem | | Normal | The operation completed successfully (0) |
| Background Intelligent Transfer Service | BITS | Stopped | Manual | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | Transfers files in the background using idle network bandwidth. If the service is stopped, features such as Windows Update, and MSN Explorer will be unable to automatically download programs and other information. If this service is disabled, any services that explicitly depend on it may fail to transfer files if they do not have a fail safe mechanism to transfer files directly through IE in case BITS has been disabled. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| CA Pest Patrol Realtime Protection Service | ITMRTSVC | Running | Automatic | Own Process | Stop, Shutdown, Session Change | "C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe" | Service component for CA Pest Patrol Realtime Protection | LocalSystem | | Normal | The operation completed successfully (0) |
| CaCCProvSP | CaCCProvSP | Running | Manual | Own Process | Stop | "C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe" | | LocalSystem | | Normal | The operation completed successfully (0) |
| CAISafe | CAISafe | Running | Automatic | Own Process (Interactive) | Stop, Pause/Continue | C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe | | LocalSystem | | Normal | The operation completed successfully (0) |
| ClipBook | ClipSrv | Stopped | Disabled | Own Process | | C:\WINDOWS\system32\clipsrv.exe | Enables ClipBook Viewer to store information and share it with remote computers. If the service is stopped, ClipBook Viewer will not be able to share information with remote computers. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| COM+ Event System | EventSystem | Running | Manual | Share Process | Stop | C:\WINDOWS\system32\svchost.exe -k netsvcs | Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | Network | Normal | The operation completed successfully (0) |
| COM+ System Application | COMSysApp | Stopped | Manual | Own Process | | C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} | Manages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Computer Browser | Browser | Running | Automatic | Share Process | Stop | C:\WINDOWS\system32\svchost.exe -k netsvcs | Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| Cryptographic Services | CryptSvc | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| DCOM Server Process Launcher | DcomLaunch | Running | Automatic | Share Process | | C:\WINDOWS\system32\svchost -k DcomLaunch | Provides launch functionality for DCOM services. | LocalSystem | Event Log | Normal | The operation completed successfully (0) |
| DHCP Client | Dhcp | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Manages network configuration by registering and updating IP addresses and DNS names. | LocalSystem | TDI | Normal | The operation completed successfully (0) |
| Distributed Link Tracking Client | TrkWks | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Maintains links between NTFS files within a computer or across computers in a network domain. | LocalSystem | | Normal | The operation completed successfully (0) |
| Distributed Transaction Coordinator | MSDTC | Stopped | Manual | Own Process | | C:\WINDOWS\system32\msdtc.exe | Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will not occur. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\NetworkService | MS Transactions | Normal | No attempts to start the service have been made since the last boot (1077) |
| DNS Client | Dnscache | Running | Automatic | Share Process | Stop, Param Change, Net Bind Change | C:\WINDOWS\system32\svchost.exe -k NetworkService | Resolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\NetworkService | TDI | Normal | The operation completed successfully (0) |
| Error Reporting Service | ERSvc | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\System32\svchost.exe -k netsvcs | Allows error reporting for services and applictions running in non-standard environments. | LocalSystem | | Ignore | The operation completed successfully (0) |
| Event Log | Eventlog | Running | Automatic | Share Process | Shutdown | C:\WINDOWS\system32\services.exe | Enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped. | LocalSystem | Event Log | Normal | The operation completed successfully (0) |
| Extensible Authentication Protocol Service | EapHost | Stopped | Manual | Share Process | | C:\WINDOWS\System32\svchost.exe -k eapsvcs | Provides windows clients Extensible Authentication Protocol Service | localSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Fast User Switching Compatibility | FastUserSwitchingCompatibility | Running | Manual | Share Process | Stop, Shutdown | C:\WINDOWS\System32\svchost.exe -k netsvcs | Provides management for applications that require assistance in a multiple user environment. | LocalSystem | | Normal | The operation completed successfully (0) |
| Health Key and Certificate Management Service | hkmsvc | Stopped | Manual | Share Process | | C:\WINDOWS\System32\svchost.exe -k netsvcs | Manages health certificates and keys (used by NAP) | localSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Help and Support | helpsvc | Running | Automatic | Share Process | Stop | C:\WINDOWS\System32\svchost.exe -k netsvcs | Enables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| HIPS Configuration Interpreter | UmxCfg | Running | Automatic | Own Process | Stop, Shutdown | "C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe" | Manages and processes HIPS Engine configuration | LocalSystem | SpoolerGroup | Normal | The operation completed successfully (0) |
| HIPS Event Manager | UmxAgent | Running | Automatic | Own Process (Interactive) | Stop, Shutdown, Session Change | "C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe" | Provides synchronous and asynchronous events from HIPS Engine | LocalSystem | SpoolerGroup | Normal | The operation completed successfully (0) |
| HIPS Firewall Helper | UmxFwHlp | Running | Automatic | Own Process | Stop, Shutdown | "C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe" | Provides support for HIPS Engine drivers | LocalSystem | SpoolerGroup | Normal | The operation completed successfully (0) |
| HIPS Policy Manager | UmxPol | Running | Automatic | Own Process | Stop | "C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe" | Manages policy files for HIPS Engine | LocalSystem | SpoolerGroup | Normal | The operation completed successfully (0) |
| HP WMI Interface | hpqwmi | Running | Manual | Own Process | Stop | C:\Program Files\HPQ\SHARED\HPQWMI.exe | | LocalSystem | | Normal | The operation completed successfully (0) |
| HTTP SSL | HTTPFilter | Running | Manual | Share Process | Stop, Pause/Continue, Shutdown | C:\WINDOWS\System32\svchost.exe -k HTTPFilter | This service implements the secure hypertext transfer protocol (HTTPS) for the HTTP service, using the Secure Socket Layer (SSL). If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| Human Interface Device Access | HidServ | Stopped | Disabled | Share Process | | C:\WINDOWS\System32\svchost.exe -k netsvcs | Enables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices. If this service is stopped, hot buttons controlled by this service will no longer function. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| IMAPI CD-Burning COM Service | ImapiService | Stopped | Manual | Own Process | | C:\WINDOWS\system32\imapi.exe | Manages CD recording using Image Mastering Applications Programming Interface (IMAPI). If this service is stopped, this computer will be unable to record CDs. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| Indexing Service | CiSvc | Stopped | Manual | Share Process (Interactive) | | C:\WINDOWS\system32\cisvc.exe | Indexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| InstallDriver Table Manager | IDriverT | Stopped | Manual | Own Process | | "C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe" | Provides support for the Running Object Table for InstallShield Drivers | LocalSystem | | Ignore | No attempts to start the service have been made since the last boot (1077) |
| iPodService | iPodService | Stopped | Manual | Own Process | | C:\Program Files\iPod\bin\iPodService.exe | iPod hardware management services | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| IPSEC Services | PolicyAgent | Running | Automatic | Share Process | Stop, Shutdown, Power Event | C:\WINDOWS\system32\lsass.exe | Manages IP security policy and starts the ISAKMP/Oakley (IKE) and the IP security driver. | LocalSystem | | Normal | The operation completed successfully (0) |
| Java Quick Starter | JavaQuickStarterService | Running | Automatic | Own Process | Stop, Pause/Continue, Shutdown, Power Event, Session Change | "C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf" | Prefetches JRE files for faster startup of Java applets and applications | LocalSystem | | Normal | The operation completed successfully (0) |
| LightScribeService Direct Disc Labeling Service | LightScribeService | Running | Automatic | Own Process | Stop | "C:\Program Files\Common Files\LightScribe\LSSrvc.exe" | Used by the LightScribe software components to support 3rd party disc labeling applications using the LightScribe COM Application Programming Interface (LSCAPI). This service needs to run for LightScribe direct disc labeling to work. | LocalSystem | | Ignore | The operation completed successfully (0) |
| Logical Disk Manager | dmserver | Stopped | Manual | Share Process | | C:\WINDOWS\System32\svchost.exe -k netsvcs | Detects and monitors new hard disk drives and sends disk volume information to Logical Disk Manager Administrative Service for configuration. If this service is stopped, dynamic disk status and configuration information may become out of date. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Logical Disk Manager Administrative Service | dmadmin | Stopped | Manual | Share Process | | C:\WINDOWS\System32\dmadmin.exe /com | Configures hard disk drives and volumes. The service only runs for configuration processes and then stops. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Machine Debug Manager | MDM | Running | Automatic | Own Process (Interactive) | Stop | "C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE" | Supports local and remote debugging for Visual Studio and script debuggers. If this service is stopped, the debuggers will not function properly. | LocalSystem | | Normal | The operation completed successfully (0) |
| Messenger | Messenger | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | Transmits net send and Alerter service messages between clients and servers. This service is not related to Windows Messenger. If this service is stopped, Alerter messages will not be transmitted. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| MS Software Shadow Copy Provider | SwPrv | Stopped | Manual | Own Process | | C:\WINDOWS\system32\dllhost.exe /Processid:{F1F50EBF-3CBA-4F06-9B49-9BFEE253FD65} | Manages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Ignore | No attempts to start the service have been made since the last boot (1077) |
| MSSQL$MICROSOFTSMLBIZ | MSSQL$MICROSOFTSMLBIZ | Running | Automatic | Own Process | Stop, Pause/Continue, Shutdown | "C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe" -sMICROSOFTSMLBIZ | | LocalSystem | | Normal | The operation completed successfully (0) |
| MSSQLServerADHelper | MSSQLServerADHelper | Stopped | Manual | Own Process | | "C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe" | | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Net Logon | Netlogon | Stopped | Manual | Share Process | | C:\WINDOWS\system32\lsass.exe | Supports pass-through authentication of account logon events for computers in a domain. | LocalSystem | RemoteValidation | Normal | No attempts to start the service have been made since the last boot (1077) |
| NetMeeting Remote Desktop Sharing | mnmsrvc | Stopped | Manual | Own Process (Interactive) | | C:\WINDOWS\system32\mnmsrvc.exe | Enables an authorized user to access this computer remotely by using NetMeeting over a corporate intranet. If this service is stopped, remote desktop sharing will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Network Access Protection Agent | napagent | Stopped | Manual | Share Process | | C:\WINDOWS\System32\svchost.exe -k netsvcs | Allows windows clients to participate in Network Access Protection | localSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Network Connections | Netman | Running | Manual | Share Process (Interactive) | Stop | C:\WINDOWS\System32\svchost.exe -k netsvcs | Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections. | LocalSystem | | Normal | The operation completed successfully (0) |
| Network DDE | NetDDE | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\netdde.exe | Provides network transport and security for Dynamic Data Exchange (DDE) for programs running on the same computer or on different computers. If this service is stopped, DDE transport and security will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | NetDDEGroup | Normal | No attempts to start the service have been made since the last boot (1077) |
| Network DDE DSDM | NetDDEdsdm | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\netdde.exe | Manages Dynamic Data Exchange (DDE) network shares. If this service is stopped, DDE network shares will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Network Location Awareness (NLA) | Nla | Running | Manual | Share Process | Stop | C:\WINDOWS\system32\svchost.exe -k netsvcs | Collects and stores network configuration and location information, and notifies applications when this information changes. | LocalSystem | | Normal | The operation completed successfully (0) |
| Network Provisioning Service | xmlprov | Stopped | Manual | Share Process | | C:\WINDOWS\System32\svchost.exe -k netsvcs | Manages XML configuration files on a domain basis for automatic network provisioning. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| NT LM Security Support Provider | NtLmSsp | Stopped | Manual | Share Process | | C:\WINDOWS\system32\lsass.exe | Provides security to remote procedure call (RPC) programs that use transports other than named pipes. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Office Source Engine | ose | Stopped | Manual | Own Process | | "C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE" | Saves installation files used for updates and repairs and is required for the downloading of Setup updates and Watson error reports. | LocalSystem | | Normal | The operation completed successfully (0) |
| Performance Logs and Alerts | SysmonLog | Stopped | Manual | Own Process | | C:\WINDOWS\system32\smlogsvc.exe | Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start. | NT Authority\NetworkService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Plug and Play | PlugPlay | Running | Automatic | Share Process | Shutdown, Session Change | C:\WINDOWS\system32\services.exe | Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability. | LocalSystem | PlugPlay | Normal | The operation completed successfully (0) |
| Pml Driver HPZ12 | Pml Driver HPZ12 | Stopped | Automatic | Own Process | | C:\WINDOWS\system32\HPZipm12.exe | | LocalSystem | | Normal | The operation completed successfully (0) |
| Portable Media Serial Number Service | WmdmPmSN | Stopped | Manual | Share Process | | C:\WINDOWS\System32\svchost.exe -k netsvcs | Retrieves the serial number of any portable media player connected to this computer. If this service is stopped, protected content might not be down loaded to the device. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| PPCtlPriv | PPCtlPriv | Running | Manual | Own Process | Stop | "C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe" | | LocalSystem | | Normal | The operation completed successfully (0) |
| Print Spooler | Spooler | Running | Automatic | Own Process (Interactive) | Stop, Shutdown, Power Event | C:\WINDOWS\system32\spoolsv.exe | Loads files to memory for later printing. | LocalSystem | SpoolerGroup | Normal | The operation completed successfully (0) |
| Protected Storage | ProtectedStorage | Running | Automatic | Share Process (Interactive) | Stop | C:\WINDOWS\system32\lsass.exe | Provides protected storage for sensitive data, such as private keys, to prevent access by unauthorized services, processes, or users. | LocalSystem | | Normal | The operation completed successfully (0) |
| QoS RSVP | RSVP | Stopped | Manual | Own Process | | C:\WINDOWS\system32\rsvp.exe | Provides network signaling and local traffic control setup functionality for QoS-aware programs and control applets. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Remote Access Auto Connection Manager | RasAuto | Stopped | Manual | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Remote Access Connection Manager | RasMan | Running | Manual | Share Process | Stop, Power Event | C:\WINDOWS\system32\svchost.exe -k netsvcs | Creates a network connection. | LocalSystem | | Normal | The operation completed successfully (0) |
| Remote Desktop Help Session Manager | RDSessMgr | Stopped | Manual | Own Process | | C:\WINDOWS\system32\sessmgr.exe | Manages and controls Remote Assistance. If this service is stopped, Remote Assistance will be unavailable. Before stopping this service, see the Dependencies tab of the Properties dialog box. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Remote Procedure Call (RPC) | RpcSs | Running | Automatic | Own Process | Power Event | C:\WINDOWS\system32\svchost -k rpcss | Provides the endpoint mapper and other miscellaneous RPC services. | NT Authority\NetworkService | COM Infrastructure | Normal | The operation completed successfully (0) |
| Remote Procedure Call (RPC) Locator | RpcLocator | Stopped | Manual | Own Process | | C:\WINDOWS\system32\locator.exe | Manages the RPC name service database. | NT AUTHORITY\NetworkService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Removable Storage | NtmsSvc | Stopped | Manual | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Routing and Remote Access | RemoteAccess | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | Offers routing services to businesses in local area and wide area network environments. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Secondary Logon | seclogon | Running | Automatic | Share Process (Interactive) | Stop, Pause/Continue | C:\WINDOWS\System32\svchost.exe -k netsvcs | Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Ignore | The operation completed successfully (0) |
| Security Accounts Manager | SamSs | Running | Automatic | Share Process | | C:\WINDOWS\system32\lsass.exe | Stores security information for local user accounts. | LocalSystem | LocalValidation | Normal | The operation completed successfully (0) |
| Security Center | wscsvc | Running | Automatic | Share Process | Stop, Shutdown, Session Change | C:\WINDOWS\System32\svchost.exe -k netsvcs | Monitors system security settings and configurations. | LocalSystem | | Normal | The operation completed successfully (0) |
| Server | lanmanserver | Running | Automatic | Share Process | Stop, Pause/Continue, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| Shell Hardware Detection | ShellHWDetection | Running | Automatic | Share Process | Stop, Pause/Continue, Shutdown, Session Change | C:\WINDOWS\System32\svchost.exe -k netsvcs | Provides notifications for AutoPlay hardware events. | LocalSystem | ShellSvcGroup | Ignore | The operation completed successfully (0) |
| Smart Card | SCardSvr | Stopped | Manual | Share Process | | C:\WINDOWS\System32\SCardSvr.exe | Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\LocalService | SmartCardGroup | Ignore | No attempts to start the service have been made since the last boot (1077) |
| SoundMAX Agent Service | SoundMAX Agent Service (default) | Running | Automatic | Own Process | Stop, Pause/Continue | C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe | | LocalSystem | | Normal | The operation completed successfully (0) |
| SQLAgent$MICROSOFTSMLBIZ | SQLAgent$MICROSOFTSMLBIZ | Stopped | Manual | Own Process | | "C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlagent.EXE" -i MICROSOFTSMLBIZ | | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| SSDP Discovery Service | SSDPSRV | Running | Manual | Share Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k LocalService | Enables discovery of UPnP devices on your home network. | NT AUTHORITY\LocalService | | Normal | The operation completed successfully (0) |
| System Event Notification | SENS | Running | Automatic | Share Process | Stop, Power Event | C:\WINDOWS\system32\svchost.exe -k netsvcs | Tracks system events such as Windows logon, network, and power events. Notifies COM+ Event System subscribers of these events. | LocalSystem | Network | Normal | The operation completed successfully (0) |
| System Restore Service | srservice | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Performs system restore functions. To stop service, turn off System Restore from the System Restore tab in My Computer->Properties | LocalSystem | | Normal | The operation completed successfully (0) |
| Task Scheduler | Schedule | Running | Automatic | Share Process | Stop, Pause/Continue, Shutdown, Power Event | C:\WINDOWS\System32\svchost.exe -k netsvcs | Enables a user to configure and schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | SchedulerGroup | Normal | The operation completed successfully (0) |
| TCP/IP NetBIOS Helper | LmHosts | Running | Automatic | Share Process | Stop | C:\WINDOWS\system32\svchost.exe -k LocalService | Enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution. | NT AUTHORITY\LocalService | TDI | Normal | The operation completed successfully (0) |
| Telephony | TapiSrv | Running | Manual | Share Process | Stop, Pause/Continue | C:\WINDOWS\System32\svchost.exe -k netsvcs | Provides Telephony API (TAPI) support for programs that control telephony devices and IP based voice connections on the local computer and, through the LAN, on servers that are also running the service. | LocalSystem | | Normal | The operation completed successfully (0) |
| Terminal Services | TermService | Running | Manual | Share Process | | C:\WINDOWS\System32\svchost -k DComLaunch | Allows multiple users to be connected interactively to a machine as well as the display of desktops and applications to remote computers. The underpinning of Remote Desktop (including RD for Administrators), Fast User Switching, Remote Assistance, and Terminal Server. | LocalSystem | | Normal | The operation completed successfully (0) |
| Themes | Themes | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\System32\svchost.exe -k netsvcs | Provides user experience theme management. | LocalSystem | UIGroup | Normal | The operation completed successfully (0) |
| Uninterruptible Power Supply | UPS | Stopped | Manual | Own Process | | C:\WINDOWS\System32\ups.exe | Manages an uninterruptible power supply (UPS) connected to the computer. | NT AUTHORITY\LocalService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Universal Plug and Play Device Host | upnphost | Running | Manual | Share Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k LocalService | Provides support to host Universal Plug and Play devices. | NT AUTHORITY\LocalService | | Normal | The operation completed successfully (0) |
| VET Message Service | VETMSGNT | Running | Automatic | Own Process (Interactive) | Stop, Pause/Continue | C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe | | LocalSystem | | Normal | The operation completed successfully (0) |
| Volume Shadow Copy | VSS | Stopped | Manual | Own Process | | C:\WINDOWS\System32\vssvc.exe | Manages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| WebClient | WebClient | Running | Automatic | Own Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k LocalService | Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\LocalService | NetworkProvider | Normal | The operation completed successfully (0) |
| Windows Audio | AudioSrv | Running | Automatic | Share Process | Stop, Session Change | C:\WINDOWS\System32\svchost.exe -k netsvcs | Manages audio devices for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | AudioGroup | Normal | The operation completed successfully (0) |
| Windows Driver Foundation - User-mode Driver Framework | WudfSvc | Running | Automatic | Share Process | | C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup | Manages user-mode driver host processes | LocalSystem | PlugPlay | Normal | The operation completed successfully (0) |
| Windows Firewall/Internet Connection Sharing (ICS) | SharedAccess | Running | Automatic | Share Process | Stop | C:\WINDOWS\system32\svchost.exe -k netsvcs | Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network. | LocalSystem | | Normal | The operation completed successfully (0) |
| Windows Image Acquisition (WIA) | stisvc | Running | Automatic | Share Process | Stop, Shutdown, Param Change, Power Event | C:\WINDOWS\system32\svchost.exe -k imgsvc | Provides image acquisition services for scanners and cameras. | LocalSystem | | Normal | The operation completed successfully (0) |
| Windows Installer | MSIServer | Stopped | Manual | Share Process | | C:\WINDOWS\system32\msiexec.exe /V | Adds, modifies, and removes applications provided as a Windows Installer (*.msi) package. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Windows Management Instrumentation | winmgmt | Running | Automatic | Share Process | Stop, Pause/Continue, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Ignore | The operation completed successfully (0) |
| Windows Media Player Network Sharing Service | WMPNetworkSvc | Running | Automatic | Own Process | Stop | "C:\Program Files\Windows Media Player\WMPNetwk.exe" | Shares Windows Media Player libraries to other networked players and media devices using Universal Plug and Play | NT AUTHORITY\NetworkService | | Normal | The operation completed successfully (0) |
| Windows Time | W32Time | Running | Automatic | Share Process | Stop, Shutdown, Param Change, Net Bind Change, Hardware Profile Change, Power Event | C:\WINDOWS\System32\svchost.exe -k netsvcs | Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
| LocalSystem | | Normal | The operation completed successfully (0) |
| Wired AutoConfig | Dot3svc | Stopped | Manual | Share Process | | C:\WINDOWS\System32\svchost.exe -k dot3svc | This service performs IEEE 802.1X authentication on Ethernet interfaces | LocalSystem | TDI | Normal | No attempts to start the service have been made since the last boot (1077) |
| Wireless Zero Configuration | WZCSVC | Running | Automatic | Share Process | Stop, Shutdown, Session Change | C:\WINDOWS\System32\svchost.exe -k netsvcs | Provides automatic configuration for the 802.11 adapters | LocalSystem | TDI | Normal | The operation completed successfully (0) |
| WMI Performance Adapter | WmiApSrv | Stopped | Manual | Own Process | | C:\WINDOWS\system32\wbem\wmiapsrv.exe | Provides performance library information from WMI HiPerf providers. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Workstation | lanmanworkstation | Running | Automatic | Share Process | Stop, Pause/Continue, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Creates and maintains client network connections to remote servers. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | NetworkProvider | Normal | The operation completed successfully (0) |