| Display Name | Name | State | Startup Type | Service Type | Controls Accepted | Executable | Description | Log On As | Group | Error Control | Exit Code |
| Application Layer Gateway Service | ALG | Running | Manual | Own Process | Stop | C:\WINDOWS\System32\alg.exe | Provides support for 3rd party protocol plug-ins for Internet Connection Sharing and the Windows Firewall. | NT AUTHORITY\LocalService | | Normal | The operation completed successfully (0) |
| Automatic Updates | wuauserv | Running | Automatic | Share Process | Stop, Shutdown, Power Event, Session Change | C:\WINDOWS\system32\svchost.exe -k netsvcs | Enables the download and installation of Windows updates. If this service is disabled, this computer will not be able to use the Automatic Updates feature or the Windows Update Web site. | LocalSystem | | Normal | The operation completed successfully (0) |
| Background Intelligent Transfer Service | BITS | Running | Automatic | Share Process | Stop, Shutdown, Session Change | C:\WINDOWS\system32\svchost.exe -k netsvcs | Transfers data between clients and servers in the background. If BITS is disabled, features such as Windows Update will not work correctly. | LocalSystem | | Normal | The operation completed successfully (0) |
| COM+ Event System | EventSystem | Running | Manual | Share Process | Stop | C:\WINDOWS\system32\svchost.exe -k netsvcs | Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | Network | Normal | The operation completed successfully (0) |
| Computer Browser | Browser | Running | Automatic | Share Process | Stop | C:\WINDOWS\system32\svchost.exe -k netsvcs | Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| CryptSvc | CryptSvc | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| DCOM Server Process Launcher | DcomLaunch | Running | Automatic | Share Process | | C:\WINDOWS\system32\svchost -k DcomLaunch | Provides launch functionality for DCOM services. | LocalSystem | Event Log | Normal | The operation completed successfully (0) |
| DHCP Client | Dhcp | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Manages network configuration by registering and updating IP addresses and DNS names. | LocalSystem | TDI | Normal | The operation completed successfully (0) |
| Distributed Link Tracking Client | TrkWks | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Maintains links between NTFS files within a computer or across computers in a network domain. | LocalSystem | | Normal | The operation completed successfully (0) |
| DNS Client | Dnscache | Running | Automatic | Share Process | Stop, Param Change, Net Bind Change | C:\WINDOWS\system32\svchost.exe -k NetworkService | Resolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\NetworkService | TDI | Normal | The operation completed successfully (0) |
| Error Reporting Service | ERSvc | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\System32\svchost.exe -k netsvcs | Allows error reporting for services and applictions running in non-standard environments. | LocalSystem | | Ignore | The operation completed successfully (0) |
| Event Log | Eventlog | Running | Automatic | Share Process | Shutdown | C:\WINDOWS\system32\services.exe | Enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped. | LocalSystem | Event Log | Normal | The operation completed successfully (0) |
| Fast User Switching Compatibility | FastUserSwitchingCompatibility | Running | Manual | Share Process | Stop, Shutdown | C:\WINDOWS\System32\svchost.exe -k netsvcs | Provides management for applications that require assistance in a multiple user environment. | LocalSystem | | Normal | The operation completed successfully (0) |
| Help and Support | helpsvc | Running | Automatic | Share Process | Stop | C:\WINDOWS\System32\svchost.exe -k netsvcs | Enables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| HID Input Service | HidServ | Running | Automatic | Share Process | Stop, Shutdown, Session Change | C:\WINDOWS\System32\svchost.exe -k netsvcs | Enables generic input access to Human Interface Devices (HID), which activates and maintains the use of predefined hot buttons on keyboards, remote controls, and other multimedia devices. If this service is stopped, hot buttons controlled by this service will no longer function. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| IPSEC Services | PolicyAgent | Running | Automatic | Share Process | Stop, Shutdown, Power Event | C:\WINDOWS\system32\lsass.exe | Manages IP security policy and starts the ISAKMP/Oakley (IKE) and the IP security driver. | LocalSystem | | Normal | The operation completed successfully (0) |
| Network Connections | Netman | Running | Manual | Share Process (Interactive) | Stop | C:\WINDOWS\System32\svchost.exe -k netsvcs | Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections. | LocalSystem | | Normal | The operation completed successfully (0) |
| Network Location Awareness (NLA) | Nla | Running | Manual | Share Process | Stop | C:\WINDOWS\system32\svchost.exe -k netsvcs | Collects and stores network configuration and location information, and notifies applications when this information changes. | LocalSystem | | Normal | The operation completed successfully (0) |
| Plug and Play | PlugPlay | Running | Automatic | Share Process | Shutdown, Session Change | C:\WINDOWS\system32\services.exe | Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability. | LocalSystem | PlugPlay | Normal | The operation completed successfully (0) |
| Print Spooler | Spooler | Running | Automatic | Own Process (Interactive) | Stop, Shutdown, Power Event | C:\WINDOWS\system32\spoolsv.exe | Loads files to memory for later printing. | LocalSystem | SpoolerGroup | Normal | The operation completed successfully (0) |
| Protected Storage | ProtectedStorage | Running | Automatic | Share Process (Interactive) | Stop | C:\WINDOWS\system32\lsass.exe | Provides protected storage for sensitive data, such as private keys, to prevent access by unauthorized services, processes, or users. | LocalSystem | | Normal | The operation completed successfully (0) |
| Remote Access Connection Manager | RasMan | Running | Manual | Share Process | Stop, Power Event | C:\WINDOWS\system32\svchost.exe -k netsvcs | Creates a network connection. | LocalSystem | | Normal | The operation completed successfully (0) |
| Remote Procedure Call (RPC) | RpcSs | Running | Automatic | Own Process | Power Event | C:\WINDOWS\system32\svchost -k rpcss | Provides the endpoint mapper and other miscellaneous RPC services. | NT AUTHORITY\NetworkService | COM Infrastructure | Normal | The operation completed successfully (0) |
| Secondary Logon | seclogon | Running | Automatic | Share Process (Interactive) | Stop, Pause/Continue | C:\WINDOWS\System32\svchost.exe -k netsvcs | Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Ignore | The operation completed successfully (0) |
| Security Accounts Manager | SamSs | Running | Automatic | Share Process | | C:\WINDOWS\system32\lsass.exe | Stores security information for local user accounts. | LocalSystem | LocalValidation | Normal | The operation completed successfully (0) |
| Security Center | wscsvc | Running | Automatic | Share Process | Stop, Shutdown, Session Change | C:\WINDOWS\System32\svchost.exe -k netsvcs | Monitors system security settings and configurations. | LocalSystem | | Normal | The operation completed successfully (0) |
| Server | lanmanserver | Running | Automatic | Share Process | Stop, Pause/Continue, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| Shell Hardware Detection | ShellHWDetection | Running | Automatic | Share Process | Stop, Pause/Continue, Shutdown, Session Change | C:\WINDOWS\System32\svchost.exe -k netsvcs | Provides notifications for AutoPlay hardware events. | LocalSystem | ShellSvcGroup | Ignore | The operation completed successfully (0) |
| SSDP Discovery Service | SSDPSRV | Running | Manual | Share Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k LocalService | Enables discovery of UPnP devices on your home network. | NT AUTHORITY\LocalService | | Normal | The operation completed successfully (0) |
| System Event Notification | SENS | Running | Automatic | Share Process | Stop, Power Event | C:\WINDOWS\system32\svchost.exe -k netsvcs | Tracks system events such as Windows logon, network, and power events. Notifies COM+ Event System subscribers of these events. | LocalSystem | Network | Normal | The operation completed successfully (0) |
| System Restore Service | srservice | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Performs system restore functions. To stop service, turn off System Restore from the System Restore tab in My Computer->Properties | LocalSystem | | Normal | The operation completed successfully (0) |
| Task Scheduler | Schedule | Running | Automatic | Share Process | Stop, Pause/Continue, Shutdown, Power Event | C:\WINDOWS\System32\svchost.exe -k netsvcs | Enables a user to configure and schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | SchedulerGroup | Normal | The operation completed successfully (0) |
| TCP/IP NetBIOS Helper | LmHosts | Running | Automatic | Share Process | Stop | C:\WINDOWS\system32\svchost.exe -k LocalService | Enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution. | NT AUTHORITY\LocalService | TDI | Normal | The operation completed successfully (0) |
| Telephony | TapiSrv | Running | Manual | Share Process | Stop, Pause/Continue | C:\WINDOWS\System32\svchost.exe -k netsvcs | Provides Telephony API (TAPI) support for programs that control telephony devices and IP based voice connections on the local computer and, through the LAN, on servers that are also running the service. | LocalSystem | | Normal | The operation completed successfully (0) |
| Terminal Services | TermService | Running | Manual | Share Process | | C:\WINDOWS\System32\svchost -k DComLaunch | Allows multiple users to be connected interactively to a machine as well as the display of desktops and applications to remote computers. The underpinning of Remote Desktop (including RD for Administrators), Fast User Switching, Remote Assistance, and Terminal Server. | LocalSystem | | Normal | The operation completed successfully (0) |
| Themes | Themes | Running | Automatic | Share Process | Stop, Shutdown | C:\WINDOWS\System32\svchost.exe -k netsvcs | Provides user experience theme management. | LocalSystem | UIGroup | Normal | The operation completed successfully (0) |
| WebClient | WebClient | Running | Automatic | Own Process | Stop, Shutdown | C:\WINDOWS\system32\svchost.exe -k LocalService | Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\LocalService | NetworkProvider | Normal | The operation completed successfully (0) |
| Windows Audio | AudioSrv | Running | Automatic | Share Process | Stop, Session Change | C:\WINDOWS\System32\svchost.exe -k netsvcs | Manages audio devices for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | AudioGroup | Normal | The operation completed successfully (0) |
| Windows Firewall/Internet Connection Sharing (ICS) | SharedAccess | Running | Automatic | Share Process | Stop | C:\WINDOWS\System32\svchost.exe -k netsvcs | Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network. | LocalSystem | | Normal | The operation completed successfully (0) |
| Windows Image Acquisition (WIA) | stisvc | Running | Automatic | Share Process | Stop, Shutdown, Param Change, Power Event | C:\WINDOWS\system32\svchost.exe -k imgsvc | Provides image acquisition services for scanners and cameras. | LocalSystem | | Normal | The operation completed successfully (0) |
| Windows Management Instrumentation | winmgmt | Running | Automatic | Share Process | Stop, Pause/Continue, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Ignore | The operation completed successfully (0) |
| Windows Time | W32Time | Running | Automatic | Share Process | Stop, Shutdown, Param Change, Net Bind Change, Hardware Profile Change, Power Event | C:\WINDOWS\System32\svchost.exe -k netsvcs | Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
| LocalSystem | | Normal | The operation completed successfully (0) |
| Windows User Mode Driver Framework | UMWdf | Running | Automatic | Own Process | Stop, Shutdown, Session Change | C:\WINDOWS\system32\wdfmgr.exe | Enables Windows user mode drivers. | NT AUTHORITY\LocalService | | Normal | The operation completed successfully (0) |
| Wireless Zero Configuration | WZCSVC | Running | Automatic | Share Process | Stop, Shutdown, Session Change | C:\WINDOWS\System32\svchost.exe -k netsvcs | Provides automatic configuration for the 802.11 adapters | LocalSystem | TDI | Normal | The operation completed successfully (0) |
| Workstation | lanmanworkstation | Running | Automatic | Share Process | Stop, Pause/Continue, Shutdown | C:\WINDOWS\system32\svchost.exe -k netsvcs | Creates and maintains client network connections to remote servers. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | NetworkProvider | Normal | The operation completed successfully (0) |
| Adobe LM Service | Adobe LM Service | Stopped | Manual | Own Process | | "C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe" | AdobeLM Service | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Alerter | Alerter | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\svchost.exe -k LocalService | Notifies selected users and computers of administrative alerts. If the service is stopped, programs that use administrative alerts will not receive them. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\LocalService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| AOL Connectivity Service | AOL ACS | Stopped | Disabled | Own Process (Interactive) | | C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe | | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Apple Mobile Device | Apple Mobile Device | Stopped | Disabled | Own Process | | "C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe" | Provides the interface to Apple mobile devices. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Application Management | AppMgmt | Stopped | Manual | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | Provides software installation services such as Assign, Publish, and Remove. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| ASP.NET State Service | aspnet_state | Stopped | Manual | Own Process | | C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe | Provides support for out-of-process session states for ASP.NET. If this service is stopped, out-of-process requests will not be processed. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\NetworkService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| avast! Antivirus | avast! Antivirus | Stopped | Disabled | Own Process (Interactive) | | "C:\Program Files\Alwil Software\Avast4\ashServ.exe" | Manages and implements avast! antivirus services for this computer. This includes the resident protection, the virus chest and the scheduler. | LocalSystem | ShellSvcGroup | Normal | No attempts to start the service have been made since the last boot (1077) |
| avast! iAVS4 Control Service | aswUpdSv | Stopped | Disabled | Own Process (Interactive) | | "C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe" | Provides automatic updating for the avast! antivirus. | LocalSystem | ShellSvcGroup | Normal | No attempts to start the service have been made since the last boot (1077) |
| avast! Mail Scanner | avast! Mail Scanner | Stopped | Disabled | Own Process (Interactive) | | "C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service | Implements mail scanning for avast! antivirus. | LocalSystem | ShellSvcGroup | Normal | No attempts to start the service have been made since the last boot (1077) |
| avast! Web Scanner | avast! Web Scanner | Stopped | Disabled | Own Process (Interactive) | | "C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service | Implements web (HTTP) scanning for avast! antivirus. | LocalSystem | ShellSvcGroup | Normal | No attempts to start the service have been made since the last boot (1077) |
| Bonjour Service | Bonjour Service | Stopped | Disabled | Own Process | | "C:\Program Files\Bonjour\mDNSResponder.exe" | Bonjour allows applications like iTunes and Safari to advertise and discover services on the local network. Having Bonjour running enables you to connect to hardware devices like Apple TV and software services like iTunes sharing and AirTunes. If you disable Bonjour, any network service that explicitly depends on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| ClipBook | ClipSrv | Stopped | Manual | Own Process | | C:\WINDOWS\system32\clipsrv.exe | Enables ClipBook Viewer to store information and share it with remote computers. If the service is stopped, ClipBook Viewer will not be able to share information with remote computers. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| COM+ System Application | COMSysApp | Stopped | Manual | Own Process | | C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} | Manages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Distributed Transaction Coordinator | MSDTC | Stopped | Manual | Own Process | | C:\WINDOWS\system32\msdtc.exe | Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will not occur. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\NetworkService | MS Transactions | Normal | No attempts to start the service have been made since the last boot (1077) |
| Google Software Updater | gusvc | Stopped | Disabled | Own Process | | "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" | Google Updater keeps your Google software up to date. If Google Updater Service is disabled or stopped, your Google software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. | LocalSystem | | Ignore | No attempts to start the service have been made since the last boot (1077) |
| HTTP SSL | HTTPFilter | Stopped | Manual | Share Process | | C:\WINDOWS\System32\svchost.exe -k HTTPFilter | This service implements the secure hypertext transfer protocol (HTTPS) for the HTTP service, using the Secure Socket Layer (SSL). If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| IMAPI CD-Burning COM Service | ImapiService | Stopped | Manual | Own Process | | C:\WINDOWS\system32\imapi.exe | Manages CD recording using Image Mastering Applications Programming Interface (IMAPI). If this service is stopped, this computer will be unable to record CDs. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | The operation completed successfully (0) |
| Indexing Service | CiSvc | Stopped | Manual | Share Process (Interactive) | | C:\WINDOWS\system32\cisvc.exe | Indexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| InstallDriver Table Manager | IDriverT | Stopped | Manual | Own Process | | "C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe" | Provides support for the Running Object Table for InstallShield Drivers | LocalSystem | | Ignore | No attempts to start the service have been made since the last boot (1077) |
| iPod Service | iPod Service | Stopped | Disabled | Own Process | | "C:\Program Files\iPod\bin\iPodService.exe" | iPod hardware management services | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Logical Disk Manager | dmserver | Stopped | Manual | Share Process | | C:\WINDOWS\System32\svchost.exe -k netsvcs | Detects and monitors new hard disk drives and sends disk volume information to Logical Disk Manager Administrative Service for configuration. If this service is stopped, dynamic disk status and configuration information may become out of date. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Logical Disk Manager Administrative Service | dmadmin | Stopped | Manual | Share Process | | C:\WINDOWS\System32\dmadmin.exe /com | Configures hard disk drives and volumes. The service only runs for configuration processes and then stops. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Messenger | Messenger | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | Transmits net send and Alerter service messages between clients and servers. This service is not related to Windows Messenger. If this service is stopped, Alerter messages will not be transmitted. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| MS Software Shadow Copy Provider | SwPrv | Stopped | Manual | Own Process | | C:\WINDOWS\system32\dllhost.exe /Processid:{63C33B1B-E9A2-4399-8C21-F59FA31488FA} | Manages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Ignore | No attempts to start the service have been made since the last boot (1077) |
| Net Logon | Netlogon | Stopped | Manual | Share Process | | C:\WINDOWS\system32\lsass.exe | Supports pass-through authentication of account logon events for computers in a domain. | LocalSystem | RemoteValidation | Normal | No attempts to start the service have been made since the last boot (1077) |
| NetMeeting Remote Desktop Sharing | mnmsrvc | Stopped | Manual | Own Process (Interactive) | | C:\WINDOWS\system32\mnmsrvc.exe | Enables an authorized user to access this computer remotely by using NetMeeting over a corporate intranet. If this service is stopped, remote desktop sharing will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Network DDE | NetDDE | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\netdde.exe | Provides network transport and security for Dynamic Data Exchange (DDE) for programs running on the same computer or on different computers. If this service is stopped, DDE transport and security will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | NetDDEGroup | Normal | No attempts to start the service have been made since the last boot (1077) |
| Network DDE DSDM | NetDDEdsdm | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\netdde.exe | Manages Dynamic Data Exchange (DDE) network shares. If this service is stopped, DDE network shares will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Network Provisioning Service | xmlprov | Stopped | Manual | Share Process | | C:\WINDOWS\System32\svchost.exe -k netsvcs | Manages XML configuration files on a domain basis for automatic network provisioning. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| NT LM Security Support Provider | NtLmSsp | Stopped | Manual | Share Process | | C:\WINDOWS\system32\lsass.exe | Provides security to remote procedure call (RPC) programs that use transports other than named pipes. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Performance Logs and Alerts | SysmonLog | Stopped | Manual | Own Process | | C:\WINDOWS\system32\smlogsvc.exe | Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start. | NT Authority\NetworkService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Portable Media Serial Number Service | WmdmPmSN | Stopped | Manual | Share Process | | C:\WINDOWS\System32\svchost.exe -k netsvcs | Retrieves the serial number of any portable media player connected to this computer. If this service is stopped, protected content might not be down loaded to the device. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| PrismXL | PrismXL | Stopped | Disabled | Own Process (Interactive) | | C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS | | LocalSystem | | Ignore | No attempts to start the service have been made since the last boot (1077) |
| QoS RSVP | RSVP | Stopped | Manual | Own Process | | C:\WINDOWS\system32\rsvp.exe | Provides network signaling and local traffic control setup functionality for QoS-aware programs and control applets. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Remote Access Auto Connection Manager | RasAuto | Stopped | Manual | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Remote Desktop Help Session Manager | RDSessMgr | Stopped | Manual | Own Process | | C:\WINDOWS\system32\sessmgr.exe | Manages and controls Remote Assistance. If this service is stopped, Remote Assistance will be unavailable. Before stopping this service, see the Dependencies tab of the Properties dialog box. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Remote Procedure Call (RPC) Locator | RpcLocator | Stopped | Manual | Own Process | | C:\WINDOWS\system32\locator.exe | Manages the RPC name service database. | NT AUTHORITY\NetworkService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Removable Storage | NtmsSvc | Stopped | Manual | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Routing and Remote Access | RemoteAccess | Stopped | Disabled | Share Process | | C:\WINDOWS\system32\svchost.exe -k netsvcs | Offers routing services to businesses in local area and wide area network environments. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Smart Card | SCardSvr | Stopped | Manual | Share Process | | C:\WINDOWS\System32\SCardSvr.exe | Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start. | NT AUTHORITY\LocalService | SmartCardGroup | Ignore | No attempts to start the service have been made since the last boot (1077) |
| Uninterruptible Power Supply | UPS | Stopped | Manual | Own Process | | C:\WINDOWS\System32\ups.exe | Manages an uninterruptible power supply (UPS) connected to the computer. | NT AUTHORITY\LocalService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Universal Plug and Play Device Host | upnphost | Stopped | Manual | Share Process | | C:\WINDOWS\system32\svchost.exe -k LocalService | Provides support to host Universal Plug and Play devices. | NT AUTHORITY\LocalService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Viewpoint Manager Service | Viewpoint Manager Service | Stopped | Disabled | Own Process (Interactive) | | "C:\Program Files\Viewpoint\Common\ViewpointService.exe" | Ensures Viewpoint 3D and Rich Media Technologies are up to date | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Volume Shadow Copy | VSS | Stopped | Manual | Own Process | | C:\WINDOWS\System32\vssvc.exe | Manages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Windows Installer | MSIServer | Stopped | Manual | Share Process | | C:\WINDOWS\system32\msiexec.exe /V | Adds, modifies, and removes applications provided as a Windows Installer (*.msi) package. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |
| Windows Management Instrumentation Service Extension | WMIAPISE | Stopped | Automatic | Own Process (Interactive) | | C:\WINDOWS\System32\wmiapise.exe | Provides an extended interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start. | LocalSystem | | Ignore | The operation completed successfully (0) |
| Windows Media Connect Service | WMConnectCDS | Stopped | Manual | Own Process | | C:\Program Files\Windows Media Connect 2\wmccds.exe | Shares media with media devices using Universal Plug and Play | NT AUTHORITY\NetworkService | | Normal | No attempts to start the service have been made since the last boot (1077) |
| WMI Performance Adapter | WmiApSrv | Stopped | Manual | Own Process | | C:\WINDOWS\system32\wbem\wmiapsrv.exe | Provides performance library information from WMI HiPerf providers. | LocalSystem | | Normal | No attempts to start the service have been made since the last boot (1077) |