Componentized Windows Services
5/10/2007
The Windows operating system provides numerous services that may be required to support the capabilities of any given run-time image. This topic contains a summary that relates Windows services to the files that implement them, and to the components that provide those files. This is not an exhaustive listing.
Some Windows services run within the context of other processes, including the following:
- Service Host Process, which is contained in the svchost.exe file
- Windows Service Controller, which is contained in the services.exe file
- Local Security Authority Subsystem (LSASS), which is contained in the lsass.exe file
The Service Host Process is a generic host process for services that run from dynamic-link libraries. The Windows Service Controller is an application that starts, stops, and interacts with system services. LSASS manages Windows security mechanisms.
A Windows service that runs within the context of a process may have a dependency on that process or require that process to run.
The following table lists Windows Services and the components that provide them. For more information about the components, see the Component Help Reference in Windows XP Embedded Studio Help.
| Windows service | File name | Component name |
|---|---|---|
Alerter |
AlrSvc.dll This service runs within the context of SvcHost.exe. |
Alerter Service |
Application Layer Gateway Service |
Alg.exe |
Windows Firewall/Internet Connection Sharing (ICS) |
Application Layer Gateway Service |
AppMgmts.dll This service runs within the context of SvcHost.exe. |
Software Installation Group Policy Extension |
ASP.NET State Service |
Aspnet_state.exe |
ASP.NET 1.1 |
Automatic Updates |
WuauServ.dll This service runs within the context of SvcHost.exe. |
Windows Update Agent |
Background Intelligent Transfer Service |
Qmgr.dll This service runs within the context of SvcHost.exe. |
Background Intelligent Transfer Service |
Bluetooth Support Service (BthServ) |
Bthci.dll |
Class Install Library - Bluetooth |
ClipBook |
ClipSrv.exe |
Accessories/System Tools |
COM+ Event System |
Es.dll This service runs within the context of SvcHost.exe. |
COM+ Services |
COM+ System Application |
DllHost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} |
COM+ Services |
Computer Browser |
Browser.dll This service runs within the context of SvcHost.exe. |
Computer Browser Service |
Cryptographic Services |
CryptSvc.dll This service runs within the context of SvcHost.exe. |
Core Certificate Services |
Device Update Agent |
Duagent.exe |
Device Update Agent |
DHCP Client |
DhcpcSvc.dll This service runs within the context of SvcHost.exe. |
DHCP Client Service |
Distributed Transaction Coordinator |
MsDtc.exe |
Distributed Transaction Coordinator (MSDTC) |
DNS Client |
DHCPSvc.dll This service runs within the context of SvcHost.exe. |
DHCP Client Service |
Enhanced Write Filter |
Ewfdll.dll |
Enhanced Write Filter |
Error Reporting Service |
ErSvd.dll This service runs within the context of SvcHost.exe. |
Error Reporting |
Event Log |
EventLog.dll This service runs within the context of Services.exe. |
Event Log |
Fast User Switching Compatibility |
Shsvcs.dll This service runs within the context of SvcHost.exe. |
User Interface |
Help and Support |
HelpSvc.exe This service runs within the context of SvcHost.exe. |
Help and Support Services |
Human Interface Device Access |
HidServ.dll This service runs within the context of SvcHost.exe. |
In Target Designer, all components under Hardware | Devices | Human Interface Devices |
IIS Admin |
INetInfo.exe |
IIS Core Libraries |
IMAPI CD-Burning COM Service |
Imapi.exe |
IMAPI - CD Burning |
Indexing Service |
CiSvc.exe |
Indexing Service |
Internet Connection Firewall (ICP) / Internet Connection Sharing |
Fwcfg.dll This service runs within the context of SvcHost.exe. |
Windows Firewall/Internet Connection Sharing (ICS) |
Policy Agent (IPSec Services) |
This service is installed by Nettcpip.inf. This service runs within the context of Lsass.exe. |
IP Security Tools and User Interface |
Logical Disk Manager |
DmServer.dll This service runs within the context of SvcHost.exe. |
Disk Management Services |
Logical Disk Manager Administrative Service |
DmAdmin.exe |
Disk Management Services |
Messenger |
MsgSvc.dll This service runs within the context of SvcHost.exe. |
Messenger Service (Net Send) |
MS Software Shadow Copy Provider |
DllHost.exe /Processid:{6C9935F1-B492-4EFD-95D2-E00161E84328} |
COM Base |
Net Logon |
NetLogon.dll This service runs within the context of Lsass.exe. |
NetLogon/NetJoin |
NetMeeting Remote Desktop Sharing |
MnmSrvc.exe |
NetMeeting |
Network Connections |
Netman.dll This service runs within the context of SvcHost.exe. |
Primitive: Netman |
Network DDE |
NetDDE.exe |
Network Dynamic Data Exchange (NetDDE) |
Network DDE DSDM |
NetDDE.exe |
Network Dynamic Data Exchange (NetDDE) |
Network Location Awareness (NLA) |
Mswsock.dll This service runs within the context of SvcHost.exe. |
Network Location Awareness Service |
Performance Logs and Alerts |
SmLogSvc.exe |
Performance Logs and Alerts Service |
Portable Media Serial Number |
Mspmsnsv.dll This service runs within the context of SvcHost.exe. |
Windows Media Player 10 Technologies |
Print Spooler |
SpoolSv.exe |
Print Spooler |
Protected Storage |
Pstorec.dll This service runs within the context of Lsass.exe. |
Protected Storage Service |
QoS RSVP |
Rsvp.exe |
Quality of Service RSVP |
Remote Access Auto Connection Manager |
Rasmans.dll This service runs within the context of SvcHost.exe. |
Dial-Up Networking Common Libraries |
Remote Access Connection Manager |
SessMgr.exe This service runs within the context of SvcHost.exe. |
Terminal Services Remote Assistance Component |
Remote Desktop Help Session Manager |
SessMgr.exe |
Terminal Services Remote Assistance Component |
Remote Procedure Call (RPC) |
Rpcss.dll This service runs within the context of SvcHost.exe. |
RPC Server |
Remote Procedure Call (RPC) Locator |
Locator.exe |
RPC Named Service |
Remote Registry |
RegSvc.dll This service runs within the context of SvcHost.exe. |
Remote Registry Service |
Removable Storage |
Ntmssvc.dll This service runs within the context of SvcHost.exe. |
Removable Storage Service |
Routing and Remote Access |
Mprdim.dll This service runs within the context of SvcHost.exe. |
Dial-up Server for Windows |
Secondary Logon |
SecLogon.dll This service runs within the context of SvcHost.exe. |
RunAs Service |
Security Accounts Manager |
SamLib.dll This service runs within the context of Lsass.exe. |
Security Accounts Manager Client |
Server |
SrvSvc.dll This service runs within the context of SvcHost.exe. |
File Sharing |
Shell Hardware Detection |
ShSvcs.dll This service runs within the context of SvcHost.exe. |
User Interface Core |
Simple Mail Transfer Protocol (SMTP) |
INetInfo.exe |
IIS Core Libraries |
Smart Card |
SCardSvr.exe |
Smart Card Subsystem |
Smart Card Helper |
SCardSvr.exe |
Smart Card Subsystem |
SSDP Discovery Service |
SsdpSrv.dll This service runs within the context of SvcHost.exe. |
Universal Plug & Play |
System Event Notification |
Sens.dll This service runs within the context of SvcHost.exe. |
System Event Notification Service (SENS) |
System Restore Service |
SrSvc.dll This service runs within the context of SvcHost.exe. |
System Restore Core |
Task Scheduler |
SchedSvc.dll This service runs within the context of SvcHost.exe. |
Task Scheduler |
TCP/IP NetBIOS Helper |
ImhSvc.dll This service runs within the context of SvcHost.exe. |
NetBIOS over TCP/IP |
Telephony |
TapiSrv.dll This service runs within the context of SvcHost.exe. |
Telephony |
Telnet |
Tlntsvr.exe |
Telnet Server |
Terminal Services |
TermSrv.dll This service runs within the context of SvcHost.exe. |
Terminal Services Core |
Themes |
UxTheme.dll This service runs within the context of SvcHost.exe. |
Primitive: Uxtheme |
Uninterruptible Power Supply |
Ups.exe |
Uninterruptible Power Supply Service |
Universal Plug and Play Device Host |
UPnPHost.dll This service runs within the context of SvcHost.exe. |
Universal Plug & Play Device Host |
Volume Shadow Copy |
VsSvc.exe |
Volume Shadow Copy Service |
WebClient |
Webclnt.dll This service runs within the context of SvcHost.exe. |
Webdav Client Redirector |
Windows Audio |
AudioSrv.dll This service runs within the context of SvcHost.exe. |
Microsoft Audio Compression Manager (MME Core) |
Windows Image Acquisition (WIA) |
WIAservc.dll This service runs within the context of SvcHost.exe. |
Windows Image Acquisition Core |
Windows Installer |
MsiExec.exe |
Windows Installer Service |
Windows Management Instrumentation |
WMIsvc.dll This service runs within the context of SvcHost.exe. |
WMI Core |
Windows Management Instrumentation Driver Extensions |
Advapi32.dll This service runs within the context of SvcHost.exe. |
Windows API - Advanced |
Windows Time |
W32Time.dll This service runs within the context of SvcHost.exe. |
Time Service Core |
Wireless Zero Configuration |
WzcSvc.dll This service runs within the context of SvcHost.exe. |
Primitive: Wzcsvc |
WMI Performance Adapter |
WMIapsrv.exe |
WMI Core |
Workstation |
WksSvc.dll This service runs within the context of SvcHost.exe. |
Workstation Service |
World Wide Web Publishing |
INetInfo.exe |
IIS Core Libraries |