Componentized Windows Services

5/10/2007

The Windows operating system provides numerous services that may be required to support the capabilities of any given run-time image. This topic contains a summary that relates Windows services to the files that implement them, and to the components that provide those files. This is not an exhaustive listing.

Some Windows services run within the context of other processes, including the following:

  • Service Host Process, which is contained in the svchost.exe file
  • Windows Service Controller, which is contained in the services.exe file
  • Local Security Authority Subsystem (LSASS), which is contained in the lsass.exe file

The Service Host Process is a generic host process for services that run from dynamic-link libraries. The Windows Service Controller is an application that starts, stops, and interacts with system services. LSASS manages Windows security mechanisms.

A Windows service that runs within the context of a process may have a dependency on that process or require that process to run.

The following table lists Windows Services and the components that provide them. For more information about the components, see the Component Help Reference in Windows XP Embedded Studio Help.

Windows service File name Component name

Alerter

AlrSvc.dll

This service runs within the context of SvcHost.exe.

Alerter Service

Application Layer Gateway Service

Alg.exe

Windows Firewall/Internet Connection Sharing (ICS)

Application Layer Gateway Service

AppMgmts.dll

This service runs within the context of SvcHost.exe.

Software Installation Group Policy Extension

ASP.NET State Service

Aspnet_state.exe

ASP.NET 1.1

Automatic Updates

WuauServ.dll

This service runs within the context of SvcHost.exe.

Windows Update Agent

Background Intelligent Transfer Service

Qmgr.dll

This service runs within the context of SvcHost.exe.

Background Intelligent Transfer Service

Bluetooth Support Service (BthServ)

Bthci.dll

Class Install Library - Bluetooth

ClipBook

ClipSrv.exe

Accessories/System Tools

COM+ Event System

Es.dll

This service runs within the context of SvcHost.exe.

COM+ Services

COM+ System Application

DllHost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}

COM+ Services

Computer Browser

Browser.dll

This service runs within the context of SvcHost.exe.

Computer Browser Service

Cryptographic Services

CryptSvc.dll

This service runs within the context of SvcHost.exe.

Core Certificate Services

Device Update Agent

Duagent.exe

Device Update Agent

DHCP Client

DhcpcSvc.dll

This service runs within the context of SvcHost.exe.

DHCP Client Service

Distributed Transaction Coordinator

MsDtc.exe

Distributed Transaction Coordinator (MSDTC)

DNS Client

DHCPSvc.dll

This service runs within the context of SvcHost.exe.

DHCP Client Service

Enhanced Write Filter

Ewfdll.dll

Enhanced Write Filter

Error Reporting Service

ErSvd.dll

This service runs within the context of SvcHost.exe.

Error Reporting

Event Log

EventLog.dll

This service runs within the context of Services.exe.

Event Log

Fast User Switching Compatibility

Shsvcs.dll

This service runs within the context of SvcHost.exe.

User Interface

Help and Support

HelpSvc.exe

This service runs within the context of SvcHost.exe.

Help and Support Services

Human Interface Device Access

HidServ.dll

This service runs within the context of SvcHost.exe.

In Target Designer, all components under Hardware | Devices | Human Interface Devices

IIS Admin

INetInfo.exe

IIS Core Libraries

IMAPI CD-Burning COM Service

Imapi.exe

IMAPI - CD Burning

Indexing Service

CiSvc.exe

Indexing Service

Internet Connection Firewall (ICP) / Internet Connection Sharing

Fwcfg.dll

This service runs within the context of SvcHost.exe.

Windows Firewall/Internet Connection Sharing (ICS)

Policy Agent (IPSec Services)

This service is installed by Nettcpip.inf.

This service runs within the context of Lsass.exe.

IP Security Tools and User Interface

Logical Disk Manager

DmServer.dll

This service runs within the context of SvcHost.exe.

Disk Management Services

Logical Disk Manager Administrative Service

DmAdmin.exe

Disk Management Services

Messenger

MsgSvc.dll

This service runs within the context of SvcHost.exe.

Messenger Service (Net Send)

MS Software Shadow Copy Provider

DllHost.exe /Processid:{6C9935F1-B492-4EFD-95D2-E00161E84328}

COM Base

Net Logon

NetLogon.dll

This service runs within the context of Lsass.exe.

NetLogon/NetJoin

NetMeeting Remote Desktop Sharing

MnmSrvc.exe

NetMeeting

Network Connections

Netman.dll

This service runs within the context of SvcHost.exe.

Primitive: Netman

Network DDE

NetDDE.exe

Network Dynamic Data Exchange (NetDDE)

Network DDE DSDM

NetDDE.exe

Network Dynamic Data Exchange (NetDDE)

Network Location Awareness (NLA)

Mswsock.dll

This service runs within the context of SvcHost.exe.

Network Location Awareness Service

Performance Logs and Alerts

SmLogSvc.exe

Performance Logs and Alerts Service

Portable Media Serial Number

Mspmsnsv.dll

This service runs within the context of SvcHost.exe.

Windows Media Player 10 Technologies

Print Spooler

SpoolSv.exe

Print Spooler

Protected Storage

Pstorec.dll

This service runs within the context of Lsass.exe.

Protected Storage Service

QoS RSVP

Rsvp.exe

Quality of Service RSVP

Remote Access Auto Connection Manager

Rasmans.dll

This service runs within the context of SvcHost.exe.

Dial-Up Networking Common Libraries

Remote Access Connection Manager

SessMgr.exe

This service runs within the context of SvcHost.exe.

Terminal Services Remote Assistance Component

Remote Desktop Help Session Manager

SessMgr.exe

Terminal Services Remote Assistance Component

Remote Procedure Call (RPC)

Rpcss.dll

This service runs within the context of SvcHost.exe.

RPC Server

Remote Procedure Call (RPC) Locator

Locator.exe

RPC Named Service

Remote Registry

RegSvc.dll

This service runs within the context of SvcHost.exe.

Remote Registry Service

Removable Storage

Ntmssvc.dll

This service runs within the context of SvcHost.exe.

Removable Storage Service

Routing and Remote Access

Mprdim.dll

This service runs within the context of SvcHost.exe.

Dial-up Server for Windows

Secondary Logon

SecLogon.dll

This service runs within the context of SvcHost.exe.

RunAs Service

Security Accounts Manager

SamLib.dll

This service runs within the context of Lsass.exe.

Security Accounts Manager Client

Server

SrvSvc.dll

This service runs within the context of SvcHost.exe.

File Sharing

Shell Hardware Detection

ShSvcs.dll

This service runs within the context of SvcHost.exe.

User Interface Core

Simple Mail Transfer Protocol (SMTP)

INetInfo.exe

IIS Core Libraries

Smart Card

SCardSvr.exe

Smart Card Subsystem

Smart Card Helper

SCardSvr.exe

Smart Card Subsystem

SSDP Discovery Service

SsdpSrv.dll

This service runs within the context of SvcHost.exe.

Universal Plug & Play

System Event Notification

Sens.dll

This service runs within the context of SvcHost.exe.

System Event Notification Service (SENS)

System Restore Service

SrSvc.dll

This service runs within the context of SvcHost.exe.

System Restore Core

Task Scheduler

SchedSvc.dll

This service runs within the context of SvcHost.exe.

Task Scheduler

TCP/IP NetBIOS Helper

ImhSvc.dll

This service runs within the context of SvcHost.exe.

NetBIOS over TCP/IP

Telephony

TapiSrv.dll

This service runs within the context of SvcHost.exe.

Telephony

Telnet

Tlntsvr.exe

Telnet Server

Terminal Services

TermSrv.dll

This service runs within the context of SvcHost.exe.

Terminal Services Core

Themes

UxTheme.dll

This service runs within the context of SvcHost.exe.

Primitive: Uxtheme

Uninterruptible Power Supply

Ups.exe

Uninterruptible Power Supply Service

Universal Plug and Play Device Host

UPnPHost.dll

This service runs within the context of SvcHost.exe.

Universal Plug & Play Device Host

Volume Shadow Copy

VsSvc.exe

Volume Shadow Copy Service

WebClient

Webclnt.dll

This service runs within the context of SvcHost.exe.

Webdav Client Redirector

Windows Audio

AudioSrv.dll

This service runs within the context of SvcHost.exe.

Microsoft Audio Compression Manager (MME Core)

Windows Image Acquisition (WIA)

WIAservc.dll

This service runs within the context of SvcHost.exe.

Windows Image Acquisition Core

Windows Installer

MsiExec.exe

Windows Installer Service

Windows Management Instrumentation

WMIsvc.dll

This service runs within the context of SvcHost.exe.

WMI Core

Windows Management Instrumentation Driver Extensions

Advapi32.dll

This service runs within the context of SvcHost.exe.

Windows API - Advanced

Windows Time

W32Time.dll

This service runs within the context of SvcHost.exe.

Time Service Core

Wireless Zero Configuration

WzcSvc.dll

This service runs within the context of SvcHost.exe.

Primitive: Wzcsvc

WMI Performance Adapter

WMIapsrv.exe

WMI Core

Workstation

WksSvc.dll

This service runs within the context of SvcHost.exe.

Workstation Service

World Wide Web Publishing

INetInfo.exe

IIS Core Libraries