The Deep description on Windows Services
We have tried our best efforts to explore the deepth of windows services and all the given information is gathered from Microsoft notes (As its microsoft product)
|
| 40.Service Name:-IsmServ |
| Executable Name:-ismserv.exe |
| Log On As:-LocalSystem |
Description:-Intersite Messaging enables messages to be exchanged between computers running Windows Server sites. This service is used for mail-based replication between sites. Active Directory includes support for replication between sites by using SMTP over IP transport. SMTP support is provided by the SMTP service, which is a component of IIS. The set of transports used for communication between sites must be extensible; therefore, each transport is defined in a separate add-in dynamic link library (DLL). These add-in DLLs are loaded into the ISM service, which runs on all domain controllers that are candidates for performing communication between sites. The ISM service directs send requests and receive requests to the appropriate transport add-in DLLs, which then route the messages to the ISM service on the destination computer.
If this service is stopped or disabled, Intersite messaging replication will not work nor will site routing information be calculated for other services
|
| Avaliable on OS:-Windows Server 2003, Standard Edition; Windows Server 2003, Enterprise Edition; Windows Server 2003, Datacenter Edition and Windows Server 2003, Web Edition. |
| Installed through:-Default operating system installation |
| Startup type:-Disabled |
| Service status:-Stopped |
| This service depends on the following system components:-Security Accounts Manager,
Remote Procedure Call
|
| The following system components depend on this service:- None |
| Port Numbers used:-TCP: 1863 |
|
| 41.Service Name:-6to4 |
| Executable Name:-svchost.exe -k netsvcs |
| Log On As:-LocalSystem |
Description:-Offers IPv6 connectivity over an existing IPv4 network. 6to4 allows IPv6-enabled sites and hosts to communicate by using IPv6 over an IPv4 infrastructure (for example, the Internet). IPv6 sites and hosts can use their 6to4 address prefix and the Internet to communicate without obtaining an IPv6 global address prefix from an Internet service provider and connecting to the 6bone (the IPv6-enabled portion of the Internet).
6to4 is a tunneling technique that is described in RFC 3056. 6to4 hosts do not require any manual configuration and create 6to4 addresses by using standard auto configuration. 6to4 uses the global address prefix of 2002:WWXX:YYZZ::/48, where WWXX:YYZZ is the colon-hexadecimal representation of a public IPv4 address (w.x.y.z) that is assigned to a site or host. WWXX:YYZZ is the Next Level Aggregator (NLA) portion of a 6to4 address.
The IPv6 Helper service also supports 6over4, also known as IPv4 multicast tunneling, is a tunneling technique that is described in RFC 2529. 6over4 allows IPv6 and IPv4 nodes to communicate by using IPv6 over an IPv4 infrastructure. 6over4 uses the IPv4 infrastructure as a multicast-capable link. In order for 6over4 to work correctly, the IPv4 infrastructure must be IPv4 multicast-enabled.
If this service is stopped or disabled, the computer will only have IPv6 connectivity if connected to a native IPv6 network.
For more information about IPv6, see "Introduction to IPv6" and "Windows IPv6" in the Windows Server Resource Kit Networking Guide.
|
| Avaliable on OS:-Windows XP Home, Windows XP Professional; Windows Server 2003, Standard Edition; Windows Server 2003, Enterprise Edition; Windows Server 2003, Datacenter Edition and Windows Server 2003, Web Edition. |
| Installed through:-Network Connections, Protocol |
| Startup type:-Automatic |
| Service status:-Started |
| This service depends on the following system components:-Remote Procedure Call,
Windows Management Instrumentation,
Event Log,
TCP/IP Protocol Driver,
Microsoft IPv6 Protocol Driver
|
| The following system components depend on this service:- None |
| Port Numbers used:-None |
|
| 42.Service Name:-PolicyAgent |
| Executable Name:-lsass.exe |
| Log On As:-LocalSystem |
Description:-Description Provides end-to-end security between clients and servers on TCP/IP networks. Manages IP security (IPSEC) policy, starts the Internet Key Exchange (IKE) and coordinates IPSEC policy settings with the IP security driver. The service is controlled using the net start or net stop policy agent command.
IPsec operates at the IP layer and is transparent to other operating system services and applications. It provides packet filtering, and can negotiate security between sending and receiving computers on IP networks. IPsec can be administratively configured to provide:
- Packet filtering - with actions permit, block, or negotiate security
- Negotiated trust and secure IP communication - The IKE protocol mutually authenticates the sender and receiver of IP data packets based on policy settings. Authentication can use the Kerberos authentication protocol, digital certificates, or a shared secret key (password). IKE automatically generates cryptographic keys, and IPsec security associations.
- Protect IP packets with IPsec secure formats: provides cryptographic integrity, authenticity, and optionally encryption of IP packets.
- Secure end-to-end connections: using IPsec transport mode.
- Secure IP tunnels: using IPsec tunnel mode.
IPsec also provides security for L2TP VPN connections. The IPsec security settings for L2TP are created automatically and require the IPsec service to be running in order to take effect.
|
| Avaliable on OS:-Windows XP Home, Windows XP Professional; Windows Server 2003, Standard Edition; Windows Server 2003, Enterprise Edition; Windows Server 2003, Datacenter Edition and Windows Server 2003, Web Edition. |
| Installed through:-Default operating system installation |
| Startup type:-Automatic |
| Service status:-Started |
| This service depends on the following system components:-Remote Procedure Call,
TCP/IP Protocol Driver,
IPSEC
|
| The following system components depend on this service:- None |
| Port Numbers used:-TCP: 50 (ESP), 51 (AH),UDP: 500 (ISAKMP) |
|
