The Deep description on Windows Services
We have tried our best efforts to explore the deepth of windows services and all the given information is gathered from Microsoft notes (As its microsoft product)
|
| 55.Service Name:-Netlogon |
| Executable Name:-lsass.exe |
| Log On As:-LocalSystem |
Description:-Maintains a secure channel between your computer and the domain controller for authenticating users and services. It passes the user's credentials through a secure channel to a domain controller and returns the domain security identifiers and user rights for the user. This is commonly referred to as pass-through authentication. Net Logon is started automatically when the computer is a member of a domain. In Windows 2000 Server family and Windows Server family, the Net Logon service publishes service resource records in the Domain Name System (DNS and uses DNS to resolve names to the Internet Protocol (IP) addresses of domain controllers.
Net Logon also implements the replication protocol based on RPC for synchronizing Microsoft Windows NT version 4.0 backupdomain controllers (BDCs) and the primary domain controller (PDC).
If this service is stopped or disabled, the computer may not be able to authenticate users and services, the domain controller cannot register DNS records and any attempt to join a machine to a domain will fail. Specifically, it might deny NTLM authentication requests and, in case of a domain controller, it will not be discoverable by client computers.
|
| Avaliable on OS:-Windows XP Home, Windows XP Professional; Windows Server 2003, Standard Edition; Windows Server 2003, Enterprise Edition; Windows Server 2003, Datacenter Edition and Windows Server 2003, Web Edition. |
| Installed through:-Default operating system installation |
| Startup type:-Manual |
| Service status:-Stopped (until a domain is joined) |
| This service depends on the following system components:-Workstation |
| The following system components depend on this service:- None |
| Port Numbers used:-TCP: 139, 888,UDP: 137, 138
|
|
| 56.Service Name:-Mnmsrvc |
| Executable Name:-mnmsrvc.exe |
| Log On As:-LocalService |
Description:-Allows authorized users to remotely access your Windows desktop from another PC over a corporate intranet by using Microsoft NetMeeting conferencing software. The service must be explicitly enabled by NetMeeting, and can be disabled in NetMeeting or shut down via a Windows tray icon.
If this service is stopped or disabled, this service unloads the NetMeeting display driver used for application sharing and remote desktop sharing will be unavailable.
|
| Avaliable on OS:-Windows XP Home, Windows XP Professional; Windows Server 2003, Standard Edition; Windows Server 2003, Enterprise Edition; Windows Server 2003, Datacenter Edition and Windows Server 2003, Web Edition. |
| Installed through:-Default operating system installation |
| Startup type:-Disabled |
| Service status:-Stopped |
| This service depends on the following system components:-None |
| The following system components depend on this service:- None |
| Port Numbers used:-TCP: 215, 731, 3389,RDP: 3389
|
|
| 57.Service Name:-Netman |
| Executable Name:-svchost.exe -k netsvcs |
| Log On As:-LocalSystem |
Description:-Manages objects in the Network Connections folder, in which you can view both network and remote connections. This service is responsible for network configuration (client side) and displays status in the notification area on the desktop (the area on the taskbar to the right of the taskbar buttons). Configuration parameters may also be accessed through this service.
This service will start automatically when the start up type is manual and the Network Connections interface is invoked.
Disabling this service results in a number of consequences including but not limited to the following:
- New network connections cannot be created.
- Since connections do not appear in the Connections folder, dial out access is prevented and LAN settings cannot be configured.
- Events about media connection and disconnection status will not be received.
- Internet Connection Sharing will not work.
- The ability to configure incoming connections, such as wireless settings, are unavailable.
- Other services using Network Connections to check for Network Location aware Group Policies will not function properly.
|
| Avaliable on OS:-Windows XP Home, Windows XP Professional; Windows Server 2003, Standard Edition; Windows Server 2003, Enterprise Edition; Windows Server 2003, Datacenter Edition and Windows Server 2003, Web Edition. |
| Installed through:-Default operating system installation |
| Startup type:- Manual |
| Service status:-Started |
| This service depends on the following system components:-Remote Procedure Call |
| The following system components depend on this service:- Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS) |
| Port Numbers used:-None |
|
