The Deep description on Windows Services
We have tried our best efforts to explore the deepth of windows services and all the given information is gathered from Microsoft notes (As its microsoft product)
|
| 67.Service Name:-ProtectedStorage |
| Executable Name:-lsass.exe |
| Log On As:-LocalSystem - Allow service to interact with desktop |
Description:-Provides protected storage for sensitive data, such as private keys, to prevent access by unauthorized services processes or users. P-Store (Protected Storage) is a set of software libraries that allows applications to fetch and retrieve security and other information from a personal storage location, hiding the implementation and details of the storage itself.
The storage location provided by this service is secure and protected from modification. P-Store uses the HMAC (Hash-Based Message Authentication Code) and the SHA1 cryptographic hash function to encrypt the user's master key. This component requires no configuration.
Disabling it will make information protected with this service (for example, private keys) inaccessible. P-Store is an earlier service that has been supplanted by the DPAPI (Data Protection API), which is currently the preferred service for protected storage. Unlike DPAPI, the interface to P-Store is not publicly exposed.
If this service is stopped or disabled, private keys will be inaccessible, certificate server will not operate, S/MIME & SSL will not work and smart card logon will fail.
|
| Avaliable on OS:-Windows XP Home, Windows XP Professional; Windows Server 2003, Standard Edition; Windows Server 2003, Enterprise Edition; Windows Server 2003, Datacenter Edition and Windows Server 2003, Web Edition. |
| Installed through:-Default operating system installation |
| Startup type:-Automatic |
| Service status:-Started |
| This service depends on the following system components:-Remote Procedure Call |
| The following system components depend on this service:-None |
| Port Numbers used:-None |
|
| 68.Service Name:-Spooler |
| Executable Name:-spoolsv.exe |
| Log On As:-LocalSystem |
Description:-Manages all local and network print queues and controls print jobs. The print spooler is the center of the Windows printing subsystem and controls all printing jobs. I
The primary component of the printing interface is the print spooler. The print spooler is a service that manages the printing process and communicates with printer drivers and input/output (I/O) components (for example, the USB port and the TCP/IP protocol suite). Management of printing involves retrieving the location of the correct printer driver, loading that driver, spooling high-level function calls into a print job, scheduling the print job for printing, and so on. The print spooler is started at system startup and continues to run until the operating system is shut down.
If the print spooler service is stopped or disabled, both printing and faxing on your local computer will be unavailable. This service will not automatically start when stopped in either the automatic or manual states.
|
| Avaliable on OS:-Windows XP Home, Windows XP Professional; Windows Server 2003, Standard Edition; Windows Server 2003, Enterprise Edition; Windows Server 2003, Datacenter Edition and Windows Server 2003, Web Edition. |
| Installed through:-Default operating system installation |
| Startup type:-Automatic |
| Service status:-Started |
| This service depends on the following system components:-Remote Procedure Call |
| The following system components depend on this service:- None |
| Port Numbers used:-None |
|
| 69.Service Name:-RSVP |
| Executable Name:-RSVP.EXE |
| Log On As:-LocalSystem |
Description:-This service is started when an application uses the (Generic Quality of Service) GQoS API requesting a specific quality of service on the end-to-end connection it uses. The services signals its peer and they agree (or not) on the parameters. The RSVP messages can also be intercepted by routers who can veto the resource request if it cannot guarantee it. Once a successful negotiation happens, the service then sets up appropriate flows with the Packet Scheduler which then ensures that a packet rate for that specific flow does not exceed the negotiated rate. If disabled or removed, QoS is not guaranteed to the application and must then decide whether to accept best-effort (the default) or refuse to run.
Note: This service in not included on the Windows Server 2003 family or operating systems.
|
| Avaliable on OS:-: Windows XP Home, Professional; Windows Server 2003, Standard Edition; Windows Server 2003, Enterprise Edition; Windows Server 2003, Datacenter Edition and Windows Server 2003, Web Edition. |
| Installed through:-Default operating system installation |
| Startup type:-Manual |
| Service status:-Stopped |
| This service depends on the following system components:-AFD Networking Support Environment,
TCP/IP Protocol Driver,
IPSEC Driver,
Remote Procedure Call,
|
| The following system components depend on this service:- None |
| Port Numbers used:-None |
|
