The Deep description on Windows Services
We have tried our best efforts to explore the deepth of windows services and all the given information is gathered from Microsoft notes (As its microsoft product)
|
| 125. Service Name:-WinHttpAutoSvc |
| Executable Name:-SVCHOST.EXE -k LocalService |
| Log On As:-LocalService |
Description:-The WinHttpAutoSvc implements proxy configuration discovery for WinHttp clients. It performs the lookup done by WinHttpGetProxyForUrl() as documented in MSDN. Applications use the service to sandbox autoproxy script execution away from the client process.
The WinHttpGetProxyForUrl() function implements the Web Proxy Auto-Discovery (WPAD) protocol for automatically configuring the proxy settings for an HTTP request. The WPAD protocol downloads a Proxy Auto-Configuration (PAC) file, which is a script that identifies the proxy server to use for a given target URL. PAC files are typically deployed by the IT department within a corporate network environment.
To make configuring the proxy settings for WinHTTP-based applications easier, WinHTTP now implements the Web Proxy Auto-Discovery (WPAD) protocol, often referred to as autoproxy. This is the same protocol that web browsers implement to automatically discover the proxy configuration without requiring an end-user to specify a proxy server manually. This feature is available starting with WinHTTP version 5.1 in Windows 2000 Service Pack 3, Windows XP Service Pack 1 and Windows Server 2003.
Stopping or disabling the service may cause WinHttp clients to be unable to automatically detect proxy settings, and may cause other WinHttp clients to automatically detect proxy settings within their own process.
|
| Avaliable on OS:-Windows Server 2003, Standard Edition; Windows Server 2003, Enterprise Edition; Windows Server 2003, Datacenter Edition and Windows Server 2003, Web Edition. |
| Installed through:-Default operating system installation |
| Startup type:-Manual |
| Service status:-Started |
| This service depends on the following system components:-AFD Networking Support Environment,
TCP/IP Protocol Driver,
DHCP Client,
IPSec Driver
|
| The following system components depend on this service:- None |
| Port Numbers used:-None |
|
| 126. Service Name:-Wzcsvc |
| Executable Name:-svchost.exe -k netsvcs |
| Log On As:-LocalSystem |
Description:-Enables automatic configuration for IEEE 802.11 wireless adapters for wireless communications.
Microsoft partnered with 802.11 Network Interface Card (NIC) vendors to improve the wireless roaming experience on Windows by automating the process of configuring the NIC to associate with an available network.
The wireless NIC and its NDIS driver need to do very little beyond supporting a few new NDIS Object Identifiers (OIDs) used for the querying and setting of device and driver behavior. The NIC will scan for available networks and pass those to Windows . The wireless configuration service takes care of configuring the NIC with an available network. In the case where there are two networks covering the same area, the user can configure a preferred network order and the machine will try each network in order until it finds an active one. It is also possible to limit association to only the configured, preferred networks.
If this service is stopped, automatic wireless configuration will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
On Windows XP Home and Professional, this service is called Wireless Zero Configuration.
|
| Avaliable on OS:-Windows XP Home, Windows XP Professional; Windows Server 2003, Standard Edition; Windows Server 2003, Enterprise Edition; Windows Server 2003, Datacenter Edition and Windows Server 2003, Web Edition. |
| Installed through:-Default operating system installation |
| Startup type:-Automatic on Windows Server 2003 Standard, Enterprise, and Datacenter Edition, Windows Server 2003 Web Edition. |
| Service status:-Started |
| This service depends on the following system components:-Remote Procedure Call,
NDIS Usermode I/O Protocol
|
| The following system components depend on this service:- None |
| Port Numbers used:-None |
|
| 127. Service Name:-WmiApSrv |
| Executable Name:-wmiapsrv.exe |
| Log On As:- LocalSystem |
Description:-Provides performance library information from WMI HiPerf providers. Applications and services wishing to provide performance counters today can do so in two ways: by writing a WMI High Performance provider, or by writing a performance library. Consumers of high performance data also have two ways to request performance data: through WMI, or through the PDH (Performance Data Helper) APIs. We have mechanisms in place so that the two models interact together and that clients accessing counters through each model can still see the counters provided by the other model. The Reverse Adapter is one of those mechanisms.
The WMI Performance Adapter service transforms performance counters supplied by WMI High Performance providers into counters that can be consumed by PDH through the Reverse Adapter Performance Library. This way, PDH clients (e.g., Sysmon) can consume performance counters surfaced by any WMI High Performance providers on the box.
The service is a manual service and is not running by default. It runs on demand when a performance client (e.g., Sysmon) uses PDH to query performance data. Once the client disconnects the service stops.
|
| Avaliable on OS:-Windows XP Home, Windows XP Professional; Windows Server 2003, Standard Edition; Windows Server 2003, Enterprise Edition; Windows Server 2003, Datacenter Edition and Windows Server 2003, Web Edition. |
| Installed through:-Default operating system installation |
| Startup type:-Manual |
| Service status:-Stopped |
| This service depends on the following system components:-Remote Procedure Call |
| The following system components depend on this service:-none> |
| Port Numbers used:-None |
|
