The Deep description on Windows Services
We have tried our best efforts to explore the deepth of windows services and all the given information is gathered from Microsoft notes (As its microsoft product)
|
| 85. Service Name:-SamSs |
| Executable Name:-lsass.exe |
| Log On As:-LocalSystem |
Description:-The SAM (Security Accounts Manager) is a protected subsystem that manages user and group account information. In Windows 2000 and the Windows Server 2003 family, workstation security accounts are stored by SAM in the local computer registry, and domain controller security accounts are stored in Active Directory. In Windows NT 4.0, both local and domain security accounts are stored in the registry.
This service cannot be stopped via the MMC services snap-in. If this service is disabled, this will prevent other services in the system from being notified when the SAM is ready, in turn causing these services to fail to start successfully. This service cannot be disabled.
|
| Avaliable on OS:-Windows XP Home, Windows XP Professional; Windows Server 2003, Standard Edition; Windows Server 2003, Enterprise Edition; Windows Server 2003, Datacenter Edition and Windows Server 2003, Web Edition. |
| Installed through:-Default operating system installation |
| Startup type:-Automatic |
| Service status:-Started |
| This service depends on the following system components:-Remote Procedure Call |
| The following system components depend on this service:-DHCP Server,
Distributed File System,
Distributed Transaction Coordinator,
IIS Admin Service,
FTP Publishing Service,
HTTP SSL,
World Wide Web Publishing Service,
Microsoft POP3 Service,
Network News Transfer Protocol (NNTP),
Simple Mail Transfer Protocol (SMTP),
Intersite Messenger Service,
Windows Internet name Services (WINS),
Message Queuing,
Message Queuing Downlevel Client Support,
Message Queuing Triggers
|
| Port Numbers used:-None |
|
| 86. Service Name:-LanmanServer |
| Executable Name:-svchost.exe -k netsvcs |
| Log On As:-LocalSystem |
Description:-Provides RPC support for file, print and named pipe sharing over the network. The Server service allows the sharing of local resources (such as disks and printers) so that other users on the network can access them. It also allows named pipe communication between applications running on other computers and the users computer, which is used for RPC.
Named pipe communication is memory reserved for the output of one process to be used as input for another process. The input-accepting process does not need to be local to the computer.
Stopping or disabling this service will results in:
- An inability to share files and printers from the users computer with other computers on the network.
- An inability of the users computer to service RPC requests.
- An inability to serve named pipes to other computers on the network..
|
| Avaliable on OS:-Windows XP Home, Windows XP Professional; Windows Server 2003, Standard Edition; Windows Server 2003, Enterprise Edition; Windows Server 2003, Datacenter Edition and Windows Server 2003, Web Edition. |
| Installed through:-Default operating system installation |
| Startup type:-Automatic |
| Service status:-Started |
| This service depends on the following system components:-None |
| The following system components depend on this service:-Computer Browser,
Distributed File System,
Remote Installation
|
| TCP: 139, 445,
UDP: 137, 138, 139, 445
|
|
| 87. Service Name:-ShellHWDetection |
| Executable Name:-svchost.exe -k netsvcs |
| Log On As:-LocalSystem |
Description:-This service provides notifications for AutoPlay hardware events.
AutoPlay is a feature that detects content such as pictures, music, or video files on removable media and removable devices. AutoPlay then automatically launches applications to play or display that content. This simplifies the use of specialized peripheral devices such as MP3 players and digital photo readers. It also makes it easier for users who are unfamiliar with the software needed to access various content types.
AutoPlay supports a variety of media content types and applications. Both independent hardware vendors (IHVs) and independent software vendors (ISVs) can extend this support to include their hardware devices and applications. A user can configure a different AutoPlay action for any combination of pictures, music files, and video.
Supported Media and Device Types
- Removable storage media such as Zip and Jaz
- Flash media such as CompactFlash, SmartMedia, and Memory Stick
- PC cards
- External hot-plug USB or 1394 fixed drives
- Supported Content Types
The content types supported are:
- Pictures (.jpg, .bmp, .gif, .tif)
- Music Files (.mp3, .wma)
- Video (.mpg, .asf)
If this service is stopped, you will lose the hardware Autoplay functionality and shell performance may be affected. Also, My Computer icons and labels will revert back to Windows 2000 behavior; and Shell performance will also be affected.
|
| Avaliable on OS:-: Windows XP Home, Windows XP Professional; Windows Server 2003, Standard Edition; Windows Server 2003, Enterprise Edition; Windows Server 2003, Datacenter Edition and Windows Server 2003, Web Edition. |
| Installed through:-Default operating system installation |
| Startup type:-Automatic |
| Service status:-Started |
| This service depends on the following system components:-Remote Procedure Call |
| The following system components depend on this service:-Windows Image Acquisition (WIA) |
| Port Numbers used:-None |
|
