The Deep description on Windows Services
We have tried our best efforts to explore the deepth of windows services and all the given information is gathered from Microsoft notes (As its microsoft product)
|
| 113. Service Name:-VSS |
| Executable Name:-vssvc.exe |
| Log On As:-LocalSystem |
Description:-Manages volume snapshots used by backup applications.
This service manages the volume shadow. When a backup application attempts to start a backup utilizing the new volume shadow infrastructure, the backup application calls methods to determine the number of writers that are running on the service, the queries each writer to gather the required metadata. After this, the backup application can collect the volumes that need to be shadow copied to ensure a successful backup session.
Backup allows you to create shadow copy backups of volumes, exact copies of files, including all open files. For example, databases that are held open exclusively and files that are open due to operator or system activity are backed up during a volume shadow copy backup. In this way, files that have changed during the backup process are copied correctly.
Shadow copy backups ensure that:
- Applications can continue to write data to the volume during a backup.
- Files that are open are no longer omitted during a backup.
- Backups can be performed at any time, without locking out users.
Some applications manage storage consistency differently while files are open, which can affect the consistency of the files in the backup. For critical applications you should consult the application documentation or your provider for information about the recommended backup method.
If this service is turned off volume shadow copy backup functionality will no longer occur.
|
| Avaliable on OS:-Windows XP Home, Windows XP Professional; Windows Server 2003, Standard Edition; Windows Server 2003, Enterprise Edition; Windows Server 2003, Datacenter Edition and Windows Server 2003, Web Edition. |
| Installed through:-Default operating system installation |
| Startup type:-Manual |
| Service status:-Stopped |
| This service depends on the following system components:-Remote Procedure Call |
| The following system components depend on this service:- None |
| Port Numbers used:-None |
|
| 114. Service Name:-WebClient |
| Executable Name:- svchost.exe -k LocalService |
| Log On As:-LocalService |
Description:-The WebClient service allows Win32 applications to access documents on the Internet.
The WebClient extends the networking capability of Windows by allowing standard Win32 applications to create, read and write files on Internet file servers using the WebDAV protocol. The WebDAV protocol is a file access protocol described in Extensible Markup Language (XML) that travels over the Hypertext Transfer Protocol (HTTP). By using standard HTTP, WebDAV runs over existing Internet infrastructure (e.g., firewalls and routers).
Disabling the service will remove this capability, and will prevent users from using the Web Publishing Wizard to publish data to the internet for locations that use the WebDAV protocol (e.g., MSN).
|
| Avaliable on OS:-Windows XP Home, Windows XP Professional; Windows Server 2003, Standard Edition; Windows Server 2003, Enterprise Edition; Windows Server 2003, Datacenter Edition and Windows Server 2003, Web Edition. |
| Installed through:-Default operating system installation |
| Startup type:-Disabled |
| Service status:-Stopped |
| This service depends on the following system components:-WebDav Client Redirector |
| The following system components depend on this service:- None |
| Port Numbers used:-TCP: 80
|
|
| 115. Service Name:- Elementmgr |
| Executable Name:-Elementmgr.exe |
| Log On As:-LocalSystem |
Description:-The Web Element Manager Service is responsible for serving Web user interface elements for the Administration Web site at port 8098. These elements are used to determine the following information:
- Tabs to display on the administration Web site
- Remote Administration Tasks available to the Administrator
- Table of Contents
- Help Topics
- Remote Administration Alerts that can be displayed
An administrator can remotely manage a server by connecting to the server at https://servername:8098. When a connection is received on this Web site the default ASP code queries the Web Element Manager Service for each type of information listed above. Once all the information has been collected the appropriate Web page is displayed to the administrator.
The Web Element Manager Service loads up all the information at startup time; the client (in this case the ASP code) requests the Web user interface elements through a COM interface. The Service runs in the Local System account and requests on the COM interface are only accepted from clients running under the Administrators or Local System accounts. If the Service is stopped or set to manual start, this service will start when the next request for Web user interface elements is received.
|
| Avaliable on OS:-Windows Server 2003, Standard Edition; Windows Server 2003, Enterprise Edition; Windows Server 2003, Datacenter Edition and Windows Server 2003, Web Edition. |
| Installed through:-Add/Remove Programs, Add/Remove Windows Components, Application Server, Internet Information Server (IIS), sasetup.msi located in the System32 system folder |
| Startup type:-Automatic |
| Service status:-Started |
| This service depends on the following system components:-Remote Procedure Call (RPC) |
| The following system components depend on this service:-None |
| Port Numbers used:-TCP: 8098 |
|
