Group Policy Client API

Service Host Group Name netsvcs
Service Short Description Group Policy Client API
Service Full Description The service is responsible for applying settings configured by administrators for the computer and users through the Group Policy component. If the service is stopped or disabled, the settings will not be applied and applications and components will not be manageable through Group Policy. Any components or applications that depend on the Group Policy component might not be functional if the service is stopped or disabled.
Service Executable File Path c:\windows\system32\gpapi.dll
Service Host Launch Command C:\Windows\system32\svchost.exe -k netsvcs
Service Privileges SeImpersonatePrivilege
SeTcbPrivilege
SeTakeOwnershipPrivilege
SeIncreaseQuotaPrivilege
SeAssignPrimaryTokenPrivilege
SeSecurityPrivilege
SeChangeNotifyPrivilege
SeCreatePermanentPrivilege
SeShutdownPrivilege
SeLoadDriverPrivilege
SeRestorePrivilege
SeBackupPrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gpsvc
Depends on Ole resource dll
Mup

Key Management Service

Service Host Group Name netsvcs
Service Short Description Key Management Service
Service Full Description Provides X.509 certificate and key management services for the Network Access Protection Agent (NAPAgent). Enforcement technologies that use X.509 certificates may not function properly without this service
Service Executable File Path c:\windows\system32\kmsvc.dll
Service Host Launch Command C:\Windows\System32\svchost.exe -k netsvcs
Service Privileges SeChangeNotifyPrivilege
SeImpersonatePrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\hkmsvc
Depends on Ole resource dll

IKE extension

Service Host Group Name netsvcs
Service Short Description IKE extension
Service Full Description The IKEEXT service hosts the Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) keying modules. These keying modules are used for authentication and key exchange in Internet Protocol security (IPsec). Stopping or disabling the IKEEXT service will disable IKE and AuthIP key exchange with peer computers. IPsec is typically configured to use IKE or AuthIP; therefore, stopping or disabling the IKEEXT service might result in an IPsec failure and might compromise the security of the system. It is strongly recommended that you have the IKEEXT service running.
Service Executable File Path c:\windows\system32\ikeext.dll
Service Host Launch Command C:\Windows\system32\svchost.exe -k netsvcs
Service Privileges SeAuditPrivilege
SeImpersonatePrivilege
SeTcbPrivilege
SeDebugPrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IKEEXT
Depends on Base Filtering Engine

Application Experience Service

Service Host Group Name netsvcs
Service Short Description Application Experience Service
Service Full Description Processes application compatibility cache requests for applications as they are launched
Service Executable File Path c:\windows\system32\aelupsvc.dll
Service Host Launch Command C:\Windows\system32\svchost.exe -k netsvcs
Service Privileges SeTcbPrivilege
SeImpersonatePrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AeLookupSvc
Depends on

Service that offers IPv6 connectivity over an IPv4 network.

Service Host Group Name NetSvcs
Service Short Description Service that offers IPv6 connectivity over an IPv4 network.
Service Full Description Provides tunnel connectivity using IPv6 transition technologies (6to4, ISATAP, Port Proxy, and Teredo), and IP-HTTPS. If this service is stopped, the computer will not have the enhanced connectivity benefits that these technologies offer.
Service Executable File Path c:\windows\system32\iphlpsvc.dll
Service Host Launch Command C:\Windows\System32\svchost.exe -k NetSvcs
Service Privileges SeCreateGlobalPrivilege
SeImpersonatePrivilege
SeLoadDriverPrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iphlpsvc
Depends on Ole resource dll
Tdx
WMI
tcpip
Network Store Interface RPC server

Application Information Service

Service Host Group Name netsvcs
Service Short Description Application Information Service
Service Full Description Facilitates the running of interactive applications with additional administrative privileges. If this service is stopped, users will be unable to launch applications with the additional administrative privileges they may require to perform desired user tasks.
Service Executable File Path c:\windows\system32\appinfo.dll
Service Host Launch Command C:\Windows\system32\svchost.exe -k netsvcs
Service Privileges SeAssignPrimaryTokenPrivilege
SeIncreaseQuotaPrivilege
SeTcbPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeChangeNotifyPrivilege
SeImpersonatePrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Appinfo
Depends on Ole resource dll
ProfSvc

Server Service DLL

Service Host Group Name netsvcs
Service Short Description Server Service DLL
Service Full Description Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Service Executable File Path c:\windows\system32\srvsvc.dll
Service Host Launch Command C:\Windows\system32\svchost.exe -k netsvcs
Service Privileges SeChangeNotifyPrivilege
SeImpersonatePrivilege
SeAuditPrivilege
SeLoadDriverPrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer
Depends on SamSS
Srv

Software installation Service

Service Host Group Name netsvcs
Service Short Description Software installation Service
Service Full Description Processes installation, removal, and enumeration requests for software deployed through Group Policy. If the service is disabled, users will be unable to install, remove, or enumerate software deployed through Group Policy. If this service is disabled, any services that explicitly depend on it will fail to start.
Service Executable File Path c:\windows\system32\appmgmts.dll
Service Host Launch Command C:\Windows\system32\svchost.exe -k netsvcs
Service Privileges SeCreateGlobalPrivilege
SeImpersonatePrivilege
SeIncreaseQuotaPrivilege
SeShutdownPrivilege
SeTakeOwnershipPrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AppMgmt
Depends on

BDE Service

Service Host Group Name netsvcs
Service Short Description BDE Service
Service Full Description BDESVC hosts the BitLocker Drive Encryption service. BitLocker Drive Encryption provides secure startup for the operating system, as well as full volume encryption for OS, fixed or removable volumes. This service allows BitLocker to prompt users for various actions related to their volumes when mounted, and unlocks volumes automatically without user interaction. Additionally, it stores recovery information to Active Directory, if available, and, if necessary, ensures the most recent recovery certificates are used. Stopping or disabling the service would prevent users from leveraging this functionality.
Service Executable File Path c:\windows\system32\bdesvc.dll
Service Host Launch Command C:\Windows\System32\svchost.exe -k netsvcs
Service Privileges SeChangeNotifyPrivilege
SeImpersonatePrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BDESVC
Depends on

Background Intelligent Transfer Service

Service Host Group Name netsvcs
Service Short Description Background Intelligent Transfer Service
Service Full Description Transfers files in the background using idle network bandwidth. If the service is disabled, then any applications that depend on BITS, such as Windows Update or MSN Explorer, will be unable to automatically download programs and other information.
Service Executable File Path c:\windows\system32\qmgr.dll
Service Host Launch Command C:\Windows\System32\svchost.exe -k netsvcs
Service Privileges SeCreateGlobalPrivilege
SeImpersonatePrivilege
SeTcbPrivilege
SeAssignPrimaryTokenPrivilege
SeIncreaseQuotaPrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS
Depends on Ole resource dll
COM+ Resources