NetworkService « Svchost.Exe Problems and Fixes

Remote Desktop Session Host Server Remote Connections Manager

Service Host Group Name	NetworkService
Service Short Description	Remote Desktop Session Host Server Remote Connections Manager
Service Full Description	Allows users to connect interactively to a remote computer. Remote Desktop and Remote Desktop Session Host Server depend on this service. To prevent remote use of this computer, clear the checkboxes on the Remote tab of the System properties control panel item.
Service Executable File Path	c:\windows\system32\termsrv.dll
Service Host Launch Command	C:\Windows\System32\svchost.exe -k NetworkService
Service Privileges	SeAssignPrimaryTokenPrivilege SeAuditPrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege SeIncreaseQuotaPrivilege
Registry Key	HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermService
Depends on	Ole resource dll TermDD

Learn how to open PAGES file.

Event Collector Service

Service Host Group Name	NetworkService
Service Short Description	Event Collector Service
Service Full Description	This service manages persistent subscriptions to events from remote sources that support WS-Management protocol. This includes Windows Vista event logs, hardware and IPMI-enabled event sources. The service stores forwarded events in a local Event Log. If this service is stopped or disabled event subscriptions cannot be created and forwarded events cannot be accepted.
Service Executable File Path	c:\windows\system32\wecsvc.dll
Service Host Launch Command	C:\Windows\system32\svchost.exe -k NetworkService 192.168.1.254
Service Privileges	SeAuditPrivilege SeChangeNotifyPrivilege SeImpersonatePrivilege
Registry Key	HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wecsvc
Depends on	HTTP Event Logging Service

Learn how to Open JSON File and how to open PST file.

WSMan Service

Service Host Group Name	NetworkService
Service Short Description	WSMan Service
Service Full Description	Windows Remote Management (WinRM) service implements the WS-Management protocol for remote management. WS-Management is a standard web services protocol used for remote software and hardware management. The WinRM service listens on the network for WS-Management requests and processes them: 192.168.1.1. The WinRM Service needs to be configured with a listener using winrm.cmd command line tool or through Group Policy in order for it to listen over the network. The WinRM service provides access to WMI data and enables event collection. Event collection and subscription to events require that the service is running. WinRM messages use HTTP and HTTPS as transports. The WinRM service does not depend on IIS but is preconfigured to share a port with IIS on the same machine. The WinRM service reserves the /wsman URL prefix. To prevent conflicts with IIS, administrators should ensure that any websites hosted on IIS do not use the /wsman URL prefix.
Service Executable File Path	c:\windows\system32\wsmsvc.dll
Service Host Launch Command	C:\Windows\System32\svchost.exe -k NetworkService
Service Privileges	SeAssignPrimaryTokenPrivilege SeAuditPrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege
Registry Key	HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinRM
Depends on	Ole resource dll HTTP

Learn how to open ICS file.

Policy Storage dll

Service Host Group Name	NetworkServiceNetworkRestricted
Service Short Description	Policy Storage dll
Service Full Description	Internet Protocol security (IPsec) supports network-level peer authentication, data origin authentication, data integrity, data confidentiality (encryption), and replay protection. This service enforces IPsec policies created through the IP Security Policies snap-in or the command-line tool “netsh ipsec”. If you stop this service, you may experience network connectivity issues if your policy requires that connections use IPsec. Also,remote management of Windows Firewall is not available when this service is stopped.
Service Executable File Path	c:\windows\system32\polstore.dll
Service Host Launch Command	C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
Service Privileges	SeAuditPrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege
Registry Key	HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent
Depends on	Tcpip Base Filtering Engine

Read how to open SWF file and how to open CTG file.

Quarantine Agent Service Run-Time

Service Host Group Name	NetworkService
Service Short Description	Quarantine Agent Service Run-Time
Service Full Description	The Network Access Protection (NAP) agent service collects and manages health information for client computers on a network. Information collected by NAP agent is used to make sure that the client computer has the required software and settings. If a client computer is not compliant with health policy, it can be provided with restricted network access until its configuration is updated. Depending on the configuration of health policy, client computers might be automatically updated so that users quickly regain full network access without having to manually update their computer.
Service Executable File Path	c:\windows\system32\qagentrt.dll
Service Host Launch Command	C:\Windows\System32\svchost.exe -k NetworkService
Service Privileges	SeChangeNotifyPrivilege SeImpersonatePrivilege
Registry Key	HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\napagent
Depends on	Ole resource dll

Learn how to open SWF file and how to open XML file.

Network Location Awareness 2

Service Host Group Name	NetworkService
Service Short Description	Network Location Awareness 2
Service Full Description	Collects and stores configuration information for the network and notifies programs when this information is modified. If this service is stopped, configuration information might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Service Executable File Path	c:\windows\system32\nlasvc.dll
Service Host Launch Command	C:\Windows\System32\svchost.exe -k NetworkService
Service Privileges	SeCreateGlobalPrivilege SeImpersonatePrivilege SeAuditPrivilege
Registry Key	HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NlaSvc
Depends on	Network Store Interface RPC server Ole resource dll TcpIp

Learn how to open NUMBERS file.

Microsoft® Windows(TM) Telephony Server

Service Host Group Name	NetworkService
Service Short Description	Microsoft® Windows(TM) Telephony Server
Service Full Description	Provides Telephony API (TAPI) support for programs that control telephony devices on the local computer and, through the LAN, on servers that are also running the service.
Service Executable File Path	c:\windows\system32\tapisrv.dll
Service Host Launch Command	C:\Windows\System32\svchost.exe -k NetworkService
Service Privileges	SeAuditPrivilege SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege SeIncreaseQuotaPrivilege SeAssignPrimaryTokenPrivilege
Registry Key	HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TapiSrv
Depends on	User-mode Plug-and-Play Service Ole resource dll

Learn how to open PAGES file and how to open EML file.

Cryptographic Services

Service Host Group Name	NetworkService
Service Short Description	Cryptographic Services
Service Full Description	Provides four management services: Catalog Database Service, which confirms the signatures of Windows files and allows new programs to be installed; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; Automatic Root Certificate Update Service, which retrieves root certificates from Windows Update and enable scenarios such as SSL; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
Service Executable File Path	c:\windows\system32\cryptsvc.dll
Service Host Launch Command	C:\Windows\system32\svchost.exe -k NetworkService
Service Privileges	SeChangeNotifyPrivilege SeCreateGlobalPrivilege SeImpersonatePrivilege
Registry Key	HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CryptSvc
Depends on	Ole resource dll

Read how to open BUP file or open EPUB file.

DNS Client API DLL

Service Host Group Name	NetworkService
Service Short Description	DNS Client API DLL
Service Full Description	The DNS Client service (dnscache) caches Domain Name System (DNS) names and registers the full computer name for this computer. If the service is stopped, DNS names will continue to be resolved. However, the results of DNS name queries will not be cached and the computers name will not be registered. If the service is disabled, any services that explicitly depend on it will fail to start.
Service Executable File Path	c:\windows\system32\dnsapi.dll
Service Host Launch Command	C:\Windows\system32\svchost.exe -k NetworkService
Service Privileges	SeChangeNotifyPrivilege SeCreateGlobalPrivilege
Registry Key	HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache
Depends on	Tdx Network Store Interface RPC server

Learn how to open MKV file.

Workstation Service DLL

Service Host Group Name	NetworkService
Service Short Description	Workstation Service DLL
Service Full Description	Creates and maintains client network connections to remote servers using the SMB protocol. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Service Executable File Path	c:\windows\system32\wkssvc.dll
Service Host Launch Command	C:\Windows\System32\svchost.exe -k NetworkService
Service Privileges	SeChangeNotifyPrivilege SeImpersonatePrivilege SeAuditPrivilege
Registry Key	HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation
Depends on	Bowser MRxSmb10 MRxSmb20 Network Store Interface RPC server

Learn how to open MP4 file and how to open PKPASS file.