WMI

Service Host Group Name netsvcs
Service Short Description WMI
Service Full Description Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
Service Executable File Path c:\windows\system32\wbem\wmisvc.dll
Service Host Launch Command C:\Windows\system32\svchost.exe -k netsvcs
Service Privileges
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Winmgmt
Depends on Ole resource dll

Dynamic Interface Manager

Service Host Group Name netsvcs
Service Short Description Dynamic Interface Manager
Service Full Description Offers routing services to businesses in local area and wide area network environments.
Service Executable File Path c:\windows\system32\mprdim.dll
Service Host Launch Command C:\Windows\System32\svchost.exe -k netsvcs
Service Privileges SeChangeNotifyPrivilege
SeLoadDriverPrivilege
SeImpersonatePrivilege
SeAuditPrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess
Depends on Ole resource dll
Base Filtering Engine
Remote Access Connection Manager
Http

Windows Update Agent

Service Host Group Name netsvcs
Service Short Description Windows Update Agent
Service Full Description Enables the detection, download, and installation of updates for Windows and other programs. If this service is disabled, users of this computer will not be able to use Windows Update or its automatic updating feature, and programs will not be able to use the Windows Update Agent (WUA) API.
Service Executable File Path c:\windows\system32\wuaueng.dll
Service Host Launch Command C:\Windows\system32\svchost.exe -k netsvcs
Service Privileges SeAuditPrivilege
SeCreateGlobalPrivilege
SeCreatePageFilePrivilege
SeTcbPrivilege
SeAssignPrimaryTokenPrivilege
SeImpersonatePrivilege
SeIncreaseQuotaPrivilege
SeShutdownPrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv
Depends on Ole resource dll

Task Scheduler Service

Service Host Group Name netsvcs
Service Short Description Task Scheduler Service
Service Full Description Enables a user to configure and schedule automated tasks on this computer. The service also hosts multiple Windows system-critical tasks. If this service is stopped or disabled, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start.
Service Executable File Path c:\windows\system32\schedsvc.dll
Service Host Launch Command C:\Windows\system32\svchost.exe -k netsvcs
Service Privileges SeIncreaseQuotaPrivilege
SeChangeNotifyPrivilege
SeAuditPrivilege
SeImpersonatePrivilege
SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeRestorePrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Schedule
Depends on Ole resource dll
Event Logging Service

Microsoft Smartcard Certificate Propagation Service

Service Host Group Name netsvcs
Service Short Description Microsoft Smartcard Certificate Propagation Service
Service Full Description Allows the system to be configured to lock the user desktop upon smart card removal.
Service Executable File Path c:\windows\system32\certprop.dll
Service Host Launch Command C:\Windows\system32\svchost.exe -k netsvcs
Service Privileges SeCreateGlobalPrivilege
SeTcbPrivilege
SeChangeNotifyPrivilege
SeImpersonatePrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SCPolicySvc
Depends on Ole resource dll

Secondary Logon Service DLL

Service Host Group Name netsvcs
Service Short Description Secondary Logon Service DLL
Service Full Description Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.
Service Executable File Path c:\windows\system32\seclogon.dll
Service Host Launch Command C:\Windows\system32\svchost.exe -k netsvcs
Service Privileges SeTcbPrivilege
SeRestorePrivilege
SeBackupPrivilege
SeAssignPrimaryTokenPrivilege
SeIncreaseQuotaPrivilege
SeImpersonatePrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\seclogon
Depends on

System Event Notification Service (SENS)

Service Host Group Name netsvcs
Service Short Description System Event Notification Service (SENS)
Service Full Description Monitors system events and notifies subscribers to COM+ Event System of these events.
Service Executable File Path c:\windows\system32\sens.dll
Service Host Launch Command C:\Windows\system32\svchost.exe -k netsvcs
Service Privileges SeAuditPrivilege
SeChangeNotifyPrivilege
SeCreateGlobalPrivilege
SeImpersonatePrivilege
SeTcbPrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SENS
Depends on COM+ Resources

Remote Desktop Configuration service

Service Host Group Name netsvcs
Service Short Description Remote Desktop Configuration service
Service Full Description Remote Desktop Configuration service (RDCS) is responsible for all Remote Desktop Services and Remote Desktop related configuration and session maintenance activities that require SYSTEM context. These include per-session temporary folders, RD themes, and RD certificates.
Service Executable File Path c:\windows\system32\sessenv.dll
Service Host Launch Command C:\Windows\System32\svchost.exe -k netsvcs
Service Privileges SeBackupPrivilege
SeRestorePrivilege
SeTakeOwnershipPrivilege
SeImpersonatePrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SessionEnv
Depends on Ole resource dll
Workstation Service DLL

Software installation Service

Service Host Group Name netsvcs
Service Short Description Software installation Service
Service Full Description Processes installation, removal, and enumeration requests for software deployed through Group Policy. If the service is disabled, users will be unable to install, remove, or enumerate software deployed through Group Policy. If this service is disabled, any services that explicitly depend on it will fail to start.
Service Executable File Path c:\windows\system32\appmgmts.dll
Service Host Launch Command C:\Windows\system32\svchost.exe -k netsvcs
Service Privileges SeCreateGlobalPrivilege
SeImpersonatePrivilege
SeIncreaseQuotaPrivilege
SeShutdownPrivilege
SeTakeOwnershipPrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AppMgmt
Depends on

BDE Service

Service Host Group Name netsvcs
Service Short Description BDE Service
Service Full Description BDESVC hosts the BitLocker Drive Encryption service. BitLocker Drive Encryption provides secure startup for the operating system, as well as full volume encryption for OS, fixed or removable volumes. This service allows BitLocker to prompt users for various actions related to their volumes when mounted, and unlocks volumes automatically without user interaction. Additionally, it stores recovery information to Active Directory, if available, and, if necessary, ensures the most recent recovery certificates are used. Stopping or disabling the service would prevent users from leveraging this functionality.
Service Executable File Path c:\windows\system32\bdesvc.dll
Service Host Launch Command C:\Windows\System32\svchost.exe -k netsvcs
Service Privileges SeChangeNotifyPrivilege
SeImpersonatePrivilege
Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BDESVC
Depends on