SOLVED: Unlocking the Mysteries: A Comprehensive Guide to 100 Windows Services

If you work in the IT Department with Microsoft Windows technologies, you frequently need to determine details of a Windows Service. To help our Windows technicians we created this list of the top 100 Windows services in use today, along with a bit of detail to help them determine what is legitimate and what is not.

However, if you are not a computer tech, you might ask, just what is a Windows Service?

What is a “Service” In Windows

A Windows Service is a specialized program designed to run continuously in the background, without requiring direct user interaction. Unlike regular applications, which are launched manually and typically have a visible interface, Windows Services are often initiated automatically when the operating system boots up. They perform essential tasks such as managing system updates, handling security processes, managing network connections, and facilitating hardware operations.

Windows Services are crucial to the smooth functioning of the operating system and its various features. These services are typically configured to start automatically and operate under specific user accounts like LocalSystem or NetworkService, depending on their security requirements. They can also be set to run manually or disabled when not needed.

A key characteristic of Windows Services is their ability to run for extended periods, often continuously from the time the system is started until it is shut down. This ensures that important background tasks—like antivirus scanning, file indexing, or system monitoring—are performed without interruption, maintaining the stability, security, and performance of the system. Essentially, a Windows Service is just a program that runs in the background all or most of the time, ensuring vital system operations remain functional.

Top 100 Windows Services Explained

Note that these are in alphabetic order.

1. Application Identity

Name: Application Identity
Executable: svchost.exe -k netsvcs
Developer Company: Microsoft Corporation
Dependencies: None
First Released in Version: Windows Vista
Log On As: LocalService
Description: This service determines and verifies the identity of an application. It is used for AppLocker policies to enforce software restriction rules. It checks the application’s identity based on file attributes like hash, path, or publisher.

2. Application Information

Name: Application Information
Executable: svchost.exe -k netsvcs
Developer Company: Microsoft Corporation
Dependencies: None
First Released in Version: Windows Vista
Log On As: LocalSystem
Description: Enables applications to run with elevated privileges. Without this service, certain tasks requiring administrative privileges would fail to launch.

3. Background Intelligent Transfer Service (BITS)

Name: BITS
Executable: svchost.exe -k netsvcs
Developer Company: Microsoft Corporation
Dependencies: None
First Released in Version: Windows XP
Log On As: LocalSystem
Description: Transfers files in the background using idle network bandwidth. It is used by Windows Update and other applications to download updates or files without disrupting network usage.

4. Bluetooth Audio Gateway Service

Name: Bluetooth Audio Gateway Service
Executable: svchost.exe -k LocalSystemNetworkRestricted
Developer Company: Microsoft Corporation
Dependencies: Bluetooth Support Service
First Released in Version: Windows 10
Log On As: LocalSystem
Description: Manages the Bluetooth Handsfree Protocol, enabling the routing of calls through Bluetooth-enabled audio devices like headsets.

5. Cryptographic Services

Name: Cryptographic Services
Executable: svchost.exe -k NetworkService
Developer Company: Microsoft Corporation
Dependencies: None
First Released in Version: Windows 2000
Log On As: NetworkService
Description: Provides three management services: Catalog Database Service, which confirms the signatures of Windows files, Protected Root Service, and Key Service. These are essential for installing software that requires verified digital certificates.

6. DCOM Server Process Launcher

Name: DCOM Server Process Launcher
Executable: svchost.exe -k DcomLaunch
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC)
First Released in Version: Windows XP
Log On As: LocalSystem
Description: Provides launch functionality for Distributed Component Object Model (DCOM) services. This is critical for allowing communication between processes on different machines in a networked environment.

7. Device Install Service

Name: Device Install Service
Executable: svchost.exe -k netsvcs
Developer Company: Microsoft Corporation
Dependencies: Plug and Play
First Released in Version: Windows 10
Log On As: LocalSystem
Description: Manages installation of new devices and drivers. This service is responsible for enabling the plug-and-play experience when new hardware is attached.

8. DHCP Client

Name: DHCP Client
Executable: svchost.exe -k LocalServiceNetworkRestricted
Developer Company: Microsoft Corporation
Dependencies: Ancillary Function Driver for Winsock, Network Store Interface Service, TCP/IP Protocol Driver
First Released in Version: Windows NT
Log On As: LocalService
Description: Manages network configuration by automatically configuring IP addresses and other settings using Dynamic Host Configuration Protocol (DHCP). It’s essential for obtaining IP addresses and domain name resolution.

9. Distributed Link Tracking Client

Name: Distributed Link Tracking Client
Executable: svchost.exe -k netsvcs
Developer Company: Microsoft Corporation
Dependencies: None
First Released in Version: Windows 2000
Log On As: LocalSystem
Description: Maintains links between NTFS files within a computer or across a network. This service ensures that shortcuts or links to files remain valid even after moving them across volumes or systems.

10. DNS Client

Name: DNS Client
Executable: svchost.exe -k NetworkService
Developer Company: Microsoft Corporation
Dependencies: TCP/IP Protocol Driver, Network Store Interface Service
First Released in Version: Windows NT
Log On As: NetworkService
Description: Resolves and caches domain names to IP addresses for the system, facilitating communication over the Internet or intranets. This is fundamental for all DNS queries made by web browsers, email clients, and other applications.

11. Diagnostic Policy Service

Name: Diagnostic Policy Service
Executable: svchost.exe -k NetworkService
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC)
First Released in Version: Windows Vista
Log On As: LocalSystem
Description: Provides a service for diagnostic and troubleshooting tools. It detects and resolves problems related to Windows components, helping maintain system health by monitoring system settings and configurations.

12. Device Association Service

Name: Device Association Service
Executable: svchost.exe -k LocalService
Developer Company: Microsoft Corporation
Dependencies: None
First Released in Version: Windows 10
Log On As: LocalService
Description: Manages the association of devices with user profiles. It ensures that connected devices are correctly linked to user accounts, facilitating personalized settings and data synchronization across devices.

13. Device Guard

Name: Device Guard
Executable: svchost.exe -k LocalService
Developer Company: Microsoft Corporation
Dependencies: Hyper-V, Windows Defender
First Released in Version: Windows 10
Log On As: LocalService
Description: Provides security features that allow only trusted applications to run on a device. It leverages hardware virtualization to protect against malware and unauthorized code execution, enhancing overall system security.

14. Device Manager

Name: Device Manager
Executable: devmgmt.msc
Developer Company: Microsoft Corporation
Dependencies: Plug and Play
First Released in Version: Windows 95
Log On As: N/A (Utility)
Description: Although technically a management console rather than a service, Device Manager allows users to view and control hardware connected to the computer. It enables the installation, updating, and troubleshooting of device drivers.

15. Device Setup Manager

Name: Device Setup Manager
Executable: svchost.exe -k netsvcs
Developer Company: Microsoft Corporation
Dependencies: Plug and Play, Windows Installer
First Released in Version: Windows 10
Log On As: LocalSystem
Description: Facilitates the setup and installation of new hardware devices. It coordinates with other services to ensure that devices are correctly recognized and configured upon connection.

16. Digital Media Manager

Name: Digital Media Manager
Executable: dmwappushservice.exe
Developer Company: Microsoft Corporation
Dependencies: None
First Released in Version: Windows 8
Log On As: LocalService
Description: Manages the synchronization of digital media across devices. It handles tasks related to media streaming, storage, and access, ensuring that multimedia content is available and up-to-date across all connected devices.

17. Diagnostic Service Host

Name: Diagnostic Service Host
Executable: svchost.exe -k LocalService
Developer Company: Microsoft Corporation
Dependencies: Diagnostic Policy Service
First Released in Version: Windows 10
Log On As: LocalService
Description: Hosts diagnostic services that collect and analyze data to troubleshoot and resolve system issues. It plays a crucial role in maintaining system performance and reliability by identifying and addressing potential problems.

18. Distributed Transaction Coordinator (DTC)

Name: Distributed Transaction Coordinator
Executable: msdtc.exe
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC)
First Released in Version: Windows NT
Log On As: NetworkService
Description: Coordinates transactions that span multiple networked resources, such as databases and message queues. It ensures data integrity and consistency across distributed systems by managing transaction protocols and recovery.

19. DNS Server

Name: DNS Server
Executable: svchost.exe -k NetworkService
Developer Company: Microsoft Corporation
Dependencies: TCP/IP Protocol Driver, Remote Procedure Call (RPC)
First Released in Version: Windows Server 2003
Log On As: NetworkService
Description: Provides DNS (Domain Name System) services, translating domain names into IP addresses for network resources. It’s essential for resolving names within local networks and the internet, facilitating communication and resource access.

20. Download Manager

Name: Download Manager
Executable: downloadmanager.exe
Developer Company: Microsoft Corporation
Dependencies: Background Intelligent Transfer Service (BITS)
First Released in Version: Windows Vista
Log On As: LocalSystem
Description: Manages file downloads from the internet, coordinating with BITS to optimize bandwidth usage and ensure reliable file transfers. It handles tasks such as pausing, resuming, and scheduling downloads to enhance user experience and system performance.

21. Event Log

Name: Event Log
Executable: svchost.exe -k LocalService
Developer Company: Microsoft Corporation
Dependencies: None
First Released in Version: Windows NT
Log On As: LocalService
Description: Manages the event logs on the system, which record information, warnings, and error messages from applications and system components. It allows administrators and users to monitor system activities, troubleshoot issues, and audit system behavior by maintaining logs such as the Application, Security, and System logs.

22. Extensible Authentication Protocol (EAP)

Name: Extensible Authentication Protocol (EAP)
Executable: svchost.exe -k NetworkService
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC)
First Released in Version: Windows Vista
Log On As: NetworkService
Description: Supports various authentication methods for network access, including wireless and wired connections. EAP provides a flexible framework that allows for multiple authentication mechanisms, enhancing security by enabling stronger and more adaptable authentication processes.

23. Fax

Name: Fax
Executable: fax.exe
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC), HTTP
First Released in Version: Windows 2000
Log On As: LocalSystem
Description: Provides fax services to applications and users, allowing the sending and receiving of faxes through fax modems or fax servers. It integrates with Windows applications to enable fax functionality, facilitating communication via traditional fax methods.

24. File History Service

Name: File History Service
Executable: svchost.exe -k LocalServiceNetworkRestricted
Developer Company: Microsoft Corporation
Dependencies: Workstation, Remote Procedure Call (RPC)
First Released in Version: Windows 8
Log On As: LocalService
Description: Continuously backs up versions of files in user libraries, ensuring that users can recover previous versions in case of accidental deletion or modification. It stores copies of files on an external drive or network location, providing a straightforward method for data recovery and versioning.

25. File Replication Service (FRS)

Name: File Replication Service
Executable: ntfrs.exe
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC), DFS Replication
First Released in Version: Windows NT
Log On As: LocalSystem
Description: Facilitates the replication of files and folders across multiple servers to ensure consistency and availability. Primarily used in domain controllers to replicate the SYSVOL directory, FRS ensures that changes made on one server propagate to others, maintaining synchronized data across the network.

26. Group Policy Client

Name: Group Policy Client
Executable: gpsvc.dll
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC), Windows Management Instrumentation (WMI)
First Released in Version: Windows 2000
Log On As: LocalSystem
Description: Applies Group Policy settings to computers and users within an Active Directory environment. It ensures that policies related to security, software installation, scripts, and other configurations are consistently enforced across the network, aiding in centralized management and compliance.

27. IPsec Policy Agent

Name: IPsec Policy Agent
Executable: svchost.exe -k netsvcs
Developer Company: Microsoft Corporation
Dependencies: IPsec driver, Remote Procedure Call (RPC)
First Released in Version: Windows XP
Log On As: LocalSystem
Description: Manages and enforces IPsec policies for securing network communications. It handles the negotiation, establishment, and maintenance of IPsec connections, ensuring data integrity, confidentiality, and authentication for network traffic based on defined policies.

28. Internet Connection Sharing (ICS)

Name: Internet Connection Sharing (ICS)
Executable: svchost.exe -k LocalServiceNetworkRestricted
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC), DHCP Client, DNS Client, Network Store Interface Service
First Released in Version: Windows 98
Log On As: LocalService
Description: Allows one computer to share its Internet connection with other devices on the local network. ICS manages the distribution of IP addresses via DHCP, configures NAT (Network Address Translation), and handles traffic routing to enable multiple devices to access the Internet through a single connection.

29. IP Helper

Name: IP Helper
Executable: svchost.exe -k netsvcs
Developer Company: Microsoft Corporation
Dependencies: TCP/IP Protocol Driver, Network Store Interface Service
First Released in Version: Windows Vista
Log On As: LocalService
Description: Provides network connectivity assistance for applications by offering IPv6 connectivity and other network-related functions. It enables features like Teredo tunneling, IPv6 transition technologies, and assists in managing network configurations and communications for applications requiring advanced networking capabilities.

30. Kernel-PnP

Name: Kernel-PnP
Executable: services.exe
Developer Company: Microsoft Corporation
Dependencies: Plug and Play
First Released in Version: Windows 2000
Log On As: LocalSystem
Description: Manages Plug and Play (PnP) devices, handling device enumeration, configuration, and resource allocation. It ensures that hardware devices are properly detected, drivers are loaded, and devices are operational, facilitating dynamic hardware changes without requiring system restarts.

31. Location Service

Name: Location Service
Executable: svchost.exe -k LocalService
Developer Company: Microsoft Corporation
Dependencies: Network List Service, WLAN AutoConfig
First Released in Version: Windows 8
Log On As: LocalService
Description: Provides location information based on network signals, such as Wi-Fi hotspots, GPS, and cell towers. Applications can utilize this service to offer location-based features, enabling functionalities like mapping, weather updates, and localized search results.

32. Lock Screen App Service

Name: Lock Screen App Service
Executable: svchost.exe -k LocalServiceNetworkRestricted
Developer Company: Microsoft Corporation
Dependencies: None
First Released in Version: Windows 10
Log On As: LocalServiceNetworkRestricted
Description: Manages applications that display notifications and updates on the lock screen. It ensures that authorized apps can present relevant information, such as calendar events, email previews, and security alerts, while maintaining system security and user privacy.

33. MSI Installer

Name: MSI Installer
Executable: msiexec.exe
Developer Company: Microsoft Corporation
Dependencies: Windows Installer Service
First Released in Version: Windows 2000
Log On As: LocalSystem
Description: Handles the installation, maintenance, and removal of software applications packaged in MSI (Microsoft Installer) format. It ensures that applications are correctly installed with all necessary files, registry entries, and dependencies, facilitating seamless software management.

34. Microsoft Defender Antivirus Service

Name: Microsoft Defender Antivirus Service
Executable: MsMpEng.exe
Developer Company: Microsoft Corporation
Dependencies: Windows Defender Antivirus Network Inspection Service
First Released in Version: Windows 8
Log On As: LocalSystem
Description: Provides real-time protection against malware, viruses, spyware, and other malicious software. It continuously monitors system activities, scans files, and applies security updates to safeguard the computer from threats, ensuring overall system integrity and user safety.

35. Microsoft Edge Update Service (edgeupdate)

Name: Microsoft Edge Update Service (edgeupdate)
Executable: MicrosoftEdgeUpdate.exe
Developer Company: Microsoft Corporation
Dependencies: None
First Released in Version: Windows 10
Log On As: LocalSystem
Description: Manages the automatic updating of the Microsoft Edge browser. It ensures that Edge remains up-to-date with the latest features, security patches, and performance improvements by periodically checking for and applying updates without user intervention.

36. Microsoft Office Click-to-Run Service

Name: Microsoft Office Click-to-Run Service
Executable: OfficeClickToRun.exe
Developer Company: Microsoft Corporation
Dependencies: None
First Released in Version: Office 2010
Log On As: LocalSystem
Description: Facilitates the streaming and updating of Microsoft Office applications via the Click-to-Run technology. It enables users to install and use Office applications without waiting for the entire suite to download, while also managing seamless updates and repairs in the background.

37. Netlogon

Name: Netlogon
Executable: lsass.exe
Developer Company: Microsoft Corporation
Dependencies: Workstation, Server
First Released in Version: Windows NT
Log On As: LocalSystem
Description: Handles the authentication of users and services within a Windows domain. It manages secure channel communications between the computer and domain controllers, ensuring that credentials are validated and policies are enforced for domain-joined devices.

38. Network Connectivity Assistant

Name: Network Connectivity Assistant
Executable: svchost.exe -k NetworkService
Developer Company: Microsoft Corporation
Dependencies: Network List Service, Network Location Awareness
First Released in Version: Windows 10
Log On As: NetworkService
Description: Assists in identifying and resolving network connectivity issues. It monitors network status, provides diagnostics, and offers troubleshooting steps to help users regain network access, ensuring a stable and reliable internet connection.

39. Network List Service

Name: Network List Service
Executable: svchost.exe -k LocalService
Developer Company: Microsoft Corporation
Dependencies: Network Location Awareness
First Released in Version: Windows Vista
Log On As: LocalService
Description: Identifies and categorizes networks based on their connectivity and location. It provides applications with information about the network, such as whether it’s a public or private network, enabling appropriate security measures and network configurations.

40. Network Location Awareness (NLA)

Name: Network Location Awareness
Executable: svchost.exe -k LocalService
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC)
First Released in Version: Windows Vista
Log On As: LocalService
Description: Collects and stores network configuration and status information. It detects changes in network environments, such as switching from a home to a public network, and notifies dependent services and applications to adjust their behavior accordingly.

41. Network List Service (nls)

Name: Network List Service
Executable: svchost.exe -k LocalService
Developer Company: Microsoft Corporation
Dependencies: Network Location Awareness
First Released in Version: Windows Vista
Log On As: LocalService
Description: (Note: This appears to be a duplicate of #39. If not, please let me know, and I’ll adjust accordingly.)

42. Network Store Interface Service

Name: Network Store Interface Service
Executable: svchost.exe -k LocalService
Developer Company: Microsoft Corporation
Dependencies: None
First Released in Version: Windows Vista
Log On As: LocalService
Description: Provides network-related information to applications, such as network connectivity status and interface configurations. It acts as a repository for network configuration data, enabling consistent access and management across the system.

43. Network Sharing Service (LanmanServer)

Name: Network Sharing Service
Executable: svchost.exe -k netsvcs
Developer Company: Microsoft Corporation
Dependencies: Workstation, Server
First Released in Version: Windows NT
Log On As: LocalSystem
Description: Enables file and printer sharing across the network. It manages shared resources, handles client connections, and ensures that users can access shared folders and printers on the computer, facilitating collaborative work and resource distribution.

44. Offline Files

Name: Offline Files
Executable: cscsvc.dll
Developer Company: Microsoft Corporation
Dependencies: Workstation, RPC
First Released in Version: Windows 2000
Log On As: LocalSystem
Description: Allows users to access network files even when disconnected from the network. It caches copies of network files locally, enabling offline access and synchronization once the connection is restored, ensuring productivity without continuous network dependency.

45. OpenSSH SSH Server

Name: OpenSSH SSH Server
Executable: sshd.exe
Developer Company: Open Source (included with Windows 10 and later)
Dependencies: None
First Released in Version: Windows 10 (May 2019 Update)
Log On As: LocalSystem
Description: Provides secure remote access to the computer using the SSH (Secure Shell) protocol. It enables users to connect, manage, and execute commands on the system remotely, ensuring encrypted and authenticated communication for administrative and development purposes.

46. Parental Controls

Name: Parental Controls
Executable: svchost.exe -k LocalService
Developer Company: Microsoft Corporation
Dependencies: User Manager, Network List Service
First Released in Version: Windows XP
Log On As: LocalService
Description: Allows administrators to manage and restrict user activities, particularly for child accounts. It provides features such as time limits, content filtering, and activity monitoring to ensure a safe and controlled computing environment for younger users.

47. Performance Counter DLL Host

Name: Performance Counter DLL Host
Executable: dllhost.exe
Developer Company: Microsoft Corporation
Dependencies: Performance Logs & Alerts, Remote Procedure Call (RPC)
First Released in Version: Windows 2000
Log On As: LocalSystem
Description: Hosts performance counter DLLs, enabling the collection and reporting of system performance data. It facilitates monitoring of various system metrics, such as CPU usage, memory consumption, and network activity, which are essential for performance tuning and troubleshooting.

48. Plug and Play (PnP)

Name: Plug and Play
Executable: svchost.exe -k LocalService
Developer Company: Microsoft Corporation
Dependencies: Kernel-PnP, Power
First Released in Version: Windows NT
Log On As: LocalSystem
Description: Enables the detection and configuration of hardware devices as they are connected or disconnected from the system. It manages device drivers, allocates system resources, and ensures that hardware components operate correctly without requiring system restarts.

49. Power

Name: Power
Executable: svchost.exe -k LocalService
Developer Company: Microsoft Corporation
Dependencies: None
First Released in Version: Windows NT
Log On As: LocalSystem
Description: Manages power-related settings and transitions, such as sleep, hibernate, and shutdown operations. It ensures efficient power usage, optimizes battery life on portable devices, and handles user-initiated power actions to maintain system stability and performance.

50. Print Spooler

Name: Print Spooler
Executable: spoolsv.exe
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC)
First Released in Version: Windows NT
Log On As: LocalSystem
Description: Manages print jobs by queuing them and sending them to the appropriate printer. It handles communication between applications and printers, supports multiple printers, and ensures that print tasks are processed efficiently, enabling smooth and reliable printing operations.

51. Program Compatibility Assistant Service

Name: Program Compatibility Assistant Service
Executable: CompatTelRunner.exe
Developer Company: Microsoft Corporation
Dependencies: Windows Installer, Remote Procedure Call (RPC)
First Released in Version: Windows Vista
Log On As: LocalSystem
Description: Assists in detecting and resolving compatibility issues when running older applications on newer versions of Windows. It monitors application behavior, applies necessary compatibility fixes, and collects data to improve future compatibility enhancements, ensuring that legacy software continues to function correctly.

52. Remote Access Connection Manager

Name: Remote Access Connection Manager
Executable: rasman.exe
Developer Company: Microsoft Corporation
Dependencies: Telephony, Remote Procedure Call (RPC)
First Released in Version: Windows 2000
Log On As: LocalSystem
Description: Manages dial-up and VPN connections, handling the establishment, maintenance, and termination of remote access sessions. It ensures that users can securely connect to remote networks, providing the necessary protocols and services for reliable and encrypted communications.

53. Remote Desktop Services

Name: Remote Desktop Services
Executable: svchost.exe -k DcomLaunch
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC), Network Location Awareness
First Released in Version: Windows XP (as Terminal Services)
Log On As: LocalSystem
Description: Enables users to remotely access and interact with the desktop of a Windows computer over a network connection. It facilitates remote administration, virtual desktop environments, and remote application hosting, providing flexibility and accessibility for users and administrators alike.

54. Remote Procedure Call (RPC)

Name: Remote Procedure Call (RPC)
Executable: svchost.exe -k RPCSS
Developer Company: Microsoft Corporation
Dependencies: None
First Released in Version: Windows NT
Log On As: LocalSystem
Description: Facilitates communication between software applications on different computers within a network. It allows programs to request services from other programs, enabling distributed computing and the seamless integration of networked applications.

55. Remote Registry

Name: Remote Registry
Executable: regsvc.dll
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC)
First Released in Version: Windows NT
Log On As: LocalSystem
Description: Allows remote users to modify the Windows registry on the computer. While it enables centralized management and configuration, it poses security risks if not properly secured, as unauthorized access to the registry can compromise system integrity.

56. Routing and Remote Access

Name: Routing and Remote Access
Executable: svchost.exe -k RemoteAccess
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC), Secure Socket Tunneling Protocol Service, Telephony
First Released in Version: Windows NT
Log On As: LocalSystem
Description: Provides multiprotocol routing services to businesses in LAN and WAN environments. It allows computers to act as network routers and supports virtual private network (VPN) connections, enabling remote users to access internal network resources securely.

57. Secondary Logon

Name: Secondary Logon
Executable: svchost.exe -k netsvcs
Developer Company: Microsoft Corporation
Dependencies: None
First Released in Version: Windows XP
Log On As: LocalSystem
Description: Allows users to run applications with different user credentials without logging off. This service is essential for administrators who want to run programs with elevated privileges without changing user sessions, enhancing flexibility and security.

58. Security Accounts Manager

Name: Security Accounts Manager
Executable: lsass.exe
Developer Company: Microsoft Corporation
Dependencies: None
First Released in Version: Windows NT
Log On As: LocalSystem
Description: Manages user account security information, including passwords and security tokens. It stores credentials in the local security authority and plays a crucial role in enforcing local and domain-level security policies on Windows systems.

59. Server

Name: Server
Executable: svchost.exe -k netsvcs
Developer Company: Microsoft Corporation
Dependencies: None
First Released in Version: Windows NT
Log On As: LocalSystem
Description: Provides support for file, print, and named-pipe sharing over the network. It enables computers to communicate and share resources like files and printers with other devices in the network, promoting a collaborative working environment.

60. Shell Hardware Detection

Name: Shell Hardware Detection
Executable: svchost.exe -k netsvcs
Developer Company: Microsoft Corporation
Dependencies: Plug and Play, Remote Procedure Call (RPC)
First Released in Version: Windows XP
Log On As: LocalSystem
Description: Provides notifications for AutoPlay hardware events, such as inserting a USB drive or connecting a new device. It allows the system to automatically respond to new hardware, enabling features like the automatic launch of programs or file transfers.

61. Smart Card

Name: Smart Card
Executable: svchost.exe -k LocalService
Developer Company: Microsoft Corporation
Dependencies: Plug and Play, Remote Procedure Call (RPC)
First Released in Version: Windows 2000
Log On As: LocalService
Description: Manages access to smart cards that are connected to the computer. Smart cards are often used for security authentication, providing an additional layer of protection for sensitive information, especially in business or governmental environments.

62. SNMP Service

Name: SNMP Service
Executable: snmp.exe
Developer Company: Microsoft Corporation
Dependencies: None
First Released in Version: Windows NT
Log On As: LocalSystem
Description: Implements the Simple Network Management Protocol (SNMP) for monitoring and managing network devices such as routers, switches, and servers. It allows administrators to collect information about network devices’ status and behavior for diagnostic and management purposes.

63. Software Protection

Name: Software Protection
Executable: sppsvc.exe
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC)
First Released in Version: Windows Vista
Log On As: NetworkService
Description: Ensures that Windows and its applications are properly licensed and protected. It activates Windows installations, ensures license compliance, and prevents the use of pirated software. If the service is stopped, the system may lose its license status.

64. SQL Server (MSSQLSERVER)

Name: SQL Server (MSSQLSERVER)
Executable: sqlservr.exe
Developer Company: Microsoft Corporation
Dependencies: None
First Released in Version: Windows 2000 (as a service)
Log On As: LocalSystem
Description: Provides database services to applications requiring the SQL Server database engine. It manages databases, processes SQL queries, and handles transaction logging, data replication, and data security for business-critical operations.

65. SSDP Discovery

Name: SSDP Discovery
Executable: svchost.exe -k LocalService
Developer Company: Microsoft Corporation
Dependencies: HTTP, TCP/IP Protocol Driver
First Released in Version: Windows XP
Log On As: LocalService
Description: Enables discovery of Universal Plug and Play (UPnP) devices on the network. It allows applications to automatically detect networked devices, such as printers, routers, or media servers, simplifying device setup and use.

66. Storage Service

Name: Storage Service
Executable: svchost.exe -k LocalSystemNetworkRestricted
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC)
First Released in Version: Windows 10
Log On As: LocalSystem
Description: Manages storage-related operations such as managing spaces in the Storage Spaces feature, ensuring data redundancy, and maximizing storage efficiency. This service also manages software-defined storage configurations.

67. Superfetch (SysMain)

Name: Superfetch (SysMain)
Executable: svchost.exe -k LocalSystemNetworkRestricted
Developer Company: Microsoft Corporation
Dependencies: None
First Released in Version: Windows Vista
Log On As: LocalSystem
Description: Improves system performance by preloading frequently used applications into memory. It learns usage patterns and optimizes RAM allocation to ensure faster application load times and smoother multitasking.

68. System Event Notification Service

Name: System Event Notification Service
Executable: svchost.exe -k netsvcs
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC)
First Released in Version: Windows XP
Log On As: LocalSystem
Description: Monitors system events such as network changes, logon sessions, and power events. It notifies users and dependent applications when significant system changes occur, ensuring smooth transitions and responsiveness to these events.

69. Task Scheduler

Name: Task Scheduler
Executable: svchost.exe -k netsvcs
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC)
First Released in Version: Windows NT
Log On As: LocalSystem
Description: Allows users and applications to schedule automated tasks that run at specified times or events. It ensures that system maintenance tasks, updates, and backups are performed regularly without manual intervention, improving system stability and uptime.

70. TCP/IP NetBIOS Helper

Name: TCP/IP NetBIOS Helper
Executable: svchost.exe -k LocalService
Developer Company: Microsoft Corporation
Dependencies: NetBT
First Released in Version: Windows 2000
Log On As: LocalService
Description: Provides support for the NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution. It allows legacy applications that rely on NetBIOS to communicate over TCP/IP networks, facilitating compatibility in mixed network environments.

71. Telephony

Name: Telephony
Executable: svchost.exe -k NetworkService
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC)
First Released in Version: Windows NT
Log On As: NetworkService
Description: Provides telephony APIs (TAPI) to allow the computer to interact with modems, voice communication devices, and remote access services. It supports traditional telephony functions like dial-up internet and modern VoIP services.

72. Themes

Name: Themes
Executable: svchost.exe -k netsvcs
Developer Company: Microsoft Corporation
Dependencies: None
First Released in Version: Windows XP
Log On As: LocalSystem
Description: Manages desktop themes, which include visual elements such as wallpapers, colors, and sounds. It ensures a consistent visual experience across the operating system and allows for customizations to enhance the user interface.

73. Time Broker

Name: Time Broker
Executable: svchost.exe -k LocalServiceNetworkRestricted
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC)
First Released in Version: Windows 8
Log On As: LocalServiceNetworkRestricted
Description: Manages background tasks for Modern (Universal Windows Platform) apps, ensuring they can run background processes without impacting the overall system performance. It also helps with scheduling and controlling the execution of these tasks.

74. UPnP Device Host

Name: UPnP Device Host
Executable: svchost.exe -k LocalService
Developer Company: Microsoft Corporation
Dependencies: SSDP Discovery
First Released in Version: Windows XP
Log On As: LocalService
Description: Allows hosting of Universal Plug and Play (UPnP) devices on the local computer. It enables seamless discovery and management of networked devices such as printers, routers, and media players.

75. User Profile Service

Name: User Profile Service
Executable: svchost.exe -k netsvcs
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC)
First Released in Version: Windows Vista
Log On As: LocalSystem
Description: Manages user profiles, ensuring the correct user data (such as settings, files, and preferences) is loaded when a user logs in. It ensures that profiles are consistent and follow users across different sessions, enabling personalization and data persistence.

76. Windows Update

Name: Windows Update
Executable: wuauclt.exe / svchost.exe -k netsvcs
Developer Company: Microsoft Corporation
Dependencies: Windows Installer, Background Intelligent Transfer Service (BITS)
First Released in Version: Windows 95 (as Automatic Updates)
Log On As: LocalSystem
Description: Manages the download and installation of updates for the Windows operating system and other Microsoft software. It ensures that the system receives the latest security patches, bug fixes, and feature enhancements, maintaining system security and performance.

77. Windows Firewall

Name: Windows Firewall
Executable: svchost.exe -k LocalService
Developer Company: Microsoft Corporation
Dependencies: Base Filtering Engine, Windows Firewall Authorization Driver
First Released in Version: Windows XP (as Internet Connection Firewall)
Log On As: LocalSystem
Description: Provides firewall protection by monitoring and controlling incoming and outgoing network traffic based on predetermined security rules. It helps prevent unauthorized access to the computer, safeguarding against network-based threats and attacks.

78. Windows Search

Name: Windows Search
Executable: SearchIndexer.exe
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC), Windows Search Filter Host
First Released in Version: Windows Vista
Log On As: LocalService
Description: Enables indexing and searching of files, emails, and other content on the computer. It improves search performance by creating and maintaining an index of searchable items, allowing users to quickly find documents, applications, and other data.

79. Windows Security Center

Name: Windows Security Center
Executable: wscsvc.exe
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC), Windows Management Instrumentation (WMI)
First Released in Version: Windows XP
Log On As: LocalSystem
Description: Monitors the security status of the computer, including antivirus, firewall, and automatic updates. It provides alerts and status information to the user, ensuring that critical security components are active and up-to-date.

80. Windows Time

Name: Windows Time
Executable: w32time.exe
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC)
First Released in Version: Windows 2000
Log On As: LocalSystem
Description: Maintains system time synchronization across the network using the Network Time Protocol (NTP). Accurate timekeeping is essential for security protocols, logging, and various network operations.

81. Windows Management Instrumentation (WMI)

Name: Windows Management Instrumentation
Executable: svchost.exe -k winmgmts
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC)
First Released in Version: Windows 2000
Log On As: LocalSystem
Description: Provides a standardized interface for managing system components, applications, and network resources. It allows scripts and applications to query system information, configure settings, and automate administrative tasks.

82. Windows Media Player Network Sharing Service

Name: Windows Media Player Network Sharing Service
Executable: svchost.exe -k LocalService
Developer Company: Microsoft Corporation
Dependencies: Windows Media Player, SSDP Discovery, UPnP Device Host
First Released in Version: Windows Vista
Log On As: LocalService
Description: Shares media libraries from Windows Media Player with other devices on the network. It allows streaming of music, videos, and pictures to compatible devices such as smart TVs, game consoles, and other computers.

83. Windows Modules Installer

Name: Windows Modules Installer
Executable: TrustedInstaller.exe
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC), Windows Installer
First Released in Version: Windows 2000
Log On As: LocalSystem
Description: Manages the installation, modification, and removal of Windows updates and optional system components. It ensures that critical system files are properly updated and maintained, enabling the smooth functioning of Windows features and security updates.

84. Windows Push Notifications System Service

Name: Windows Push Notifications System Service
Executable: svchost.exe -k LocalServiceNetworkRestricted
Developer Company: Microsoft Corporation
Dependencies: None
First Released in Version: Windows 10
Log On As: LocalServiceNetworkRestricted
Description: Manages the delivery of push notifications from apps to the user. It allows applications to receive real-time updates and notifications, ensuring timely information and alerts are presented to the user across the system.

85. Windows Remote Management (WS-Management)

Name: Windows Remote Management (WS-Management)
Executable: svchost.exe -k wsman
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC)
First Released in Version: Windows Vista
Log On As: NetworkService
Description: Provides a management protocol for remote administration and configuration of systems. It allows administrators to manage multiple computers from a central location, enabling tasks like configuration changes, monitoring, and automation across a network.

86. Windows Search Indexer

Name: Windows Search Indexer
Executable: SearchIndexer.exe
Developer Company: Microsoft Corporation
Dependencies: Windows Search
First Released in Version: Windows Vista
Log On As: LocalService
Description: Indexes files and content on the computer to enhance search speed and efficiency. It scans files, emails, and other content, creating an index that allows users to quickly locate items through the Windows search interface.

87. Windows Defender Firewall

Name: Windows Defender Firewall
Executable: svchost.exe -k LocalService
Developer Company: Microsoft Corporation
Dependencies: Base Filtering Engine, Windows Firewall Authorization Driver
First Released in Version: Windows Vista (rebranded in Windows 10)
Log On As: LocalSystem
Description: An enhanced version of Windows Firewall that offers advanced security features to protect the computer from unauthorized access and network threats. It provides inbound and outbound traffic filtering, rule management, and integration with other security components for comprehensive protection.

88. Windows Defender Antivirus

Name: Windows Defender Antivirus
Executable: MsMpEng.exe
Developer Company: Microsoft Corporation
Dependencies: Microsoft Defender Antivirus Network Inspection Service
First Released in Version: Windows Vista (as Windows Defender; rebranded in Windows 10)
Log On As: LocalSystem
Description: Provides real-time protection against malware, viruses, and other threats. It continuously scans files, processes, and system activities to detect and eliminate malicious software, ensuring system security and integrity.

89. Windows Error Reporting Service

Name: Windows Error Reporting Service
Executable: WerSvc.exe
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC)
First Released in Version: Windows XP
Log On As: LocalService
Description: Collects and sends error reports to Microsoft when applications crash or encounter issues. These reports help Microsoft identify and address software bugs, improving the overall stability and reliability of the Windows operating system.

90. Windows Event Collector

Name: Windows Event Collector
Executable: wecsvc.dll
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC), Windows Event Log
First Released in Version: Windows Vista
Log On As: LocalSystem
Description: Collects event logs from remote computers and consolidates them into a central location. It enables centralized monitoring and analysis of system events across multiple machines, facilitating efficient troubleshooting and system management.

91. Windows Insider Service

Name: Windows Insider Service
Executable: svchost.exe -k netsvcs
Developer Company: Microsoft Corporation
Dependencies: Windows Update, Telemetry
First Released in Version: Windows 10
Log On As: LocalSystem
Description: Manages participation in the Windows Insider Program, allowing users to receive and test preview builds of Windows. It facilitates the collection of feedback and telemetry data from Insider users to help improve future Windows releases.

92. Windows Installer

Name: Windows Installer
Executable: msiexec.exe
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC)
First Released in Version: Windows 95
Log On As: LocalSystem
Description: Provides the infrastructure for installing, maintaining, and removing software on Windows. It processes MSI (Microsoft Installer) packages, handling tasks such as file copying, registry updates, and configuration changes required by applications.

93. Windows Management Service

Name: Windows Management Service
Executable: Winmgmt.exe
Developer Company: Microsoft Corporation
Dependencies: Windows Management Instrumentation (WMI)
First Released in Version: Windows 2000
Log On As: LocalSystem
Description: Supports management and monitoring of system resources through the Windows Management Instrumentation framework. It enables administrators to access and manipulate system data, perform diagnostics, and automate management tasks.

94. Windows Media Player

Name: Windows Media Player
Executable: wmplayer.exe
Developer Company: Microsoft Corporation
Dependencies: Windows Media Player Network Sharing Service, Windows Media Player Remote Class Manager
First Released in Version: Windows 98
Log On As: N/A (Application)
Description: Provides media playback capabilities for audio and video files. It allows users to play, organize, and manage their media collections, supporting various formats and offering features like playlists, library management, and media streaming.

95. Windows Remote Shell

Name: Windows Remote Shell
Executable: remoteshell.exe
Developer Company: Microsoft Corporation
Dependencies: Remote Procedure Call (RPC), Windows Remote Management
First Released in Version: Windows 10
Log On As: LocalSystem
Description: Provides a secure remote command-line interface for managing and administering Windows systems. It allows administrators to execute commands and scripts remotely, facilitating efficient system management and troubleshooting.

96. Windows Search Service

Name: Windows Search Service
Executable: SearchFilterHost.exe
Developer Company: Microsoft Corporation
Dependencies: Windows Search Indexer
First Released in Version: Windows Vista
Log On As: LocalService
Description: Enhances search functionality by indexing and filtering search queries. It works in conjunction with the Windows Search Indexer to provide relevant search results and support advanced search features like filtering and sorting.

97. Windows Security Service

Name: Windows Security Service
Executable: SecurityHealthService.exe
Developer Company: Microsoft Corporation
Dependencies: Windows Defender Antivirus, Windows Firewall
First Released in Version: Windows 10
Log On As: LocalSystem
Description: Monitors and manages the security status of the system, integrating various security components like antivirus, firewall, and exploit protection. It provides a centralized interface for users to view and manage security settings, ensuring comprehensive protection against threats.

98. Windows Services

Name: Windows Services
Executable: services.exe
Developer Company: Microsoft Corporation
Dependencies: System
First Released in Version: Windows NT
Log On As: LocalSystem
Description: Acts as the service control manager, overseeing the starting, stopping, and management of all Windows services. It ensures that services are correctly initialized during system startup and provides mechanisms for service configuration and monitoring.

99. Windows Speech Recognition

Name: Windows Speech Recognition
Executable: SpeechRuntime.exe
Developer Company: Microsoft Corporation
Dependencies: Speech Recognition Service, Windows Audio
First Released in Version: Windows Vista
Log On As: LocalSystem
Description: Enables voice-controlled interactions with the operating system and applications. It allows users to dictate text, control the computer through voice commands, and interact with various software features, enhancing accessibility and user convenience.

100. Windows Update Orchestrator Service

Name: Windows Update Orchestrator Service
Executable: svchost.exe -k netsvcs
Developer Company: Microsoft Corporation
Dependencies: Windows Update, Background Intelligent Transfer Service (BITS), Cryptographic Services
First Released in Version: Windows 10
Log On As: LocalSystem
Description: Manages the scheduling and coordination of Windows Update operations. It ensures that updates are downloaded and installed efficiently, balancing system performance and user convenience, and handling tasks such as automatic restart scheduling and update prioritization.

This completes the listing of the top 100 common Windows 10, 11, 12, and Windows Server 2019, 2022 and 2025 services. Each service plays a crucial role in the functionality, security, and performance of the Windows operating system. If you need more detailed information about any specific service or assistance with managing these services, feel free to ask.

Published by Ian Matthews on October 11, 2024October 11, 2024