Categories: Windows 11 & Windows 10Windows Server

SOLVED: Unlocking the Mysteries: A Comprehensive Guide to 100 Windows Services

If you work in the IT Department with Microsoft Windows technologies, you frequently need to determine details of a Windows Service. To help our Windows technicians we created this list of the top 100 Windows services in use today, along with a bit of detail to help them determine what is legitimate and what is not.

However, if you are not a computer tech, you might ask, just what is a Windows Service?

What is a “Service” In Windows

A Windows Service is a specialized program designed to run continuously in the background, without requiring direct user interaction. Unlike regular applications, which are launched manually and typically have a visible interface, Windows Services are often initiated automatically when the operating system boots up. They perform essential tasks such as managing system updates, handling security processes, managing network connections, and facilitating hardware operations.

Windows Services are crucial to the smooth functioning of the operating system and its various features. These services are typically configured to start automatically and operate under specific user accounts like LocalSystem or NetworkService, depending on their security requirements. They can also be set to run manually or disabled when not needed.

A key characteristic of Windows Services is their ability to run for extended periods, often continuously from the time the system is started until it is shut down. This ensures that important background tasks—like antivirus scanning, file indexing, or system monitoring—are performed without interruption, maintaining the stability, security, and performance of the system. Essentially, a Windows Service is just a program that runs in the background all or most of the time, ensuring vital system operations remain functional.

Top 100 Windows Services Explained

Note that these are in alphabetic order.

1. Application Identity

  • Name: Application Identity
  • Executable: svchost.exe -k netsvcs
  • Developer Company: Microsoft Corporation
  • Dependencies: None
  • First Released in Version: Windows Vista
  • Log On As: LocalService
  • Description: This service determines and verifies the identity of an application. It is used for AppLocker policies to enforce software restriction rules. It checks the application’s identity based on file attributes like hash, path, or publisher.

2. Application Information

  • Name: Application Information
  • Executable: svchost.exe -k netsvcs
  • Developer Company: Microsoft Corporation
  • Dependencies: None
  • First Released in Version: Windows Vista
  • Log On As: LocalSystem
  • Description: Enables applications to run with elevated privileges. Without this service, certain tasks requiring administrative privileges would fail to launch.

3. Background Intelligent Transfer Service (BITS)

  • Name: BITS
  • Executable: svchost.exe -k netsvcs
  • Developer Company: Microsoft Corporation
  • Dependencies: None
  • First Released in Version: Windows XP
  • Log On As: LocalSystem
  • Description: Transfers files in the background using idle network bandwidth. It is used by Windows Update and other applications to download updates or files without disrupting network usage.

4. Bluetooth Audio Gateway Service

  • Name: Bluetooth Audio Gateway Service
  • Executable: svchost.exe -k LocalSystemNetworkRestricted
  • Developer Company: Microsoft Corporation
  • Dependencies: Bluetooth Support Service
  • First Released in Version: Windows 10
  • Log On As: LocalSystem
  • Description: Manages the Bluetooth Handsfree Protocol, enabling the routing of calls through Bluetooth-enabled audio devices like headsets.

5. Cryptographic Services

  • Name: Cryptographic Services
  • Executable: svchost.exe -k NetworkService
  • Developer Company: Microsoft Corporation
  • Dependencies: None
  • First Released in Version: Windows 2000
  • Log On As: NetworkService
  • Description: Provides three management services: Catalog Database Service, which confirms the signatures of Windows files, Protected Root Service, and Key Service. These are essential for installing software that requires verified digital certificates.

6. DCOM Server Process Launcher

  • Name: DCOM Server Process Launcher
  • Executable: svchost.exe -k DcomLaunch
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC)
  • First Released in Version: Windows XP
  • Log On As: LocalSystem
  • Description: Provides launch functionality for Distributed Component Object Model (DCOM) services. This is critical for allowing communication between processes on different machines in a networked environment.

7. Device Install Service

  • Name: Device Install Service
  • Executable: svchost.exe -k netsvcs
  • Developer Company: Microsoft Corporation
  • Dependencies: Plug and Play
  • First Released in Version: Windows 10
  • Log On As: LocalSystem
  • Description: Manages installation of new devices and drivers. This service is responsible for enabling the plug-and-play experience when new hardware is attached.

8. DHCP Client

  • Name: DHCP Client
  • Executable: svchost.exe -k LocalServiceNetworkRestricted
  • Developer Company: Microsoft Corporation
  • Dependencies: Ancillary Function Driver for Winsock, Network Store Interface Service, TCP/IP Protocol Driver
  • First Released in Version: Windows NT
  • Log On As: LocalService
  • Description: Manages network configuration by automatically configuring IP addresses and other settings using Dynamic Host Configuration Protocol (DHCP). It’s essential for obtaining IP addresses and domain name resolution.

9. Distributed Link Tracking Client

  • Name: Distributed Link Tracking Client
  • Executable: svchost.exe -k netsvcs
  • Developer Company: Microsoft Corporation
  • Dependencies: None
  • First Released in Version: Windows 2000
  • Log On As: LocalSystem
  • Description: Maintains links between NTFS files within a computer or across a network. This service ensures that shortcuts or links to files remain valid even after moving them across volumes or systems.

10. DNS Client

  • Name: DNS Client
  • Executable: svchost.exe -k NetworkService
  • Developer Company: Microsoft Corporation
  • Dependencies: TCP/IP Protocol Driver, Network Store Interface Service
  • First Released in Version: Windows NT
  • Log On As: NetworkService
  • Description: Resolves and caches domain names to IP addresses for the system, facilitating communication over the Internet or intranets. This is fundamental for all DNS queries made by web browsers, email clients, and other applications.

11. Diagnostic Policy Service

  • Name: Diagnostic Policy Service
  • Executable: svchost.exe -k NetworkService
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC)
  • First Released in Version: Windows Vista
  • Log On As: LocalSystem
  • Description: Provides a service for diagnostic and troubleshooting tools. It detects and resolves problems related to Windows components, helping maintain system health by monitoring system settings and configurations.

12. Device Association Service

  • Name: Device Association Service
  • Executable: svchost.exe -k LocalService
  • Developer Company: Microsoft Corporation
  • Dependencies: None
  • First Released in Version: Windows 10
  • Log On As: LocalService
  • Description: Manages the association of devices with user profiles. It ensures that connected devices are correctly linked to user accounts, facilitating personalized settings and data synchronization across devices.

13. Device Guard

  • Name: Device Guard
  • Executable: svchost.exe -k LocalService
  • Developer Company: Microsoft Corporation
  • Dependencies: Hyper-V, Windows Defender
  • First Released in Version: Windows 10
  • Log On As: LocalService
  • Description: Provides security features that allow only trusted applications to run on a device. It leverages hardware virtualization to protect against malware and unauthorized code execution, enhancing overall system security.

14. Device Manager

  • Name: Device Manager
  • Executable: devmgmt.msc
  • Developer Company: Microsoft Corporation
  • Dependencies: Plug and Play
  • First Released in Version: Windows 95
  • Log On As: N/A (Utility)
  • Description: Although technically a management console rather than a service, Device Manager allows users to view and control hardware connected to the computer. It enables the installation, updating, and troubleshooting of device drivers.

15. Device Setup Manager

  • Name: Device Setup Manager
  • Executable: svchost.exe -k netsvcs
  • Developer Company: Microsoft Corporation
  • Dependencies: Plug and Play, Windows Installer
  • First Released in Version: Windows 10
  • Log On As: LocalSystem
  • Description: Facilitates the setup and installation of new hardware devices. It coordinates with other services to ensure that devices are correctly recognized and configured upon connection.

16. Digital Media Manager

  • Name: Digital Media Manager
  • Executable: dmwappushservice.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: None
  • First Released in Version: Windows 8
  • Log On As: LocalService
  • Description: Manages the synchronization of digital media across devices. It handles tasks related to media streaming, storage, and access, ensuring that multimedia content is available and up-to-date across all connected devices.

17. Diagnostic Service Host

  • Name: Diagnostic Service Host
  • Executable: svchost.exe -k LocalService
  • Developer Company: Microsoft Corporation
  • Dependencies: Diagnostic Policy Service
  • First Released in Version: Windows 10
  • Log On As: LocalService
  • Description: Hosts diagnostic services that collect and analyze data to troubleshoot and resolve system issues. It plays a crucial role in maintaining system performance and reliability by identifying and addressing potential problems.

18. Distributed Transaction Coordinator (DTC)

  • Name: Distributed Transaction Coordinator
  • Executable: msdtc.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC)
  • First Released in Version: Windows NT
  • Log On As: NetworkService
  • Description: Coordinates transactions that span multiple networked resources, such as databases and message queues. It ensures data integrity and consistency across distributed systems by managing transaction protocols and recovery.

19. DNS Server

  • Name: DNS Server
  • Executable: svchost.exe -k NetworkService
  • Developer Company: Microsoft Corporation
  • Dependencies: TCP/IP Protocol Driver, Remote Procedure Call (RPC)
  • First Released in Version: Windows Server 2003
  • Log On As: NetworkService
  • Description: Provides DNS (Domain Name System) services, translating domain names into IP addresses for network resources. It’s essential for resolving names within local networks and the internet, facilitating communication and resource access.

20. Download Manager

  • Name: Download Manager
  • Executable: downloadmanager.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Background Intelligent Transfer Service (BITS)
  • First Released in Version: Windows Vista
  • Log On As: LocalSystem
  • Description: Manages file downloads from the internet, coordinating with BITS to optimize bandwidth usage and ensure reliable file transfers. It handles tasks such as pausing, resuming, and scheduling downloads to enhance user experience and system performance.

21. Event Log

  • Name: Event Log
  • Executable: svchost.exe -k LocalService
  • Developer Company: Microsoft Corporation
  • Dependencies: None
  • First Released in Version: Windows NT
  • Log On As: LocalService
  • Description: Manages the event logs on the system, which record information, warnings, and error messages from applications and system components. It allows administrators and users to monitor system activities, troubleshoot issues, and audit system behavior by maintaining logs such as the Application, Security, and System logs.

22. Extensible Authentication Protocol (EAP)

  • Name: Extensible Authentication Protocol (EAP)
  • Executable: svchost.exe -k NetworkService
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC)
  • First Released in Version: Windows Vista
  • Log On As: NetworkService
  • Description: Supports various authentication methods for network access, including wireless and wired connections. EAP provides a flexible framework that allows for multiple authentication mechanisms, enhancing security by enabling stronger and more adaptable authentication processes.

23. Fax

  • Name: Fax
  • Executable: fax.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC), HTTP
  • First Released in Version: Windows 2000
  • Log On As: LocalSystem
  • Description: Provides fax services to applications and users, allowing the sending and receiving of faxes through fax modems or fax servers. It integrates with Windows applications to enable fax functionality, facilitating communication via traditional fax methods.

24. File History Service

  • Name: File History Service
  • Executable: svchost.exe -k LocalServiceNetworkRestricted
  • Developer Company: Microsoft Corporation
  • Dependencies: Workstation, Remote Procedure Call (RPC)
  • First Released in Version: Windows 8
  • Log On As: LocalService
  • Description: Continuously backs up versions of files in user libraries, ensuring that users can recover previous versions in case of accidental deletion or modification. It stores copies of files on an external drive or network location, providing a straightforward method for data recovery and versioning.

25. File Replication Service (FRS)

  • Name: File Replication Service
  • Executable: ntfrs.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC), DFS Replication
  • First Released in Version: Windows NT
  • Log On As: LocalSystem
  • Description: Facilitates the replication of files and folders across multiple servers to ensure consistency and availability. Primarily used in domain controllers to replicate the SYSVOL directory, FRS ensures that changes made on one server propagate to others, maintaining synchronized data across the network.

26. Group Policy Client

  • Name: Group Policy Client
  • Executable: gpsvc.dll
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC), Windows Management Instrumentation (WMI)
  • First Released in Version: Windows 2000
  • Log On As: LocalSystem
  • Description: Applies Group Policy settings to computers and users within an Active Directory environment. It ensures that policies related to security, software installation, scripts, and other configurations are consistently enforced across the network, aiding in centralized management and compliance.

27. IPsec Policy Agent

  • Name: IPsec Policy Agent
  • Executable: svchost.exe -k netsvcs
  • Developer Company: Microsoft Corporation
  • Dependencies: IPsec driver, Remote Procedure Call (RPC)
  • First Released in Version: Windows XP
  • Log On As: LocalSystem
  • Description: Manages and enforces IPsec policies for securing network communications. It handles the negotiation, establishment, and maintenance of IPsec connections, ensuring data integrity, confidentiality, and authentication for network traffic based on defined policies.

28. Internet Connection Sharing (ICS)

  • Name: Internet Connection Sharing (ICS)
  • Executable: svchost.exe -k LocalServiceNetworkRestricted
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC), DHCP Client, DNS Client, Network Store Interface Service
  • First Released in Version: Windows 98
  • Log On As: LocalService
  • Description: Allows one computer to share its Internet connection with other devices on the local network. ICS manages the distribution of IP addresses via DHCP, configures NAT (Network Address Translation), and handles traffic routing to enable multiple devices to access the Internet through a single connection.

29. IP Helper

  • Name: IP Helper
  • Executable: svchost.exe -k netsvcs
  • Developer Company: Microsoft Corporation
  • Dependencies: TCP/IP Protocol Driver, Network Store Interface Service
  • First Released in Version: Windows Vista
  • Log On As: LocalService
  • Description: Provides network connectivity assistance for applications by offering IPv6 connectivity and other network-related functions. It enables features like Teredo tunneling, IPv6 transition technologies, and assists in managing network configurations and communications for applications requiring advanced networking capabilities.

30. Kernel-PnP

  • Name: Kernel-PnP
  • Executable: services.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Plug and Play
  • First Released in Version: Windows 2000
  • Log On As: LocalSystem
  • Description: Manages Plug and Play (PnP) devices, handling device enumeration, configuration, and resource allocation. It ensures that hardware devices are properly detected, drivers are loaded, and devices are operational, facilitating dynamic hardware changes without requiring system restarts.

31. Location Service

  • Name: Location Service
  • Executable: svchost.exe -k LocalService
  • Developer Company: Microsoft Corporation
  • Dependencies: Network List Service, WLAN AutoConfig
  • First Released in Version: Windows 8
  • Log On As: LocalService
  • Description: Provides location information based on network signals, such as Wi-Fi hotspots, GPS, and cell towers. Applications can utilize this service to offer location-based features, enabling functionalities like mapping, weather updates, and localized search results.

32. Lock Screen App Service

  • Name: Lock Screen App Service
  • Executable: svchost.exe -k LocalServiceNetworkRestricted
  • Developer Company: Microsoft Corporation
  • Dependencies: None
  • First Released in Version: Windows 10
  • Log On As: LocalServiceNetworkRestricted
  • Description: Manages applications that display notifications and updates on the lock screen. It ensures that authorized apps can present relevant information, such as calendar events, email previews, and security alerts, while maintaining system security and user privacy.

33. MSI Installer

  • Name: MSI Installer
  • Executable: msiexec.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Windows Installer Service
  • First Released in Version: Windows 2000
  • Log On As: LocalSystem
  • Description: Handles the installation, maintenance, and removal of software applications packaged in MSI (Microsoft Installer) format. It ensures that applications are correctly installed with all necessary files, registry entries, and dependencies, facilitating seamless software management.

34. Microsoft Defender Antivirus Service

  • Name: Microsoft Defender Antivirus Service
  • Executable: MsMpEng.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Windows Defender Antivirus Network Inspection Service
  • First Released in Version: Windows 8
  • Log On As: LocalSystem
  • Description: Provides real-time protection against malware, viruses, spyware, and other malicious software. It continuously monitors system activities, scans files, and applies security updates to safeguard the computer from threats, ensuring overall system integrity and user safety.

35. Microsoft Edge Update Service (edgeupdate)

  • Name: Microsoft Edge Update Service (edgeupdate)
  • Executable: MicrosoftEdgeUpdate.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: None
  • First Released in Version: Windows 10
  • Log On As: LocalSystem
  • Description: Manages the automatic updating of the Microsoft Edge browser. It ensures that Edge remains up-to-date with the latest features, security patches, and performance improvements by periodically checking for and applying updates without user intervention.

36. Microsoft Office Click-to-Run Service

  • Name: Microsoft Office Click-to-Run Service
  • Executable: OfficeClickToRun.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: None
  • First Released in Version: Office 2010
  • Log On As: LocalSystem
  • Description: Facilitates the streaming and updating of Microsoft Office applications via the Click-to-Run technology. It enables users to install and use Office applications without waiting for the entire suite to download, while also managing seamless updates and repairs in the background.

37. Netlogon

  • Name: Netlogon
  • Executable: lsass.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Workstation, Server
  • First Released in Version: Windows NT
  • Log On As: LocalSystem
  • Description: Handles the authentication of users and services within a Windows domain. It manages secure channel communications between the computer and domain controllers, ensuring that credentials are validated and policies are enforced for domain-joined devices.

38. Network Connectivity Assistant

  • Name: Network Connectivity Assistant
  • Executable: svchost.exe -k NetworkService
  • Developer Company: Microsoft Corporation
  • Dependencies: Network List Service, Network Location Awareness
  • First Released in Version: Windows 10
  • Log On As: NetworkService
  • Description: Assists in identifying and resolving network connectivity issues. It monitors network status, provides diagnostics, and offers troubleshooting steps to help users regain network access, ensuring a stable and reliable internet connection.

39. Network List Service

  • Name: Network List Service
  • Executable: svchost.exe -k LocalService
  • Developer Company: Microsoft Corporation
  • Dependencies: Network Location Awareness
  • First Released in Version: Windows Vista
  • Log On As: LocalService
  • Description: Identifies and categorizes networks based on their connectivity and location. It provides applications with information about the network, such as whether it’s a public or private network, enabling appropriate security measures and network configurations.

40. Network Location Awareness (NLA)

  • Name: Network Location Awareness
  • Executable: svchost.exe -k LocalService
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC)
  • First Released in Version: Windows Vista
  • Log On As: LocalService
  • Description: Collects and stores network configuration and status information. It detects changes in network environments, such as switching from a home to a public network, and notifies dependent services and applications to adjust their behavior accordingly.

41. Network List Service (nls)

  • Name: Network List Service
  • Executable: svchost.exe -k LocalService
  • Developer Company: Microsoft Corporation
  • Dependencies: Network Location Awareness
  • First Released in Version: Windows Vista
  • Log On As: LocalService
  • Description: (Note: This appears to be a duplicate of #39. If not, please let me know, and I’ll adjust accordingly.)

42. Network Store Interface Service

  • Name: Network Store Interface Service
  • Executable: svchost.exe -k LocalService
  • Developer Company: Microsoft Corporation
  • Dependencies: None
  • First Released in Version: Windows Vista
  • Log On As: LocalService
  • Description: Provides network-related information to applications, such as network connectivity status and interface configurations. It acts as a repository for network configuration data, enabling consistent access and management across the system.

43. Network Sharing Service (LanmanServer)

  • Name: Network Sharing Service
  • Executable: svchost.exe -k netsvcs
  • Developer Company: Microsoft Corporation
  • Dependencies: Workstation, Server
  • First Released in Version: Windows NT
  • Log On As: LocalSystem
  • Description: Enables file and printer sharing across the network. It manages shared resources, handles client connections, and ensures that users can access shared folders and printers on the computer, facilitating collaborative work and resource distribution.

44. Offline Files

  • Name: Offline Files
  • Executable: cscsvc.dll
  • Developer Company: Microsoft Corporation
  • Dependencies: Workstation, RPC
  • First Released in Version: Windows 2000
  • Log On As: LocalSystem
  • Description: Allows users to access network files even when disconnected from the network. It caches copies of network files locally, enabling offline access and synchronization once the connection is restored, ensuring productivity without continuous network dependency.

45. OpenSSH SSH Server

  • Name: OpenSSH SSH Server
  • Executable: sshd.exe
  • Developer Company: Open Source (included with Windows 10 and later)
  • Dependencies: None
  • First Released in Version: Windows 10 (May 2019 Update)
  • Log On As: LocalSystem
  • Description: Provides secure remote access to the computer using the SSH (Secure Shell) protocol. It enables users to connect, manage, and execute commands on the system remotely, ensuring encrypted and authenticated communication for administrative and development purposes.

46. Parental Controls

  • Name: Parental Controls
  • Executable: svchost.exe -k LocalService
  • Developer Company: Microsoft Corporation
  • Dependencies: User Manager, Network List Service
  • First Released in Version: Windows XP
  • Log On As: LocalService
  • Description: Allows administrators to manage and restrict user activities, particularly for child accounts. It provides features such as time limits, content filtering, and activity monitoring to ensure a safe and controlled computing environment for younger users.

47. Performance Counter DLL Host

  • Name: Performance Counter DLL Host
  • Executable: dllhost.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Performance Logs & Alerts, Remote Procedure Call (RPC)
  • First Released in Version: Windows 2000
  • Log On As: LocalSystem
  • Description: Hosts performance counter DLLs, enabling the collection and reporting of system performance data. It facilitates monitoring of various system metrics, such as CPU usage, memory consumption, and network activity, which are essential for performance tuning and troubleshooting.

48. Plug and Play (PnP)

  • Name: Plug and Play
  • Executable: svchost.exe -k LocalService
  • Developer Company: Microsoft Corporation
  • Dependencies: Kernel-PnP, Power
  • First Released in Version: Windows NT
  • Log On As: LocalSystem
  • Description: Enables the detection and configuration of hardware devices as they are connected or disconnected from the system. It manages device drivers, allocates system resources, and ensures that hardware components operate correctly without requiring system restarts.

49. Power

  • Name: Power
  • Executable: svchost.exe -k LocalService
  • Developer Company: Microsoft Corporation
  • Dependencies: None
  • First Released in Version: Windows NT
  • Log On As: LocalSystem
  • Description: Manages power-related settings and transitions, such as sleep, hibernate, and shutdown operations. It ensures efficient power usage, optimizes battery life on portable devices, and handles user-initiated power actions to maintain system stability and performance.

50. Print Spooler

  • Name: Print Spooler
  • Executable: spoolsv.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC)
  • First Released in Version: Windows NT
  • Log On As: LocalSystem
  • Description: Manages print jobs by queuing them and sending them to the appropriate printer. It handles communication between applications and printers, supports multiple printers, and ensures that print tasks are processed efficiently, enabling smooth and reliable printing operations.

51. Program Compatibility Assistant Service

  • Name: Program Compatibility Assistant Service
  • Executable: CompatTelRunner.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Windows Installer, Remote Procedure Call (RPC)
  • First Released in Version: Windows Vista
  • Log On As: LocalSystem
  • Description: Assists in detecting and resolving compatibility issues when running older applications on newer versions of Windows. It monitors application behavior, applies necessary compatibility fixes, and collects data to improve future compatibility enhancements, ensuring that legacy software continues to function correctly.

52. Remote Access Connection Manager

  • Name: Remote Access Connection Manager
  • Executable: rasman.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Telephony, Remote Procedure Call (RPC)
  • First Released in Version: Windows 2000
  • Log On As: LocalSystem
  • Description: Manages dial-up and VPN connections, handling the establishment, maintenance, and termination of remote access sessions. It ensures that users can securely connect to remote networks, providing the necessary protocols and services for reliable and encrypted communications.

53. Remote Desktop Services

  • Name: Remote Desktop Services
  • Executable: svchost.exe -k DcomLaunch
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC), Network Location Awareness
  • First Released in Version: Windows XP (as Terminal Services)
  • Log On As: LocalSystem
  • Description: Enables users to remotely access and interact with the desktop of a Windows computer over a network connection. It facilitates remote administration, virtual desktop environments, and remote application hosting, providing flexibility and accessibility for users and administrators alike.

54. Remote Procedure Call (RPC)

  • Name: Remote Procedure Call (RPC)
  • Executable: svchost.exe -k RPCSS
  • Developer Company: Microsoft Corporation
  • Dependencies: None
  • First Released in Version: Windows NT
  • Log On As: LocalSystem
  • Description: Facilitates communication between software applications on different computers within a network. It allows programs to request services from other programs, enabling distributed computing and the seamless integration of networked applications.

55. Remote Registry

  • Name: Remote Registry
  • Executable: regsvc.dll
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC)
  • First Released in Version: Windows NT
  • Log On As: LocalSystem
  • Description: Allows remote users to modify the Windows registry on the computer. While it enables centralized management and configuration, it poses security risks if not properly secured, as unauthorized access to the registry can compromise system integrity.

56. Routing and Remote Access

  • Name: Routing and Remote Access
  • Executable: svchost.exe -k RemoteAccess
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC), Secure Socket Tunneling Protocol Service, Telephony
  • First Released in Version: Windows NT
  • Log On As: LocalSystem
  • Description: Provides multiprotocol routing services to businesses in LAN and WAN environments. It allows computers to act as network routers and supports virtual private network (VPN) connections, enabling remote users to access internal network resources securely.

57. Secondary Logon

  • Name: Secondary Logon
  • Executable: svchost.exe -k netsvcs
  • Developer Company: Microsoft Corporation
  • Dependencies: None
  • First Released in Version: Windows XP
  • Log On As: LocalSystem
  • Description: Allows users to run applications with different user credentials without logging off. This service is essential for administrators who want to run programs with elevated privileges without changing user sessions, enhancing flexibility and security.

58. Security Accounts Manager

  • Name: Security Accounts Manager
  • Executable: lsass.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: None
  • First Released in Version: Windows NT
  • Log On As: LocalSystem
  • Description: Manages user account security information, including passwords and security tokens. It stores credentials in the local security authority and plays a crucial role in enforcing local and domain-level security policies on Windows systems.

59. Server

  • Name: Server
  • Executable: svchost.exe -k netsvcs
  • Developer Company: Microsoft Corporation
  • Dependencies: None
  • First Released in Version: Windows NT
  • Log On As: LocalSystem
  • Description: Provides support for file, print, and named-pipe sharing over the network. It enables computers to communicate and share resources like files and printers with other devices in the network, promoting a collaborative working environment.

60. Shell Hardware Detection

  • Name: Shell Hardware Detection
  • Executable: svchost.exe -k netsvcs
  • Developer Company: Microsoft Corporation
  • Dependencies: Plug and Play, Remote Procedure Call (RPC)
  • First Released in Version: Windows XP
  • Log On As: LocalSystem
  • Description: Provides notifications for AutoPlay hardware events, such as inserting a USB drive or connecting a new device. It allows the system to automatically respond to new hardware, enabling features like the automatic launch of programs or file transfers.

61. Smart Card

  • Name: Smart Card
  • Executable: svchost.exe -k LocalService
  • Developer Company: Microsoft Corporation
  • Dependencies: Plug and Play, Remote Procedure Call (RPC)
  • First Released in Version: Windows 2000
  • Log On As: LocalService
  • Description: Manages access to smart cards that are connected to the computer. Smart cards are often used for security authentication, providing an additional layer of protection for sensitive information, especially in business or governmental environments.

62. SNMP Service

  • Name: SNMP Service
  • Executable: snmp.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: None
  • First Released in Version: Windows NT
  • Log On As: LocalSystem
  • Description: Implements the Simple Network Management Protocol (SNMP) for monitoring and managing network devices such as routers, switches, and servers. It allows administrators to collect information about network devices’ status and behavior for diagnostic and management purposes.

63. Software Protection

  • Name: Software Protection
  • Executable: sppsvc.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC)
  • First Released in Version: Windows Vista
  • Log On As: NetworkService
  • Description: Ensures that Windows and its applications are properly licensed and protected. It activates Windows installations, ensures license compliance, and prevents the use of pirated software. If the service is stopped, the system may lose its license status.

64. SQL Server (MSSQLSERVER)

  • Name: SQL Server (MSSQLSERVER)
  • Executable: sqlservr.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: None
  • First Released in Version: Windows 2000 (as a service)
  • Log On As: LocalSystem
  • Description: Provides database services to applications requiring the SQL Server database engine. It manages databases, processes SQL queries, and handles transaction logging, data replication, and data security for business-critical operations.

65. SSDP Discovery

  • Name: SSDP Discovery
  • Executable: svchost.exe -k LocalService
  • Developer Company: Microsoft Corporation
  • Dependencies: HTTP, TCP/IP Protocol Driver
  • First Released in Version: Windows XP
  • Log On As: LocalService
  • Description: Enables discovery of Universal Plug and Play (UPnP) devices on the network. It allows applications to automatically detect networked devices, such as printers, routers, or media servers, simplifying device setup and use.

66. Storage Service

  • Name: Storage Service
  • Executable: svchost.exe -k LocalSystemNetworkRestricted
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC)
  • First Released in Version: Windows 10
  • Log On As: LocalSystem
  • Description: Manages storage-related operations such as managing spaces in the Storage Spaces feature, ensuring data redundancy, and maximizing storage efficiency. This service also manages software-defined storage configurations.

67. Superfetch (SysMain)

  • Name: Superfetch (SysMain)
  • Executable: svchost.exe -k LocalSystemNetworkRestricted
  • Developer Company: Microsoft Corporation
  • Dependencies: None
  • First Released in Version: Windows Vista
  • Log On As: LocalSystem
  • Description: Improves system performance by preloading frequently used applications into memory. It learns usage patterns and optimizes RAM allocation to ensure faster application load times and smoother multitasking.

68. System Event Notification Service

  • Name: System Event Notification Service
  • Executable: svchost.exe -k netsvcs
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC)
  • First Released in Version: Windows XP
  • Log On As: LocalSystem
  • Description: Monitors system events such as network changes, logon sessions, and power events. It notifies users and dependent applications when significant system changes occur, ensuring smooth transitions and responsiveness to these events.

69. Task Scheduler

  • Name: Task Scheduler
  • Executable: svchost.exe -k netsvcs
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC)
  • First Released in Version: Windows NT
  • Log On As: LocalSystem
  • Description: Allows users and applications to schedule automated tasks that run at specified times or events. It ensures that system maintenance tasks, updates, and backups are performed regularly without manual intervention, improving system stability and uptime.

70. TCP/IP NetBIOS Helper

  • Name: TCP/IP NetBIOS Helper
  • Executable: svchost.exe -k LocalService
  • Developer Company: Microsoft Corporation
  • Dependencies: NetBT
  • First Released in Version: Windows 2000
  • Log On As: LocalService
  • Description: Provides support for the NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution. It allows legacy applications that rely on NetBIOS to communicate over TCP/IP networks, facilitating compatibility in mixed network environments.

71. Telephony

  • Name: Telephony
  • Executable: svchost.exe -k NetworkService
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC)
  • First Released in Version: Windows NT
  • Log On As: NetworkService
  • Description: Provides telephony APIs (TAPI) to allow the computer to interact with modems, voice communication devices, and remote access services. It supports traditional telephony functions like dial-up internet and modern VoIP services.

72. Themes

  • Name: Themes
  • Executable: svchost.exe -k netsvcs
  • Developer Company: Microsoft Corporation
  • Dependencies: None
  • First Released in Version: Windows XP
  • Log On As: LocalSystem
  • Description: Manages desktop themes, which include visual elements such as wallpapers, colors, and sounds. It ensures a consistent visual experience across the operating system and allows for customizations to enhance the user interface.

73. Time Broker

  • Name: Time Broker
  • Executable: svchost.exe -k LocalServiceNetworkRestricted
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC)
  • First Released in Version: Windows 8
  • Log On As: LocalServiceNetworkRestricted
  • Description: Manages background tasks for Modern (Universal Windows Platform) apps, ensuring they can run background processes without impacting the overall system performance. It also helps with scheduling and controlling the execution of these tasks.

74. UPnP Device Host

  • Name: UPnP Device Host
  • Executable: svchost.exe -k LocalService
  • Developer Company: Microsoft Corporation
  • Dependencies: SSDP Discovery
  • First Released in Version: Windows XP
  • Log On As: LocalService
  • Description: Allows hosting of Universal Plug and Play (UPnP) devices on the local computer. It enables seamless discovery and management of networked devices such as printers, routers, and media players.

75. User Profile Service

  • Name: User Profile Service
  • Executable: svchost.exe -k netsvcs
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC)
  • First Released in Version: Windows Vista
  • Log On As: LocalSystem
  • Description: Manages user profiles, ensuring the correct user data (such as settings, files, and preferences) is loaded when a user logs in. It ensures that profiles are consistent and follow users across different sessions, enabling personalization and data persistence.

76. Windows Update

  • Name: Windows Update
  • Executable: wuauclt.exe / svchost.exe -k netsvcs
  • Developer Company: Microsoft Corporation
  • Dependencies: Windows Installer, Background Intelligent Transfer Service (BITS)
  • First Released in Version: Windows 95 (as Automatic Updates)
  • Log On As: LocalSystem
  • Description: Manages the download and installation of updates for the Windows operating system and other Microsoft software. It ensures that the system receives the latest security patches, bug fixes, and feature enhancements, maintaining system security and performance.

77. Windows Firewall

  • Name: Windows Firewall
  • Executable: svchost.exe -k LocalService
  • Developer Company: Microsoft Corporation
  • Dependencies: Base Filtering Engine, Windows Firewall Authorization Driver
  • First Released in Version: Windows XP (as Internet Connection Firewall)
  • Log On As: LocalSystem
  • Description: Provides firewall protection by monitoring and controlling incoming and outgoing network traffic based on predetermined security rules. It helps prevent unauthorized access to the computer, safeguarding against network-based threats and attacks.

78. Windows Search

  • Name: Windows Search
  • Executable: SearchIndexer.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC), Windows Search Filter Host
  • First Released in Version: Windows Vista
  • Log On As: LocalService
  • Description: Enables indexing and searching of files, emails, and other content on the computer. It improves search performance by creating and maintaining an index of searchable items, allowing users to quickly find documents, applications, and other data.

79. Windows Security Center

  • Name: Windows Security Center
  • Executable: wscsvc.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC), Windows Management Instrumentation (WMI)
  • First Released in Version: Windows XP
  • Log On As: LocalSystem
  • Description: Monitors the security status of the computer, including antivirus, firewall, and automatic updates. It provides alerts and status information to the user, ensuring that critical security components are active and up-to-date.

80. Windows Time

  • Name: Windows Time
  • Executable: w32time.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC)
  • First Released in Version: Windows 2000
  • Log On As: LocalSystem
  • Description: Maintains system time synchronization across the network using the Network Time Protocol (NTP). Accurate timekeeping is essential for security protocols, logging, and various network operations.

81. Windows Management Instrumentation (WMI)

  • Name: Windows Management Instrumentation
  • Executable: svchost.exe -k winmgmts
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC)
  • First Released in Version: Windows 2000
  • Log On As: LocalSystem
  • Description: Provides a standardized interface for managing system components, applications, and network resources. It allows scripts and applications to query system information, configure settings, and automate administrative tasks.

82. Windows Media Player Network Sharing Service

  • Name: Windows Media Player Network Sharing Service
  • Executable: svchost.exe -k LocalService
  • Developer Company: Microsoft Corporation
  • Dependencies: Windows Media Player, SSDP Discovery, UPnP Device Host
  • First Released in Version: Windows Vista
  • Log On As: LocalService
  • Description: Shares media libraries from Windows Media Player with other devices on the network. It allows streaming of music, videos, and pictures to compatible devices such as smart TVs, game consoles, and other computers.

83. Windows Modules Installer

  • Name: Windows Modules Installer
  • Executable: TrustedInstaller.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC), Windows Installer
  • First Released in Version: Windows 2000
  • Log On As: LocalSystem
  • Description: Manages the installation, modification, and removal of Windows updates and optional system components. It ensures that critical system files are properly updated and maintained, enabling the smooth functioning of Windows features and security updates.

84. Windows Push Notifications System Service

  • Name: Windows Push Notifications System Service
  • Executable: svchost.exe -k LocalServiceNetworkRestricted
  • Developer Company: Microsoft Corporation
  • Dependencies: None
  • First Released in Version: Windows 10
  • Log On As: LocalServiceNetworkRestricted
  • Description: Manages the delivery of push notifications from apps to the user. It allows applications to receive real-time updates and notifications, ensuring timely information and alerts are presented to the user across the system.

85. Windows Remote Management (WS-Management)

  • Name: Windows Remote Management (WS-Management)
  • Executable: svchost.exe -k wsman
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC)
  • First Released in Version: Windows Vista
  • Log On As: NetworkService
  • Description: Provides a management protocol for remote administration and configuration of systems. It allows administrators to manage multiple computers from a central location, enabling tasks like configuration changes, monitoring, and automation across a network.

86. Windows Search Indexer

  • Name: Windows Search Indexer
  • Executable: SearchIndexer.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Windows Search
  • First Released in Version: Windows Vista
  • Log On As: LocalService
  • Description: Indexes files and content on the computer to enhance search speed and efficiency. It scans files, emails, and other content, creating an index that allows users to quickly locate items through the Windows search interface.

87. Windows Defender Firewall

  • Name: Windows Defender Firewall
  • Executable: svchost.exe -k LocalService
  • Developer Company: Microsoft Corporation
  • Dependencies: Base Filtering Engine, Windows Firewall Authorization Driver
  • First Released in Version: Windows Vista (rebranded in Windows 10)
  • Log On As: LocalSystem
  • Description: An enhanced version of Windows Firewall that offers advanced security features to protect the computer from unauthorized access and network threats. It provides inbound and outbound traffic filtering, rule management, and integration with other security components for comprehensive protection.

88. Windows Defender Antivirus

  • Name: Windows Defender Antivirus
  • Executable: MsMpEng.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Microsoft Defender Antivirus Network Inspection Service
  • First Released in Version: Windows Vista (as Windows Defender; rebranded in Windows 10)
  • Log On As: LocalSystem
  • Description: Provides real-time protection against malware, viruses, and other threats. It continuously scans files, processes, and system activities to detect and eliminate malicious software, ensuring system security and integrity.

89. Windows Error Reporting Service

  • Name: Windows Error Reporting Service
  • Executable: WerSvc.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC)
  • First Released in Version: Windows XP
  • Log On As: LocalService
  • Description: Collects and sends error reports to Microsoft when applications crash or encounter issues. These reports help Microsoft identify and address software bugs, improving the overall stability and reliability of the Windows operating system.

90. Windows Event Collector

  • Name: Windows Event Collector
  • Executable: wecsvc.dll
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC), Windows Event Log
  • First Released in Version: Windows Vista
  • Log On As: LocalSystem
  • Description: Collects event logs from remote computers and consolidates them into a central location. It enables centralized monitoring and analysis of system events across multiple machines, facilitating efficient troubleshooting and system management.

91. Windows Insider Service

  • Name: Windows Insider Service
  • Executable: svchost.exe -k netsvcs
  • Developer Company: Microsoft Corporation
  • Dependencies: Windows Update, Telemetry
  • First Released in Version: Windows 10
  • Log On As: LocalSystem
  • Description: Manages participation in the Windows Insider Program, allowing users to receive and test preview builds of Windows. It facilitates the collection of feedback and telemetry data from Insider users to help improve future Windows releases.

92. Windows Installer

  • Name: Windows Installer
  • Executable: msiexec.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC)
  • First Released in Version: Windows 95
  • Log On As: LocalSystem
  • Description: Provides the infrastructure for installing, maintaining, and removing software on Windows. It processes MSI (Microsoft Installer) packages, handling tasks such as file copying, registry updates, and configuration changes required by applications.

93. Windows Management Service

  • Name: Windows Management Service
  • Executable: Winmgmt.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Windows Management Instrumentation (WMI)
  • First Released in Version: Windows 2000
  • Log On As: LocalSystem
  • Description: Supports management and monitoring of system resources through the Windows Management Instrumentation framework. It enables administrators to access and manipulate system data, perform diagnostics, and automate management tasks.

94. Windows Media Player

  • Name: Windows Media Player
  • Executable: wmplayer.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Windows Media Player Network Sharing Service, Windows Media Player Remote Class Manager
  • First Released in Version: Windows 98
  • Log On As: N/A (Application)
  • Description: Provides media playback capabilities for audio and video files. It allows users to play, organize, and manage their media collections, supporting various formats and offering features like playlists, library management, and media streaming.

95. Windows Remote Shell

  • Name: Windows Remote Shell
  • Executable: remoteshell.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Remote Procedure Call (RPC), Windows Remote Management
  • First Released in Version: Windows 10
  • Log On As: LocalSystem
  • Description: Provides a secure remote command-line interface for managing and administering Windows systems. It allows administrators to execute commands and scripts remotely, facilitating efficient system management and troubleshooting.

96. Windows Search Service

  • Name: Windows Search Service
  • Executable: SearchFilterHost.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Windows Search Indexer
  • First Released in Version: Windows Vista
  • Log On As: LocalService
  • Description: Enhances search functionality by indexing and filtering search queries. It works in conjunction with the Windows Search Indexer to provide relevant search results and support advanced search features like filtering and sorting.

97. Windows Security Service

  • Name: Windows Security Service
  • Executable: SecurityHealthService.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Windows Defender Antivirus, Windows Firewall
  • First Released in Version: Windows 10
  • Log On As: LocalSystem
  • Description: Monitors and manages the security status of the system, integrating various security components like antivirus, firewall, and exploit protection. It provides a centralized interface for users to view and manage security settings, ensuring comprehensive protection against threats.

98. Windows Services

  • Name: Windows Services
  • Executable: services.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: System
  • First Released in Version: Windows NT
  • Log On As: LocalSystem
  • Description: Acts as the service control manager, overseeing the starting, stopping, and management of all Windows services. It ensures that services are correctly initialized during system startup and provides mechanisms for service configuration and monitoring.

99. Windows Speech Recognition

  • Name: Windows Speech Recognition
  • Executable: SpeechRuntime.exe
  • Developer Company: Microsoft Corporation
  • Dependencies: Speech Recognition Service, Windows Audio
  • First Released in Version: Windows Vista
  • Log On As: LocalSystem
  • Description: Enables voice-controlled interactions with the operating system and applications. It allows users to dictate text, control the computer through voice commands, and interact with various software features, enhancing accessibility and user convenience.

100. Windows Update Orchestrator Service

  • Name: Windows Update Orchestrator Service
  • Executable: svchost.exe -k netsvcs
  • Developer Company: Microsoft Corporation
  • Dependencies: Windows Update, Background Intelligent Transfer Service (BITS), Cryptographic Services
  • First Released in Version: Windows 10
  • Log On As: LocalSystem
  • Description: Manages the scheduling and coordination of Windows Update operations. It ensures that updates are downloaded and installed efficiently, balancing system performance and user convenience, and handling tasks such as automatic restart scheduling and update prioritization.

This completes the listing of the top 100 common Windows 10, 11, 12, and Windows Server 2019, 2022 and 2025 services. Each service plays a crucial role in the functionality, security, and performance of the Windows operating system. If you need more detailed information about any specific service or assistance with managing these services, feel free to ask.

Leave a Comment
Published by
Ian Matthews
2 months ago

This website uses cookies.