www.BlackViper.com: Windows XP Service Pack 2 Services 411 - Protected Storage

Protected Storage

Default Description:

Provides protected storage for sensitive data, such as private keys, to prevent access by unauthorized services, processes, or users.

Additional Information:

Allows for the saving of local passwords or even web sites information (AutoComplete). This service is set to Automatic by default. Due to security reasons, I recommend leaving this "feature" disabled to make things all that much more difficult to steal vital information if you do not "save" it. On the other hand, you may need this service to manage private keys for encryption purposes. If so, leave this service on automatic to ensure the "higher" security settings you choose work. If you disable this service, you will no longer have any of your passwords saved, no matter how many times you click the box. If you enjoy having your passwords saved in applications like Outlook or Dial up networking or you are connecting to the internet via a domain controller/server that requires authentication, set this service to Automatic.

Defaults Startup Type:

Default XP Home: Automatic
Default XP MCE 2005: Automatic
Default XP Pro: Automatic
Default XP Pro x64: Automatic
Default XP Tablet PC 2005: Automatic

Other Settings:

Safe Setting: Automatic

Service Names:

Service Name (registry): ProtectedStorage

Display Name: Protected Storage

Default Path and Command Line Options:

C:\WINDOWS\system32\lsass.exe

Log On As:

Account: Local System Account (Allow service to interact with desktop)

Dependencies:

What service Protected Storage needs to function properly:

• Remote Procedure Call (RPC)

What other service require Protected Storage to function properly:

• None

Default Registry Entries:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ProtectedStorage]
"DependOnService"=hex(7):52,00,70,00,63,00,53,00,73,00,00,00,00,00
"Description"="Protects storage of sensitive information, such as private keys, and prevents access by unauthorized services, processes, or users. If this service is stopped, protected storage will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start."
"DisplayName"="Protected Storage"
"ErrorControl"=dword:00000001
"ObjectName"="LocalSystem"
"Start"=dword:00000002
"Type"=dword:00000120