www.BlackViper.com: Windows XP Service Pack 2 Services 411 - Remote Registry

Remote Registry

Default Description:

Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start.

Additional Information:

This feature is not available on Windows XP Home. This is one of those not needed services. One of the first I disable. If you are paranoid about security, disable this service. Even if you are not or do not care, disable it anyway.

Defaults Startup Type:

Default XP Home: Not Available
Default XP MCE 2005: Automatic
Default XP Pro: Automatic
Default XP Pro x64: Automatic
Default XP Tablet PC 2005: Automatic

Other Settings:

Safe Setting: Disabled

Service Names:

Service Name (registry): RemoteRegistry

Display Name: Remote Registry

Default Path and Command Line Options:

C:\WINDOWS\system32\svchost.exe -k LocalService

Log On As:

Account: NT AUTHORITY\LocalService

Dependencies:

What service Remote Registry needs to function properly:

• Remote Procedure Call (RPC)

What other service require Remote Registry to function properly:

• None

Default Registry Entries:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
"Description"="Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start."
"DependOnService"=hex(7):52,00,50,00,43,00,53,00,53,00,00,00,00,00
"DisplayName"="Remote Registry"
"ErrorControl"=dword:00000001
"ObjectName"="NT AUTHORITY\\LocalService"
"Group"=""
"Start"=dword:00000002
"Type"=dword:00000020
"FailureActions"=hex:00,00,00,00,00,00,00,00,00,00,00,00,01,00,00,00,e0,ad,08,\
00,01,00,00,00,e8,03,00,00