www.BlackViper.com: Windows 7 Services 411 - Netlogon

Netlogon

Default Description:

Maintains a secure channel between this computer and the domain controller for authenticating users and services. If this service is stopped, the computer may not authenticate users and services and the domain controller cannot register DNS records. If this service is disabled, any services that explicitly depend on it will fail to start.

Additional Information:

This service is not required on a standalone system, or for a "home" network, but it is required to login to a domain controller.

Additional Reading:

• DNS: http://en.wikipedia.org/wiki/Domain_Name_System

Discussion Topic Link:

Windows 7 Services Forum

Defaults Startup Type:

Windows 7 Starter: Manual
Windows 7 Home Basic: Manual
Windows 7 Home Premium: Manual
Windows 7 Professional: Manual
Windows 7 Ultimate: Manual
Windows 7 Enterprise: Manual

Other Settings:

Safe Setting: Disabled *

Service Names:

Service Name (registry): Netlogon

Display Name: Netlogon

Default Path and Command Line Options:

C:\Windows\system32\lsass.exe

Log On As:

Account: Local System account

Dependencies:

What service Netlogon needs to function properly:

• Workstation (S, HB, HP, P, U, E)
  • Browser Support Driver (S, HB, HP, P, U, E)
  • Network Store Interface Service (S, HB, HP, P, U, E)
    • NSI proxy service driver (S, HB, HP, P, U, E)
  • SMB 1.x MiniRedirector (S, HB, HP, P, U, E)
    • SMB MiniRedirector Wrapper and Engine (S, HB, HP, P, U, E)
      • Redirected Buffering Sub System (S, HB, HP, P, U, E)
        • Mup (S, HB, HP, P, U, E)
  • SMB 2.0 MiniRedirector (S, HB, HP, P, U, E)
    • SMB MiniRedirector Wrapper and Engine (S, HB, HP, P, U, E)
      • Redirected Buffering Sub System (S, HB, HP, P, U, E)
        • Mup (S, HB, HP, P, U, E)

What other service require Netlogon to function properly:

• None (S, HB, HP, P, U, E)

Registry Settings (.reg):

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Netlogon]
"DisplayName"="@%SystemRoot%\\System32\\netlogon.dll,-102"
"Group"="MS_WindowsRemoteValidation"
"ImagePath"=hex(2):25,00,73,00,79,00,73,00,74,00,65,00,6d,00,72,00,6f,00,6f,00,\
74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6c,\
00,73,00,61,00,73,00,73,00,2e,00,65,00,78,00,65,00,00,00
"Description"="@%SystemRoot%\\System32\\netlogon.dll,-103"
"ObjectName"="LocalSystem"
"ErrorControl"=dword:00000001
"Start"=dword:00000003
"Type"=dword:00000020
"DependOnService"=hex(7):4c,00,61,00,6e,00,6d,00,61,00,6e,00,57,00,6f,00,72,00,\
6b,00,73,00,74,00,61,00,74,00,69,00,6f,00,6e,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Netlogon\Parameters]
"Update"="no"
"DisablePasswordChange"=dword:00000000
"MaximumPasswordAge"=dword:0000001e
"RequireSignOrSeal"=dword:00000001
"RequireStrongKey"=dword:00000001
"SealSecureChannel"=dword:00000001
"SignSecureChannel"=dword:00000001