www.BlackViper.com: Windows 7 Services 411 - Remote Procedure Call (RPC)

Remote Procedure Call (RPC)

Default Description:

The RPCSS service is the Service Control Manager for COM and DCOM servers. It performs object activations requests, object exporter resolutions and distributed garbage collection for COM and DCOM servers. If this service is stopped or disabled, programs using COM or DCOM will not function properly. It is strongly recommended that you have the RPCSS service running.

Additional Information:

This service is rather vital. Practically everything depends on this service to be running. This is also one of the few services that you cannot disable via the Services MMC, nor can you change the state with a registry patch. Previously, if you disabled this service in Windows 2000, your computer would become unbootable. What I am trying to tell you is leave this service on Automatic and absolutely do not disable it. If, for whatever reason, the service became disabled and you can no longer boot your system, please read the information here for a way to try and fix it.

Additional Reading:

• DCOM: http://en.wikipedia.org/wiki/Distributed_Component_Object_Model
• RPC: http://en.wikipedia.org/wiki/Remote_procedure_call

Discussion Topic Link:

Windows 7 Services Forum

Defaults Startup Type:

Windows 7 Starter: Automatic (Started)
Windows 7 Home Basic: Automatic (Started)
Windows 7 Home Premium: Automatic (Started)
Windows 7 Professional: Automatic (Started)
Windows 7 Ultimate: Automatic (Started)
Windows 7 Enterprise: Automatic (Started)

Other Settings:

Safe Setting: Automatic

Service Names:

Service Name (registry): RpcSs

Display Name: Remote Procedure Call (RPC)

Default Path and Command Line Options:

C:\Windows\system32\svchost.exe -k rpcss

Log On As:

Account: Network Service (unchangeable)

Dependencies:

What service Remote Procedure Call (RPC) needs to function properly:

• DCOM Server Process Launcher (S, HB, HP, P, U, E)
• RPC Endpoint Mapper (S, HB, HP, P, U, E)

What other service require Remote Procedure Call (RPC) to function properly:

• ActiveX Installer (AxInstSV) (S, HB, HP, P, U, E)
• Application Identity (S, HB, HP, P, U, E)
• Application Information (S, HB, HP, P, U, E)
• Background Intelligent Transfer Service (S, HB, HP, P, U, E)
• Base Filtering Engine (S, HB, HP, P, U, E)
  • IKE and AuthIP IPsec Keying Modules (S, HB, HP, P, U, E)
  • Internet Connection Sharing (ICS) (S, HB, HP, P, U, E)
  • IPsec Policy Agent (S, HB, HP, P, U, E)
  • Routing and Remote Access (S, HB, HP, P, U, E)
  • Windows Firewall (S, HB, HP, P, U, E)
• Bluetooth Support Service (S, HB, HP, P, U, E)
• Certificate Propagation (S, HB, HP, P, U, E)
• CNG Key Isolation (S, HB, HP, P, U, E)
  • Extensible Authentication Protocol (S, HB, HP, P, U, E)
    • Wired AutoConfig (S, HB, HP, P, U, E)
    • WLAN AutoConfig (S, HB, HP, P, U, E)
• COM+ Event System (S, HB, HP, P, U, E)
  • Background Intelligent Transfer Service (S, HB, HP, P, U, E)
  • COM+ System Application (S, HB, HP, P, U, E)
  • SPP Notification Service (S, HB, HP, P, U, E)
  • System Event Notification Service (S, HB, HP, P, U, E)
    • COM+ System Application (S, HB, HP, P, U, E)
• COM+ System Application (S, HB, HP, P, U, E)
• Credential Manager Service (S, HB, HP, P, U, E)
  • Windows Biometric Service (S, HB, HP, P, U, E)
• Cryptographic Services (S, HB, HP, P, U, E)
  • Application Identity (S, HB, HP, P, U, E)
• Disk Defragmenter (S, HB, HP, P, U, E)
• Distributed Link Tracking Client (S, HB, HP, P, U, E)
• Distributed Transaction Coordinator (S, HB, HP, P, U, E)
• Encrypting File System (EFS) (S, HB, HP, P, U, E)
• Extensible Authentication Protocol (S, HB, HP, P, U, E)
  • Wired AutoConfig (S, HB, HP, P, U, E)
  • WLAN AutoConfig (S, HB, HP, P, U, E)
• Fax (S, HB, HP, P, U, E)
• Function Discovery Provider Host (S, HB, HP, P, U, E)
  • HomeGroup Provider (S, HB, HP, P, U, E)
  • Media Center Extender Service (HP, P, U, E)
  • PnP-X IP Bus Enumerator (S, HB, HP, P, U, E)
    • Media Center Extender Service (HP, P, U, E)
• Function Discovery Resource Publication (S, HB, HP, P, U, E)
  • HomeGroup Provider (S, HB, HP, P, U, E)
• Group Policy Client (S, HB, HP, P, U, E)
• Health Key and Certificate Management (S, HB, HP, P, U, E)
• IIS Admin Service (S, HB, HP, P, U, E)
• Indexing Service (S, HB, HP, P, U, E)
• IP Helper (S, HB, HP, P, U, E)
• KtmRm for Distributed Transaction Coordinator (S, HB, HP, P, U, E)
• Link-Layer Topology Discovery Mapper (S, HB, HP, P, U, E)
• Message Queuing (S, HB, HP, P, U, E)
  • Message Queuing Triggers (S, HB, HP, P, U, E)
  • Net.Msmq Listener Adapter (S, HB, HP, P, U, E)
• Microsoft FTP Service (HP, P, U, E)
• Microsoft Software Shadow Copy Provider (S, HB, HP, P, U, E)
• Network Access Protection Agent (S, HB, HP, P, U, E)
• Network Connections (S, HB, HP, P, U, E)
  • Internet Connection Sharing (ICS) (S, HB, HP, P, U, E)
• Network List Service (S, HB, HP, P, U, E)
  • HomeGroup Provider (S, HB, HP, P, U, E)
• Network Location Awareness (S, HB, HP, P, U, E)
  • Network List Service (S, HB, HP, P, U, E)
    • HomeGroup Provider (S, HB, HP, P, U, E)
  • WWAN AutoConfig (S, HB, HP, P, U, E)
• Offline Files (P, U, E)
• Parental Controls (S, HB, HP, P, U, E)
• Performance Logs & Alerts (S, HB, HP, P, U, E)
• PnP-X IP Bus Enumerator (S, HB, HP, P, U, E)
  • Media Center Extender Service (HP, P, U, E)
• Portable Device Enumerator Service (S, HB, HP, P, U, E)
• Print Spooler (S, HB, HP, P, U, E)
  • Fax (S, HB, HP, P, U, E)
  • LPD Service (HB, HP, P, U, E)
• Program Commpatibility Assistant Service (S, HB, HP, P, U, E)
• Protected Storage (S, HB, HP, P, U, E)
• Quality Windows Audio Video Experience (S, HB, HP, P, U, E)
• Remote Desktop Configuration (S, HB, HP, P, U, E)
• Remote Desktop Services (S, HB, HP, P, U, E)
  • Media Center Extender Service (HP, P, U, E)
  • Remote Desktop Services UserMode Port Redirector (P, U, E)
• Remote Registry (S, HB, HP, P, U, E)
• RIP Listener (S, HB, HP, P, U, E)
• Routing and Remote Access (S, HB, HP, P, U, E)
• Security Accounts Manager (S, HB, HP, P, U, E)
  • Distributed Transaction Coordinator (S, HB, HP, P, U, E)
  • IIS Admin Service (S, HB, HP, P, U, E)
  • KtmRm for Distributed Transaction Coordinator (S, HB, HP, P, U, E)
  • Server (S, HB, HP, P, U, E)
    • Computer Browser (S, HB, HP, P, U, E)
    • HomeGroup Listener (S, HB, HP, P, U, E)
• Security Center (S, HB, HP, P, U, E)
• Shell Hardware Detection (S, HB, HP, P, U, E)
  • Windows Image Acquisition (WIA) (S, HB, HP, P, U, E)
• Smart Card Removal Policy (S, HB, HP, P, U, E)
• Software Protection (S, HB, HP, P, U, E)
• Superfetch (S, HB, HP, P, U, E)
• Tablet PC Input Service (S, HB, HP, P, U, E)
• Task Scheduler (S, HB, HP, P, U, E)
• Telephony (S, HB, HP, P, U, E)
  • Fax (S, HB, HP, P, U, E)
  • Remote Access Auto Connection Manager (S, HB, HP, P, U, E)
  • Remote Access Connection Manager (S, HB, HP, P, U, E)
    • Internet Connection Sharing (ICS) (S, HB, HP, P, U, E)
    • Remote Access Auto Connection Manager (S, HB, HP, P, U, E)
    • Routing and Remote Access (S, HB, HP, P, U, E)
• Telnet (S, HB, HP, P, U, E)
• User Profile Service (S, HB, HP, P, U, E)
  • Application Information (S, HB, HP, P, U, E)
• Virtual Disk (S, HB, HP, P, U, E)
• Volume Shadow Copy (S, HB, HP, P, U, E)
• Windows Audio (S, HB, HP, P, U, E)
• Windows Backup (S, HB, HP, P, U, E)
• Windows Biometric Service (S, HB, HP, P, U, E)
• Windows Color System (S, HB, HP, P, U, E)
• Windows Connect Now - Config Registrar (S, HB, HP, P, U, E)
• Windows Defender (S, HB, HP, P, U, E)
• Windows Image Acquisition (WIA) (S, HB, HP, P, U, E)
• Windows Installer (S, HB, HP, P, U, E)
• Windows Live Family Safety (S, HB, HP, P, U, E)
• Windows Management Instrumentation (S, HB, HP, P, U, E)
  • Internet Connection Sharing (ICS) (S, HB, HP, P, U, E)
  • IP Helper (S, HB, HP, P, U, E)
  • Security Center (S, HB, HP, P, U, E)
• Windows Media Center Receiver Service (HP, P, U, E)
• Windows Media Center Scheduler Service (HP, P, U, E)
• Windows Process Activation Service (S, HB, HP, P, U, E)
  • Net.Msmq Listener Adapter (S, HB, HP, P, U, E)
  • Net.Pipe Listener Adapter (S, HB, HP, P, U, E)
  • Net.Tcp Listener Adapter (S, HB, HP, P, U, E)
  • World Wide Web Publishing Service (S, HB, HP, P, U, E)
• Windows Remote Management (WS-Management) (S, HB, HP, P, U, E)
• Windows Search (S, HB, HP, P, U, E)
• Windows Update (S, HB, HP, P, U, E)
• Wired AutoConfig (S, HB, HP, P, U, E)
• WLAN AutoConfig (S, HB, HP, P, U, E)
• WWAN AutoConfig (S, HB, HP, P, U, E)

Registry Settings (.reg):

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\RpcSs]
"DisplayName"="@oleres.dll,-5010"
"Group"="COM Infrastructure"
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\
6b,00,20,00,72,00,70,00,63,00,73,00,73,00,00,00
"Description"="@oleres.dll,-5011"
"ObjectName"="NT AUTHORITY\\NetworkService"
"ErrorControl"=dword:00000001
"Start"=dword:00000002
"Type"=dword:00000020
"DependOnService"=hex(7):52,00,70,00,63,00,45,00,70,00,74,00,4d,00,61,00,70,00,\
70,00,65,00,72,00,00,00,44,00,63,00,6f,00,6d,00,4c,00,61,00,75,00,6e,00,63,\
00,68,00,00,00,00,00
"FailureActions"=hex:00,00,00,00,00,00,00,00,00,00,00,00,01,00,00,00,00,00,00,\
00,02,00,00,00,60,ea,00,00
"RequiredPrivileges"=hex(7):53,00,65,00,43,00,68,00,61,00,6e,00,67,00,65,00,4e,\
00,6f,00,74,00,69,00,66,00,79,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,\
67,00,65,00,00,00,53,00,65,00,43,00,72,00,65,00,61,00,74,00,65,00,47,00,6c,\
00,6f,00,62,00,61,00,6c,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,\
65,00,00,00,53,00,65,00,49,00,6d,00,70,00,65,00,72,00,73,00,6f,00,6e,00,61,\
00,74,00,65,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,\
00,00
"ServiceSidType"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\RpcSs\Parameters]
"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
72,00,70,00,63,00,73,00,73,00,2e,00,64,00,6c,00,6c,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\RpcSs\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,00,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,85,00,02,00,01,01,00,00,00,00,00,\
05,0b,00,00,00,00,00,14,00,ff,00,0e,00,01,01,00,00,00,00,00,05,12,00,00,00,\
00,00,18,00,fd,00,0e,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,\
00,18,00,85,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,21,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00