Where are services hosted by "svchost.exe -k NetworkService" on Windows 8? What is the meaning of "-k NetworkService" parameter?

"svchost.exe -k NetworkService" command is used to invoke the svchost.exe program to load the DLL file for the given service specified in the registry.

"-k NetworkService" is the process grouping parameter. It allows Windows to load multiple DLL files under a single shared svchost.exe process of the same group name.

In other words, all services that are launched by the same "svchost.exe -k NetworkService" command will be running under a single shared process of svchost.exe.

The advantage of using a shared process is to save process resources. But services of a shared process have execution environment dependency. If one service is running into problem, all other services of the same shared process will be impacted.

Here is a list of services hosted by the shared process of "svchost.exe -k NetworkService":

"Network Access Protection Agent - svchost.exe" Service on Windows 8

"Telephony - tapisrv.dll" Service on Windows 8

"Remote Desktop Services - termsrv.dll" Service on Windows 8

"Windows Event Collector - wecsvc.dll" Service on Windows 8

"Windows Remote Management (WS-Management) - WsmSvc.dll" Service on Windows 8

"Cryptographic Services - cryptsvc.dll" Service on Windows 8

"DNS Client - dnsrslvr.dll" Service on Windows 8

"Workstation - wkssvc.dll" Service on Windows 8

"Network Location Awareness - nlasvc.dll" Service on Windows 8

⇒⇒Windows 8 Services Tutorials