"svchost.exe -k LocalServiceAndNoImpersonation" Services on Windows 8

Q

Where are services hosted by "svchost.exe -k LocalServiceAndNoImpersonation" on Windows 8? What is the meaning of "-k LocalServiceAndNoImpersonation" parameter?

✍: FYIcenter.com

A

"svchost.exe -k LocalServiceAndNoImpersonation" command is used to invoke the svchost.exe program to load the DLL file for the given service specified in the registry.

"-k LocalServiceAndNoImpersonation" is the process grouping parameter. It allows Windows to load multiple DLL files under a single shared svchost.exe process of the same group name.

In other words, all services that are launched by the same "svchost.exe -k LocalServiceAndNoImpersonation" command will be running under a single shared process of svchost.exe.

The advantage of using a shared process is to save process resources. But services of a shared process have execution environment dependency. If one service is running into problem, all other services of the same shared process will be impacted.

Here is a list of services hosted by the shared process of "svchost.exe -k LocalServiceAndNoImpersonation":

"Function Discovery Resource Publication - fdrespub.dll" Service on Windows 8

"Quality Windows Audio Video Experience - qwave.dll" Service on Windows 8

"Smart Card - SCardSvr.dll" Service on Windows 8

"Sensor Monitoring Service - sensrsvc.dll" Service on Windows 8

"Windows Connect Now - Config Registrar - wcncsvc.dll" Service on Windows 8

"Windows Store Service (WSService) - WSService.dll" Service on Windows 8

"SSDP Discovery - ssdpsrv.dll" Service on Windows 8

"Time Broker - TimeBrokerServer.dll" Service on Windows 8

"UPnP Device Host - upnphost.dll" Service on Windows 8

 

⇒⇒Windows 8 Services Tutorials

2016-12-19, 2145🔥, 0💬