Where are services hosted by "svchost.exe -k LocalServiceNoNetwork" on Windows XP? What is the meaning of "-k LocalServiceNetworkRestricted" parameter?

"svchost.exe -k LocalServiceNoNetwork" command is used to invoke the svchost.exe program to load the DLL file for the given service specified in the registry.

"-k LocalServiceNoNetwork" is the process grouping parameter. It allows Windows to load multiple DLL files under a single shared svchost.exe process of the same group name.

In other words, all services that are launched by the same "svchost.exe -k LocalServiceNoNetwork" command will be running under a single shared process of svchost.exe.

The advantage of using a shared process is to save process resources. But services of a shared process have execution environment dependency. If one service is running into problem, all other services of the same shared process will be impacted.

Here is a list of services hosted by the shared process of "svchost.exe -k LocalServiceNoNetwork":

What Is "svchost.exe -k LocalServiceNoNetwork" on Windows XP

"Performance Logs and Alerts - smlogsvc.exe" Service on Windows XP

"Windows Firewall/Internet Connection Sharing (ICS)" Service on Windows XP

⇒⇒Windows XP Services Tutorials