shell bypass 403

UnknownSec Shell

C:/Windows/security/msscw/kbs/mui/en-US/ [ drwxrwxrwx ]

name : CoreServerloc.xml
��<?xml version="1.0" encoding="utf-16"?>

<!--Version 2.2-->

<SCWLocalization CultureName="en-US">

  <RoleLocalization>

    <Role Name="ADFS">

      <DisplayName>Active Directory Federation Services - Windows Token-based Agent</DisplayName>

      <Description>Windows Token-based Agent provides federated access control for Windows Applications that use traditional Windows token-based authentication.</Description>

    </Role>

    <Role Name="ADRMServer">

      <DisplayName>Active Directory Rights Management Server</DisplayName>

      <Description>Active Directory Rights Management Server helps protect information from unauthorized use. AD RMS includes a certification service that establishes the identity of users, a licensing service that provides authorized users with licenses for protected information, and a logging service to monitor and troubleshoot AD RMS.</Description>

    </Role>

    <Role Name="AppServerFoundation">

      <DisplayName>Application Server - Application Server Foundation</DisplayName>

      <Description>Application Server Foundation provides technologies for deploying and managing .NET Framework 3.0 applications. These technologies include Windows Presentation Foundation (WPF), Windows Communication Foundation (WCF), and Windows Workflow Foundation (WF). Application Server Foundation provides the means for delivering managed-code applications with seamless user experiences, secure communication, and the ability to model a range of business processes.</Description>

    </Role>

    <Role Name="ASPNetState">

      <DisplayName>ASP.NET State Service</DisplayName>

      <Description>The ASP.NET state service stores session state out of process from ASP.NET applications.  It ensures that session state is preserved if an ASP.NET application is restarted and also makes session state available to multiple ASP.NET applications running in a Web farm.</Description>

    </Role>

    <Role Name="BITS">

      <DisplayName>Background Intelligent Transfer Service (BITS)</DisplayName>

      <Description>Transfers files in the background using idle network bandwidth.</Description>

      <Details>If you select the Windows Update client or any other option that requires the BITS service, then the BITS client role will be enabled</Details>

    </Role>

    <Role Name="CertServer">

      <DisplayName>Active Directory Certificate Services - Certification Authority</DisplayName>

      <Description>Certificate authority (CA) issues and manages certificates for individuals, computers and organizations. Multiple CAs can be linked to form a public key infrastructure.</Description>

    </Role>

    <Role Name="CertServerOCSP">

      <DisplayName>Active Directory Certificate Services - Online Certificate Status Protocol (OCSP)</DisplayName>

      <Description>Allows you to set up an online responder based on the Online Certificate Status Protocol (OCSP) to provide revocation information over the Internet.</Description>

    </Role>

    <Role Name="DFSN">

      <DisplayName>DFS Namespace</DisplayName>

      <Description>DFS Namespace aggregates the files from multiple file servers into a single, global namespace for users.Enabling this role also enables remote administration.</Description>

    </Role>

    <Role Name="DFSR">

      <DisplayName>DFS Replication</DisplayName>

      <Description>DFS Replication provides for the configuration, management, monitoring, and replication of large quantities of data over the WAN in a scalable and highly efficient manner.</Description>

    </Role>

    <Role Name="DHCPServer">

      <DisplayName>DHCP Server</DisplayName>

      <Description>The Dynamic Host Configuration Protocol (DHCP) Server enables the central provisioning, configuration, and management of IP addresses and related configuration information for client computers.</Description>

    </Role>

    <Role Name="DNSClient">

      <DisplayName>DNS Client</DisplayName>

      <Description>DNS clients, also known as resolvers, use the DNS (Domain Name System) protocol to send queries to DNS Servers to lookup the DNS name of a computer and retrieve information associated with the computer, such as its IP address or other services it provides. This process is called name resolution.</Description>

    </Role>

    <Role Name="DNSServer">

      <DisplayName>DNS Server</DisplayName>

      <Description>Domain Name System (DNS) Servers store data about resources mapping DNS names of resources to other associated information, such the mapping of computer s DNS name to its IP address. DNS Servers also respond to queries from DNS Clients with data about a resource to provide name resolution for TCP/IP based networks. The Active Directory Domain Services (AD DS) and DNS Server roles can be installed on the same server and be configured to integrated together, allowing the DNS Server to take advantage of benefits of AD DS such as multiple authoritative sources of DNS data, enhanced security and AD DS replication and synchronization. An Active Directory integrated DNS Server setup is recommended.</Description>

    </Role>

    <Role Name="DomainController">

      <DisplayName>Domain Controller (Active Directory)</DisplayName>

      <Description>A domain controller stores directory data and manages user logon processes and directory searches.</Description>

    </Role>

    <Role Name="DomainMember">

      <DisplayName>Domain Member</DisplayName>

      <Description>A domain member is a computer that is joined to an Active Directory domain.</Description>

    </Role>

    <Role Name="FailoverCluster">

      <DisplayName>Failover Clustering</DisplayName>

      <Description>Failover Clustering allows multiple servers to work together to provide high availability of services and applications. Failover Clustering is often used for file and print services, database, and mail operations.</Description>

      <SCWDetails>If you select Failover Clustering the startup mode for cluster-aware services will not be specified in the output policy. This will leave the current startup mode of cluster-aware services in tact.</SCWDetails>

    </Role>

    <Role Name="Fax">

      <DisplayName>Fax server</DisplayName>

      <Description>A fax server enables to send and receive faxes.</Description>

    </Role>

    <Role Name="FSRM">

      <DisplayName>File Server Resource Manager</DisplayName>

      <Description>File Server Resource Manager (FSRM) enables you to generate storage reports, configure quotas, and define file screening policies.</Description>

    </Role>

    <Role Name="FTPServer">

      <DisplayName>FTP Server</DisplayName>

      <Description>FTP Server provides infrastructure to create an FTP site where users can upload and download files using the FTP protocol and appropriate client software. FTP uses TCP/IP to distribute files in a manner similar to how HTTP works to distribute Web pages. An FTP site is especially useful for offering customers the ability to upload files.</Description>

    </Role>

    <Role Name="InternetPrinting">

      <DisplayName>Internet Printing</DisplayName>

      <Description>Internet Printing creates a Web site where users can manage print jobs on the server. It also enables users who have Internet Printing Client installed to use a Web browser to connect and print to shared printers on this server by using the Internet Printing Protocol (IPP).</Description>

    </Role>

    <Role Name="iSCSI">

      <DisplayName>Microsoft iSCSI Initiator Service</DisplayName>

      <Description>Manages Internet SCSI (iSCSI) sessions from this computer to remote iSCSI target devices. If this service is stopped, this computer will not be able to login or access iSCSI targets. If this service is disabled, any services that explicitly depend on it will fail to start.</Description>

    </Role>

    <Role Name="iSNS">

      <DisplayName>Internet Storage Naming Server</DisplayName>

      <Description>Internet Storage Naming Server (iSNS) processes registration requests, de-registration requests, and queries from iSCSI devices.</Description>

    </Role>

    <Role Name="LinkLayer">

      <DisplayName>Link-Layer Topology Discovery Mapper</DisplayName>

      <Description>Creates a Network Map, consisting of PC and device topology (connectivity) information, and metadata describing each PC and device.</Description>

      <Details>If this role is disabled, the Network Map will not function properly.</Details>

    </Role>

    <Role Name="LLMNR-DNS">

      <DisplayName>DNS Multicast Client</DisplayName>

      <Description>Multicast DNS is also known as Link-local Multicast Name Resolution (LLMNR). A DNS Client enabled with LLMNR which is an additional name resolution protocol that is used to resolve the names of neighboring computers, on the same subnet, if DNS name resolution fails to provide an answer.</Description>

      <Details>LLMNR name resolution is used to resolve a single-label, unqualified name. It is attempted only if DNS name resolution failed to provide an answer. LLMNR also support a single-label name appended with ".local". For example both hostname and hostname.local are attempted using LLMNR. If LLMNR fails to resolve a name then NetBT is attempted next.</Details>

    </Role>

    <Role Name="LPD">

      <DisplayName>LPD Service</DisplayName>

      <Description>Line Printer Daemon (LPD) Service enables UNIX-based computers using the Line Printer Remote (LPR) service to print to shared printers on this server.</Description>

    </Role>

    <Role Name="MiddleTier">

      <DisplayName>Middle-tier Application Server (COM+/DTC)</DisplayName>

      <Description>A Middle-tier application server provides the core technologies required to configure, deploy, and manage distributed, transactional, or multi-tiered applications.</Description>

    </Role>

    <Role Name="MSMQActivation">

      <DisplayName>Application Server - Message Queuing Activation</DisplayName>

      <Description>Message Queuing Activation supports process activation via Message Queuing. Applications that use Message Queuing Activation can start and stop dynamically in response to work items that arrive over the network via Message Queuing.</Description>

    </Role>

    <Role Name="MSClient">

      <DisplayName>Microsoft Networking Client</DisplayName>

      <Description>Creates and maintains client network connections to remote servers using the SMB protocol.</Description>

    </Role>

    <Role Name="MSMQ">

      <DisplayName>Message Queuing Server</DisplayName>

      <Description>Message Queuing Server provides guaranteed message delivery, efficient routing, security, and priority-based messaging. It can be used to implement solutions for both asynchronous and synchronous messaging scenarios.</Description>

    </Role>

    <Role Name="MSServer">

      <DisplayName>File Server</DisplayName>

      <Description>A file server shares and stores files for users or applications.</Description>

      <Details>Supports file, and named-pipe sharing over the network for the target server.</Details>

    </Role>

    <Role Name="NAPClient">

      <DisplayName>Network Access Protection Agent</DisplayName>

      <Description>Enables Network Access Protection (NAP) functionality on client computers.</Description>

    </Role>

    <Role Name="NetworkDiscovery">

      <DisplayName>Network Discovery</DisplayName>

      <Description>Publishes this computer and resources attached to this computer so they can be discovered over the network.</Description>

    </Role>

    <Role Name="NFS">

      <DisplayName>Services for Network Files System (NFS)</DisplayName>

      <Description>Services for Network Files System (NFS) permits Unix clients to access files on a server running a Windows operating system.</Description>

    </Role>

    <Role Name="NPActivation">

      <DisplayName>Application Server - Named Pipes Activation</DisplayName>

      <Description>Named Pipes Activation supports process activation via named pipes. Applications that use Named Pipes Activation can start and stop dynamically in response to work items that arrive over the network via named pipes.</Description>

    </Role>

    <Role Name="NPS">

      <DisplayName>Network Policy Server</DisplayName>

      <Description>Network Policy Server allows you to create and enforce organization-wide network access policies for client health, connection request authentication, and connection request authorization. With NPS, you can also deploy Network Access Protection (NAP), a client health policy creation, enforcement, and remediation technology.</Description>

    </Role>

    <Role Name="PnP-X">

      <DisplayName>PnP-X IP Bus Enumerator</DisplayName>

      <Description>The PnP-X bus enumerator service manages the virtual network bus. It discovers network connected devices using the SSDP/WS-Discovery protocols and gives them presence in PnP.</Description>

    </Role>

    <Role Name="Print">

      <DisplayName>Print Server</DisplayName>

      <Description>A print server provides and manages access to network printers and printer drivers so that network clients can submit print jobs to network printers.</Description>

    </Role>

    <Role Name="PSYNC">

      <DisplayName>Password Synchronization</DisplayName>

      <Description>Password Synchronization makes it easy for users to maintain one user name and password for Windows domains and UNIX systems, synchronizing the passwords when one of them changes.</Description>

    </Role>

    <Role Name="RemoteDTC">

      <DisplayName>Distributed Transactions</DisplayName>

      <Description>The middle-tier application server can coordinate or participate in distributed transactions.</Description>

      <Details>The middle-tier application server can process transactions on behalf of network clients, coordinate distributed transactions, or transactions started by network clients can flow into the middle-tier application server. Distributed transaction coordination network traffic is handled over RPC.</Details>

    </Role>

    <Role Name="RemoteCOM+">

      <DisplayName>Remote COM+</DisplayName>

      <Description>COM+ provides an enterprise development environment, based on the Microsoft Component Object Model (COM), for creating component-based, distributed applications. It also provides you with the tools to create transactional, multitier applications.</Description>

    </Role>

    <Role Name="RemoteSCWEngine">

      <DisplayName>Remote SCW Configuration and Analysis</DisplayName>

      <Description>The server can be remotely configured, analyzed, or rolled back using the Security Configuration Wizard (SCW) user interface or command line tool.</Description>

      <SCWDetails>Enabling or disabling this option has no effect unless you also plan on configuring the Windows Firewall.</SCWDetails>

    </Role>

    <Role Name="RASClient">

      <DisplayName>Remote Access Client</DisplayName>

      <Description>A remote access client can initiate connections to other networks, either through a virtual private network (VPN) or dial-up connection.</Description>

    </Role>

    <Role Name="RRASx32">

      <DisplayName>Remote access/VPN server</DisplayName>

      <Description>A remote access/VPN server enables remote clients to connect to a network through either a dial-up connection or a secure virtual private network (VPN) connection. It also enables network address translation, which allows all of the computers on a small network to share a single connection to the Internet.</Description>

    </Role>

    <Role Name="RRASx64">

      <DisplayName>Remote access/VPN server</DisplayName>

      <Description>A remote access/VPN server enables remote clients to connect to a network through either a dial-up connection or a secure virtual private network (VPN) connection. It also enables network address translation, which allows all of the computers on a small network to share a single connection to the Internet.</Description>

    </Role>

    <Role Name="SMTP">

      <DisplayName>SMTP Server</DisplayName>

      <Description>Simple Mail Transfer Protocol (SMTP) Server supports the transfer of electronic mail between servers.</Description>

    </Role>

    <Role Name="SNIS">

      <DisplayName>Server for Network Information Service</DisplayName>

      <Description>Server for Network Information Service integrates Windows and NIS networks by exporting NIS domain maps to Directory Service entries, giving an Active Directory domain controller the ability to act as a master NIS server. With a unified namespace for Windows and NIS domains, user accounts for Windows and UNIX can be managed from the directory by using a single set of administrative tools.</Description>

    </Role>

    <Role Name="SNMP">

      <DisplayName>SNMP server</DisplayName>

      <Description>Simple Network Management Protocol (SNMP) includes agents that monitor the activity in network devices and report to the network console workstation.</Description>

      <Details>Do not enable the SNMP protocol unless it is blocked by a perimeter firewall. Otherwise, anonymous Internet users will be able to query and manage your computer.</Details>

    </Role>

    <Role Name="SNMPTrap">

      <DisplayName>SNMP Trap Server</DisplayName>

      <Description>An SNMP trap server receives Simple Network Management Protocol (SNMP) traps from SNMP servers.</Description>

      <Details>SNMP servers can be configured to send traps to report critical information more quickly than waiting for the SNMP management station to poll the server.</Details>

    </Role>

    <Role Name="SubmitPrint">

      <DisplayName>Print</DisplayName>

      <Description>The server is not a Print server, but can still submit print jobs to a local printer, a network attached printer or, if the Microsoft Network Client is enabled, a printer that is shared by a remote Windows Print server.</Description>

      <SCWDetails>If you have already selected the Print Server role, this option has no impact.</SCWDetails>

    </Role>

    <Role Name="TcpActivation">

      <DisplayName>Application Server - TCP Activation</DisplayName>

      <Description>TCP Activation supports process activation via TCP. Applications that use TCP Activation can start and stop dynamically in response to work items that arrive over the network via TCP.</Description>

    </Role>

    <Role Name="TelnetServer">

      <DisplayName>Telnet Server</DisplayName>

      <Description>Telnet Server allows remote users to perform command-line administration and run programs using a Telnet client, including UNIX-based clients.</Description>

    </Role>

    <Role Name="TerminalServer">

      <DisplayName>Remote Desktop Session Host</DisplayName>

      <Description>Remote Desktop Session Host enables a server to host Windows-based programs or the full Windows desktop. Users can connect to a remote desktop session host to run programs, save files, and use network resources on that server.</Description>

    </Role>

    <Role Name="Timewarp">

      <DisplayName>Shadow Copies of Shared Folders</DisplayName>

      <Description>Shadow Copies of Shared Folders provides point-in-time copies of files that are located on shared resources, such as a file server, so that users can quickly retrieve previous versions of files.</Description>

    </Role>

    <Role Name="TSLicense">

      <DisplayName>Remote Desktop Licensing</DisplayName>

      <Description>RD Licensing manages the Remote Desktop Services client access licenses (RDS CALs) that are required to connect to Remote Desktop Services. You can use Remote Desktop Licensing to install, issue, and track the availability of RDS CALs.</Description>

    </Role>

    <Role Name="TSSession">

      <DisplayName>Remote Desktop Connection Broker</DisplayName>

      <Description>RD Connection Broker supports reconnection to an existing session on a remote desktop session host that is a member of a load-balanced remote desktop session host farm. RD Connection Broker also provides users access to RemoteApp programs and virtual desktops through RemoteApp and Desktop Connection.</Description>

    </Role>

    <Role Name="TSGateway">

      <DisplayName>Remote Desktop Gateway</DisplayName>

      <Description>RD Gateway enables authorized users to connect to remote computers on the corporate network over the Internet.</Description>

    </Role>

    <Role Name="TimeSync">

      <DisplayName>Time Synchronization</DisplayName>

      <Description>The server regularly contacts a Network Time Protocol (NTP) server in order to accurately maintain its clock.</Description>

      <Details>An accurate clock enables administrators to better correlate audit events. Also, many security protocols use time to prevent replay attacks.</Details>

    </Role>

    <Role Name="VSCopy">

      <DisplayName>Volume Shadow Copy</DisplayName>

      <Description>Manages and implements the backup infrastructure including shadow copies. If this service is disabled shadow copy creation and backup jobs will fail and any services that explicitly depend on it will fail to start.</Description>

    </Role>

    <Role Name="WAS">

      <DisplayName>Windows Process Activation Service</DisplayName>

      <Description>The Windows Process Activation Service (WAS) provides process activation, resource management and health management services for message-activated applications.</Description>

    </Role>

    <Role Name="WDS">

      <DisplayName>Windows Deployment Services</DisplayName>

      <Description>Windows Deployment Services provides a simplified, secure means of rapidly and remotely deploying Windows operating systems to computers over the network.</Description>

    </Role>

    <Role Name="Web">

      <DisplayName>Web Server</DisplayName>

      <Description>Web Server provides support for HTML Web sites and optional support for ASP.NET, ASP, and Web Server extensions. You can use the Web Server to host an internal or external Web site or to provide an environment for developers to create Web-based applications.</Description>

    </Role>

    <Role Name="WebDAV">

      <DisplayName>WebDAV client</DisplayName>

      <Description>A WebDAV client creates, views, and modifies files on Web servers that support the Web Distributed Authoring and Versioning protocol.</Description>

      <Details>This client role is not needed to browse the web.</Details>

    </Role>

    <Role Name="WEC">

      <DisplayName>Windows Event Collector Service</DisplayName>

      <Description>This service manages persistent subscriptions to events from remote sources that support WS-Management protocol. This includes Windows Vista event logs, hardware and IPMI-enabled event sources. The service stores forwarded events in a local Event Log. If this service is stopped or disabled event subscriptions cannot be created and forwarded events cannot be accepted.</Description>

    </Role>

    <Role Name="WindowsUpdate">

      <DisplayName>Windows Update</DisplayName>

      <Description>Enables the detection, download, and installation of updates for Windows and other programs.</Description>

      <Details>If this role is disabled, users of this computer will not be able to use Windows Update or its automatic updating feature, and programs will not be able to use the Windows Update Agent (WUA) API.</Details>

    </Role>

    <Role Name="WinRM">

      <DisplayName>Windows Remote Management (WS-Management)</DisplayName>

      <Description>The Windows Remote Management Service provides firewall-friendly remote administration using Web Services.</Description>

      <SCWDetails>The Remote Management Service must be enabled to listen on one or more network ports using HTTP and HTTPS. Ports 80 and 443 are enabled by default, and should be disabled if not being used. Other ports must be added manually with the Security Configuration Wizard tool.</SCWDetails>

    </Role>

    <Role Name="WINS">

      <DisplayName>WINS server</DisplayName>

      <Description>A Windows Internet Name Service (WINS) server translates NetBIOS names to IP addresses so that clients can use common names to locate objects and services on a network.</Description>

    </Role>

    <Role Name="WINSClient">

      <DisplayName>WINS client</DisplayName>

      <Description>A Windows Internet Name Service (WINS) client locates objects on a network using the NetBIOS Name Service (NBNS) protocol.</Description>

      <Details>NetBIOS Name Service may be broadcast-based (i.e. no WINS server) or unicast-based (WINS server present).</Details>

      <SCWDetails>Select this option unless you have completely eliminated NetBIOS name resolution from your network.</SCWDetails>

    </Role>

    <Role Name="WSBackup">

      <DisplayName>Windows Server Backup</DisplayName>

      <Description>With Windows Server Backup you can schedule backups to run once a day or more often, and you can choose to back up the entire server or just specific volumes. Windows Server Backup includes a Microsoft Management Console snap-in (Wbadmin.msc), a command-line tool (Wbadmin.exe), and related services.</Description>

    </Role>

    <Role Name="WSS3">

      <DisplayName>Windows SharePoint Services</DisplayName>

      <Description>Windows SharePoint Services helps organizations increase productivity by creating Web sites where users can collaborate on documents, tasks, and events and easily share contacts and other information. The environment is designed for flexible deployment, administration, and application development.</Description>

    </Role>

    <Role Name="WSRM">

      <DisplayName>Windows System Resource Management</DisplayName>

      <Description>Windows System Resource Manager (WSRM) provides methods to create and apply resource policies that help control CPU and memory usage of workloads (process or processes) running on this computer. WSRM also provides methods to account for consumption of resources per workload by collecting and analyzing long-term accounting records.</Description>

    </Role>

  </RoleLocalization>

  <TaskLocalization>

    <Task Name=".NETv2.0">

      <DisplayName>Microsoft .NET Framework NGEN - X32</DisplayName>

      <Description>Microsoft .NET Framework NGEN v2.0.50727_X86</Description>

    </Task>

    <Task Name=".NETv2.0-X64">

      <DisplayName>Microsoft .NET Framework NGEN - X64</DisplayName>

      <Description>Microsoft .NET Framework NGEN v2.0.50727_X64</Description>

    </Task>

    <Task Name=".NETv2.0-I64">

      <DisplayName>Microsoft .NET Framework NGEN - I64</DisplayName>

      <Description>Microsoft .NET Framework NGEN v2.0.50727_I64</Description>

    </Task>

    <Task Name=".NETv3.0">

      <DisplayName>.NET Framework 3.0</DisplayName>

      <Description>Microsoft .NET Framework 3.0 combines the power of the .NET Framework 2.0 APIs with new technologies for building applications that offer appealing user interfaces, protect your customers  personal identity information, enable seamless and secure communication, and provide the ability to model a range of business processes.</Description>

    </Task>

    <Task Name="ADRMServerWID">

      <DisplayName>Windows Internal Database for Active Directory Rights Management Server</DisplayName>

      <Description> Windows Internal Database uses SQL Server 2005 Embedded Edition as a relational data store for Active Directory Rights Management Server</Description>

    </Task>

    <Task Name="AeLookupSVC">

      <DisplayName>Application Experience Lookup Service</DisplayName>

      <Description>Processes application compatibility cache requests for applications as they are launched.</Description>

    </Task>

    <Task Name="AppDeploy">

      <DisplayName>Application installation from Group Policy</DisplayName>

      <Description>The server can download and install applications that are deployed through Group Policy.</Description>

    </Task>

    <Task Name="Audio">

      <DisplayName>Windows Audio</DisplayName>

      <Description>Manages audio for Windows-based programs.  If this service is stopped, audio devices and effects will not function properly.  If this service is disabled, any services that explicitly depend on it will fail to start.</Description>

    </Task>

    <Task Name="BITSPeerCaching">

      <DisplayName>Background Intelligent Transfer Service (BITS) Peer Caching</DisplayName>

      <Description>Peer caching is a BITS 3.0 feature which allows peers (same subnet computers with peer caching enabled) to share files. When peer caching is enabled, the Automatic Update agent instructs BITS to make downloaded files available to all similarly configured peer computers.</Description>

    </Task>

    <Task Name="BrowserServer">

      <DisplayName>Browse Master</DisplayName>

      <Description>The server enables client computers to browse for resources on the network.</Description>

      <SCWDetails>Select this option for domain controllers unless you have completely eliminated NetBIOS name resolution from your network.</SCWDetails>

    </Task>

    <Task Name="CSC">

      <DisplayName>Offline Files</DisplayName>

      <Description>Provides offline access to remote file servers.</Description>

    </Task>

    <Task Name="Diagnostic">

      <DisplayName>Diagnostic Policy Service</DisplayName>

      <Description>The Diagnostic Policy Service enables problem detection, troubleshooting and resolution for Windows components.  If this service is stopped, diagnostics will no longer function. If this service is disabled, any services that explicitly depend on it will fail to start.</Description>

    </Task>

    <Task Name="EMS">

      <DisplayName>Emergency Management Services</DisplayName>

      <Description>Emergency Management Services allows remote management and system recovery tasks using an out-of-band connection.  This provides reliable alternative access to a server when it is not accessible through the normal connection methods, typically a network when combined with the appropriate out-of-band hardware.  </Description>

    </Task>

    <Task Name="ErrorReporting">

      <DisplayName>Error reporting</DisplayName>

      <Description>The server can report critical operating system and application faults to Microsoft for analysis. Enterprises can use Corporate Error Reporting to collect, view and filter reports sent back to Microsoft.</Description>

    </Task>

    <Task Name="FSRMRemoteAdmin">

      <DisplayName>Remote File Server Resource Manager Administration</DisplayName>

      <Description>The File Server Resource Manager server is managed remotely using the File Server Resource Manager snap-in or the dirquota.exe, filescrn.exe, and storrept.exe command line tools.</Description>

      <Details>This option does not need to be selected if you remotely manage this server by using Remote Desktop for Administration.</Details>

      <SCWDetails>Enabling or disabling this option has no effect unless you also plan on configuring the Windows Firewall.</SCWDetails>

    </Task>

    <Task Name="ICS">

      <DisplayName>Internet Connection Sharing (ICS)</DisplayName>

      <Description>Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network.</Description>

    </Task>

    <Task Name="IndexingService">

      <DisplayName>Indexing Service</DisplayName>

      <Description>Indexing Service catalogs contents and properties of files on local and remote computers and provides rapid access to files through a flexible query language. Indexing Service is being retired in favor of the Windows Search service, and is provided in this release of Windows for application compatibility.</Description>

    </Task>

    <Task Name="Install">

      <DisplayName>Local application installation</DisplayName>

      <Description>Programs can be added, removed, or repaired on the server using the Windows Installer Service.</Description>

    </Task>

    <Task Name="IPsec">

      <DisplayName>IPsec Policy Agent</DisplayName>

      <Description>This service enforces legacy IPsec policies created through the IP Security Policies snap-in or the command-line tool "netsh ipsec".</Description>

    </Task>

    <Task Name="ISvcDetect">

      <DisplayName>Interactive Services Detection</DisplayName>

      <Description>Enables user notification of user input for interactive services, which enables access to dialogs created by interactive services when they appear. If this service is stopped, notifications of new interactive service dialogs will no longer function and there may no longer be access to interactive service dialogs. If this service is disabled, both notifications of and access to new interactive service dialogs will no longer function.</Description>

    </Task>

    <Task Name="FRS">

      <DisplayName>File Replication</DisplayName>

      <Description>File Replication Service (FRS) supports legacy distributed files environments. If you're running in an environment with Windows 2003 replication and you want to use this server to support that, select this option. If you want to enable the latest replication technology, select DFS Replication instead.</Description>

    </Task>

    <Task Name="KMS">

      <DisplayName>Key Management Service</DisplayName>

      <Description>This feature is used for machine counting and license compliance in enterprise environments.</Description>

    </Task>

    <Task Name="LinkTracking">

      <DisplayName>Distributed Link Tracking Client</DisplayName>

      <Description>Maintains shortcuts to files on NTFS volumes within a computer or across computers in a network.</Description>

    </Task>

    <Task Name="LPR">

      <DisplayName>LPR Port Monitor</DisplayName>

      <Description>Line Printer Remote (LPR) Port Monitor enables the computer to print to printers that are shared using any Line Printer Daemon (LPD) service. (LPD service is commonly used by UNIX-based computers and printer-sharing devices).</Description>

    </Task>

    <Task Name="MailBasedRepl">

      <DisplayName>Active Directory - SMTP-Replication</DisplayName>

      <Description>The server can replicate Active Directory data over SMTP.</Description>

      <Details>This option is only for domain controllers.</Details>

    </Task>

    <Task Name="MSFCPRS">

      <DisplayName>Microsoft Fibre Channel Platform Registration Service</DisplayName>

      <Description>Registers the platform with all available Fibre Channel fabrics, and maintains the registrations.</Description>

    </Task>

    <Task Name="MSMQHTTP">

      <DisplayName>Message Queuing HTTP Support</DisplayName>

      <Description>Message Queuing HTTP Support enables the sending of messages over HTTP.</Description>

    </Task>

    <Task Name="MSMQTriggers">

      <DisplayName>Message Queuing Triggers</DisplayName>

      <Description>Message Queuing Triggers enables the invocation of a COM component or an executable depending on the filters that you define for the incoming messages in a given queue.</Description>

    </Task>

    <Task Name="MQDS">

      <DisplayName>Message Queuing Windows 2000 Client Support</DisplayName>

      <Description>Message Queuing Windows 2000 Client Support is required for Message Queuing clients on Windows 2000 computers in the domain.</Description>

    </Task>

    <Task Name="MQMS">

      <DisplayName>Message Queuing Multicasting Support</DisplayName>

      <Description>Message Queuing Multicasting Support enables queuing and sending of multicast messages to a multicast IP address.</Description>

    </Task>

    <Task Name="PerfMonCollector">

      <DisplayName>Performance Logs and Alerts</DisplayName>

      <Description>Performance Logs and Alerts Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert.</Description>

      <Details>To check if this role is active, open the Reliability and Performance Monitor.  You can find the Microsoft Management Console (MMC) snap-in for Reliability and Performance Monitor in the following location: %windir%\system32\perfmon.exe. Expand the "Data Collector Set" node. Expand the "User Defined" and "System" nodes. Right-click each data collector set under "User Defined" and "System" and choose "Properties". If any schedules are listed in the "Schedule" tab for any of the data collector sets, the role is active.</Details>

    </Task>

    <Task Name="PDE">

      <DisplayName>Portable Device Enumerator Service</DisplayName>

      <Description>Enforces group policy for removable mass-storage devices. Enables applications such as Windows Media Player and Image Import Wizard to transfer and synchronize content using removable mass-storage devices.</Description>

    </Task>

    <Task Name="PNRP">

      <DisplayName>Peer Name Resolution Protocol</DisplayName>

      <Description>Peer Name Resolution Protocol allows applications to register and resolve names on your computer so that other computers can communicate with these applications.</Description>

    </Task>

    <Task Name="QWAVE">

      <DisplayName>Quality Windows Audio Video Experience</DisplayName>

      <Description>Quality Windows Audio Video Experience (qWave) is a networking platform for audio video (AV) streaming applications on IP home networks. qWave enhances AV streaming performance and reliability by ensuring network quality-of-service (QoS) for AV applications. It provides mechanisms for admission control, run time monitoring and enforcement, application feedback, and traffic prioritization. On Windows Server platforms, qWave provides only rate-of-flow and prioritization services.</Description>

    </Task>

    <Task Name="RasAuto">

      <DisplayName>Remote Access Auto Connection Manager</DisplayName>

      <Description>Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address.</Description>

    </Task>

    <Task Name="RemoteAdminEventLogSvc">

      <DisplayName>Remote Event Log Management</DisplayName>

      <Description>This feature allows remote viewing and management of the local event log. (Uses Named Pipes and RPC).</Description>

    </Task>

    <Task Name="RemoteAdminFirewall">

      <DisplayName>Remote Windows Firewall Administration</DisplayName>

      <Description>This allows the Windows Firewall to be remotely managed using the Windows Firewall with Advanced Security MMC snap-in or "netsh advfirewall" command line tool.</Description>

      <Details>This option does not need to be selected if you manage this server using a remote desktop session.</Details>

    </Task>

    <Task Name="RemoteAdminRRAS">

      <DisplayName>Remote access/VPN server Administration</DisplayName>

      <Description>Remote access/VPN server Administration is managed from a remote computer using the Remote access/VPN server Administration snap-in.</Description>

    </Task>

    <Task Name="RemoteAdminSchedule">

      <DisplayName>Remote Administration for Task Scheduler</DisplayName>

      <Description>Enables a user to remotely configure and schedule automated tasks on the target server.</Description>

      <Details>This option does not need to be selected if you manage this server using a remote desktop session.</Details>

    </Task>

    <Task Name="RemoteAdminTelnet">

      <DisplayName>Remote Administration for Telnet server</DisplayName>

      <Description>The telnet server is managed from a remote computer using tlntadmn.exe</Description>

      <Details>This option does not need to be selected if you remotely manage this server using Remote Destkop Server for Remote Desktop Administration.</Details>

      <SCWDetails>Enabling or disabling this option has no effect unless you also plan on configuring the Windows Firewall.</SCWDetails>

    </Task>

    <Task Name="RemoteAdminVDS">

      <DisplayName>Remote Volume Management</DisplayName>

      <Description>This feature provides remote software and hardware disk volume management (using RPC).</Description>

    </Task>

    <Task Name="RemoteAdminWEB">

      <DisplayName>Remote Administration for Web Server (IIS)</DisplayName>

      <Description>Remote administration for IIS enables remote management for the IIS Web server.</Description>

      <Details>This option does not need to be selected if you manage this server using a remote desktop session.</Details>

    </Task>

    <Task Name="RemoteAdminWINS">

      <DisplayName>Remote Administration for WINS</DisplayName>

      <Description>The WINS server is managed from a remote computer using the WINS snap-in.</Description>

      <Details>This option does not need to be selected if you manage this server using a remote desktop session.</Details>

      <SCWDetails>Enabling or disabling this option has no effect unless you also plan on configuring the Windows Firewall.</SCWDetails>

    </Task>

    <Task Name="RemoteAdminWSBackup">

      <DisplayName>Windows Server Backup Remote Administration</DisplayName>

      <Description>Windows Server Backup Remote Administration is managed from a remote computer using the Windows Server Backup Administration snap-in.</Description>

    </Task>

    <Task Name="RemoteAssistance">

      <DisplayName>Remote Assistance</DisplayName>

      <Description>Remote Assistance allows a remote user to connect to this computer and correct any problems directly.</Description>

    </Task>

    <Task Name="RemoteCertServerOCSPAdmin">

      <DisplayName>Remote Certificate Server Administration</DisplayName>

      <Description>Allows you to perform administration tasks from a remote machine.</Description>

    </Task>

    <Task Name="RemoteDesktop">

      <DisplayName>Remote Desktop</DisplayName>

      <Description>Publishes this computer and resources attached to this computer so they can be discovered over the network.  If this service is stopped, network resources will no longer be published and they will not be discovered by other computers on the network.</Description>

    </Task>

    <Task Name="RemoteNLBAdmin">

      <DisplayName>Network Load Balancing Administration</DisplayName>

      <Description>Administration tools for Windows Network Load Balancing (NLB) to manage remote and local clusters. If this rule is disabled, you won t be able to properly manage this NLB cluster from any node within the cluster or from a remote machine.</Description>

    </Task>

    <Task Name="RemoteNPSAdmin">

      <DisplayName>Remote Network Policy Server Administration</DisplayName>

      <Description>Select remote Network Policy Server (NPS) Administration to add exceptions to the firewall that allow you to manage this NPS server from another NPS server using the NPS MMC snap-in, the Netsh commands for NPS, or Service Data Objects (SDO)-based management tools.</Description>

      <Details>You should not  select remote NPS Administration if you plan to administer this server using Remote Desktop Connection only. Do not enable this option if you do not have NPS installed on this server.</Details>

    </Task>

    <Task Name="RPCLocator">

      <DisplayName>RPC locator</DisplayName>

      <Description>RPC servers can publish themselves in the Microsoft RPC name service database for discovery by RPC clients.</Description>

      <Details>This functionality has been deprecated in this version of the Operating System.</Details>

    </Task>

    <Task Name="RSoPPlanning">

      <DisplayName>Active Directory - RSoP Planning Mode</DisplayName>

      <Description>Administrators can simulate the application of Group Policy settings.</Description>

    </Task>

    <Task Name="SmartCard">

      <DisplayName>Smart Card</DisplayName>

      <Description>Manages access to smart cards read by this computer.</Description>

    </Task>

    <Task Name="SecLogon">

      <DisplayName>Secondary Logon</DisplayName>

      <Description>Enables starting processes under alternate credentials.</Description>

    </Task>

    <Task Name="RemoteDFSRAdmin">

      <DisplayName>Remote DFSR Administration</DisplayName>

      <Description>DFS Remote Administration is managed from a remote computer using the DFS Administration snap-in.</Description>

    </Task>

    <Task Name="RemoteDHCPAdmin">

      <DisplayName>Remote DHCP Administration</DisplayName>

      <Description>DHCP Remote Administration is managed from a remote computer using the DHCP Administration snap-in.</Description>

    </Task>

    <Task Name="RemoteDNSAdmin">

      <DisplayName>Remote DNS Administration</DisplayName>

      <Description>Remote DNS administration can be used to manage the local DNS Server from a remote computer using either the management console DNS Manager or the command line tool dnscmd.exe.</Description>

    </Task>

    <Task Name="RemoteWindowsAdministration">

      <DisplayName>Remote Windows Administration</DisplayName>

      <Description>The server can be managed remotely using Windows-based administrative tools such as Device Manager, Event Viewer, Local Users and Groups, Registry Editor, System Monitor, Server Manager and the Microsoft Baseline Security Analyzer (MBSA).</Description>

      <Details>This option does not need to be selected if you manage this server using a remote desktop session.</Details>

    </Task>

    <Task Name="RemoteNFSAdmin">

      <DisplayName>Remote NFS Administration</DisplayName>

      <Description>Administrators can remotely manage components of Services for Network File System (NFS).</Description>

      <Details>You do not need to select this task if you use manage this server using a remote desktop session.</Details>

    </Task>

    <Task Name="RemoteWMI">

      <DisplayName>Remote WMI</DisplayName>

      <Description>Windows Management Instrumentation (WMI) data can be accessed and manipulated remotely.</Description>

      <Details>WMI allows script-based management of numerous operating system components including disk drives, event logs, network adapter settings, printers, services, system restore, and more. The following server roles can also be managed through WMI: Cluster Server, Domain Controller, DNS Server, Exchange Server, FTP Server, Print Server, SMS Site Servers, SQL Server, Remote Desktop Session Host and Web Server (IIS). This option does not need to be selected if you manage this server using a remote desktop session.</Details>

    </Task>

    <Task Name="RSM">

      <DisplayName>Removable Storage Manager (RSM)</DisplayName>

      <Description>Removable Storage Manager (RSM) manages and catalogs removable media and operates automated removable media devices.</Description>

    </Task>

    <Task Name="SimpTcp">

      <DisplayName>Simple TCP/IP Services</DisplayName>

      <Description>Supports the following TCP/IP services: Character Generator, Daytime, Discard, Echo, and Quote of the Day. Simple TCP/IP Services is provided for backward compatability and should not be installed unless is required.</Description>

    </Task>

    <Task Name="SMfS-X32">

      <DisplayName>Storage Manager for SANs - X32</DisplayName>

      <Description>Storage Manager for Storage Area Networks (SAN) helps you create and manage logical unit numbers (LUNs) on Fibre Channel and iSCSI disk drive subsystems that support Virtual Disk Service (VDS).</Description>

    </Task>

    <Task Name="SMfS-X64">

      <DisplayName>Storage Manager for SANs - X64</DisplayName>

      <Description>Storage Manager for Storage Area Networks (SAN) helps you create and manage logical unit numbers (LUNs) on Fibre Channel and iSCSI disk drive subsystems that support Virtual Disk Service (VDS).</Description>

    </Task>

    <Task Name="SNMPWMI">

      <DisplayName>SNMP WMI Provider</DisplayName>

      <Description>SNMP WMI Provider enables WMI clients to consume SNMP information through the CIM model as implemented by WMI.</Description>

    </Task>

    <Task Name="TPM">

      <DisplayName>TPM Base Services</DisplayName>

      <Description>Enables access to the Trusted Platform Module (TPM), which provides hardware-based cryptographic services to system components and applications.  If this service is stopped or disabled, applications will be unable to use keys protected by the TPM.</Description>

    </Task>

    <Task Name="TSRemoteAdmin">

      <DisplayName>Remote Desktop Services Remote Administration</DisplayName>

      <Description>Remote server administration tools for Remote Desktop Services.</Description>

    </Task>

    <Task Name="TSPrinterRedirection">

      <DisplayName>Remote Desktop Services printer redirection</DisplayName>

      <Description>Remote Desktop Services users can redirect print jobs to their local printers.</Description>

    </Task>

    <Task Name="WCS">

      <DisplayName>Windows Color System</DisplayName>

      <Description>The WcsPlugInService service hosts third-party Windows Color System color device model and gamut map model plug-in modules. These plug-in modules are vendor-specific extensions to the Windows Color System baseline color device and gamut map models. Stopping or disabling the WcsPlugInService service will disable this extensibility feature, and the Windows Color System will use its baseline model processing rather than the vendor's desired processing. This might result in inaccurate color rendering.</Description>

    </Task>

    <Task Name="WinHTTPProxy">

      <DisplayName>Web proxy auto-discovery</DisplayName>

      <Description>Processes that use the Web Proxy Auto-Discovery (WPAD) protocol invoke it out of process where it runs in a less privileged context.</Description>

      <Details>Executing WPAD out of process improves security because the WPAD protocol involves the execution of script. Examples of clients that can take advantage of this service include Windows Update, CryptNet, SMS, and RPC over HTTP.</Details>

      <SCWDetails>If this option is not selected, the WPAD auto-proxy discovery will be executed within the HTTP client's process with no visible loss of functionality. Exceptions include clients that do not allow in-process WPAD discovery, such as CryptNet.</SCWDetails>

    </Task>

    <Task Name="WIDVSSBackup">

      <DisplayName>Windows Internal Database VSS Writer</DisplayName>

      <Description>Provides the interface to backup/restore Windows Internal Database through the Windows VSS infrastructure.</Description>

    </Task>

    <Task Name="WiredAutoConfig">

      <DisplayName>Wired AutoConfig</DisplayName>

      <Description> This service performs IEEE 802.1X authentication on Ethernet interfaces. The Wired AutoConfig (dot3svc) Service is responsible for identifying Ethernet connectivity and determining whether Layer2 security services need to be performed.   Layer2 authentication is currently invoked on Ethernet networks that support 802.1X authentication.</Description>

    </Task>

    <Task Name="WMIPerformanceAdapter">

      <DisplayName>WMI Performance Adapter</DisplayName>

      <Description>Provides performance library information from Windows Management Instrumentation (WMI) providers to clients on the network.</Description>

    </Task>

    <Task Name="WSS3Backup">

      <DisplayName>Windows SharePoint Services VSS Writer</DisplayName>

      <Description>Provides the interface to backup/restore Windows SharePoint Services through the Windows VSS infrastructure.</Description>

    </Task>

    <Task Name="WSS3WID">

      <DisplayName>Windows Internal Database for Windows SharePoint Services</DisplayName>

      <Description>Windows Internal Database uses SQL Server 2005 Embedded Edition as a relational data store for Windows SharePoint Services.</Description>

    </Task>

    <Task Name="WSRMRemote">

      <DisplayName>Windows System Resource Manager</DisplayName>

      <Description>Allows Windows System Resource Manager to be accessed remotely.</Description>

    </Task>

    <Task Name="WSS">

      <DisplayName>Windows Search Service</DisplayName>

      <Description>Windows Search Service permits fast file searches on this server from Windows Search-compatible clients.</Description>

    </Task>

    <Task Name="WUDF">

      <DisplayName>Windows User Mode Driver Framework</DisplayName>

      <Description>This option provides a foundation for user mode drivers.</Description>

    </Task>

  </TaskLocalization>

  <ServiceLocalization>

    <Service Name="AeLookupSvc">

    </Service>

    <Service Name="ALG">

    </Service>

    <Service Name="AppMgmt">

    </Service>

    <Service Name="AudioEndpointBuilder">

      <DisplayName>AudioEndpointBuilder</DisplayName>

      <Description>Manages audio devices for the Windows Audio service.  If this service is stopped, audio devices and effects will not function properly.  If this service is disabled, any services that explicitly depend on it will fail to start.</Description>

    </Service>

    <Service Name="Audiosrv">

      <DisplayName>Audiosrv</DisplayName>

      <Description>Manages audio for Windows-based programs.  If this service is stopped, audio devices and effects will not function properly.  If this service is disabled, any services that explicitly depend on it will fail to start.</Description>

    </Service>

    <Service Name="BITS">

    </Service>

    <Service Name="Browser">

    </Service>

    <Service Name="CertPropSvc">

    </Service>

    <Service Name="clr_optimization_v2.0.50727_32">

    </Service>

    <Service Name="clr_optimization_v2.0.50727_64">

    </Service>

    <Service Name="clr_optimization_v2.0.50727_I64">

    </Service>

    <Service Name="COMSysApp">

    </Service>

    <Service Name="CscService">

    </Service>

    <Service Name="Dnscache">

    </Service>

    <Service Name="dot3svc">

    </Service>

    <Service Name="DPS">

    </Service>

    <Service Name="EapHost">

    </Service>

    <Service Name="FCRegSvc">

    </Service>

    <Service Name="fdPHost">

    </Service>

    <Service Name="FDResPub">

    </Service>

    <Service Name="hkmsvc">

    </Service>

    <Service Name="IKEEXT">

    </Service>

    <Service Name="IPBusEnum">

    </Service>

    <Service Name="KtmRm">

    </Service>

    <Service Name="LanmanServer">

    </Service>

    <Service Name="LanmanWorkstation">

    </Service>

    <Service Name="lltdsvc">

    </Service>

    <Service Name="lmhosts">

    </Service>

    <Service Name="MMCSS">

    </Service>

    <Service Name="MSDTC">

    </Service>

    <Service Name="MSiSCSI">

    </Service>

    <Service Name="msiserver">

    </Service>

    <Service Name="napagent">

    </Service>

    <Service Name="Netlogon">

    </Service>

    <Service Name="pla">

    </Service>

    <Service Name="PolicyAgent">

    </Service>

    <Service Name="RasAuto">

    </Service>

    <Service Name="RasMan">

    </Service>

    <Service Name="RemoteAccess">

    </Service>

    <Service Name="RemoteRegistry">

    </Service>

    <Service Name="RpcLocator">

    </Service>

    <Service Name="RSoPProv">

    </Service>

    <Service Name="sacsvr">

    </Service>

    <Service Name="SCardSvr">

    </Service>

    <Service Name="Schedule">

    </Service>

    <Service Name="SCPolicySvc">

    </Service>

    <Service Name="seclogon">

    </Service>

    <Service Name="SENS">

    </Service>

    <Service Name="SessionEnv">

    </Service>

    <Service Name="SharedAccess">

    </Service>

    <Service Name="SNMPTRAP">

    </Service>

    <Service Name="Spooler">

    </Service>

    <Service Name="SSDPSRV">

    </Service>

    <Service Name="SstpSvc">

    </Service>

    <Service Name="swprv">

    </Service>

    <Service Name="TapiSrv">

    </Service>

    <Service Name="TBS">

    </Service>

    <Service Name="TermService">

    </Service>

    <Service Name="TrkWks">

    </Service>

    <Service Name="UI0Detect">

      <DisplayName>Interactive Services Detection</DisplayName>

      <Description>Enables user notification of user input for interactive services, which enables access to dialogs created by interactive services when they appear. If this service is stopped, notifications of new interactive service dialogs will no longer function and there may no longer be access to interactive service dialogs. If this service is disabled, both notifications of and access to new interactive service dialogs will no longer function.</Description>

    </Service>

    <Service Name="UmRdpService">

    </Service>

    <Service Name="upnphost">

    </Service>

    <Service Name="UxSms">

    </Service>

    <Service Name="VSS">

    </Service>

    <Service Name="W32Time">

    </Service>

    <Service Name="WcsPlugInService">

    </Service>

    <Service Name="WdiServiceHost">

    </Service>

    <Service Name="WdiSystemHost">

    </Service>

    <Service Name="Wecsvc">

    </Service>

    <Service Name="wercplsupport">

    </Service>

    <Service Name="WerSvc">

    </Service>

    <Service Name="WinHttpAutoProxySvc">

    </Service>

    <Service Name="WinRM">

    </Service>

    <Service Name="wmiApSrv">

    </Service>

    <Service Name="WPDBusEnum">

    </Service>

    <Service Name="wuauserv">

    </Service>

    <Service Name="wudfsvc">

    </Service>

    <!--===============================================

                Optional Services

=================================================-->

    <Service Name="AdRmsLoggingService">

      <DisplayName>AdRmsLoggingService</DisplayName>

      <Description>Sends logging messages to the logging database when logging is enabled for the Active Directory Rights Management Services role. If this service is disabled or stopped when logging is enabled, logging messages will be stored in local message queues and sent to the logging database when the service is started.</Description>

    </Service>

    <Service Name="AppHostSvc">

      <DisplayName>Application Host Helper Service</DisplayName>

      <Description>Provides administrative services for IIS, for example configuration history and Application Pool account mapping. If this service is stopped, configuration history and locking down files or directories with Application Pool specific Access Control Entries will not work.</Description>

    </Service>

    <Service Name="aspnet_state">

      <DisplayName>ASP.NET State Service</DisplayName>

      <Description>Provides support for out-of-process session states for ASP.NET. If this service is stopped, out-of-process requests will not be processed. If this service is disabled, any services that explicitly depend on it will fail to start.</Description>

    </Service>

    <Service Name="CertSvc">

      <DisplayName>Active Directory Certificate Services</DisplayName>

      <Description>Issues, manages, and removes X.509 certificates for such applications such as S/MIME and SSL. If the service is stopped, certificates will not be issued. If this service is disabled, any services that explicitly depend on it will fail to start.</Description>

    </Service>

    <Service Name="CISVC">

      <DisplayName>Indexing Service</DisplayName>

      <Description>Indexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language.</Description>

    </Service>

    <Service Name="ClusSvc">

      <DisplayName>Cluster Service</DisplayName>

      <Description>Enables servers to work together as a cluster to keep server-based applications highly available, regardless of individual component failures. If this service is stopped, clustering will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.</Description>

    </Service>

    <Service Name="DFS">

      <DisplayName>DFS Namespace</DisplayName>

      <Description>Integrates disparate file shares into a single, logical namespace and manages these logical volumes.</Description>

    </Service>

    <Service Name="DFSR">

      <DisplayName>DFS Replication</DisplayName>

      <Description>Replicates files among multiple PCs keeping them in sync. On Client, it is used to roam folders between PCs; on server, it is used to provide high availability and local access across a wide area network (WAN).  If the service is stopped, file replication does not occur, and the files on the server become out-of-date. If the service is disabled, any services that explicitly depend on it will not start.</Description>

    </Service>

    <Service Name="DHCPServer">

      <DisplayName>DHCP Server</DisplayName>

      <Description>Performs TCP/IP configuration for DHCP clients, including dynamic assignments of IP addresses, specification of the WINS and DNS servers, and connection-specific DNS names. If this service is stopped, the DHCP server will not perform TCP/IP configuration for clients. If this service is disabled, any services that explicitly depend on it will fail to start.</Description>

    </Service>

    <Service Name="DNS">

      <DisplayName>DNS Server</DisplayName>

      <Description>The DNS Server service stores and resolves DNS names of clients in order to enable computers to locate other computers and services. If the service is stopped or disabled, DNS updates and queries from clients sent to the local computer will not be processed. Any services that explicitly depend on the DNS Server on the local computer will start to see failures.</Description>

    </Service>

    <Service Name="Fax">

      <DisplayName>Fax</DisplayName>

      <Description>Enables you to send and receive faxes, using fax resources available on this computer or on the network.</Description>

    </Service>

    <Service Name="FontCache3.0.0.0">

      <DisplayName>Windows Presentation Foundation Font Cache 3.0.0.0</DisplayName>

      <Description>Optimizes performance of Windows Presentation Foundation (WPF) applications by caching commonly used font data. WPF applications will start this service if it is not already running. It can be disabled, though doing so will degrade the performance of WPF applications.</Description>

    </Service>

    <Service Name="NTDS">

      <DisplayName>Active Directory Domain Services</DisplayName>

      <Description>AD DS Domain Controller service. If this service is stopped, users will be unable to log on to the network. If this service is disabled, any services that explicitly depend on it will fail to start.</Description>

    </Service>

    <Service Name="kdc">

      <DisplayName>Kerberos Key Distribution Center</DisplayName>

      <Description>On domain controllers this service enables users to log on to the network using the Kerberos authentication protocol. If this service is stopped on a domain controller, users will be unable to log on to the network. If this service is disabled, any services that explicitly depend on it will fail to start.</Description>

    </Service>

    <Service Name="IAS">

      <DisplayName>Network Policy Server</DisplayName>

      <Description>Manages authentication, authorization, auditing and accounting for virtual private network (VPN), dial-up, 802.1x wireless or Ethernet switch connection attempts sent by access servers that are compatible with the IETF RADIUS protocol. If this service is stopped, users might be unable to obtain a VPN, dial-up, wireless, or Ethernet connection to the network. If this service is disabled, any services that explicitly depend on it will fail to start.</Description>

    </Service>

    <Service Name="IASJet">

      <DisplayName>IAS JET Database Access</DisplayName>

    </Service>

    <Service Name="idsvc">

      <DisplayName>Windows CardSpace</DisplayName>

      <Description>Securely enables the creation, management, and disclosure of digital identities.</Description>

    </Service>

    <Service Name="ifssvc">

      <DisplayName>AD FS Web Agent Authentication Service</DisplayName>

      <Description>The AD FS Web Agent Authentication Service validates incoming tokens and cookies.</Description>

    </Service>

    <Service Name="IISADMIN">

      <DisplayName>IIS Admin Service</DisplayName>

      <Description>Enables this server to administer metabase FTP services. If this service is stopped, the server will be unable to run metabase or FTP sites. If this service is disabled, any services that explicitly depend on it will fail to start.</Description>

    </Service>

    <Service Name="IsmServ">

      <DisplayName>Intersite Messaging</DisplayName>

      <Description>Enables messages to be exchanged between computers running Windows Server sites. If this service is stopped, messages will not be exchanged, nor will site routing information be calculated for other services.  If this service is disabled, any services that explicitly depend on it will fail to start.</Description>

    </Service>

    <Service Name="LPDSVC">

      <DisplayName>TCP/IP Print Server</DisplayName>

      <Description>Enables TCP/IP-based printing using the Line Printer Daemon protocol. If this service is stopped, TCP/IP-based printing will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.</Description>

    </Service>

    <Service Name="MSFTPSVC">

      <DisplayName>FTP Publishing Service</DisplayName>

      <Description>Enables this server to be a File Transfer Protocol (FTP) server. If this service is stopped, the server cannot function as an FTP server. If this service is disabled, any services that explicitly depend on it will fail to start.</Description>

    </Service>

    <Service Name="MSiSNS">

      <DisplayName>Microsoft iSNS Server</DisplayName>

      <Description>Maintains a database of iSNS client registrations and notifies clients when changes are made to the database.</Description>

    </Service>

    <Service Name="MSMQ">

      <DisplayName>Message Queuing</DisplayName>

      <Description>Provides a messaging infrastructure and development tool for creating distributed messaging applications for Windows-based networks and programs. If this service is stopped, distributed messages will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.</Description>

    </Service>

    <Service Name="MSMQTriggers">

      <DisplayName>Message Queuing Triggers</DisplayName>

      <Description>Provides rule-based monitoring of messages arriving in a Message Queuing queue and, when the conditions of a rule are satisfied, invokes a COM component or a stand-alone executable program to process the message.</Description>

    </Service>

    <Service Name="MQDSSVC">

      <DisplayName>Message Queuing Downlevel Client Support</DisplayName>

      <Description>Allows MSMQ 2.0 clients to access MSMQ Active Directory features</Description>

    </Service>

    <Service Name="NetMsmqActivator">

      <DisplayName>Net.Msmq Listener Adapter</DisplayName>

      <Description>Receives activation requests over the net.msmq and msmq.formatname protocols and passes them to the Windows Process Activation Service.</Description>

    </Service>

    <Service Name="NetPipeActivator">

      <DisplayName>Net.Pipe Listener Adapter</DisplayName>

      <Description>Receives activation requests over the net.pipe protocol and passes them to the Windows Process Activation Service.</Description>

    </Service>

    <Service Name="NetTcpActivator">

      <DisplayName>Net.Tcp Listener Adapter</DisplayName>

      <Description>Receives activation requests over the net.tcp protocol and passes them to the Windows Process Activation Service.</Description>

    </Service>

    <Service Name="NetTcpPortSharing">

      <DisplayName>Net.Tcp Port Sharing Service</DisplayName>

      <Description>Provides ability to share TCP ports over the net.tcp protocol.</Description>

    </Service>

    <Service Name="nfssvc">

      <DisplayName>Server for NFS</DisplayName>

      <Description>Enables a Windows based computer to act as an NFS Server.</Description>

    </Service>

    <Service Name="nfsclnt">

      <DisplayName>Client for NFS</DisplayName>

      <Description>Enables this computer to access files on NFS shares.</Description>

    </Service>

    <Service Name="NisSvc">

      <DisplayName>Server for NIS</DisplayName>

      <Description>Server for NIS (Unix-RPC)</Description>

    </Service>

    <Service Name="NtFrs">

      <DisplayName>File Replication</DisplayName>

      <Description>Allows files to be automatically copied and maintained simultaneously on multiple servers. If this service is stopped, file replication will not occur and servers will not synchronize. If this service is disabled, any services that explicitly depend on it will fail to start.</Description>

    </Service>

    <Service Name="NtmsSvc">

      <DisplayName>Removable Storage</DisplayName>

      <Description>Manages and catalogs removable media and operates automated removable media devices. If this service is stopped, programs that are dependent on Removable Storage, such as Backup and Remote Storage, will operate more slowly. If this service is disabled, any services that explicitly depend on it will fail to start.</Description>

    </Service>

    <Service Name="OCSPSvc">

      <DisplayName>Online Responder Service</DisplayName>

      <Description>Enables the Online Certificate Status Protocol (OCSP) services for a PKI based applications such as secure e-mail, smartcard logon, secure web servers. If this service is stopped or disabled then the revocation services may not be available thereby causing authentication or application failures.</Description>

    </Service>

    <Service Name="p2pimsvc">

      <DisplayName>Peer Networking Identity Manager</DisplayName>

      <Description>Provides Identity service for Peer Networking.</Description>

    </Service>

    <Service Name="PNRPAutoReg">

      <DisplayName>PNRP Machine Name Publication Service</DisplayName>

      <Description>This service publishes a machine name using the Peer Name Resolution Protocol.  Configuration is managed via the netsh context 'p2p pnrp peer'.</Description>

    </Service>

    <Service Name="PNRPsvc">

      <DisplayName>Peer Name Resolution Protocol</DisplayName>

      <Description>Enables Serverless Peer Name Resolution over the Internet. If disabled, some Peer to Peer and Collaborative applications, such as Windows Meetings, may not function.</Description>

    </Service>

    <Service Name="QWAVE">

      <DisplayName>Quality Windows Audio Video Experience</DisplayName>

      <Description>Quality Windows Audio Video Experience (qWave) is a networking platform for Audio Video (AV) streaming applications on IP home networks. qWave enhances AV streaming performance and reliability by ensuring network quality-of-service (QoS) for AV applications. It provides mechanisms for admission control, run time monitoring and enforcement, application feedback, and traffic prioritization.</Description>

    </Service>

    <Service Name="rqs">

      <DisplayName>Remote Access Quarantine Agent</DisplayName>

      <Description>Removes validated remote access client from the quarantine network.</Description>

    </Service>

    <Service Name="SimpTcp">

      <DisplayName>Simple TCP/IP Services</DisplayName>

      <Description>Supports the following TCP/IP services: Character Generator, Daytime, Discard, Echo, and Quote of the Day.</Description>

    </Service>

    <Service Name="SMTPSVC">

      <DisplayName>Simple Mail Transfer Protocol (SMTP)</DisplayName>

      <Description>Transports electronic mail across the network.</Description>

    </Service>

    <Service Name="SNMP">

      <DisplayName>SNMP Service</DisplayName>

      <Description>Enables Simple Network Management Protocol (SNMP) requests to be processed by this computer. If this service is stopped, the computer will be unable to process SNMP requests.</Description>

    </Service>

    <Service Name="SPAdmin">

      <DisplayName>Windows SharePoint Services Administration</DisplayName>

      <Description>Performs administrative tasks for Windows SharePoint Services</Description>

    </Service>

    <Service Name="SPTimerV3">

      <DisplayName>Windows SharePoint Services Timer</DisplayName>

      <Description>Sends notifications and performs scheduled tasks for Windows SharePoint Services</Description>

    </Service>

    <Service Name="SPSearch">

      <DisplayName>Windows SharePoint Services Search</DisplayName>

      <Description>Provides full-text indexing and search to SharePoint user and help content.</Description>

    </Service>

    <Service Name="SPTrace">

      <DisplayName>Windows SharePoint Services Tracing</DisplayName>

      <Description>Manages trace output</Description>

    </Service>

    <Service Name="SPWriter">

      <DisplayName>Windows SharePoint Services VSS Writer</DisplayName>

      <Description>Windows SharePoint Services VSS Writer</Description>

    </Service>

    <Service Name="SrmSvc">

      <DisplayName>File Server Resource Manager</DisplayName>

      <Description>Provides servicesfor quota and file screen management.</Description>

    </Service>

    <Service Name="SrmReports">

      <DisplayName>File Server Storage Reports Manager</DisplayName>

      <Description>Provides services for configuration, scheduling, and generation of storage reports.</Description>

    </Service>

    <Service Name="MSSQL$MICROSOFT##SSEE">

      <DisplayName>Windows Internal Database</DisplayName>

      <Description>Windows Internal Database uses SQL Server 2005 Embedded Edition (Windows) as a relational data store for Windows roles and features only, such as Windows Sharepoint Services, Active Directory Rights Management Services, UDDI Services, Windows Server Update Services, and Windows System Resources Manager.</Description>

    </Service>

    <Service Name="SQLWriter">

      <DisplayName>SQL Server VSS Writer</DisplayName>

      <Description>Provides the interface to backup/restore Windows Internal Database through the Windows VSS infrastructure.</Description>

    </Service>

    <Service Name="TlntSvr">

      <DisplayName>Telnet</DisplayName>

      <Description>Enables a remote user to log on to this computer and run programs, and supports various TCP/IP Telnet clients, including UNIX-based and Windows-based computers. If this service is stopped, remote user access to programs might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start.</Description>

    </Service>

    <Service Name="TermServLicensing">

      <DisplayName>Remote Desktop Licensing</DisplayName>

      <Description>Provides registered licenses for Remote Desktop Services clients. If this service is stopped, the server will be unavailable to issue Remote Desktop Services client access licenses to clients when they are requested.</Description>

    </Service>

    <Service Name="TSGateway">

      <DisplayName>Remote Desktop Gateway</DisplayName>

      <Description>Provides secure remote connectivity to remote computers on your corporate network, from anywhere on the Internet. If this service is stopped, connections to remote computers cannot be made through this Remote Desktop Gateway server.</Description>

    </Service>

    <Service Name="Tssdis">

      <DisplayName>Remote Destkop Services Connection Broker</DisplayName>

      <Description>Enables a user connection request to be routed to the appropriate Remote Desktop Session Host in a cluster. If this service is stopped, connection requests will be routed to the first available server.</Description>

    </Service>

    <Service Name="W3SVC">

      <DisplayName>World Wide Web Publishing Service</DisplayName>

      <Description>Provides Web connectivity and administration through the Internet Information Services Manager.</Description>

    </Service>

    <Service Name="WAS">

      <DisplayName>Windows Process Activation Service</DisplayName>

      <Description>The Windows Process Activation Service (WAS) provides process activation, resource management and health management services for message-activated applications.</Description>

    </Service>

    <Service Name="wbengine">

      <DisplayName>Block Level Backup Engine Service</DisplayName>

      <Description>Engine to perform block level backup and recovery of data.</Description>

    </Service>

    <Service Name="WebClient">

      <DisplayName>Web Client</DisplayName>

      <Description>Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start.</Description>

    </Service>

    <Service Name="WDSServer">

      <DisplayName>Windows Deployment Services Server</DisplayName>

      <Description>Manages requests made by Pre-Boot eXecution Environment (PXE) - enabled client computers. If this service is stopped, PXE-enabled client computers will be unable to install Windows remotely or use other Windows Deployment Services-based tools. If this service is disabled, any services that explicitly depend on it will fail to start.</Description>

    </Service>

    <Service Name="WINS">

      <DisplayName>WINS</DisplayName>

      <Description>Manages the Windows Internet Name Service (WINS), which translates NetBIOS computer names to IP addresses.</Description>

    </Service>

    <Service Name="WMSvc">

      <DisplayName>Web Management Service</DisplayName>

      <Description>The Web Management Service enables remote and delegated management capabilities for administrators to manage for the Web server, sites and applications present on this machine.</Description>

    </Service>

    <Service Name="WSearch">

      <DisplayName>Windows Search</DisplayName>

      <Description>Provides content indexing and property caching for file, email and other content (via extensibility APIs).  The service responds to file and email notifications to index modified content.  If the service is stopped or disabled, the Explorer will not be able to display virtual folder views of items, and search in the Explorer will fall back to item-by-item slow search.</Description>

    </Service>

    <Service Name="wsrm">

      <DisplayName>Windows System Resource Manager</DisplayName>

      <Description>Assigns computer resources to multiple applications running on Windows Vista Server. If this service is stopped or disabled, no management will occur, no accounting data will be collected, and the administrator will not be able to administer Windows System Resource Manager.</Description>

    </Service>

  </ServiceLocalization>

</SCWLocalization>


© 2026 UnknownSec