Prev: ! lpc port Usage
Next: How to identify the WinPE OS name and version by coding
From: netskink on 9 Jul 2008 11:30
I'm reading the windows internals book. It talks about "the
ScCreateServiceDB reading the services group value to determine its
membership..."

I looked in HKLM\SYSTEM\CurrentControlSet\Services\ and looked at the
list of services there. Some of them have a group entry and some of
them don't. I thought maybe the ones which did not have a group entry
were for the user mode ones, ie the ones which are listed in ther
services control panel applet. However, I looked at something like
AgereSoftModem and it does not have a group entry nor is listed in the
applet. Is this because its a driver?

To even make it more confusing.
FastUserSwitchingCompatbility has a dependOnGroup, DependOnService and
no Group entry yet it is in the control panel groups applet.

What gives? Is there a simple explanation for this?
From: Tim Roberts on 10 Jul 2008 03:27
netskink <davisjf(a)gmail.com> wrote:
>
>I'm reading the windows internals book. It talks about "the
>ScCreateServiceDB reading the services group value to determine its
>membership..."
>
>I looked in HKLM\SYSTEM\CurrentControlSet\Services\ and looked at the
>list of services there. Some of them have a group entry and some of
>them don't. I thought maybe the ones which did not have a group entry
>were for the user mode ones, ie the ones which are listed in ther
>services control panel applet. However, I looked at something like
>AgereSoftModem and it does not have a group entry nor is listed in the
>applet. Is this because its a driver?

Yes. The Services key includes both user-mode services and kernel-mode
drivers. Only user-mode services are listed in the Services snapin.
Grouping has nothing to do with this.

>To even make it more confusing.
>FastUserSwitchingCompatbility has a dependOnGroup, DependOnService and
>no Group entry yet it is in the control panel groups applet.

Right. It's a user mode service -- ImagePath is a .exe. User-mode
services can depend on other user-mode services.

>What gives? Is there a simple explanation for this?

I don't think it's really all that confusing.
--
Tim Roberts, timr(a)probo.com
Providenza & Boekelheide, Inc.
 | 
Pages: 1
Prev: ! lpc port Usage
Next: How to identify the WinPE OS name and version by coding