{"id":25534,"date":"2022-01-06T16:58:47","date_gmt":"2022-01-06T11:28:47","guid":{"rendered":"http:\/\/198.58.113.91\/blog\/?p=25534"},"modified":"2024-06-13T14:58:01","modified_gmt":"2024-06-13T09:28:01","slug":"windows-11-default-services-configuration","status":"publish","type":"post","link":"https:\/\/www.winhelponline.com\/blog\/windows-11-default-services-configuration\/","title":{"rendered":"Windows 11 Default Services Configuration and Permissions"},"content":{"rendered":"<p>The Windows 11 Services configuration defaults are provided on this page. The settings below are gathered from a Windows 11 Pro PC (clean install, rather than upgrade).<\/p>\n<p><em>Updated on June 13, 2024 for Windows 11 Pro 23H2.<\/em><\/p>\n<p>Note that some of these services may not be found in your system, depending upon the edition of Windows 11 you&#8217;ve installed. Also, you may find some non-Microsoft services (e.g., Intel services) in the list, which you may not find on your computer.<br \/>\n<!--more--><\/p>\n<h2>Windows 11 Default Services Configuration<\/h2>\n<table style=\"font-size:85%\">\n<tbody>\n<tr bgcolor=\"E0E0E0\">\n<th>Name\n<\/th>\n<th>Startup Type\n<\/th>\n<th>Log On As\n<\/th>\n<\/tr>\n<tr>\n<td>ActiveX Installer (AxInstSV) <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Agent Activation Runtime_1768de <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>AllJoyn Router Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>App Readiness <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Application Identity <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Application Information <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Application Layer Gateway Service <\/td>\n<td>Manual <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Application Management <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>AppX Deployment Service (AppXSVC) <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>AssignedAccessManager Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Auto Time Zone Updater <\/td>\n<td>Disabled <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>AVCTP service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Background Intelligent Transfer Service <\/td>\n<td>Automatic (Delayed Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Background Tasks Infrastructure Service <\/td>\n<td>Automatic <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Base Filtering Engine <\/td>\n<td>Automatic <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>BitLocker Drive Encryption Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Block Level Backup Engine Service <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Bluetooth Audio Gateway Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Bluetooth Support Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Bluetooth User Support Service_1768de <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>BranchCache <\/td>\n<td>Manual <\/td>\n<td>Network Service\n<\/td>\n<\/tr>\n<tr>\n<td>Capability Access Manager Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>CaptureService_1768de <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Cellular Time <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Certificate Propagation <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Client License Service (ClipSVC) <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Clipboard User Service_1768de <\/td>\n<td>Automatic (Delayed Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Cloud Backup and Restore Service_1768de <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>CNG Key Isolation <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>COM+ Event System <\/td>\n<td>Automatic <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>COM+ System Application <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Connected Devices Platform Service <\/td>\n<td>Automatic (Delayed Start, Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Connected Devices Platform User Service_1768de <\/td>\n<td>Automatic <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Connected User Experiences and Telemetry <\/td>\n<td>Automatic <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>ConsentUX User Service_1768de <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Contact Data_1768de <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>CoreMessaging <\/td>\n<td>Automatic <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Credential Manager <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>CredentialEnrollmentManagerUserSvc_1768de <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Cryptographic Services <\/td>\n<td>Automatic (Trigger Start) <\/td>\n<td>Network Service\n<\/td>\n<\/tr>\n<tr>\n<td>Data Sharing Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Data Usage <\/td>\n<td>Automatic <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>DCOM Server Process Launcher <\/td>\n<td>Automatic <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Declared Configuration(DC) service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Delivery Optimization <\/td>\n<td>Automatic (Delayed Start, Trigger Start) <\/td>\n<td>Network Service\n<\/td>\n<\/tr>\n<tr>\n<td>Device Association Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Device Install Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Device Management Enrollment Service <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Device Management Wireless Application Protocol <br \/> (WAP) Push message Routing Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Device Setup Manager <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>DeviceAssociationBroker_1768de <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>DevicePicker_1768de <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>DevicesFlow_1768de <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>DevQuery Background Discovery Broker <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>DHCP Client <\/td>\n<td>Automatic <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Diagnostic Execution Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Diagnostic Policy Service <\/td>\n<td>Automatic <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Diagnostic Service Host <\/td>\n<td>Manual <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Diagnostic System Host <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>DialogBlockingService <\/td>\n<td>Disabled <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Display Enhancement Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Display Policy Service <\/td>\n<td>Automatic <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Distributed Link Tracking Client <\/td>\n<td>Automatic <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Distributed Transaction Coordinator <\/td>\n<td>Manual <\/td>\n<td>Network Service\n<\/td>\n<\/tr>\n<tr>\n<td>DNS Client <\/td>\n<td>Automatic (Trigger Start) <\/td>\n<td>Network Service\n<\/td>\n<\/tr>\n<tr>\n<td>Downloaded Maps Manager <\/td>\n<td>Automatic (Delayed Start) <\/td>\n<td>Network Service\n<\/td>\n<\/tr>\n<tr>\n<td>Embedded Mode <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Encrypting File System (EFS) <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Enterprise App Management Service <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Extensible Authentication Protocol <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>File History Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Function Discovery Provider Host <\/td>\n<td>Manual <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Function Discovery Resource Publication <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>GameDVR and Broadcast User Service_1768de <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>GameInput Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Geolocation Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>GraphicsPerfSvc <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Group Policy Client <\/td>\n<td>Automatic (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Human Interface Device Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>HV Host Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Hyper-V Data Exchange Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Hyper-V Guest Service Interface <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Hyper-V Guest Shutdown Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Hyper-V Heartbeat Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Hyper-V PowerShell Direct Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Hyper-V Remote Desktop Virtualization Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Hyper-V Time Synchronization Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Hyper-V Volume Shadow Copy Requestor <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>IKE and AuthIP IPsec Keying Modules <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Internet Connection Sharing (ICS) <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Inventory and Compatibility Appraisal service <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>IP Helper <\/td>\n<td>Automatic <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>IP Translation Configuration Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>IPsec Policy Agent <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Network Service\n<\/td>\n<\/tr>\n<tr>\n<td>KtmRm for Distributed Transaction Coordinator <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Network Service\n<\/td>\n<\/tr>\n<tr>\n<td>Language Experience Service <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Link-Layer Topology Discovery Mapper <\/td>\n<td>Manual <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Local Profile Assistant Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Local Session Manager <\/td>\n<td>Automatic <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>McpManagementService <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>MessagingService_1768de <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Microsoft (R) Diagnostics Hub Standard Collector Service <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Microsoft Account Sign-in Assistant <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Microsoft App-V Client <\/td>\n<td>Disabled <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Microsoft Cloud Identity Service <\/td>\n<td>Manual <\/td>\n<td>Network Service\n<\/td>\n<\/tr>\n<tr>\n<td>Microsoft Defender Antivirus Network Inspection Service <\/td>\n<td>Manual <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Microsoft Defender Antivirus Service <\/td>\n<td>Automatic <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Microsoft Defender Core Service <\/td>\n<td>Automatic <\/td>\n<td>Local System<\/td>\n<\/tr>\n<tr>\n<td>Microsoft Edge Elevation Service (MicrosoftEdgeElevationService) <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Microsoft Edge Update Service (edgeupdate) <\/td>\n<td>Automatic (Delayed Start, Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Microsoft Edge Update Service (edgeupdatem) <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Microsoft iSCSI Initiator Service <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Microsoft Keyboard Filter <\/td>\n<td>Disabled <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Microsoft Passport <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Microsoft Passport Container <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Microsoft Software Shadow Copy Provider <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Microsoft Storage Spaces SMP <\/td>\n<td>Manual <\/td>\n<td>Network Service\n<\/td>\n<\/tr>\n<tr>\n<td>Microsoft Store Install Service <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Microsoft Update Health Service <\/td>\n<td>Disabled <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Microsoft Windows SMS Router Service. <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Natural Authentication <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Net.Tcp Port Sharing Service <\/td>\n<td>Disabled <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Netlogon <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Network Connected Devices Auto-Setup <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Network Connection Broker <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Network Connections <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Network Connectivity Assistant <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Network List Service <\/td>\n<td>Manual <\/td>\n<td>Network Service\n<\/td>\n<\/tr>\n<tr>\n<td>Network Location Awareness <\/td>\n<td>Manual <\/td>\n<td>Network Service\n<\/td>\n<\/tr>\n<tr>\n<td>Network Setup Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Network Store Interface Service <\/td>\n<td>Automatic <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>NPSMSvc_1768de <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Offline Files <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>OpenSSH Authentication Agent <\/td>\n<td>Disabled <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Optimize drives <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>P9RdrService_1768de <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Parental Controls <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Payments and NFC\/SE Manager <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Peer Name Resolution Protocol <\/td>\n<td>Manual <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Peer Networking Grouping <\/td>\n<td>Manual <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Peer Networking Identity Manager <\/td>\n<td>Manual <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>PenService_1768de <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Performance Counter DLL Host <\/td>\n<td>Manual <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Performance Logs &amp; Alerts <\/td>\n<td>Manual <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Phone Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Plug and Play <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>PNRP Machine Name Publication Service <\/td>\n<td>Manual <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Portable Device Enumerator Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Power <\/td>\n<td>Automatic <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Print Spooler <\/td>\n<td>Automatic <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Printer Extensions and Notifications <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>PrintWorkflow_1768de <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Problem Reports Control Panel Support <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Program Compatibility Assistant Service <\/td>\n<td>Automatic (Delayed Start, Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Quality Windows Audio Video Experience <\/td>\n<td>Manual <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Radio Management Service <\/td>\n<td>Manual <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Recommended Troubleshooting Service <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Remote Access Auto Connection Manager <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Remote Access Connection Manager <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Remote Desktop Configuration <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Remote Desktop Services <\/td>\n<td>Manual <\/td>\n<td>Network Service\n<\/td>\n<\/tr>\n<tr>\n<td>Remote Desktop Services UserMode Port Redirector <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Remote Procedure Call (RPC) <\/td>\n<td>Automatic <\/td>\n<td>Network Service\n<\/td>\n<\/tr>\n<tr>\n<td>Remote Procedure Call (RPC) Locator <\/td>\n<td>Manual <\/td>\n<td>Network Service\n<\/td>\n<\/tr>\n<tr>\n<td>Remote Registry <\/td>\n<td>Disabled <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Retail Demo Service <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Routing and Remote Access <\/td>\n<td>Disabled <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>RPC Endpoint Mapper <\/td>\n<td>Automatic <\/td>\n<td>Network Service\n<\/td>\n<\/tr>\n<tr>\n<td>Secondary Logon <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Secure Socket Tunneling Protocol Service <\/td>\n<td>Manual <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Security Accounts Manager <\/td>\n<td>Automatic <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Security Center <\/td>\n<td>Automatic (Delayed Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Sensor Data Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Sensor Monitoring Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Sensor Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Server <\/td>\n<td>Automatic (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Shared PC Account Manager <\/td>\n<td>Disabled <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Shell Hardware Detection <\/td>\n<td>Automatic <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Smart Card <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Smart Card Device Enumeration Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Smart Card Removal Policy <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>SNMP Trap <\/td>\n<td>Manual <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Software Protection <\/td>\n<td>Automatic (Delayed Start, Trigger Start) <\/td>\n<td>Network Service\n<\/td>\n<\/tr>\n<tr>\n<td>Spatial Data Service <\/td>\n<td>Manual <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Spot Verifier <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>SSDP Discovery <\/td>\n<td>Manual <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>State Repository Service <\/td>\n<td>Automatic <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Still Image Acquisition Events <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Storage Service <\/td>\n<td>Automatic (Delayed Start, Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Storage Tiers Management <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Sync Host_1768de <\/td>\n<td>Automatic (Delayed Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>SysMain <\/td>\n<td>Automatic <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>System Event Notification Service <\/td>\n<td>Automatic <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>System Events Broker <\/td>\n<td>Automatic (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>System Guard Runtime Monitor Broker <\/td>\n<td>Disabled <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Task Scheduler <\/td>\n<td>Automatic <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>TCP\/IP NetBIOS Helper <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Telephony <\/td>\n<td>Manual <\/td>\n<td>Network Service\n<\/td>\n<\/tr>\n<tr>\n<td>Text Input Management Service <\/td>\n<td>Automatic (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Themes <\/td>\n<td>Automatic <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Time Broker <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Udk User Service_1768de <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Update Orchestrator Service <\/td>\n<td>Automatic (Delayed Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>UPnP Device Host <\/td>\n<td>Manual <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>User Data Access_1768de <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>User Data Storage_1768de <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>User Experience Virtualization Service <\/td>\n<td>Disabled <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>User Manager <\/td>\n<td>Automatic (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>User Profile Service <\/td>\n<td>Automatic <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Virtual Disk <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Volume Shadow Copy <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Volumetric Audio Compositor Service <\/td>\n<td>Manual <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>WaaSMedicSvc <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>WalletService <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Warp JIT Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Web Account Manager <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Web Threat Defense Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Web Threat Defense User Service_1768de <\/td>\n<td>Automatic <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>WebClient <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Wi-Fi Direct Services Connection Manager Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Audio <\/td>\n<td>Automatic <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Audio Endpoint Builder <\/td>\n<td>Automatic <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Backup <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Biometric Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Camera Frame Server <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Camera Frame Server Monitor <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Connect Now &#8211; Config Registrar <\/td>\n<td>Manual <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Connection Manager <\/td>\n<td>Automatic (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Defender Advanced Threat Protection Service <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Defender Firewall <\/td>\n<td>Automatic <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Encryption Provider Host Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Error Reporting Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Event Collector <\/td>\n<td>Manual <\/td>\n<td>Network Service\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Event Log <\/td>\n<td>Automatic <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Font Cache Service <\/td>\n<td>Automatic <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Image Acquisition (WIA) <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Insider Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Installer <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Windows License Manager Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Management Instrumentation <\/td>\n<td>Automatic <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Management Service <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Media Player Network Sharing Service <\/td>\n<td>Manual <\/td>\n<td>Network Service\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Mixed Reality OpenXR Service <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Mobile Hotspot Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Modules Installer <\/td>\n<td>Automatic <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Perception Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Perception Simulation Service <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Push Notifications System Service <\/td>\n<td>Automatic <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Push Notifications User Service_1768de <\/td>\n<td>Automatic <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Windows PushToInstall Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Remote Management (WS-Management) <\/td>\n<td>Manual <\/td>\n<td>Network Service\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Search <\/td>\n<td>Automatic (Delayed Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Security Service <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Time <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Windows Update <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>WinHTTP Web Proxy Auto-Discovery Service <\/td>\n<td>Manual <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Wired AutoConfig <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>WLAN AutoConfig <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>WMI Performance Adapter <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Work Folders <\/td>\n<td>Manual <\/td>\n<td>Local Service\n<\/td>\n<\/tr>\n<tr>\n<td>Workstation <\/td>\n<td>Automatic <\/td>\n<td>Network Service\n<\/td>\n<\/tr>\n<tr>\n<td>WWAN AutoConfig <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Xbox Accessory Management Service <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Xbox Live Auth Manager <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Xbox Live Game Save <\/td>\n<td>Manual (Trigger Start) <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<tr>\n<td>Xbox Live Networking Service <\/td>\n<td>Manual <\/td>\n<td>Local System\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Windows 11 Service Permissions<\/h2>\n<p>The Service <a href=\"https:\/\/www.winhelponline.com\/blog\/view-edit-service-permissions-windows\/\">permission<\/a> (SDDL strings) defaults are provided below for each service:<\/p>\n<pre>Service Name : AJRouter\nDisplay Name : AllJoyn Router Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CR;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : ALG\nDisplay Name : Application Layer Gateway Service\nImage Path   : C:\\Windows\\System32\\alg.exe\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : AppIDSvc\nDisplay Name : Application Identity\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : NT Authority\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : Appinfo\nDisplay Name : Application Information\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CR;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : AppMgmt\nDisplay Name : Application Management\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLO;;;IU)(A;;CCLCSWLO;;;BU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : AppReadiness\nDisplay Name : App Readiness\nImage Path   : C:\\Windows\\System32\\svchost.exe -k AppReadiness -p\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : AppVClient\nDisplay Name : Microsoft App-V Client\nImage Path   : C:\\Windows\\system32\\AppVClient.exe\nStartup Type : Disabled\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOSDRCWDWO;;;WD)\n\nService Name : AppXSvc\nDisplay Name : AppX Deployment Service (AppXSVC)\nImage Path   : C:\\Windows\\system32\\svchost.exe -k wsappx -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:(A;;LCRP;;;AC)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCLCSWRPWPDTLOCRRC;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;CCLCSWRPLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : AssignedAccessManagerSvc\nDisplay Name : AssignedAccessManager Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k AssignedAccessManagerSvc\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : AudioEndpointBuilder\nDisplay Name : Windows Audio Endpoint Builder\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Auto\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : Audiosrv\nDisplay Name : Windows Audio\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted -p\nStartup Type : Auto\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CCLCSWLORC;;;AC)(A;;CCLCSWLORC;;;S-1-15-3-1024-1692970155-4054893335-185714091-3362601943-3526593181-1159816984-2199008581-497492991)\n\nService Name : autotimesvc\nDisplay Name : Cellular Time\nImage Path   : C:\\Windows\\system32\\svchost.exe -k autoTimeSvc\nStartup Type : Manual (Triggered)\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : AxInstSV\nDisplay Name : ActiveX Installer (AxInstSV)\nImage Path   : C:\\Windows\\system32\\svchost.exe -k AxInstSVGroup\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : BDESVC\nDisplay Name : BitLocker Drive Encryption Service\nImage Path   : C:\\Windows\\System32\\svchost.exe -k netsvcs -p\nStartup Type : Manual (Triggered)\nLog On As    : localSystem\nPermissions  : O:SYG:SYD:(A;;CCDCLCSWRPWPDTLORCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLORCWDWO;;;BA)(A;;CCLCSWRPLORC;;;BU)(A;;CCLCSWRPLORC;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOSDRCWDWO;;;WD)\n\nService Name : BFE\nDisplay Name : Base Filtering Engine\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalServiceNoNetworkFirewall -p\nStartup Type : Auto\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCLORC;;;AU)(A;;CCDCLCSWRPLORCWDWO;;;SY)(A;;CCLCSWRPLORCWDWO;;;BA)(A;;CCLCLO;;;BU)S:(AU;FA;CCDCLCSWRPWPDTLOSDRCWDWO;;;WD)\n\nService Name : BITS\nDisplay Name : Background Intelligent Transfer Service\nImage Path   : C:\\Windows\\System32\\svchost.exe -k netsvcs -p\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:BAG:BAD:(A;CI;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;SAFA;WDWO;;;BA)\n\nService Name : BrokerInfrastructure\nDisplay Name : Background Tasks Infrastructure Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k DcomLaunch -p\nStartup Type : Auto\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCLORC;;;AU)(A;;CCDCLCSWRPWPDTLORCWDWO;;;SY)(A;;CCLCSWRPWPDTLORCWDWO;;;BA)(A;;CCLCRPLO;;;BU)S:(AU;FA;CCDCLCSWRPWPDTLOSDRCWDWO;;;WD)\n\nService Name : BTAGService\nDisplay Name : Bluetooth Audio Gateway Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalServiceNetworkRestricted\nStartup Type : Manual (Triggered)\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : BthAvctpSvc\nDisplay Name : AVCTP service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalService -p\nStartup Type : Manual (Triggered)\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : bthserv\nDisplay Name : Bluetooth Support Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalService -p\nStartup Type : Manual (Triggered)\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : camsvc\nDisplay Name : Capability Access Manager Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k osprivacy -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : CDPSvc\nDisplay Name : Connected Devices Platform Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalService -p\nStartup Type : Auto (Delayed, Triggered)\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CR;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : CertPropSvc\nDisplay Name : Certificate Propagation\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:BAG:BAD:(A;CI;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRRC;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;RPWP;;;S-1-5-80-446051430-1559341753-4161941529-1950928533-810483104)S:(AU;SAFA;WDWO;;;BA)\n\nService Name : ClipSVC\nDisplay Name : Client License Service (ClipSVC)\nImage Path   : C:\\Windows\\System32\\svchost.exe -k wsappx -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCDCLCSWRPWPDTLOCRRC;;;SY)(A;;CCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;LCRPLO;;;AC)(A;;CCLCSWRPLOCRRC;;;SU)(A;;LCRP;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : cloudidsvc\nDisplay Name : Microsoft Cloud Identity Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k CloudIdServiceGroup -p\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\NetworkService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLORC;;;AU)(A;;CCLCSWRPLORC;;;AC)(A;;CCLCSWRPLORC;;;S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681)\n\nService Name : COMSysApp\nDisplay Name : COM+ System Application\nImage Path   : C:\\Windows\\system32\\dllhost.exe \/Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : CoreMessagingRegistrar\nDisplay Name : CoreMessaging\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalServiceNoNetwork -p\nStartup Type : Auto\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCLCSWRPWPDTLOCRRC;;;BA)(A;;CCLCSWRPLOCRRC;;;SU)(A;;CCLCSWRPLOCRRC;;;IU)(A;;CCLCSWRPLOCRRC;;;AC)\n\nService Name : CryptSvc\nDisplay Name : Cryptographic Services\nImage Path   : C:\\Windows\\system32\\svchost.exe -k NetworkService -p\nStartup Type : Auto (Triggered)\nLog On As    : NT Authority\\NetworkService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CCLCSWRPWPDTLOCRRC;;;SO)(A;;CCLCSWLORC;;;AC)(A;;CCLCSWLORC;;;S-1-15-3-1024-3203351429-2120443784-2872670797-1918958302-2829055647-4275794519-765664414-2751773334)\n\nService Name : CscService\nDisplay Name : Offline Files\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : DcomLaunch\nDisplay Name : DCOM Server Process Launcher\nImage Path   : C:\\Windows\\system32\\svchost.exe -k DcomLaunch -p\nStartup Type : Auto\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCLORC;;;AU)(A;;CCDCLCSWRPWPDTLORCWDWO;;;SY)(A;;CCLCSWRPWPDTLORCWDWO;;;BA)(A;;CCLCLO;;;BU)S:(AU;FA;CCDCLCSWRPWPDTLOSDRCWDWO;;;WD)\n\nService Name : dcsvc\nDisplay Name : Declared Configuration(DC) service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : defragsvc\nDisplay Name : Optimize drives\nImage Path   : C:\\Windows\\system32\\svchost.exe -k defragsvc\nStartup Type : Manual\nLog On As    : localSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : DeviceAssociationService\nDisplay Name : Device Association Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : DeviceInstall\nDisplay Name : Device Install Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k DcomLaunch -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : DevQueryBroker\nDisplay Name : DevQuery Background Discovery Broker\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : Dhcp\nDisplay Name : DHCP Client\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p\nStartup Type : Auto\nLog On As    : NT Authority\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;NO)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;S-1-2-1)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : diagnosticshub.standardcollector.service\nDisplay Name : Microsoft (R) Diagnostics Hub Standard Collector Service\nImage Path   : C:\\Windows\\system32\\DiagSvcs\\DiagnosticsHub.StandardCollector.Service.exe\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : diagsvc\nDisplay Name : Diagnostic Execution Service\nImage Path   : C:\\Windows\\System32\\svchost.exe -k diagnostics\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : DiagTrack\nDisplay Name : Connected User Experiences and Telemetry\nImage Path   : C:\\Windows\\System32\\svchost.exe -k utcsvc -p\nStartup Type : Auto\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : DialogBlockingService\nDisplay Name : DialogBlockingService\nImage Path   : C:\\Windows\\system32\\svchost.exe -k DialogBlockingService\nStartup Type : Disabled\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : DispBrokerDesktopSvc\nDisplay Name : Display Policy Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalService -p\nStartup Type : Auto\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : DisplayEnhancementService\nDisplay Name : Display Enhancement Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;LCRPCR;;;AC)(A;;LCRPCR;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : DmEnrollmentSvc\nDisplay Name : Device Management Enrollment Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : dmwappushservice\nDisplay Name : Device Management Wireless Application Protocol (WAP) Push message Routing Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;LCRP;;;AC)(A;;LCRP;;;IU)(A;;LCRP;;;AU)\n\nService Name : Dnscache\nDisplay Name : DNS Client\nImage Path   : C:\\Windows\\system32\\svchost.exe -k NetworkService -p\nStartup Type : Auto (Triggered)\nLog On As    : NT AUTHORITY\\NetworkService\nPermissions  : O:SYG:SYD:(A;CI;CCLCSWRPLORC;;;BU)(A;CI;CCLCSWRPDTLORC;;;BA)(A;CI;CCLCSWRPDTLORC;;;SY)(A;;CCLCSWRPLORC;;;IU)(A;CI;CCLCSWRPLORC;;;NS)(A;CI;CCLCSWRPLORC;;;LS)(A;CI;CCLCSWRPDTLORC;;;NO)(A;CI;CCLCSWDTLOCRRC;;;S-1-5-80-2940520708-3855866260-481812779-327648279-1710889582)(A;CI;CCLCSWRPLORC;;;AC)(A;CI;CCLCSWRPLORC;;;S-1-15-3-1)(A;CI;CCLCSWRPLORC;;;S-1-15-3-2)(A;CI;CCLCSWRPLORC;;;S-1-15-3-3)S:(AU;FA;CCLCSWRPDTLORC;;;WD)\n\nService Name : DoSvc\nDisplay Name : Delivery Optimization\nImage Path   : C:\\Windows\\System32\\svchost.exe -k NetworkService -p\nStartup Type : Auto (Delayed, Triggered)\nLog On As    : NT Authority\\NetworkService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;DCWPRC;;;S-1-5-80-3055155277-3816794035-3994065555-2874236192-2193176987)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : dot3svc\nDisplay Name : Wired AutoConfig\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual\nLog On As    : localSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : DPS\nDisplay Name : Diagnostic Policy Service\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalServiceNoNetwork -p\nStartup Type : Auto\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRRC;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : DsmSvc\nDisplay Name : Device Setup Manager\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;RP;;;BU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : DsSvc\nDisplay Name : Data Sharing Service\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;LCRP;;;WD)(A;;LCRP;;;AC)\n\nService Name : DusmSvc\nDisplay Name : Data Usage\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted -p\nStartup Type : Auto\nLog On As    : NT Authority\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : EapHost\nDisplay Name : Extensible Authentication Protocol\nImage Path   : C:\\Windows\\System32\\svchost.exe -k netsvcs -p\nStartup Type : Manual\nLog On As    : localSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : edgeupdate\nDisplay Name : Microsoft Edge Update Service (edgeupdate)\nImage Path   : \"C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\MicrosoftEdgeUpdate.exe\" \/svc\nStartup Type : Auto (Delayed, Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : edgeupdatem\nDisplay Name : Microsoft Edge Update Service (edgeupdatem)\nImage Path   : \"C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\MicrosoftEdgeUpdate.exe\" \/medsvc\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : EFS\nDisplay Name : Encrypting File System (EFS)\nImage Path   : C:\\Windows\\System32\\lsass.exe\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPLOCRRC;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;CCLCSWRPLOCRRC;;;SU)(A;;LCRP;;;AU)(A;;LCRP;;;AC)S:(AU;SAFA;DCSDWDWO;;;WD)\n\nService Name : embeddedmode\nDisplay Name : Embedded Mode\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:(A;;LCRP;;;AC)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCLCSWRPWPDTLOCRRC;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;CCLCSWRPLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : EntAppSvc\nDisplay Name : Enterprise App Management Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k appmodel -p\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:(A;;LCRP;;;AC)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCLCSWRPWPDTLOCRRC;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;CCLCSWRPLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : EventLog\nDisplay Name : Windows Event Log\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted -p\nStartup Type : Auto\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;LCLO;;;AC)S:(AU;SA;DCRPWPDTCRSDWDWO;;;WD)(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : EventSystem\nDisplay Name : COM+ Event System\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalService -p\nStartup Type : Auto\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : fdPHost\nDisplay Name : Function Discovery Provider Host\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalService -p\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : FDResPub\nDisplay Name : Function Discovery Resource Publication\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalServiceAndNoImpersonation -p\nStartup Type : Manual (Triggered)\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CCLCSWRPWPDTLOCRRC;;;NO)S:AI(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : fhsvc\nDisplay Name : File History Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;AU)\n\nService Name : FontCache\nDisplay Name : Windows Font Cache Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalService -p\nStartup Type : Auto\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;RP;;;IU)(A;;RP;;;SU)(A;;CCLCSWRPLOCRRC;;;AC)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : FrameServer\nDisplay Name : Windows Camera Frame Server\nImage Path   : C:\\Windows\\System32\\svchost.exe -k Camera\nStartup Type : Manual (Triggered)\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : FrameServerMonitor\nDisplay Name : Windows Camera Frame Server Monitor\nImage Path   : C:\\Windows\\System32\\svchost.exe -k CameraMonitor\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : GameInputSvc\nDisplay Name : GameInput Service\nImage Path   : C:\\Windows\\System32\\GameInputSvc.exe\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : gpsvc\nDisplay Name : Group Policy Client\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Auto (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCLCSWLOCRRC;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;SAFA;DCSDWDWO;;;WD)\n\nService Name : GraphicsPerfSvc\nDisplay Name : GraphicsPerfSvc\nImage Path   : C:\\Windows\\System32\\svchost.exe -k GraphicsPerfSvcGroup\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : hidserv\nDisplay Name : Human Interface Device Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : HvHost\nDisplay Name : HV Host Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : icssvc\nDisplay Name : Windows Mobile Hotspot Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : NT Authority\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;LCRP;;;WD)(A;;CCLCSWRPLOCRRC;;;S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708)(A;;CCLCSWRPLOCRRC;;;S-1-15-2-1121366727-2517420131-1100342901-1044639592-4216533239-371662368-2140263060)(A;;CCLCSWRPLOCRRC;;;S-1-15-2-2543942650-389403887-2808249486-612059083-208952635-835677591-2189227231)(A;;CCLCSWRPLOCRRC;;;S-1-15-2-3801529221-2855318152-1555692692-2306892612-2338533892-3542301781-2904385964)\n\nService Name : IKEEXT\nDisplay Name : IKE and AuthIP IPsec Keying Modules\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : InstallService\nDisplay Name : Microsoft Store Install Service\nImage Path   : C:\\Windows\\System32\\svchost.exe -k netsvcs -p\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : InventorySvc\nDisplay Name : Inventory and Compatibility Appraisal service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k InvSvcGroup -p\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;LCRP;;;BU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : iphlpsvc\nDisplay Name : IP Helper\nImage Path   : C:\\Windows\\System32\\svchost.exe -k NetSvcs -p\nStartup Type : Auto\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : IpxlatCfgSvc\nDisplay Name : IP Translation Configuration Service\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWRPWPLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : KeyIso\nDisplay Name : CNG Key Isolation\nImage Path   : C:\\Windows\\system32\\lsass.exe\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;CCLCSWRPLOCRRC;;;SU)(A;;CCLCSWLOCRRC;;;SU)(A;;CR;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : KtmRm\nDisplay Name : KtmRm for Distributed Transaction Coordinator\nImage Path   : C:\\Windows\\System32\\svchost.exe -k NetworkServiceAndNoImpersonation -p\nStartup Type : Manual (Triggered)\nLog On As    : NT AUTHORITY\\NetworkService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPLOCRRC;;;S-1-2-0)(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;CCLCSWLORC;;;AU)(A;;CCLCSWRPLOCRRC;;;SU)(A;;CCLCSWLORC;;;S-1-5-80-2818357584-3387065753-4000393942-342927828-138088443)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : LanmanServer\nDisplay Name : Server\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Auto (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : LanmanWorkstation\nDisplay Name : Workstation\nImage Path   : C:\\Windows\\System32\\svchost.exe -k NetworkService -p\nStartup Type : Auto\nLog On As    : NT AUTHORITY\\NetworkService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : lfsvc\nDisplay Name : Geolocation Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:\n\nService Name : LicenseManager\nDisplay Name : Windows License Manager Service\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalService -p\nStartup Type : Manual (Triggered)\nLog On As    : NT Authority\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : lltdsvc\nDisplay Name : Link-Layer Topology Discovery Mapper\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalService -p\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : lmhosts\nDisplay Name : TCP\/IP NetBIOS Helper\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : LSM\nDisplay Name : Local Session Manager\nImage Path   : C:\\Windows\\system32\\svchost.exe -k DcomLaunch -p\nStartup Type : Auto\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSW;;;AU)(A;;CCDCLCSWRPWPDTLOSDRCWDWO;;;SY)(A;;CCLCSWLORC;;;BA)S:(AU;FA;CCDCLCSWRPWPDTLOSDRCWDWO;;;WD)\n\nService Name : LxpSvc\nDisplay Name : Language Experience Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : MapsBroker\nDisplay Name : Downloaded Maps Manager\nImage Path   : C:\\Windows\\System32\\svchost.exe -k NetworkService -p\nStartup Type : Auto (Delayed)\nLog On As    : NT AUTHORITY\\NetworkService\nPermissions  : O:SYG:SYD:(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;LCRP;;;AU)(A;;LCRP;;;AC)\n\nService Name : McpManagementService\nDisplay Name : McpManagementService\nImage Path   : C:\\Windows\\system32\\svchost.exe -k McpManagementServiceGroup\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : MDCoreSvc\nDisplay Name : Microsoft Defender Core Service\nImage Path   : \"C:\\ProgramData\\Microsoft\\Windows Defender\\Platform\\4.18.24050.7-0\\MpDefenderCoreService.exe\"\nStartup Type : Auto\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPLOCRRC;;;BU)(A;;CCLCSWRPWPLOCRRC;;;SY)(A;;CCLCSWRPWPLOCRRC;;;BA)(A;;CCLCSWRPWPLOCRRC;;;IU)(A;;CCLCSWRPWPLOCRRC;;;SU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;S-1-5-80-1913148863-3492339771-4165695881-2087618961-4109116736)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;S-1-5-80-30551196-2029750602-3680353947-2336859763-523537544)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : MicrosoftEdgeElevationService\nDisplay Name : Microsoft Edge Elevation Service (MicrosoftEdgeElevationService)\nImage Path   : \"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\125.0.2535.92\\elevation_service.exe\"\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : MixedRealityOpenXRSvc\nDisplay Name : Windows Mixed Reality OpenXR Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : mpssvc\nDisplay Name : Windows Defender Firewall\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalServiceNoNetworkFirewall -p\nStartup Type : Auto\nLog On As    : NT Authority\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCLORC;;;AU)(A;;CCDCLCSWRPLORCWDWO;;;SY)(A;;CCLCSWRPLORCWDWO;;;BA)(A;;CCLCLO;;;BU)S:(AU;FA;CCDCLCSWRPWPDTLOSDRCWDWO;;;WD)\n\nService Name : MSDTC\nDisplay Name : Distributed Transaction Coordinator\nImage Path   : C:\\Windows\\System32\\msdtc.exe\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\NetworkService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPLORC;;;S-1-2-0)(A;;CCDCLCSWRPWPDTLORC;;;SY)(A;;CCDCLCSWRPWPDTLOSDRCWDWO;;;BA)(A;;CCLCSWRPLORC;;;IU)(A;;CCLCSWLORC;;;AU)(A;;CCLCSWRPLORC;;;SU)(A;;CCLCSWLORC;;;S-1-5-80-3960419045-2460139048-4046793004-1809597027-2250574426)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : MSiSCSI\nDisplay Name : Microsoft iSCSI Initiator Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : msiserver\nDisplay Name : Windows Installer\nImage Path   : C:\\Windows\\system32\\msiexec.exe \/V\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCLCSWRPWPDTLOCRRC;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;CCLCSWRPLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : MsKeyboardFilter\nDisplay Name : Microsoft Keyboard Filter\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Disabled\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : NaturalAuthentication\nDisplay Name : Natural Authentication\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;CCLCSWRPLOCRRC;;;AC)(A;;CCLCSWLOCRRC;;;SU)(A;;CR;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : NcaSvc\nDisplay Name : Network Connectivity Assistant\nImage Path   : C:\\Windows\\System32\\svchost.exe -k NetSvcs -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : NcbService\nDisplay Name : Network Connection Broker\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : NcdAutoSetup\nDisplay Name : Network Connected Devices Auto-Setup\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalServiceNoNetwork -p\nStartup Type : Manual (Triggered)\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : Netlogon\nDisplay Name : Netlogon\nImage Path   : C:\\Windows\\system32\\lsass.exe\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : Netman\nDisplay Name : Network Connections\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : netprofm\nDisplay Name : Network List Service\nImage Path   : C:\\Windows\\System32\\svchost.exe -k netprofm -p\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\NetworkService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : NetSetupSvc\nDisplay Name : Network Setup Service\nImage Path   : C:\\Windows\\System32\\svchost.exe -k netsvcs -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRP;;;NS)(A;;CCLCSWRP;;;LS)(A;;CCLCSWRP;;;AC)(A;;CCLCSWRP;;;BU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCLCSWRP;;;NO)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)\n\nService Name : NetTcpPortSharing\nDisplay Name : Net.Tcp Port Sharing Service\nImage Path   : C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SMSvcHost.exe\nStartup Type : Disabled\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;LCRP;;;IU)(A;;LCRP;;;SU)\n\nService Name : NgcCtnrSvc\nDisplay Name : Microsoft Passport Container\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCDCLCSWRPWPDTLORCWDWO;;;SY)(A;;CCLCSWRPWPDTLORCWDWO;;;BA)(A;;CCLCLORC;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : NgcSvc\nDisplay Name : Microsoft Passport\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCLORC;;;AU)(A;;CCDCLCSWRPWPDTLORCWDWO;;;SY)(A;;CCLCSWRPLORCWDWO;;;BA)(A;;CCLCLO;;;BU)S:(AU;FA;CCDCLCSWRPWPDTLOSDRCWDWO;;;WD)\n\nService Name : NlaSvc\nDisplay Name : Network Location Awareness\nImage Path   : C:\\Windows\\System32\\svchost.exe -k netprofm -p\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\NetworkService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : nsi\nDisplay Name : Network Store Interface Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalService -p\nStartup Type : Auto\nLog On As    : NT Authority\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : p2pimsvc\nDisplay Name : Peer Networking Identity Manager\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalServicePeerNet\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(D;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BG)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLORC;;;SO)(A;;CCLCSWRPLORC;;;IU)(A;;CCLCSWRPLORC;;;RD)(A;;CCLCSWRPLORC;;;BU)\n\nService Name : p2psvc\nDisplay Name : Peer Networking Grouping\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalServicePeerNet\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(D;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BG)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLORC;;;SO)(A;;CCLCSWRPLORC;;;IU)(A;;CCLCSWRPLORC;;;RD)(A;;CCLCSWRPLORC;;;BU)\n\nService Name : PcaSvc\nDisplay Name : Program Compatibility Assistant Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Auto (Delayed, Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CR;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : PeerDistSvc\nDisplay Name : BranchCache\nImage Path   : C:\\Windows\\System32\\svchost.exe -k PeerDist\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\NetworkService\nPermissions  : O:SYG:SYD:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SO)(A;;CCLCSWRPLORC;;;IU)(A;;CCLCSWRPLORC;;;RD)(A;;CCLCSWRPLORC;;;SU)(A;;CCLCSWRPLORC;;;BU)(A;;LCRPLO;;;AC)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : perceptionsimulation\nDisplay Name : Windows Perception Simulation Service\nImage Path   : C:\\Windows\\system32\\PerceptionSimulation\\PerceptionSimulationService.exe\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : PerfHost\nDisplay Name : Performance Counter DLL Host\nImage Path   : C:\\Windows\\SysWow64\\perfhost.exe\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : PhoneSvc\nDisplay Name : Phone Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalService -p\nStartup Type : Manual (Triggered)\nLog On As    : NT Authority\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;LCRP;;;WD)(A;;LCRP;;;AC)\n\nService Name : pla\nDisplay Name : Performance Logs & Alerts\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalServiceNoNetwork -p\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCR;;;SO)(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCLCRPLOCR;;;WD)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : PlugPlay\nDisplay Name : Plug and Play\nImage Path   : C:\\Windows\\system32\\svchost.exe -k DcomLaunch -p\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : PNRPAutoReg\nDisplay Name : PNRP Machine Name Publication Service\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalServicePeerNet\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(D;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BG)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLORC;;;SO)(A;;CCLCSWRPLORC;;;IU)(A;;CCLCSWRPLORC;;;RD)\n\nService Name : PNRPsvc\nDisplay Name : Peer Name Resolution Protocol\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalServicePeerNet\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(D;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BG)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLORC;;;SO)(A;;CCLCSWRPLORC;;;IU)(A;;CCLCSWRPLORC;;;RD)(A;;CCLCSWRPLORC;;;BU)\n\nService Name : PolicyAgent\nDisplay Name : IPsec Policy Agent\nImage Path   : C:\\Windows\\system32\\svchost.exe -k NetworkServiceNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : NT Authority\\NetworkService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : Power\nDisplay Name : Power\nImage Path   : C:\\Windows\\system32\\svchost.exe -k DcomLaunch -p\nStartup Type : Auto\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : PrintNotify\nDisplay Name : Printer Extensions and Notifications\nImage Path   : C:\\Windows\\system32\\svchost.exe -k print\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : ProfSvc\nDisplay Name : User Profile Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k UserProfileService -p\nStartup Type : Auto\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : PushToInstall\nDisplay Name : Windows PushToInstall Service\nImage Path   : C:\\Windows\\System32\\svchost.exe -k netsvcs -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : QWAVE\nDisplay Name : Quality Windows Audio Video Experience\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalServiceAndNoImpersonation -p\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPLO;;;IU)(A;;CCLCSWRPLO;;;NS)(A;;CCLCSWRPLO;;;UD)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)\n\nService Name : RasAuto\nDisplay Name : Remote Access Auto Connection Manager\nImage Path   : C:\\Windows\\System32\\svchost.exe -k netsvcs -p\nStartup Type : Manual\nLog On As    : localSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)\n\nService Name : RasMan\nDisplay Name : Remote Access Connection Manager\nImage Path   : C:\\Windows\\System32\\svchost.exe -k netsvcs\nStartup Type : Manual\nLog On As    : localSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;S-1-15-3-1024-1068037383-729401668-2768096886-125909118-1680096985-174794564-3112554050-3241210738)\n\nService Name : RemoteAccess\nDisplay Name : Routing and Remote Access\nImage Path   : C:\\Windows\\System32\\svchost.exe -k netsvcs\nStartup Type : Disabled\nLog On As    : localSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)\n\nService Name : RemoteRegistry\nDisplay Name : Remote Registry\nImage Path   : C:\\Windows\\system32\\svchost.exe -k localService -p\nStartup Type : Disabled\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : RetailDemo\nDisplay Name : Retail Demo Service\nImage Path   : C:\\Windows\\System32\\svchost.exe -k rdxgroup\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : RmSvc\nDisplay Name : Radio Management Service\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;CI;CCLCSWRPWPDTLOCRRC;;;LS)(A;CI;CCDCLCSWRPWPDTLOCRRC;;;SY)(A;CI;CCDCLCSWRPWPDTLOCRRC;;;BA)(A;CI;CCLCSWRPWPDTLOCRRC;;;BU)\n\nService Name : RpcEptMapper\nDisplay Name : RPC Endpoint Mapper\nImage Path   : C:\\Windows\\system32\\svchost.exe -k RPCSS -p\nStartup Type : Auto\nLog On As    : NT AUTHORITY\\NetworkService\nPermissions  : O:SYG:SYD:(A;;CCLCLORC;;;AU)(A;;CCDCLCSWRPWPDTLORCWDWO;;;SY)(A;;CCLCSWRPWPDTLORCWDWO;;;BA)(A;;CCLCRPLO;;;BU)S:(AU;FA;CCDCLCSWRPWPDTLOSDRCWDWO;;;WD)\n\nService Name : RpcLocator\nDisplay Name : Remote Procedure Call (RPC) Locator\nImage Path   : C:\\Windows\\system32\\locator.exe\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\NetworkService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : RpcSs\nDisplay Name : Remote Procedure Call (RPC)\nImage Path   : C:\\Windows\\system32\\svchost.exe -k rpcss -p\nStartup Type : Auto\nLog On As    : NT AUTHORITY\\NetworkService\nPermissions  : O:SYG:SYD:(A;;CCLCLORC;;;AU)(A;;CCDCLCSWRPWPDTLORCWDWO;;;SY)(A;;CCLCSWRPWPDTLORCWDWO;;;BA)(A;;CCLCLO;;;BU)S:(AU;FA;CCDCLCSWRPWPDTLOSDRCWDWO;;;WD)\n\nService Name : SamSs\nDisplay Name : Security Accounts Manager\nImage Path   : C:\\Windows\\system32\\lsass.exe\nStartup Type : Auto\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLO;;;IU)(A;;CCLCSWLO;;;BU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : SCardSvr\nDisplay Name : Smart Card\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalServiceAndNoImpersonation\nStartup Type : Manual (Triggered)\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:BAG:BAD:(A;CI;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRRC;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;SAFA;WDWO;;;BA)\n\nService Name : ScDeviceEnum\nDisplay Name : Smart Card Device Enumeration Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:BAG:BAD:(A;CI;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRRC;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;RPWP;;;S-1-5-80-3993802144-2555107232-3516638766-2735499450-3275915967)S:(AU;SAFA;WDWO;;;BA)\n\nService Name : Schedule\nDisplay Name : Task Scheduler\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Auto\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWLORC;;;AU)(A;;CCLCSWRPDTLOCRRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCLCSWLORC;;;BU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : SCPolicySvc\nDisplay Name : Smart Card Removal Policy\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:BAG:BAD:(A;CI;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRRC;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;SAFA;WDWO;;;BA)\n\nService Name : SDRSVC\nDisplay Name : Windows Backup\nImage Path   : C:\\Windows\\system32\\svchost.exe -k SDRSVC\nStartup Type : Manual\nLog On As    : localSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : seclogon\nDisplay Name : Secondary Logon\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPDTLOCRRC;;;IU)(A;;CCLCSWDTLOCRRC;;;SU)(A;;CCLCSWRPDTLOCRRC;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : SecurityHealthService\nDisplay Name : Windows Security Service\nImage Path   : C:\\Windows\\system32\\SecurityHealthService.exe\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPLORC;;;BU)(A;;CCLCSWRPLOCRRC;;;SY)(A;;CCLCSWRPLOCRRC;;;BA)(A;;CCLCSWRPLORC;;;IU)(A;;CCLCSWRPLORC;;;SU)(A;;CCLCSWRPWPDTLOCRRC;;;S-1-5-80-1601830629-990752416-3372939810-977361409-3075122917)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;S-1-5-80-259296475-4084429506-1152984619-38739575-565535606)S:(AU;FA;CCDCLCSWRPWPDTLOSDRCWDWO;;;WD)\n\nService Name : SEMgrSvc\nDisplay Name : Payments and NFC\/SE Manager\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalService -p\nStartup Type : Manual (Triggered)\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:\n\nService Name : SENS\nDisplay Name : System Event Notification Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Auto\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCR;;;SO)(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;LCLORC;;;AC)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : Sense\nDisplay Name : Windows Defender Advanced Threat Protection Service\nImage Path   : \"C:\\Program Files\\Windows Defender Advanced Threat Protection\\MsSense.exe\"\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;OICIIO;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;CCLCSWRPLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : SensorDataService\nDisplay Name : Sensor Data Service\nImage Path   : C:\\Windows\\System32\\SensorDataService.exe\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : SensorService\nDisplay Name : Sensor Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;LCRPCR;;;AC)(A;;LCRPCR;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : SensrSvc\nDisplay Name : Sensor Monitoring Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalServiceAndNoImpersonation -p\nStartup Type : Manual (Triggered)\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;LCRPCR;;;AC)(A;;LCRPCR;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : SessionEnv\nDisplay Name : Remote Desktop Configuration\nImage Path   : C:\\Windows\\System32\\svchost.exe -k netsvcs -p\nStartup Type : Manual\nLog On As    : localSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;RPWP;;;S-1-5-80-446051430-1559341753-4161941529-1950928533-810483104)(A;;RPWP;;;S-1-5-80-4130899010-3337817248-2959896732-3640118089-1866760602)\n\nService Name : SgrmBroker\nDisplay Name : System Guard Runtime Monitor Broker\nImage Path   : C:\\Windows\\system32\\Sgrm\\SgrmBroker.exe\nStartup Type : Disabled\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : SharedAccess\nDisplay Name : Internet Connection Sharing (ICS)\nImage Path   : C:\\Windows\\System32\\svchost.exe -k netsvcs -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWRPWPLOCRRC;;;SU)(A;;CCLCSWRPWPDTLOCRRC;;;S-1-5-80-3935728946-315639613-922904133-3250794525-491832002)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : SharedRealitySvc\nDisplay Name : Spatial Data Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalService -p\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CR;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : ShellHWDetection\nDisplay Name : Shell Hardware Detection\nImage Path   : C:\\Windows\\System32\\svchost.exe -k netsvcs -p\nStartup Type : Auto\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : shpamsvc\nDisplay Name : Shared PC Account Manager\nImage Path   : C:\\Windows\\System32\\svchost.exe -k netsvcs -p\nStartup Type : Disabled\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : smphost\nDisplay Name : Microsoft Storage Spaces SMP\nImage Path   : C:\\Windows\\System32\\svchost.exe -k smphost\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\NetworkService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCRP;;;AU)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CCLCSWLOCRRC;;;S-1-5-32-582)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : SmsRouter\nDisplay Name : Microsoft Windows SMS Router Service.\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : NT Authority\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCLORC;;;AU)(A;;CCDCLCSWRPWPDTLORCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLORCWDWO;;;BA)(A;;CCLCRPLO;;;BU)S:(AU;FA;CCDCLCSWRPWPDTLOSDRCWDWO;;;WD)\n\nService Name : SNMPTrap\nDisplay Name : SNMP Trap\nImage Path   : C:\\Windows\\System32\\snmptrap.exe\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : spectrum\nDisplay Name : Windows Perception Service\nImage Path   : C:\\Windows\\system32\\spectrum.exe\nStartup Type : Manual (Triggered)\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;LCRP;;;LS)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : Spooler\nDisplay Name : Print Spooler\nImage Path   : C:\\Windows\\System32\\spoolsv.exe\nStartup Type : Auto\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : sppsvc\nDisplay Name : Software Protection\nImage Path   : C:\\Windows\\system32\\sppsvc.exe\nStartup Type : Auto (Delayed, Triggered)\nLog On As    : NT AUTHORITY\\NetworkService\nPermissions  : O:SYG:SYD:(A;;CCDCLCSWRPWPDTLOCRRC;;;SY)(A;;CCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;LCRPLO;;;AC)(A;;CCLCSWRPLOCRRC;;;SU)(A;;LCRP;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : SSDPSRV\nDisplay Name : SSDP Discovery\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalServiceAndNoImpersonation -p\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPLORC;;;SO)(A;;CCLCSWRPLORC;;;IU)(A;;CCLCSWRPWPDTLOCRRC;;;LS)(A;;CCLCSWRPWPDTLOCRRC;;;NS)\n\nService Name : ssh-agent\nDisplay Name : OpenSSH Authentication Agent\nImage Path   : C:\\Windows\\System32\\OpenSSH\\ssh-agent.exe\nStartup Type : Disabled\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;RP;;;AU)\n\nService Name : SstpSvc\nDisplay Name : Secure Socket Tunneling Protocol Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalService -p\nStartup Type : Manual\nLog On As    : NT Authority\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;NO)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCLCSWRPLOCRRC;;;S-1-15-3-1024-1068037383-729401668-2768096886-125909118-1680096985-174794564-3112554050-3241210738)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : StateRepository\nDisplay Name : State Repository Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k appmodel -p\nStartup Type : Auto\nLog On As    : LocalSystem\nPermissions  : O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCLCSWRPWPDTLOCRRC;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;CCLCSWRPLOCRRC;;;SU)(A;;LCRP;;;AC)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : StiSvc\nDisplay Name : Windows Image Acquisition (WIA)\nImage Path   : C:\\Windows\\system32\\svchost.exe -k imgsvc\nStartup Type : Manual (Triggered)\nLog On As    : NT Authority\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CR;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : StorSvc\nDisplay Name : Storage Service\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Auto (Delayed, Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : svsvc\nDisplay Name : Spot Verifier\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : swprv\nDisplay Name : Microsoft Software Shadow Copy Provider\nImage Path   : C:\\Windows\\System32\\svchost.exe -k swprv\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : SysMain\nDisplay Name : SysMain\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Auto\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : SystemEventsBroker\nDisplay Name : System Events Broker\nImage Path   : C:\\Windows\\system32\\svchost.exe -k DcomLaunch -p\nStartup Type : Auto (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCLORC;;;AU)(A;;CCDCLCSWRPWPDTLORCWDWO;;;SY)(A;;CCLCSWRPWPDTLORCWDWO;;;BA)(A;;CCLCRPLO;;;BU)S:(AU;FA;CCDCLCSWRPWPDTLOSDRCWDWO;;;WD)\n\nService Name : TapiSrv\nDisplay Name : Telephony\nImage Path   : C:\\Windows\\System32\\svchost.exe -k NetworkService -p\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\NetworkService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;CCLCSWRPLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : TermService\nDisplay Name : Remote Desktop Services\nImage Path   : C:\\Windows\\System32\\svchost.exe -k NetworkService\nStartup Type : Manual\nLog On As    : NT Authority\\NetworkService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : TextInputManagementService\nDisplay Name : Text Input Management Service\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Auto (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCLCSWRPLOCRRC;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;CCLCSWRPLOCRRC;;;SU)(A;;RP;;;WD)\n\nService Name : Themes\nDisplay Name : Themes\nImage Path   : C:\\Windows\\System32\\svchost.exe -k netsvcs -p\nStartup Type : Auto\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : TieringEngineService\nDisplay Name : Storage Tiers Management\nImage Path   : C:\\Windows\\system32\\TieringEngineService.exe\nStartup Type : Manual\nLog On As    : localSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : TimeBrokerSvc\nDisplay Name : Time Broker\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCLORC;;;AU)(A;;CCDCLCSWRPWPDTLORCWDWO;;;SY)(A;;CCLCSWRPWPDTLORCWDWO;;;BA)(A;;CCLCRPLO;;;BU)S:(AU;FA;CCDCLCSWRPWPDTLOSDRCWDWO;;;WD)\n\nService Name : TokenBroker\nDisplay Name : Web Account Manager\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : TrkWks\nDisplay Name : Distributed Link Tracking Client\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Auto\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : TroubleshootingSvc\nDisplay Name : Recommended Troubleshooting Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : TrustedInstaller\nDisplay Name : Windows Modules Installer\nImage Path   : C:\\Windows\\servicing\\TrustedInstaller.exe\nStartup Type : Manual\nLog On As    : localSystem\nPermissions  : O:BAG:BAD:(A;CI;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRRC;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;SAFA;WDWO;;;BA)\n\nService Name : tzautoupdate\nDisplay Name : Auto Time Zone Updater\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalService -p\nStartup Type : Disabled\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : UevAgentService\nDisplay Name : User Experience Virtualization Service\nImage Path   : C:\\Windows\\system32\\AgentService.exe\nStartup Type : Disabled\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOSDRCWDWO;;;WD)\n\nService Name : uhssvc\nDisplay Name : Microsoft Update Health Service\nImage Path   : \"C:\\Program Files\\Microsoft Update Health Tools\\uhssvc.exe\"\nStartup Type : Disabled\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : UmRdpService\nDisplay Name : Remote Desktop Services UserMode Port Redirector\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual\nLog On As    : localSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;RPWP;;;S-1-5-80-446051430-1559341753-4161941529-1950928533-810483104)\n\nService Name : upnphost\nDisplay Name : UPnP Device Host\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalServiceAndNoImpersonation -p\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPLORC;;;SO)(A;;CCLCSWRPLORC;;;IU)(A;;CCLCSWRPWPDTLOCRRC;;;LS)(A;;CCLCSWRPWPDTLOCRRC;;;NS)\n\nService Name : UserManager\nDisplay Name : User Manager\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Auto (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : UsoSvc\nDisplay Name : Update Orchestrator Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Auto (Delayed)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOSDRCWDWO;;;WD)\n\nService Name : VacSvc\nDisplay Name : Volumetric Audio Compositor Service\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted -p\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : VaultSvc\nDisplay Name : Credential Manager\nImage Path   : C:\\Windows\\system32\\lsass.exe\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;CCLCSWRPLOCRRC;;;SU)(A;;CR;;;AU)(A;;LCRP;;;NS)(A;;LCRP;;;LS)(A;;LCRP;;;AC)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : vds\nDisplay Name : Virtual Disk\nImage Path   : C:\\Windows\\System32\\vds.exe\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;RPWPDT;;;BO)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : vmicguestinterface\nDisplay Name : Hyper-V Guest Service Interface\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : vmicheartbeat\nDisplay Name : Hyper-V Heartbeat Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k ICService -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : vmickvpexchange\nDisplay Name : Hyper-V Data Exchange Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : vmicrdv\nDisplay Name : Hyper-V Remote Desktop Virtualization Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k ICService -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : vmicshutdown\nDisplay Name : Hyper-V Guest Shutdown Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : vmictimesync\nDisplay Name : Hyper-V Time Synchronization Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : vmicvmsession\nDisplay Name : Hyper-V PowerShell Direct Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : vmicvss\nDisplay Name : Hyper-V Volume Shadow Copy Requestor\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : VSS\nDisplay Name : Volume Shadow Copy\nImage Path   : C:\\Windows\\system32\\vssvc.exe\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : W32Time\nDisplay Name : Windows Time\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalService\nStartup Type : Manual (Triggered)\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CCLCSWRPLOCRRC;;;LS)(A;;CCSWWPLORC;;;LS)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;S-1-5-80-3169285310-278349998-1452333686-3865143136-4212226833)\n\nService Name : WaaSMedicSvc\nDisplay Name : WaaSMedicSvc\nImage Path   : C:\\Windows\\system32\\svchost.exe -k wusvcs -p\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOSDRCWDWO;;;WD)\n\nService Name : WalletService\nDisplay Name : WalletService\nImage Path   : C:\\Windows\\System32\\svchost.exe -k appmodel -p\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : WarpJITSvc\nDisplay Name : Warp JIT Service\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted\nStartup Type : Manual (Triggered)\nLog On As    : NT Authority\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : wbengine\nDisplay Name : Block Level Backup Engine Service\nImage Path   : \"C:\\Windows\\system32\\wbengine.exe\"\nStartup Type : Manual\nLog On As    : localSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : WbioSrvc\nDisplay Name : Windows Biometric Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k WbioSvcGroup\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CR;;;AU)(A;;CCLCRP;;;AC)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : Wcmsvc\nDisplay Name : Windows Connection Manager\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p\nStartup Type : Auto (Triggered)\nLog On As    : NT Authority\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)\n\nService Name : wcncsvc\nDisplay Name : Windows Connect Now - Config Registrar\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalServiceAndNoImpersonation -p\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;IU)(A;;CCLCSWRPWPDTLOCRRC;;;LS)(A;;CCLCSWRPWPDTLOCRSDRC;;;NO)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : WdiServiceHost\nDisplay Name : Diagnostic Service Host\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalService -p\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWWPDTLOCRRC;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CCLCSWRPWPDTLOCRRC;;;S-1-5-80-2970612574-78537857-698502321-558674196-1451644582)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : WdiSystemHost\nDisplay Name : Diagnostic System Host\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWWPDTLOCRRC;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CCLCSWRPWPDTLOCRRC;;;S-1-5-80-2970612574-78537857-698502321-558674196-1451644582)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : WdNisSvc\nDisplay Name : Microsoft Defender Antivirus Network Inspection Service\nImage Path   : \"C:\\ProgramData\\Microsoft\\Windows Defender\\Platform\\4.18.24050.7-0\\NisSrv.exe\"\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPLOCRRC;;;BU)(A;;CCLCSWRPLOCRRC;;;SY)(A;;CCLCSWRPLOCRRC;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;CCLCSWRPLOCRRC;;;SU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;S-1-5-80-1913148863-3492339771-4165695881-2087618961-4109116736)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : WebClient\nDisplay Name : WebClient\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalService -p\nStartup Type : Manual (Triggered)\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : webthreatdefsvc\nDisplay Name : Web Threat Defense Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k WebThreatDefense -p\nStartup Type : Manual (Triggered)\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : Wecsvc\nDisplay Name : Windows Event Collector\nImage Path   : C:\\Windows\\system32\\svchost.exe -k NetworkService -p\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\NetworkService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : WEPHOSTSVC\nDisplay Name : Windows Encryption Provider Host Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k WepHostSvcGroup\nStartup Type : Manual (Triggered)\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : wercplsupport\nDisplay Name : Problem Reports Control Panel Support\nImage Path   : C:\\Windows\\System32\\svchost.exe -k netsvcs -p\nStartup Type : Manual\nLog On As    : localSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : WerSvc\nDisplay Name : Windows Error Reporting Service\nImage Path   : C:\\Windows\\System32\\svchost.exe -k WerSvcGroup\nStartup Type : Manual (Triggered)\nLog On As    : localSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : WFDSConMgrSvc\nDisplay Name : Wi-Fi Direct Services Connection Manager Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : WiaRpc\nDisplay Name : Still Image Acquisition Events\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CCLCSWRPLOCRRC;;;S-1-5-80-3182985763-1431228038-2757062859-428472846-3914011746)(A;;CR;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : WinDefend\nDisplay Name : Microsoft Defender Antivirus Service\nImage Path   : \"C:\\ProgramData\\Microsoft\\Windows Defender\\Platform\\4.18.24050.7-0\\MsMpEng.exe\"\nStartup Type : Auto\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPLOCRRC;;;BU)(A;;CCLCSWRPLOCRRC;;;SY)(A;;CCLCSWRPLOCRRC;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;CCLCSWRPLOCRRC;;;SU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;S-1-5-80-1913148863-3492339771-4165695881-2087618961-4109116736)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : WinHttpAutoProxySvc\nDisplay Name : WinHTTP Web Proxy Auto-Discovery Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPLOSDRC;;;SY)(A;;CCLCSWRPLOSDRC;;;BA)(A;;CCLCSWRPLORC;;;AU)(A;;CCLCSWRPLORC;;;IU)(A;;CCLCSWRPLORC;;;SU)(A;;LCRPLO;;;AC)(A;;LCRPLO;;;S-1-15-3-1)(A;;LCRPLO;;;S-1-15-3-2)(A;;LCRPLO;;;S-1-15-3-3)S:(AU;FA;CCLCSWRPLOSDRC;;;WD)\n\nService Name : Winmgmt\nDisplay Name : Windows Management Instrumentation\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Auto\nLog On As    : localSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : WinRM\nDisplay Name : Windows Remote Management (WS-Management)\nImage Path   : C:\\Windows\\System32\\svchost.exe -k NetworkService -p\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\NetworkService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : wisvc\nDisplay Name : Windows Insider Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : WlanSvc\nDisplay Name : WLAN AutoConfig\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;LCRPWP;;;S-1-5-80-3635958274-2059881490-2225992882-984577281-633327304)(A;;RPWPDT;;;S-1-5-80-3906544942-1489856346-3706913989-164347954-1900376235)\n\nService Name : wlidsvc\nDisplay Name : Microsoft Account Sign-in Assistant\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)\n\nService Name : wlpasvc\nDisplay Name : Local Profile Assistant Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalServiceNetworkRestricted -p\nStartup Type : Manual (Triggered)\nLog On As    : NT Authority\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRRC;;;LS)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLORC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CCLCSWLORC;;;S-1-15-2-155514346-2573954481-755741238-1654018636-1233331829-3075935687-2861478708)(A;;CCLCSWLORC;;;S-1-15-2-3083765670-2301828090-3288705196-2597965991-2057664196-4044987863-2761340229)(A;;CCLCSWLORC;;;S-1-15-2-3784866113-3187381476-3433752343-3391928953-3760210436-1684329488-1912184601)\n\nService Name : WManSvc\nDisplay Name : Windows Management Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : wmiApSrv\nDisplay Name : WMI Performance Adapter\nImage Path   : C:\\Windows\\system32\\wbem\\WmiApSrv.exe\nStartup Type : Manual\nLog On As    : localSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : WMPNetworkSvc\nDisplay Name : Windows Media Player Network Sharing Service\nImage Path   : \"C:\\Program Files\\Windows Media Player\\wmpnetwk.exe\"\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\NetworkService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : workfolderssvc\nDisplay Name : Work Folders\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalService -p\nStartup Type : Manual\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : WpcMonSvc\nDisplay Name : Parental Controls\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalService\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : WPDBusEnum\nDisplay Name : Portable Device Enumerator Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : WpnService\nDisplay Name : Windows Push Notifications System Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Auto\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)\n\nService Name : wscsvc\nDisplay Name : Security Center\nImage Path   : C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted -p\nStartup Type : Auto (Delayed)\nLog On As    : NT AUTHORITY\\LocalService\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPLORC;;;BU)(A;;CCLCSWRPLOCRRC;;;SY)(A;;CCLCSWRPLOCRRC;;;BA)(A;;CCLCSWRPLORC;;;IU)(A;;CCLCSWRPLORC;;;SU)(A;;CCLCSWRPWPDTLOCRRC;;;S-1-5-80-1601830629-990752416-3372939810-977361409-3075122917)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;S-1-5-80-259296475-4084429506-1152984619-38739575-565535606)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : WSearch\nDisplay Name : Windows Search\nImage Path   : C:\\Windows\\system32\\SearchIndexer.exe \/Embedding\nStartup Type : Auto (Delayed)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CCLCSWLORC;;;S-1-15-3-1024-724741592-1210917904-489960769-637019204-3345707629-3097053430-1727148295-85063603)\n\nService Name : wuauserv\nDisplay Name : Windows Update\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOSDRCWDWO;;;WD)\n\nService Name : WwanSvc\nDisplay Name : WWAN AutoConfig\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Manual\nLog On As    : localSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CCLCRPLO;;;LS)(A;;LC;;;AC)\n\nService Name : XblAuthManager\nDisplay Name : Xbox Live Auth Manager\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : XblGameSave\nDisplay Name : Xbox Live Game Save\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : XboxGipSvc\nDisplay Name : Xbox Accessory Management Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Manual (Triggered)\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : XboxNetApiSvc\nDisplay Name : Xbox Live Networking Service\nImage Path   : C:\\Windows\\system32\\svchost.exe -k netsvcs -p\nStartup Type : Manual\nLog On As    : LocalSystem\nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : AarSvc_5b697\nDisplay Name : Agent Activation Runtime_5b697\nImage Path   : C:\\Windows\\system32\\svchost.exe -k AarSvcGroup -p\nStartup Type : Manual\nLog On As    : \nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : BcastDVRUserService_5b697\nDisplay Name : GameDVR and Broadcast User Service_5b697\nImage Path   : C:\\Windows\\system32\\svchost.exe -k BcastDVRUserService\nStartup Type : Manual\nLog On As    : \nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SU)(A;;CCLCSWRPWPDTLOCRRC;;;IU)(A;;CCLCSWRPWPDTLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;AC)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)\n\nService Name : BluetoothUserService_5b697\nDisplay Name : Bluetooth User Support Service_5b697\nImage Path   : C:\\Windows\\system32\\svchost.exe -k BthAppGroup -p\nStartup Type : Manual (Triggered)\nLog On As    : \nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : CaptureService_5b697\nDisplay Name : CaptureService_5b697\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalService -p\nStartup Type : Manual\nLog On As    : \nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : cbdhsvc_5b697\nDisplay Name : Clipboard User Service_5b697\nImage Path   : C:\\Windows\\system32\\svchost.exe -k ClipboardSvcGroup -p\nStartup Type : Auto\nLog On As    : \nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CR;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : CDPUserSvc_5b697\nDisplay Name : Connected Devices Platform User Service_5b697\nImage Path   : C:\\Windows\\system32\\svchost.exe -k UnistackSvcGroup\nStartup Type : Auto\nLog On As    : \nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CR;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : CloudBackupRestoreSvc_5b697\nDisplay Name : Cloud Backup and Restore Service_5b697\nImage Path   : C:\\Windows\\system32\\svchost.exe -k UnistackSvcGroup\nStartup Type : Manual\nLog On As    : \nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : ConsentUxUserSvc_5b697\nDisplay Name : ConsentUX User Service_5b697\nImage Path   : C:\\Windows\\system32\\svchost.exe -k DevicesFlow\nStartup Type : Manual\nLog On As    : \nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SU)(A;;CCLCSWRPWPDTLOCRRC;;;IU)(A;;CCLCSWRPWPDTLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)\n\nService Name : CredentialEnrollmentManagerUserSvc_5b697\nDisplay Name : CredentialEnrollmentManagerUserSvc_5b697\nImage Path   : C:\\Windows\\system32\\CredentialEnrollmentManager.exe\nStartup Type : Manual\nLog On As    : \nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SU)(A;;CCLCSWRPWPDTLOCRRC;;;IU)(A;;CCLCSWRPWPDTLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;AC)\n\nService Name : DeviceAssociationBrokerSvc_5b697\nDisplay Name : DeviceAssociationBroker_5b697\nImage Path   : C:\\Windows\\system32\\svchost.exe -k DevicesFlow -p\nStartup Type : Manual\nLog On As    : \nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SU)(A;;CCLCSWRPWPDTLOCRRC;;;IU)(A;;CCLCSWRPWPDTLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;AC)\n\nService Name : DevicePickerUserSvc_5b697\nDisplay Name : DevicePicker_5b697\nImage Path   : C:\\Windows\\system32\\svchost.exe -k DevicesFlow\nStartup Type : Manual\nLog On As    : \nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;IU)(A;;CCLCSWRPWPDTLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;AC)(A;;CCLCSWRPWPDTLOCRRC;;;S-1-5-21-2702878673-795188819-444038987-2781)\n\nService Name : DevicesFlowUserSvc_5b697\nDisplay Name : DevicesFlow_5b697\nImage Path   : C:\\Windows\\system32\\svchost.exe -k DevicesFlow\nStartup Type : Manual\nLog On As    : \nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;IU)(A;;CCLCSWRPWPDTLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;AC)(A;;CCLCSWRPWPDTLOCRRC;;;S-1-5-21-2702878673-795188819-444038987-2781)\n\nService Name : MessagingService_5b697\nDisplay Name : MessagingService_5b697\nImage Path   : C:\\Windows\\system32\\svchost.exe -k UnistackSvcGroup\nStartup Type : Manual (Triggered)\nLog On As    : \nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : NPSMSvc_5b697\nDisplay Name : NPSMSvc_5b697\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalService -p\nStartup Type : Manual\nLog On As    : \nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CR;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : OneSyncSvc_5b697\nDisplay Name : Sync Host_5b697\nImage Path   : C:\\Windows\\system32\\svchost.exe -k UnistackSvcGroup\nStartup Type : Auto\nLog On As    : \nPermissions  : O:SYG:SYD:(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;LCRP;;;AC)(A;;LCRP;;;IU)(A;;LCRP;;;AU)\n\nService Name : P9RdrService_5b697\nDisplay Name : P9RdrService_5b697\nImage Path   : C:\\Windows\\system32\\svchost.exe -k P9RdrService -p\nStartup Type : Manual (Triggered)\nLog On As    : \nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : PenService_5b697\nDisplay Name : PenService_5b697\nImage Path   : C:\\Windows\\system32\\svchost.exe -k PenService\nStartup Type : Manual (Triggered)\nLog On As    : \nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : PimIndexMaintenanceSvc_5b697\nDisplay Name : Contact Data_5b697\nImage Path   : C:\\Windows\\system32\\svchost.exe -k UnistackSvcGroup\nStartup Type : Manual\nLog On As    : \nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SU)(A;;CCLCSWRPWPDTLOCRRC;;;IU)(A;;CCLCSWRPWPDTLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;AC)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)\n\nService Name : PrintWorkflowUserSvc_5b697\nDisplay Name : PrintWorkflow_5b697\nImage Path   : C:\\Windows\\system32\\svchost.exe -k PrintWorkflow\nStartup Type : Manual (Triggered)\nLog On As    : \nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SU)(A;;CCLCSWRPWPDTLOCRRC;;;IU)(A;;CCLCSWRPWPDTLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;AC)(A;;CCLCSWRPWPDTLOCRRC;;;S-1-15-3-1024-4044835139-2658482041-3127973164-329287231-3865880861-1938685643-461067658-1087000422)(A;;CCLCSWRPWPDTLOCRRC;;;S-1-5-21-2702878673-795188819-444038987-2781)\n\nService Name : UdkUserSvc_5b697\nDisplay Name : Udk User Service_5b697\nImage Path   : C:\\Windows\\system32\\svchost.exe -k UdkSvcGroup\nStartup Type : Manual\nLog On As    : \nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SU)(A;;CCLCSWRPWPDTLOCRRC;;;IU)(A;;CCLCSWRPWPDTLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;AC)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)\n\nService Name : UnistoreSvc_5b697\nDisplay Name : User Data Storage_5b697\nImage Path   : C:\\Windows\\System32\\svchost.exe -k UnistackSvcGroup\nStartup Type : Manual\nLog On As    : \nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SU)(A;;CCLCSWRPWPDTLOCRRC;;;IU)(A;;CCLCSWRPWPDTLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;AC)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)\n\nService Name : UserDataSvc_5b697\nDisplay Name : User Data Access_5b697\nImage Path   : C:\\Windows\\system32\\svchost.exe -k UnistackSvcGroup\nStartup Type : Manual\nLog On As    : \nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SU)(A;;CCLCSWRPWPDTLOCRRC;;;IU)(A;;CCLCSWRPWPDTLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;AC)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)\n\nService Name : webthreatdefusersvc_5b697\nDisplay Name : Web Threat Defense User Service_5b697\nImage Path   : C:\\Windows\\system32\\svchost.exe -k LocalSystemNetworkRestricted -p\nStartup Type : Auto\nLog On As    : \nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)\n\nService Name : WpnUserService_5b697\nDisplay Name : Windows Push Notifications User Service_5b697\nImage Path   : C:\\Windows\\system32\\svchost.exe -k UnistackSvcGroup\nStartup Type : Auto\nLog On As    : \nPermissions  : O:SYG:SYD:(A;;CCLCSWRPWPDTLOCRRC;;;SU)(A;;CCLCSWRPWPDTLOCRRC;;;IU)(A;;CCLCSWRPWPDTLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;AC)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)\n<\/pre>\n<p><em>To automatically backup the services configuration to a registry file, check out the article <a href=\"https:\/\/www.winhelponline.com\/blog\/backup-windows-services-configuration\/\">Backup Windows Services Startup Type Configuration<\/a>. To delete a 3rd party service, check out <a href=\"https:\/\/www.winhelponline.com\/blog\/how-to-remove-unwanted-service\/\">How to Delete a Service in Windows<\/a>.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Windows 11 Services configuration defaults are provided on this page. The settings below are gathered from a Windows 11 Pro PC (clean install, rather than upgrade). Updated on June 13, 2024 for Windows 11 Pro 23H2. Note that some of these services may not be found in your system, depending upon the edition of &#8230; <a title=\"Windows 11 Default Services Configuration and Permissions\" class=\"read-more\" href=\"https:\/\/www.winhelponline.com\/blog\/windows-11-default-services-configuration\/\" aria-label=\"Read more about Windows 11 Default Services Configuration and Permissions\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[869],"tags":[490],"class_list":["post-25534","post","type-post","status-publish","format-standard","hentry","category-windows-11","tag-services"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":1195,"url":"https:\/\/www.winhelponline.com\/blog\/windows-8-services-default-startup-type\/","url_meta":{"origin":25534,"position":0},"title":"Windows 8 Services Configuration Default Startup Type","author":"Ramesh","date":"October 27, 2012","format":false,"excerpt":"Windows 8 Services configuration defaults are listed here. Has your services configuration changes gone awry and not sure about the default settings? This list might benefit some users, especially for the tweakers and breakers :)Name Startup TypeLog On AsActiveX Installer (AxInstSV) Manual Local System Application Experience Manual (Trigger Start) Local\u2026","rel":"","context":"In &quot;Windows 8&quot;","block_context":{"text":"Windows 8","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-8\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":20074,"url":"https:\/\/www.winhelponline.com\/blog\/automatic-trigger-start-manual-services-windows\/","url_meta":{"origin":25534,"position":1},"title":"Automatic (Trigger Start) and Manual (Trigger Start) Differences","author":"Ramesh","date":"November 28, 2020","format":false,"excerpt":"The Services MMC shows the service names, their current status, and startup type. Most of you know about the Automatic, Automatic (Delayed Start), and Manual startup types. Automatic - Starts the services at system startup. Automatic (Delayed start) - Starts the service after the system has finished booting and after\u2026","rel":"","context":"In &quot;Windows&quot;","block_context":{"text":"Windows","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/"},"img":{"alt_text":"trigger start services explained","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/11\/wuauserv-trigger-start-gpedit.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/11\/wuauserv-trigger-start-gpedit.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/11\/wuauserv-trigger-start-gpedit.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":1405,"url":"https:\/\/www.winhelponline.com\/blog\/windows-10-default-services-configuration\/","url_meta":{"origin":25534,"position":2},"title":"Windows 10 Default Services Configuration and Permissions","author":"Ramesh","date":"January 1, 2016","format":false,"excerpt":"The Windows 10 Services configuration defaults are provided on this page. The settings below are gathered from a Windows 10 Pro PC (clean install, rather than upgrade). Last updated on April 27, 2024 - Windows 10 Pro v22H2 is the current version as of this revision. The Service permission (SDDL\u2026","rel":"","context":"In &quot;Windows 10&quot;","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1111,"url":"https:\/\/www.winhelponline.com\/blog\/windows-7-services-default-startup-type\/","url_meta":{"origin":25534,"position":3},"title":"Windows 7 Services Default Configuration Startup Type and Log On Account","author":"Ramesh","date":"December 6, 2010","format":false,"excerpt":"Did you tweak the Services configuration incorrectly, resulting in a system slowdown or leading to other catastrophe? And you don't remember the original configuration to revert back? You may find the Windows 7 default Services configuration table below useful.Note that some of these services may not be found in your\u2026","rel":"","context":"In &quot;Windows 7&quot;","block_context":{"text":"Windows 7","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-7\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":38410,"url":"https:\/\/www.winhelponline.com\/blog\/sign-in-options-settings-blank\/","url_meta":{"origin":25534,"position":4},"title":"Accounts &#8220;Sign-in Options&#8221; in Settings is Completely Blank","author":"Ramesh","date":"April 14, 2023","format":false,"excerpt":"When you open Settings \u2192 Accounts \u2192 Sign-in Options, the Sign-in Options page may be completely empty. As a result, you cannot modify the PIN, dynamic lock, or other sign-in settings. Resolution Sign-in options may be blank due to an incorrect services configuration.\u00a0To resolve the issue, follow these steps: Launch\u2026","rel":"","context":"In &quot;Windows 10&quot;","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"sign-in options empty","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2023\/04\/sign-in-options-blank-settings.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2023\/04\/sign-in-options-blank-settings.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2023\/04\/sign-in-options-blank-settings.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2023\/04\/sign-in-options-blank-settings.png?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":10209,"url":"https:\/\/www.winhelponline.com\/blog\/service-startup-automatic-vs-automatic-delayed-start\/","url_meta":{"origin":25534,"position":5},"title":"Automatic vs Automatic (Delayed start) Service Startup types","author":"Ramesh","date":"July 6, 2019","format":false,"excerpt":"The Services console (services.msc) in Windows lets you configure the startup type of Windows Services. As you know, you can choose one of the options from the dropdown: Automatic (Delayed Start), Automatic, Manual, or Disabled. But, do you know what's the difference between Automatic and Automatic (Delayed Start). Automatic vs\u2026","rel":"","context":"In &quot;Windows&quot;","block_context":{"text":"Windows","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/"},"img":{"alt_text":"Services MMC","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2019\/07\/services-header.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2019\/07\/services-header.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2019\/07\/services-header.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2019\/07\/services-header.png?resize=700%2C400&ssl=1 2x"},"classes":[]}],"_links":{"self":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/25534","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/comments?post=25534"}],"version-history":[{"count":0,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/25534\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/media?parent=25534"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/categories?post=25534"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/tags?post=25534"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}