| 0x1 | DESCRIPTION: SC is a command line program used for communicating with the Service Control Manager and services.USAGE: sc [command] [service name] ... The option has the form \"\\\\ServerName\" Further help on commands can be obtained by typing: \"sc [command]\" Commands: query-----------Queries the status for a service, or enumerates the status for types of services. queryex---------Queries the extended status for a service, or enumerates the status for types of services. start-----------Starts a service. pause-----------Sends a PAUSE control request to a service. interrogate-----Sends an INTERROGATE control request to a service. continue--------Sends a CONTINUE control request to a service. stop------------Sends a STOP request to a service. config----------Changes the configuration of a service (persistent). description-----Changes the description of a service. failure---------Changes the actions taken by a service upon failure. failureflag-----Changes the failure actions flag of a service. sidtype---------Changes the service SID type of a service. privs-----------Changes the required privileges of a service. managedaccount--Changes the service to mark the service account password as managed by LSA. qc--------------Queries the configuration information for a service. qdescription----Queries the description for a service. qfailure--------Queries the actions taken by a service upon failure. qfailureflag----Queries the failure actions flag of a service. qsidtype--------Queries the service SID type of a service. qprivs----------Queries the required privileges of a service. qtriggerinfo----Queries the trigger parameters of a service. qpreferrednode--Queries the preferred NUMA node of a service. qmanagedaccount-Queries whether a services uses an account with a password managed by LSA. qprotection-----Queries the process protection level of a service. quserservice----Queries for a local instance of a user service template. delete----------Deletes a service (from the registry). create----------Creates a service. (adds it to the registry). control---------Sends a control to a service. sdshow----------Displays a service's security descriptor. sdset-----------Sets a service's security descriptor. showsid---------Displays the service SID string corresponding to an arbitrary name. triggerinfo-----Configures the trigger parameters of a service. preferrednode---Sets the preferred NUMA node of a service. GetDisplayName--Gets the DisplayName for a service. GetKeyName------Gets the ServiceKeyName for a service. EnumDepend------Enumerates Service Dependencies. The following commands don't require a service name: sc boot------------(ok | bad) Indicates whether the last boot should be saved as the last-known-good boot configuration Lock------------Locks the Service Database QueryLock-------Queries the LockStatus for the SCManager DatabaseEXAMPLE: sc start MyService |
DESCRIPTION: SC is a command line program used for communicating with the Service Control Manager and services.USAGE: sc [command] [service name] ... The option has the form \"\\\\ServerName\" Further help on commands can be obtained by typing: \"sc [command]\" Commands: query-----------Queries the status for a service, or enumerates the status for types of services. queryex---------Queries the extended status for a service, or enumerates the status for types of services. start-----------Starts a service. pause-----------Sends a PAUSE control request to a service. interrogate-----Sends an INTERROGATE control request to a service. continue--------Sends a CONTINUE control request to a service. stop------------Sends a STOP request to a service. config----------Changes the configuration of a service (persistent). description-----Changes the description of a service. failure---------Changes the actions taken by a service upon failure. failureflag-----Changes the failure actions flag of a service. sidtype---------Changes the service SID type of a service. privs-----------Changes the required privileges of a service. managedaccount--Changes the service to mark the service account password as managed by LSA. qc--------------Queries the configuration information for a service. qdescription----Queries the description for a service. qfailure--------Queries the actions taken by a service upon failure. qfailureflag----Queries the failure actions flag of a service. qsidtype--------Queries the service SID type of a service. qprivs----------Queries the required privileges of a service. qtriggerinfo----Queries the trigger parameters of a service. qpreferrednode--Queries the preferred NUMA node of a service. qmanagedaccount-Queries whether a services uses an account with a password managed by LSA. qprotection-----Queries the process protection level of a service. quserservice----Queries for a local instance of a user service template. delete----------Deletes a service (from the registry). create----------Creates a service. (adds it to the registry). control---------Sends a control to a service. sdshow----------Displays a service's security descriptor. sdset-----------Sets a service's security descriptor. showsid---------Displays the service SID string corresponding to an arbitrary name. triggerinfo-----Configures the trigger parameters of a service. preferrednode---Sets the preferred NUMA node of a service. GetDisplayName--Gets the DisplayName for a service. GetKeyName------Gets the ServiceKeyName for a service. EnumDepend------Enumerates Service Dependencies. The following commands don't require a service name: sc boot------------(ok | bad) Indicates whether the last boot should be saved as the last-known-good boot configuration Lock------------Locks the Service Database QueryLock-------Queries the LockStatus for the SCManager DatabaseEXAMPLE: sc start MyService |
| 0x2 | QUERY and QUERYEX OPTIONS: If the query command is followed by a service name, the status for that service is returned. Further options do not apply in this case. If the query command is followed by nothing or one of the options listed below, the services are enumerated. type= Type of services to enumerate (driver, service, userservice, all) (default = service) state= State of services to enumerate (inactive, all) (default = active) bufsize= The size (in bytes) of the enumeration buffer (default = %1) ri= The resume index number at which to begin the enumeration (default = 0) group= Service group to enumerate (default = all groups)SYNTAX EXAMPLESsc query - Enumerates status for active services & driverssc query eventlog - Displays status for the eventlog servicesc queryex eventlog - Displays extended status for the eventlog servicesc query type= driver - Enumerates only active driverssc query type= service - Enumerates only Win32 servicessc query state= all - Enumerates all services & driverssc query bufsize= 50 - Enumerates with a 50 byte buffersc query ri= 14 - Enumerates with resume index = 14sc queryex group= \"\" - Enumerates active services not in a groupsc query type= interact - Enumerates all interactive servicessc query type= driver group= NDIS - Enumerates all NDIS drivers |
QUERY and QUERYEX OPTIONS: If the query command is followed by a service name, the status for that service is returned. Further options do not apply in this case. If the query command is followed by nothing or one of the options listed below, the services are enumerated. type= Type of services to enumerate (driver, service, userservice, all) (default = service) state= State of services to enumerate (inactive, all) (default = active) bufsize= The size (in bytes) of the enumeration buffer (default = %1) ri= The resume index number at which to begin the enumeration (default = 0) group= Service group to enumerate (default = all groups)SYNTAX EXAMPLESsc query - Enumerates status for active services & driverssc query eventlog - Displays status for the eventlog servicesc queryex eventlog - Displays extended status for the eventlog servicesc query type= driver - Enumerates only active driverssc query type= service - Enumerates only Win32 servicessc query state= all - Enumerates all services & driverssc query bufsize= 50 - Enumerates with a 50 byte buffersc query ri= 14 - Enumerates with resume index = 14sc queryex group= \"\" - Enumerates active services not in a groupsc query type= interact - Enumerates all interactive servicessc query type= driver group= NDIS - Enumerates all NDIS drivers |
| 0x3 | DESCRIPTION: Modifies a service entry in the registry and Service Database.USAGE: sc config [service name] ...OPTIONS:NOTE: The option name includes the equal sign. A space is required between the equal sign and the value. type= start= error= binPath= group= tag= depend= obj= DisplayName= password= |
DESCRIPTION: Modifies a service entry in the registry and Service Database.USAGE: sc config [service name] ...OPTIONS:NOTE: The option name includes the equal sign. A space is required between the equal sign and the value. type= start= error= binPath= group= tag= depend= obj= DisplayName= password= |
| 0x4 | DESCRIPTION: Creates a service entry in the registry and Service Database.USAGE: sc create [service name] [binPath= ] ...OPTIONS:NOTE: The option name includes the equal sign. A space is required between the equal sign and the value. type= (default = own) start= (default = demand) error= (default = normal) binPath= group= tag= depend= obj= (default = LocalSystem) DisplayName= password= |
DESCRIPTION: Creates a service entry in the registry and Service Database.USAGE: sc create [service name] [binPath= ] ...OPTIONS:NOTE: The option name includes the equal sign. A space is required between the equal sign and the value. type= (default = own) start= (default = demand) error= (default = normal) binPath= group= tag= depend= obj= (default = LocalSystem) DisplayName= password= |
| 0x5 | DESCRIPTION: Changes the actions upon failureUSAGE: sc failure [service name] ...OPTIONS: reset= (Must be used in conjunction with actions= ) reboot= command= actions= (Must be used in conjunction with the reset= option) |
DESCRIPTION: Changes the actions upon failureUSAGE: sc failure [service name] ...OPTIONS: reset= (Must be used in conjunction with actions= ) reboot= command= actions= (Must be used in conjunction with the reset= option) |
| 0x6 | DESCRIPTION: Starts a service running.USAGE: sc start [service name] ... |
DESCRIPTION: Starts a service running.USAGE: sc start [service name] ... |
| 0x7 | DESCRIPTION: Sends a PAUSE control request to a service.USAGE: sc pause [service name] |
DESCRIPTION: Sends a PAUSE control request to a service.USAGE: sc pause [service name] |
| 0x8 | DESCRIPTION: Sends an INTERROGATE control request to a service.USAGE: sc interrogate [service name] |
DESCRIPTION: Sends an INTERROGATE control request to a service.USAGE: sc interrogate [service name] |
| 0x9 | DESCRIPTION: Sends a CONTROL code to a service.USAGE: sc control [service name] = user-defined control code = See also sc stop, sc pause, etc. |
DESCRIPTION: Sends a CONTROL code to a service.USAGE: sc control [service name] = user-defined control code = See also sc stop, sc pause, etc. |
| 0xA | DESCRIPTION: Sends a CONTINUE control request to a service.USAGE: sc continue [service name] |
DESCRIPTION: Sends a CONTINUE control request to a service.USAGE: sc continue [service name] |
| 0xB | DESCRIPTION: Sends a STOP control request to a service.USAGE: sc stop [service name] = Optional reason code number for service stop formed with the following elements in the format: Flag:Major reason:Minor reason [E.g., 1:2:8 means Hardware: Disk (Unplanned)] Flag Major reason ------------------ --------------------------- 1 - Unplanned 1 - Other 2 - Custom 2 - Hardware 4 - Planned 3 - Operating System 4 - Software 5 - Application 64-255 - Custom Minor reason ----------------------------------- 1 - Other 2 - Maintenance 3 - Installation 4 - Upgrade 5 - Reconfiguration 6 - Hung 7 - Unstable 8 - Disk 9 - Network Card 10 - Environment 11 - Hardware Driver 12 - Other Driver 13 - Service Pack 14 - Software Update 15 - Security Fix 16 - Security 17 - Network Connectivity 18 - WMI 19 - Service Pack Uninstall 20 - Software Update Uninstall 22 - Security Fix Uninstall 23 - MMC 256-65535 - Custom = Optional comment for the reason above (127 characters maximum) |
DESCRIPTION: Sends a STOP control request to a service.USAGE: sc stop [service name] = Optional reason code number for service stop formed with the following elements in the format: Flag:Major reason:Minor reason [E.g., 1:2:8 means Hardware: Disk (Unplanned)] Flag Major reason ------------------ --------------------------- 1 - Unplanned 1 - Other 2 - Custom 2 - Hardware 4 - Planned 3 - Operating System 4 - Software 5 - Application 64-255 - Custom Minor reason ----------------------------------- 1 - Other 2 - Maintenance 3 - Installation 4 - Upgrade 5 - Reconfiguration 6 - Hung 7 - Unstable 8 - Disk 9 - Network Card 10 - Environment 11 - Hardware Driver 12 - Other Driver 13 - Service Pack 14 - Software Update 15 - Security Fix 16 - Security 17 - Network Connectivity 18 - WMI 19 - Service Pack Uninstall 20 - Software Update Uninstall 22 - Security Fix Uninstall 23 - MMC 256-65535 - Custom = Optional comment for the reason above (127 characters maximum) |
| 0xC | DESCRIPTION: Sets the description string for a service.USAGE: sc description [service name] [description] |
DESCRIPTION: Sets the description string for a service.USAGE: sc description [service name] [description] |
| 0xD | DESCRIPTION: Queries the configuration information for a service.USAGE: sc qc [service name] |
DESCRIPTION: Queries the configuration information for a service.USAGE: sc qc [service name] |
| 0xE | DESCRIPTION: Retrieves the description string of a service.USAGE: sc qdescription [service name] |
DESCRIPTION: Retrieves the description string of a service.USAGE: sc qdescription [service name] |
| 0xF | DESCRIPTION: Retrieves the actions performed on service failure.USAGE: sc qfailure [service name] |
DESCRIPTION: Retrieves the actions performed on service failure.USAGE: sc qfailure [service name] |
| 0x10 | DESCRIPTION: Queries the Lock Status for a SC Manager Database.USAGE: sc querylock |
DESCRIPTION: Queries the Lock Status for a SC Manager Database.USAGE: sc querylock |
| 0x11 | DESCRIPTION: Deletes a service entry from the registry. If the service is running, or another process has an open handle to the service, the service is simply marked for deletion.USAGE: sc delete [service name] |
DESCRIPTION: Deletes a service entry from the registry. If the service is running, or another process has an open handle to the service, the service is simply marked for deletion.USAGE: sc delete [service name] |
| 0x12 | DESCRIPTION: Indicates whether the last boot should be saved as the last-known-good boot configuration on the local machine. If specified, the server name is ignored.USAGE: sc boot |
DESCRIPTION: Indicates whether the last boot should be saved as the last-known-good boot configuration on the local machine. If specified, the server name is ignored.USAGE: sc boot |
| 0x13 | DESCRIPTION: Gets the display name associated with a particular serviceUSAGE: sc GetDisplayName |
DESCRIPTION: Gets the display name associated with a particular serviceUSAGE: sc GetDisplayName |
| 0x14 | DESCRIPTION: Gets the key name associated with a particular service, using the display name as inputUSAGE: sc GetKeyName |
DESCRIPTION: Gets the key name associated with a particular service, using the display name as inputUSAGE: sc GetKeyName |
| 0x15 | DESCRIPTION: Enumerates the Services that are dependent on this oneUSAGE: sc EnumDepend |
DESCRIPTION: Enumerates the Services that are dependent on this oneUSAGE: sc EnumDepend |
| 0x16 | DESCRIPTION: Displays a service's security descriptor in SDDL formatUSAGE: sc sdshow |
DESCRIPTION: Displays a service's security descriptor in SDDL formatUSAGE: sc sdshow |
| 0x17 | DESCRIPTION: Sets a service's security descriptorUSAGE: sc sdset |
DESCRIPTION: Sets a service's security descriptorUSAGE: sc sdset |
| 0x23 | SERVICE_NAME: %1DESCRIPTION: %2 |
SERVICE_NAME: %1DESCRIPTION: %2 |
| 0x24 | Name = %1 |
Name = %1 |
| 0x25 | %1 |
%1 |
| 0x26 | IsLocked : TRUE |
IsLocked : TRUE |
| 0x27 | IsLocked : FALSE |
IsLocked : FALSE |
| 0x28 | LockOwner : %1 LockDuration : %2 (seconds since acquired) |
LockOwner : %1 LockDuration : %2 (seconds since acquired) |
| 0x29 | [SC] Tag = %1 |
[SC] Tag = %1 |
| 0x2A | [SC] %1: entriesread = %2 |
[SC] %1: entriesread = %2 |
| 0x2B | |
|
| 0x2D | Active database is locked.To unlock via API, press u: |
Active database is locked.To unlock via API, press u: |
| 0x2E | [SC] Will be unlocking database by exiting |
[SC] Will be unlocking database by exiting |
| 0x2F | SERVICE_NAME: %1 %2 TYPE : %3 %4 %5 STATE : %6 %7 (%8, %9, %10) WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 |
SERVICE_NAME: %1 %2 TYPE : %3 %4 %5 STATE : %6 %7 (%8, %9, %10) WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 |
| 0x30 | SERVICE_NAME: %1DISPLAY_NAME: %2 TYPE : %3 %4 %5 STATE : %6 %7 (%8, %9, %10) WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 |
SERVICE_NAME: %1DISPLAY_NAME: %2 TYPE : %3 %4 %5 STATE : %6 %7 (%8, %9, %10) WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 |
| 0x31 | SERVICE_NAME: %1 %2 TYPE : %3 %4 %5 STATE : %6 %7 (%8, %9, %10) WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 PID : %17 FLAGS : %18 |
SERVICE_NAME: %1 %2 TYPE : %3 %4 %5 STATE : %6 %7 (%8, %9, %10) WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 PID : %17 FLAGS : %18 |
| 0x32 | SERVICE_NAME: %1DISPLAY_NAME: %2 TYPE : %3 %4 %5 STATE : %6 %7 (%8, %9, %10) WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 PID : %17 FLAGS : %18 |
SERVICE_NAME: %1DISPLAY_NAME: %2 TYPE : %3 %4 %5 STATE : %6 %7 (%8, %9, %10) WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 PID : %17 FLAGS : %18 |
| 0x33 | SERVICE_NAME: %1 RESET_PERIOD (in seconds) : %2 REBOOT_MESSAGE : %3 COMMAND_LINE : %4 |
SERVICE_NAME: %1 RESET_PERIOD (in seconds) : %2 REBOOT_MESSAGE : %3 COMMAND_LINE : %4 |
| 0x34 | FAILURE_ACTIONS : RESTART -- Delay = %1 milliseconds. |
FAILURE_ACTIONS : RESTART -- Delay = %1 milliseconds. |
| 0x35 | RESTART -- Delay = %1 milliseconds. |
RESTART -- Delay = %1 milliseconds. |
| 0x36 | FAILURE_ACTIONS : REBOOT -- Delay = %1 milliseconds. |
FAILURE_ACTIONS : REBOOT -- Delay = %1 milliseconds. |
| 0x37 | REBOOT -- Delay = %1 milliseconds. |
REBOOT -- Delay = %1 milliseconds. |
| 0x38 | FAILURE_ACTIONS : RUN PROCESS -- Delay = %1 milliseconds. |
FAILURE_ACTIONS : RUN PROCESS -- Delay = %1 milliseconds. |
| 0x39 | RUN PROCESS -- Delay = %1 milliseconds. |
RUN PROCESS -- Delay = %1 milliseconds. |
| 0x3A | SERVICE_NAME: %1 TYPE : %2 %3 %4 START_TYPE : %5 %6 ERROR_CONTROL : %7 %8 BINARY_PATH_NAME : %9 LOAD_ORDER_GROUP : %10 TAG : %11 DISPLAY_NAME : %12 DEPENDENCIES : %13 |
SERVICE_NAME: %1 TYPE : %2 %3 %4 START_TYPE : %5 %6 ERROR_CONTROL : %7 %8 BINARY_PATH_NAME : %9 LOAD_ORDER_GROUP : %10 TAG : %11 DISPLAY_NAME : %12 DEPENDENCIES : %13 |
| 0x3B | : %1 |
: %1 |
| 0x3C | SERVICE_START_NAME : %1 |
SERVICE_START_NAME : %1 |
| 0x64 | [SC] %1 SUCCESS |
[SC] %1 SUCCESS |
| 0x65 | [SC] %1 FAILED %2:%3 |
[SC] %1 FAILED %2:%3 |
| 0x66 | [SC] %1 needs %2 bytes |
[SC] %1 needs %2 bytes |
| 0x67 | [SC] %1: more data, need %2 bytes start resume at index %3 |
[SC] %1: more data, need %2 bytes start resume at index %3 |
| 0x68 | [SC] %1: more data, need %2 bytes |
[SC] %1: more data, need %2 bytes |
| 0x69 | ERROR: Invalid %1 field |
ERROR: Invalid %1 field |
| 0x6A | ERROR: Invalid Option |
ERROR: Invalid Option |
| 0x6B | ERROR: Cannot specify a service name when enumerating a group |
ERROR: Cannot specify a service name when enumerating a group |
| 0x6C | ERROR: A service name is required |
ERROR: A service name is required |
| 0x6D | ERROR: Unrecognized command |
ERROR: Unrecognized command |
| 0x6E | ERROR: The reset and actions options must be set simultaneously |
ERROR: The reset and actions options must be set simultaneously |
| 0x6F | u |
u |
| 0x71 | DESCRIPTION: Changes the failure actions flag setting of a service. If this setting is 0 (default), the Service Control Manager (SCM) enables configured failure actions on the service only if the service process terminates with the service in a state other than SERVICE_STOPPED. If this setting is 1, the SCM enables configured failure actions on the service if the service enters the SERVICE_STOPPED state with a Win32 exit code other than 0 in addition to the service process termination as above. This setting is ignored if the service does not have any failure actions configured.USAGE: sc failureflag [service name] [flag] |
DESCRIPTION: Changes the failure actions flag setting of a service. If this setting is 0 (default), the Service Control Manager (SCM) enables configured failure actions on the service only if the service process terminates with the service in a state other than SERVICE_STOPPED. If this setting is 1, the SCM enables configured failure actions on the service if the service enters the SERVICE_STOPPED state with a Win32 exit code other than 0 in addition to the service process termination as above. This setting is ignored if the service does not have any failure actions configured.USAGE: sc failureflag [service name] [flag] |
| 0x72 | DESCRIPTION: Retrieves the failure actions flag setting of a service. If this setting is 0 (default), the Service Control Manager (SCM) enables configured failure actions on the service only if the service process terminates with the service in a state other than SERVICE_STOPPED. If this setting is 1, the SCM enables configured failure actions on the service if the service enters the SERVICE_STOPPED state with a Win32 exit code other than 0 in addition to the service process termination as above. This setting is ignored if the service does not have any failure actions configured.USAGE: sc qfailureflag [service name] |
DESCRIPTION: Retrieves the failure actions flag setting of a service. If this setting is 0 (default), the Service Control Manager (SCM) enables configured failure actions on the service only if the service process terminates with the service in a state other than SERVICE_STOPPED. If this setting is 1, the SCM enables configured failure actions on the service if the service enters the SERVICE_STOPPED state with a Win32 exit code other than 0 in addition to the service process termination as above. This setting is ignored if the service does not have any failure actions configured.USAGE: sc qfailureflag [service name] |
| 0x73 | SERVICE_NAME: %1FAILURE_ACTIONS_ON_NONCRASH_FAILURES: TRUE |
SERVICE_NAME: %1FAILURE_ACTIONS_ON_NONCRASH_FAILURES: TRUE |
| 0x74 | SERVICE_NAME: %1FAILURE_ACTIONS_ON_NONCRASH_FAILURES: FALSE |
SERVICE_NAME: %1FAILURE_ACTIONS_ON_NONCRASH_FAILURES: FALSE |
| 0x75 | DESCRIPTION: Changes the service security identifier (SID) type setting of a service. If this setting is \"unrestricted\", the Service Control Manager (SCM) will add this service's SID to the service process token when the service process starts the next time due to the first service in the process being started. This setting is valid only for Win32 user mode services. If this setting is \"restricted\", the Service Control Manager (SCM) will add this service's SID to the service process token when the service process starts the next time due to the first service in the process being started. In addition, this service's SID will also be added to the restricting SID list in the process token. The process token will be a restricted token. See MSDN for details on restricted token. This setting is valid only for Win32 user mode services. In addition, for a share process service, all services cohosted in the process must have this SID type set for this to take effect. If this setting is \"none\", the SCM will not add the service's SID to the service process token. USAGE: sc sidtype [service name] [type]OPTIONS: type = |
DESCRIPTION: Changes the service security identifier (SID) type setting of a service. If this setting is \"unrestricted\", the Service Control Manager (SCM) will add this service's SID to the service process token when the service process starts the next time due to the first service in the process being started. This setting is valid only for Win32 user mode services. If this setting is \"restricted\", the Service Control Manager (SCM) will add this service's SID to the service process token when the service process starts the next time due to the first service in the process being started. In addition, this service's SID will also be added to the restricting SID list in the process token. The process token will be a restricted token. See MSDN for details on restricted token. This setting is valid only for Win32 user mode services. In addition, for a share process service, all services cohosted in the process must have this SID type set for this to take effect. If this setting is \"none\", the SCM will not add the service's SID to the service process token. USAGE: sc sidtype [service name] [type]OPTIONS: type = |
| 0x76 | DESCRIPTION: Queries the service security identifier (SID) type setting of a service. If this setting is \"unrestricted\", the Service Control Manager (SCM) will add this service's SID to the service process token when the service process starts the next time due to the first service in the process being started. This setting is valid only for Win32 user mode services. If this setting is \"restricted\", the Service Control Manager (SCM) will add this service's SID to the service process token when the service process starts the next time due to the first service in the process being started. In addition, this service's SID will also be added to the restricting SID list in the process token. The process token will be a restricted token. See MSDN for details on restricted token. This setting is valid only for Win32 user mode services. In addition, for a share process service, all services cohosted in the process must have this SID type set for this to take effect. If this setting is \"none\", the SCM will not add the service's SID to the service process token. USAGE: sc qsidtype [service name] |
DESCRIPTION: Queries the service security identifier (SID) type setting of a service. If this setting is \"unrestricted\", the Service Control Manager (SCM) will add this service's SID to the service process token when the service process starts the next time due to the first service in the process being started. This setting is valid only for Win32 user mode services. If this setting is \"restricted\", the Service Control Manager (SCM) will add this service's SID to the service process token when the service process starts the next time due to the first service in the process being started. In addition, this service's SID will also be added to the restricting SID list in the process token. The process token will be a restricted token. See MSDN for details on restricted token. This setting is valid only for Win32 user mode services. In addition, for a share process service, all services cohosted in the process must have this SID type set for this to take effect. If this setting is \"none\", the SCM will not add the service's SID to the service process token. USAGE: sc qsidtype [service name] |
| 0x77 | SERVICE_NAME: %1SERVICE_SID_TYPE: UNRESTRICTED |
SERVICE_NAME: %1SERVICE_SID_TYPE: UNRESTRICTED |
| 0x78 | SERVICE_NAME: %1SERVICE_SID_TYPE: NONE |
SERVICE_NAME: %1SERVICE_SID_TYPE: NONE |
| 0x79 | SERVICE_NAME: %1 PRIVILEGES : %2 |
SERVICE_NAME: %1 PRIVILEGES : %2 |
| 0x7B | DESCRIPTION: Queries the required privileges setting for a service. The privilege settings take effect when the service process starts due to the first service in the process being started. At that time, the Service Control Manager (SCM) computes the union of all privileges required by all services that will be hosted in the same process and then creates the process with those privileges. An absence of this setting is taken to imply that the service requires all the privileges that the security subsystem allows for a process running in the service's configured account.USAGE: sc qprivs [service name] |
DESCRIPTION: Queries the required privileges setting for a service. The privilege settings take effect when the service process starts due to the first service in the process being started. At that time, the Service Control Manager (SCM) computes the union of all privileges required by all services that will be hosted in the same process and then creates the process with those privileges. An absence of this setting is taken to imply that the service requires all the privileges that the security subsystem allows for a process running in the service's configured account.USAGE: sc qprivs [service name] |
| 0x7C | DESCRIPTION: Changes the required privileges setting of a service. The privilege settings take effect when the service process starts due to the first service in the process being started. At that time, the Service Control Manager (SCM) computes the union of all privileges required by all services that will be hosted in the same process and then creates the process with those privileges. An absence of this setting is taken to imply that the service requires all the privileges that the security subsystem allows for the process running in the service's configured account.USAGE: sc privs [service name] [privileges]OPTIONS: privileges = [E.g., SeBackupPrivilege/SeRestorePrivilege] |
DESCRIPTION: Changes the required privileges setting of a service. The privilege settings take effect when the service process starts due to the first service in the process being started. At that time, the Service Control Manager (SCM) computes the union of all privileges required by all services that will be hosted in the same process and then creates the process with those privileges. An absence of this setting is taken to imply that the service requires all the privileges that the security subsystem allows for the process running in the service's configured account.USAGE: sc privs [service name] [privileges]OPTIONS: privileges = [E.g., SeBackupPrivilege/SeRestorePrivilege] |
| 0x7D | SERVICE_NAME: %1SERVICE_SID_TYPE: RESTRICTED |
SERVICE_NAME: %1SERVICE_SID_TYPE: RESTRICTED |
| 0x7E | SDDL right Right value---------- ----------- GA - GENERIC_ALL GR - GENERIC_READ GW - GENERIC_WRITE GX - GENERIC_EXECUTE RC - READ_CONTROL SD - DELETE WD - WRITE_DAC WO - WRITE_OWNER RP - SERVICE_START WP - SERVICE_STOP CC - SERVICE_QUERY_CONFIG DC - SERVICE_CHANGE_CONFIG LC - SERVICE_QUERY_STATUS SW - SERVICE_ENUMERATE_DEPENDENTS LO - SERVICE_INTERROGATE DT - SERVICE_PAUSE_CONTINUE CR - SERVICE_USER_DEFINED_CONTROL |
SDDL right Right value---------- ----------- GA - GENERIC_ALL GR - GENERIC_READ GW - GENERIC_WRITE GX - GENERIC_EXECUTE RC - READ_CONTROL SD - DELETE WD - WRITE_DAC WO - WRITE_OWNER RP - SERVICE_START WP - SERVICE_STOP CC - SERVICE_QUERY_CONFIG DC - SERVICE_CHANGE_CONFIG LC - SERVICE_QUERY_STATUS SW - SERVICE_ENUMERATE_DEPENDENTS LO - SERVICE_INTERROGATE DT - SERVICE_PAUSE_CONTINUE CR - SERVICE_USER_DEFINED_CONTROL |
| 0x7F | SDDL right Right value---------- ----------- GA - GENERIC_ALL KA - GENERIC_ALL GR - GENERIC_READ GW - GENERIC_WRITE GX - GENERIC_EXECUTE RC - READ_CONTROL SD - DELETE WD - WRITE_DAC WO - WRITE_OWNER RP - SC_MANAGER_QUERY_LOCK_STATUS WP - SC_MANAGER_MODIFY_BOOT_CONFIG CC - SC_MANAGER_CONNECT DC - SC_MANAGER_CREATE_SERVICE LC - SC_MANAGER_ENUMERATE_SERVICE SW - SC_MANAGER_LOCK |
SDDL right Right value---------- ----------- GA - GENERIC_ALL KA - GENERIC_ALL GR - GENERIC_READ GW - GENERIC_WRITE GX - GENERIC_EXECUTE RC - READ_CONTROL SD - DELETE WD - WRITE_DAC WO - WRITE_OWNER RP - SC_MANAGER_QUERY_LOCK_STATUS WP - SC_MANAGER_MODIFY_BOOT_CONFIG CC - SC_MANAGER_CONNECT DC - SC_MANAGER_CREATE_SERVICE LC - SC_MANAGER_ENUMERATE_SERVICE SW - SC_MANAGER_LOCK |
| 0x80 | SERVICE_NAME: %1 %2 TYPE : %3 %4 %5 STATE : %6 %7 WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 |
SERVICE_NAME: %1 %2 TYPE : %3 %4 %5 STATE : %6 %7 WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 |
| 0x81 | SERVICE_NAME: %1DISPLAY_NAME: %2 TYPE : %3 %4 %5 STATE : %6 %7 WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 |
SERVICE_NAME: %1DISPLAY_NAME: %2 TYPE : %3 %4 %5 STATE : %6 %7 WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 |
| 0x82 | SERVICE_NAME: %1 %2 TYPE : %3 %4 %5 STATE : %6 %7 WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 PID : %17 FLAGS : %18 |
SERVICE_NAME: %1 %2 TYPE : %3 %4 %5 STATE : %6 %7 WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 PID : %17 FLAGS : %18 |
| 0x83 | SERVICE_NAME: %1DISPLAY_NAME: %2 TYPE : %3 %4 %5 STATE : %6 %7 WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 PID : %17 FLAGS : %18 |
SERVICE_NAME: %1DISPLAY_NAME: %2 TYPE : %3 %4 %5 STATE : %6 %7 WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 PID : %17 FLAGS : %18 |
| 0x84 | WARNING: The service %1 is configured as interactive whose support is being deprecated. The service may not function properly. |
WARNING: The service %1 is configured as interactive whose support is being deprecated. The service may not function properly. |
| 0x85 | NAME: %1SERVICE SID: %2STATUS: Active |
NAME: %1SERVICE SID: %2STATUS: Active |
| 0x86 | DESCRIPTION: Displays the service SID string corresponding to an arbitrary name. The name can be that of an existing or non-existent service.USAGE: sc showsid [name] |
DESCRIPTION: Displays the service SID string corresponding to an arbitrary name. The name can be that of an existing or non-existent service.USAGE: sc showsid [name] |
| 0x87 | [SC] %1 FAILED with error %2. |
[SC] %1 FAILED with error %2. |
| 0x88 | DESCRIPTION: Changes the trigger parameters of a service.USAGE: sc triggerinfo [service name] ...OPTIONS: start/device/UUID/HwId1/... start/custom/UUID/data0/.. stop/custom/UUID/data0/... start/strcustom/UUID/data0/.. stop/strcustom/UUID/data0/.. start/lvlcustom/UUID/data0/.. stop/lvlcustom/UUID/data0/.. start/kwanycustom/UUID/data0/.. stop/kwanycustom/UUID/data0/.. start/kwallcustom/UUID/data0/.. stop/kwallcustom/UUID/data0/.. start/networkon stop/networkoff start/domainjoin stop/domainleave start/portopen/parameter stop/portclose/parameter start/machinepolicy start/userpolicy start/rpcinterface/UUID start/namedpipe/pipename delete |
DESCRIPTION: Changes the trigger parameters of a service.USAGE: sc triggerinfo [service name] ...OPTIONS: start/device/UUID/HwId1/... start/custom/UUID/data0/.. stop/custom/UUID/data0/... start/strcustom/UUID/data0/.. stop/strcustom/UUID/data0/.. start/lvlcustom/UUID/data0/.. stop/lvlcustom/UUID/data0/.. start/kwanycustom/UUID/data0/.. stop/kwanycustom/UUID/data0/.. start/kwallcustom/UUID/data0/.. stop/kwallcustom/UUID/data0/.. start/networkon stop/networkoff start/domainjoin stop/domainleave start/portopen/parameter stop/portclose/parameter start/machinepolicy start/userpolicy start/rpcinterface/UUID start/namedpipe/pipename delete |
| 0x89 | SERVICE_NAME: %1 |
SERVICE_NAME: %1 |
| 0x8A | DEVICE INTERFACE ARRIVAL : %1 [INTERFACE CLASS GUID] |
DEVICE INTERFACE ARRIVAL : %1 [INTERFACE CLASS GUID] |
| 0x8B | CUSTOM : %1 [ETW PROVIDER UUID] |
CUSTOM : %1 [ETW PROVIDER UUID] |
| 0x8C | IP ADDRESS AVAILABILITY : %1 [NO IP ADDRESS AVAILABLE] |
IP ADDRESS AVAILABILITY : %1 [NO IP ADDRESS AVAILABLE] |
| 0x8D | HUMAN INTERFACE DEVICE : %1 [INTERFACE CLASS GUID] |
HUMAN INTERFACE DEVICE : %1 [INTERFACE CLASS GUID] |
| 0x8E | DESCRIPTION: Retrieves the trigger information of a service.USAGE: sc qtriggerinfo [service name] |
DESCRIPTION: Retrieves the trigger information of a service.USAGE: sc qtriggerinfo [service name] |
| 0x8F | DATA : %1 |
DATA : %1 |
| 0x90 | The service %1 has not registered for any start or stop triggers. |
The service %1 has not registered for any start or stop triggers. |
| 0x91 | START SERVICE |
START SERVICE |
| 0x92 | STOP SERVICE |
STOP SERVICE |
| 0x93 | IP ADDRESS AVAILABILITY : %1 [FIRST IP ADDRESS AVAILABLE] |
IP ADDRESS AVAILABILITY : %1 [FIRST IP ADDRESS AVAILABLE] |
| 0x94 | DOMAIN JOINED STATUS : %1 [DOMAIN JOINED] |
DOMAIN JOINED STATUS : %1 [DOMAIN JOINED] |
| 0x95 | DOMAIN JOINED STATUS : %1 [NOT DOMAIN JOINED] |
DOMAIN JOINED STATUS : %1 [NOT DOMAIN JOINED] |
| 0x96 | DESCRIPTION: Changes the preferred NUMA node for a Win32 service. This setting is valid only for own process services. To delete an existing setting, set the node number as -1. If an invalid preferred node number is supplied, then the change request will fail.USAGE: sc preferrednode [service name] [node number] |
DESCRIPTION: Changes the preferred NUMA node for a Win32 service. This setting is valid only for own process services. To delete an existing setting, set the node number as -1. If an invalid preferred node number is supplied, then the change request will fail.USAGE: sc preferrednode [service name] [node number] |
| 0x97 | DESCRIPTION: Queries the preferred NUMA node for a Win32 service. This setting is valid only for own process services. If the service has no preferred node setting, then the query will fail.USAGE: sc qpreferrednode [service name] |
DESCRIPTION: Queries the preferred NUMA node for a Win32 service. This setting is valid only for own process services. If the service has no preferred node setting, then the query will fail.USAGE: sc qpreferrednode [service name] |
| 0x98 | PREFERRED NODE : %1 |
PREFERRED NODE : %1 |
| 0x99 | [NOTE: Since the service start type is disabled, the triggers are inactive.] |
[NOTE: Since the service start type is disabled, the triggers are inactive.] |
| 0x9A | FIREWALL PORT EVENT : %1 [PORT OPEN] |
FIREWALL PORT EVENT : %1 [PORT OPEN] |
| 0x9B | FIREWALL PORT EVENT : %1 [PORT CLOSE] |
FIREWALL PORT EVENT : %1 [PORT CLOSE] |
| 0x9C | GROUP POLICY : %1 [MACHINE POLICY PRESENT] |
GROUP POLICY : %1 [MACHINE POLICY PRESENT] |
| 0x9D | GROUP POLICY : %1 [USER POLICY PRESENT] |
GROUP POLICY : %1 [USER POLICY PRESENT] |
| 0x9E | NAME: %1 SERVICE SID: %2STATUS: Inactive |
NAME: %1 SERVICE SID: %2STATUS: Inactive |
| 0xA2 | NETWORK EVENT : %1 [RPC INTERFACE EVENT] |
NETWORK EVENT : %1 [RPC INTERFACE EVENT] |
| 0xA3 | NETWORK EVENT : %1 [NAMED PIPE EVENT] |
NETWORK EVENT : %1 [NAMED PIPE EVENT] |
| 0xA6 | CUSTOM SYSTEM STATE CHANGE EVENT : %1 |
CUSTOM SYSTEM STATE CHANGE EVENT : %1 |
| 0xA7 | This error may occur if another service is already using a Named Pipe or RPC trigger for the same endpoint or interface as thegiven service. |
This error may occur if another service is already using a Named Pipe or RPC trigger for the same endpoint or interface as thegiven service. |
| 0xA8 | DESCRIPTION: Changes whether the account in which the service runs uses a managed password. If this setting is \"true\", the Service Control Manager (SCM) will request the account password from NetLogon when starting the service. If this setting is \"false\", the SCM will use the configured account password.USAGE: sc managedaccount [service name] [type]OPTIONS: type = |
DESCRIPTION: Changes whether the account in which the service runs uses a managed password. If this setting is \"true\", the Service Control Manager (SCM) will request the account password from NetLogon when starting the service. If this setting is \"false\", the SCM will use the configured account password.USAGE: sc managedaccount [service name] [type]OPTIONS: type = |
| 0xA9 | ACCOUNT MANAGED : %1 |
ACCOUNT MANAGED : %1 |
| 0xAA | DESCRIPTION: Queries whether the account configured for this service has a managed account password.USAGE: sc qmanagedaccount [service name] |
DESCRIPTION: Queries whether the account configured for this service has a managed account password.USAGE: sc qmanagedaccount [service name] |
| 0xAB | ERROR: Invalid trigger data value |
ERROR: Invalid trigger data value |
| 0xAC | DESCRIPTION: Queries whether the service is marked to start in a protected process. Note that this setting cannot be changed.USAGE: sc qprotection [service name] |
DESCRIPTION: Queries whether the service is marked to start in a protected process. Note that this setting cannot be changed.USAGE: sc qprotection [service name] |
| 0xAD | SERVICE %1 PROTECTION LEVEL: NONE. |
SERVICE %1 PROTECTION LEVEL: NONE. |
| 0xAE | SERVICE %1 PROTECTION LEVEL: WINDOWS. |
SERVICE %1 PROTECTION LEVEL: WINDOWS. |
| 0xAF | SERVICE %1 PROTECTION LEVEL: WINDOWS LIGHT. |
SERVICE %1 PROTECTION LEVEL: WINDOWS LIGHT. |
| 0xB0 | SERVICE %1 PROTECTION LEVEL: ANTIMALWARE LIGHT. |
SERVICE %1 PROTECTION LEVEL: ANTIMALWARE LIGHT. |
| 0xB1 | SERVICE %1 PROTECTION LEVEL: INVALID VALUE. |
SERVICE %1 PROTECTION LEVEL: INVALID VALUE. |
| 0xB2 | DESCRIPTION: Queries for a user service instance for the current user in the same session created from the user service template specified.USAGE: sc quserservice |
DESCRIPTION: Queries for a user service instance for the current user in the same session created from the user service template specified.USAGE: sc quserservice |
| 0xB3 | USER SERVICE TEMPLATE %1, LOCAL SERVICE INSTANCE %2. |
USER SERVICE TEMPLATE %1, LOCAL SERVICE INSTANCE %2. |