| 0x1 | 描述: SC 是用来与服务控制管理器和服务进行通信 的命令行程序。用法: sc [command] [service name] ... 选项的格式为 \"\\\\ServerName\" 可通过键入以下命令获取有关命令的更多帮助: \"sc [command]\" 命令: query-----------查询服务的状态， 或枚举服务类型的状态。 queryex---------查询服务的扩展状态， 或枚举服务类型的状态。 start-----------启动服务。 pause-----------向服务发送 PAUSE 控制请求。 interrogate-----向服务发送 INTERROGATE 控制请求。 continue--------向服务发送 CONTINUE 控制请求。 stop------------向服务发送 STOP 请求。 config----------更改服务的配置(永久)。 description-----更改服务的描述。 failure---------更改失败时服务执行的操作。 failureflag-----更改服务的失败操作标志。 sidtype---------更改服务的服务 SID 类型。 privs-----------更改服务的所需特权。 managedaccount--更改服务以将服务帐户密码 标记为由 LSA 管理。 qc--------------查询服务的配置信息。 qdescription----查询服务的描述。 qfailure--------查询失败时服务执行的操作。 qfailureflag----查询服务的失败操作标志。 qsidtype--------查询服务的服务 SID 类型。 qprivs----------查询服务的所需特权。 qtriggerinfo----查询服务的触发器参数。 qpreferrednode--查询服务的首选 NUMA 节点。 qmanagedaccount-查询服务是否将帐户 与 LSA 管理的密码结合使用。 qprotection-----查询服务的进程保护级别。 quserservice----查询用户服务模板的本地实例。 delete ----------(从注册表中)删除服务。 create----------创建服务(并将其添加到注册表中)。 control---------向服务发送控制。 sdshow----------显示服务的安全描述符。 sdset-----------设置服务的安全描述符。 showsid---------显示与任意名称对应的服务 SID 字符串。 triggerinfo-----配置服务的触发器参数。 preferrednode---设置服务的首选 NUMA 节点。 GetDisplayName--获取服务的 DisplayName。 GetKeyName------获取服务的 ServiceKeyName。 EnumDepend------枚举服务依赖关系。 以下命令不需要服务名称: sc boot------------(ok | bad)指示是否应将上一次启动另存为 最近一次已知的正确启动配置 Lock------------锁定服务数据库 QueryLock-------查询 SCManager 数据库的 LockStatus示例: sc start MyService |
DESCRIPTION: SC is a command line program used for communicating with the Service Control Manager and services.USAGE: sc [command] [service name] ... The option has the form \"\\\\ServerName\" Further help on commands can be obtained by typing: \"sc [command]\" Commands: query-----------Queries the status for a service, or enumerates the status for types of services. queryex---------Queries the extended status for a service, or enumerates the status for types of services. start-----------Starts a service. pause-----------Sends a PAUSE control request to a service. interrogate-----Sends an INTERROGATE control request to a service. continue--------Sends a CONTINUE control request to a service. stop------------Sends a STOP request to a service. config----------Changes the configuration of a service (persistent). description-----Changes the description of a service. failure---------Changes the actions taken by a service upon failure. failureflag-----Changes the failure actions flag of a service. sidtype---------Changes the service SID type of a service. privs-----------Changes the required privileges of a service. managedaccount--Changes the service to mark the service account password as managed by LSA. qc--------------Queries the configuration information for a service. qdescription----Queries the description for a service. qfailure--------Queries the actions taken by a service upon failure. qfailureflag----Queries the failure actions flag of a service. qsidtype--------Queries the service SID type of a service. qprivs----------Queries the required privileges of a service. qtriggerinfo----Queries the trigger parameters of a service. qpreferrednode--Queries the preferred NUMA node of a service. qmanagedaccount-Queries whether a services uses an account with a password managed by LSA. qprotection-----Queries the process protection level of a service. quserservice----Queries for a local instance of a user service template. delete----------Deletes a service (from the registry). create----------Creates a service. (adds it to the registry). control---------Sends a control to a service. sdshow----------Displays a service's security descriptor. sdset-----------Sets a service's security descriptor. showsid---------Displays the service SID string corresponding to an arbitrary name. triggerinfo-----Configures the trigger parameters of a service. preferrednode---Sets the preferred NUMA node of a service. GetDisplayName--Gets the DisplayName for a service. GetKeyName------Gets the ServiceKeyName for a service. EnumDepend------Enumerates Service Dependencies. The following commands don't require a service name: sc boot------------(ok | bad) Indicates whether the last boot should be saved as the last-known-good boot configuration Lock------------Locks the Service Database QueryLock-------Queries the LockStatus for the SCManager DatabaseEXAMPLE: sc start MyService |
| 0x2 | QUERY 和 QUERYEX 选项: 如果查询命令带服务名称，将返回 该服务的状态。其他选项不适合这种 情况。如果查询命令不带参数或 带下列选项之一，将枚举此服务。 type= 要枚举的服务的类型(driver, service, userservice, all) (默认 = service) state= 要枚举的服务的状态 (inactive, all) (默认 = active) bufsize= 枚举缓冲区的大小(以字节计) (默认 = %1) ri= 开始枚举的恢复索引号 (默认 = 0) group= 要枚举的服务组 (默认 = all groups)语法示例sc query - 枚举活动服务和驱动程序的状态sc query eventlog - 显示 eventlog 服务的状态sc queryex eventlog - 显示 eventlog 服务的扩展状态sc query type= driver - 仅枚举活动驱动程序sc query type= service - 仅枚举 Win32 服务sc query state= all - 枚举所有服务和驱动程序sc query bufsize= 50 - 枚举缓冲区为 50 字节sc query ri= 14 - 枚举时恢复索引 = 14sc queryex group= \"\" - 枚举不在组内的活动服务sc query type= interact - 枚举所有不活动服务sc query type= driver group= NDIS - 枚举所有 NDIS 驱动程序 |
QUERY and QUERYEX OPTIONS: If the query command is followed by a service name, the status for that service is returned. Further options do not apply in this case. If the query command is followed by nothing or one of the options listed below, the services are enumerated. type= Type of services to enumerate (driver, service, userservice, all) (default = service) state= State of services to enumerate (inactive, all) (default = active) bufsize= The size (in bytes) of the enumeration buffer (default = %1) ri= The resume index number at which to begin the enumeration (default = 0) group= Service group to enumerate (default = all groups)SYNTAX EXAMPLESsc query - Enumerates status for active services & driverssc query eventlog - Displays status for the eventlog servicesc queryex eventlog - Displays extended status for the eventlog servicesc query type= driver - Enumerates only active driverssc query type= service - Enumerates only Win32 servicessc query state= all - Enumerates all services & driverssc query bufsize= 50 - Enumerates with a 50 byte buffersc query ri= 14 - Enumerates with resume index = 14sc queryex group= \"\" - Enumerates active services not in a groupsc query type= interact - Enumerates all interactive servicessc query type= driver group= NDIS - Enumerates all NDIS drivers |
| 0x3 | 描述: 在注册表和服务数据库中修改服务项。用法: sc config [service name] ...选项:注意: 选项名称包括等号。 等号和值之间需要一个空格。 type= start= error= binPath= group= tag= depend= obj= DisplayName= password= |
DESCRIPTION: Modifies a service entry in the registry and Service Database.USAGE: sc config [service name] ...OPTIONS:NOTE: The option name includes the equal sign. A space is required between the equal sign and the value. type= start= error= binPath= group= tag= depend= obj= DisplayName= password= |
| 0x4 | 描述: 在注册表和服务数据库中创建服务项。用法: sc create [service name] [binPath= ] ...选项:注意: 选项名称包括等号。 等号和值之间需要一个空格。 type= (默认 = own) start= (默认 = demand) error= (默认 = normal) binPath= group= tag= depend= obj= (默认= LocalSystem) DisplayName= password= |
DESCRIPTION: Creates a service entry in the registry and Service Database.USAGE: sc create [service name] [binPath= ] ...OPTIONS:NOTE: The option name includes the equal sign. A space is required between the equal sign and the value. type= (default = own) start= (default = demand) error= (default = normal) binPath= group= tag= depend= obj= (default = LocalSystem) DisplayName= password= |
| 0x5 | 描述: 更改失败时操作用法: sc failure [service name] ...选项: reset= (必须与 actions= 一起使用) reboot= command= actions= (必须与 reset= option 一起使用) |
DESCRIPTION: Changes the actions upon failureUSAGE: sc failure [service name] ...OPTIONS: reset= (Must be used in conjunction with actions= ) reboot= command= actions= (Must be used in conjunction with the reset= option) |
| 0x6 | 描述: 启动服务运行。用法: sc start [service name] ... |
DESCRIPTION: Starts a service running.USAGE: sc start [service name] ... |
| 0x7 | 描述: 发送 PAUSE 控制请求到服务。用法: sc pause [service name] |
DESCRIPTION: Sends a PAUSE control request to a service.USAGE: sc pause [service name] |
| 0x8 | 描述: 发送 INTERROGATE 控制请求到服务。用法: sc interrogate [service name] |
DESCRIPTION: Sends an INTERROGATE control request to a service.USAGE: sc interrogate [service name] |
| 0x9 | 描述: 发送 CONTROL 码到服务。用法: sc control [service name] = 用户定义的控制码 = 另请参阅 sc stop、sc pause 等。 |
DESCRIPTION: Sends a CONTROL code to a service.USAGE: sc control [service name] = user-defined control code = See also sc stop, sc pause, etc. |
| 0xA | 描述: 发送 CONTINUE 控制请求到服务。用法: sc continue [service name] |
DESCRIPTION: Sends a CONTINUE control request to a service.USAGE: sc continue [service name] |
| 0xB | 描述: 发送 STOP 控制请求到服务。用法: sc stop [service name] = 服务停止的可选原因代码编号 由下列元素组成，格式如下: Flag:Major reason:Minor reason [例如，1:2:8 表示硬件: 磁盘(计划外)] 标志 主要原因 ------------------ --------------------------- 1 - 计划外 1 - 其他 2 - 自定义 2 - 硬件 4 - 计划内 3 - 操作系统 4 - 软件 5 - 应用程序 64-255 - 自定义 次要原因 ----------------------------------- 1 - 其他 2 - 维护 3 - 安装 4 - 升级 5 - 重新配置 6 - 挂起 7 - 不稳定 8 - 磁盘 9 - 网卡 10 - 环境 11 - 硬件驱动程序 12 - 其他驱动程序 13 - Service Pack 14 - 软件更新 15 - 安全修补 16 - 安全性 17 - 网络连接性 18 - WMI 19 - Service Pack 卸载 20 - 软件更新卸载 22 - 安全修补卸载 23 - MMC 256-65535 - 自定义 = 关于以上原因的可选备注(最多 127 个字符) |
DESCRIPTION: Sends a STOP control request to a service.USAGE: sc stop [service name] = Optional reason code number for service stop formed with the following elements in the format: Flag:Major reason:Minor reason [E.g., 1:2:8 means Hardware: Disk (Unplanned)] Flag Major reason ------------------ --------------------------- 1 - Unplanned 1 - Other 2 - Custom 2 - Hardware 4 - Planned 3 - Operating System 4 - Software 5 - Application 64-255 - Custom Minor reason ----------------------------------- 1 - Other 2 - Maintenance 3 - Installation 4 - Upgrade 5 - Reconfiguration 6 - Hung 7 - Unstable 8 - Disk 9 - Network Card 10 - Environment 11 - Hardware Driver 12 - Other Driver 13 - Service Pack 14 - Software Update 15 - Security Fix 16 - Security 17 - Network Connectivity 18 - WMI 19 - Service Pack Uninstall 20 - Software Update Uninstall 22 - Security Fix Uninstall 23 - MMC 256-65535 - Custom = Optional comment for the reason above (127 characters maximum) |
| 0xC | 描述: 设置服务的描述字符串。用法: sc description [service name] [description] |
DESCRIPTION: Sets the description string for a service.USAGE: sc description [service name] [description] |
| 0xD | 描述: 查询服务的配置信息用法: sc qc [service name] |
DESCRIPTION: Queries the configuration information for a service.USAGE: sc qc [service name] |
| 0xE | 描述: 检索服务的描述字符串。用法: sc qdescription [service name] |
DESCRIPTION: Retrieves the description string of a service.USAGE: sc qdescription [service name] |
| 0xF | 描述: 检索在失败服务上执行的操作。用法: sc qfailure [service name] |
DESCRIPTION: Retrieves the actions performed on service failure.USAGE: sc qfailure [service name] |
| 0x10 | 描述: 查询 SC 管理器数据库的锁定状态。用法: sc querylock |
DESCRIPTION: Queries the Lock Status for a SC Manager Database.USAGE: sc querylock |
| 0x11 | 描述: 从注册表删除服务项。 如果服务正在运行，或另一进程已经打开 到此服务的句柄，服务将简单地标记为 删除。用法: sc delete [service name] |
DESCRIPTION: Deletes a service entry from the registry. If the service is running, or another process has an open handle to the service, the service is simply marked for deletion.USAGE: sc delete [service name] |
| 0x12 | 描述: 指明是否上一次启动在本地计算机上 保存为最后所知的好的启动配置。 如果指定，服务器名将被忽略。用法: sc boot |
DESCRIPTION: Indicates whether the last boot should be saved as the last-known-good boot configuration on the local machine. If specified, the server name is ignored.USAGE: sc boot |
| 0x13 | 描述: 获取与特定服务相关的显示名称用法: sc GetDisplayName |
DESCRIPTION: Gets the display name associated with a particular serviceUSAGE: sc GetDisplayName |
| 0x14 | 描述: 获取与特定服务相关的键名， 将显示名称用作输入用法: sc GetKeyName |
DESCRIPTION: Gets the key name associated with a particular service, using the display name as inputUSAGE: sc GetKeyName |
| 0x15 | 描述: 枚举依存于此服务的服务用法: sc EnumDepend |
DESCRIPTION: Enumerates the Services that are dependent on this oneUSAGE: sc EnumDepend |
| 0x16 | 描述: 以 SDDL 格式显示服务的安全描述符用法: sc sdshow |
DESCRIPTION: Displays a service's security descriptor in SDDL formatUSAGE: sc sdshow |
| 0x17 | 描述: 设置服务的安全性描述符用法: sc sdset |
DESCRIPTION: Sets a service's security descriptorUSAGE: sc sdset |
| 0x23 | SERVICE_NAME: %1描述: %2 |
SERVICE_NAME: %1DESCRIPTION: %2 |
| 0x24 | 名称 = %1 |
Name = %1 |
| 0x25 | %1 |
%1 |
| 0x26 | IsLocked : TRUE |
IsLocked : TRUE |
| 0x27 | IsLocked : FALSE |
IsLocked : FALSE |
| 0x28 | LockOwner : %1 LockDuration : %2 (获取后的秒数) |
LockOwner : %1 LockDuration : %2 (seconds since acquired) |
| 0x29 | [SC] 标记 = %1 |
[SC] Tag = %1 |
| 0x2A | [SC] %1: 读取的项 = %2 |
[SC] %1: entriesread = %2 |
| 0x2B | |
|
| 0x2D | 活动数据库已经被锁定。要通过 API 解锁，请按 u: |
Active database is locked.To unlock via API, press u: |
| 0x2E | [SC] 将退出以解锁数据库 |
[SC] Will be unlocking database by exiting |
| 0x2F | SERVICE_NAME: %1 %2 TYPE : %3 %4 %5 STATE : %6 %7 (%8, %9, %10) WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 |
SERVICE_NAME: %1 %2 TYPE : %3 %4 %5 STATE : %6 %7 (%8, %9, %10) WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 |
| 0x30 | SERVICE_NAME: %1DISPLAY_NAME: %2 TYPE : %3 %4 %5 STATE : %6 %7 (%8, %9, %10) WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 |
SERVICE_NAME: %1DISPLAY_NAME: %2 TYPE : %3 %4 %5 STATE : %6 %7 (%8, %9, %10) WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 |
| 0x31 | SERVICE_NAME: %1 %2 TYPE : %3 %4 %5 STATE : %6 %7 (%8, %9, %10) WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 PID : %17 FLAGS : %18 |
SERVICE_NAME: %1 %2 TYPE : %3 %4 %5 STATE : %6 %7 (%8, %9, %10) WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 PID : %17 FLAGS : %18 |
| 0x32 | SERVICE_NAME: %1DISPLAY_NAME: %2 TYPE : %3 %4 %5 STATE : %6 %7 (%8, %9, %10) WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 PID : %17 FLAGS : %18 |
SERVICE_NAME: %1DISPLAY_NAME: %2 TYPE : %3 %4 %5 STATE : %6 %7 (%8, %9, %10) WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 PID : %17 FLAGS : %18 |
| 0x33 | SERVICE_NAME: %1 RESET_PERIOD (以秒计) : %2 REBOOT_MESSAGE : %3 COMMAND_LINE : %4 |
SERVICE_NAME: %1 RESET_PERIOD (in seconds) : %2 REBOOT_MESSAGE : %3 COMMAND_LINE : %4 |
| 0x34 | FAILURE_ACTIONS : 重启动 -- 延迟 = %1 微秒。 |
FAILURE_ACTIONS : RESTART -- Delay = %1 milliseconds. |
| 0x35 | 重启动 -- 延迟 = %1 微秒。 |
RESTART -- Delay = %1 milliseconds. |
| 0x38 | FAILURE_ACTIONS : 运行进程 -- 延迟 = %1 微秒。 |
FAILURE_ACTIONS : RUN PROCESS -- Delay = %1 milliseconds. |
| 0x39 | 运行进程 -- 延迟 = %1 微秒。 |
RUN PROCESS -- Delay = %1 milliseconds. |
| 0x3A | SERVICE_NAME: %1 TYPE : %2 %3 %4 START_TYPE : %5 %6 ERROR_CONTROL : %7 %8 BINARY_PATH_NAME : %9 LOAD_ORDER_GROUP : %10 TAG : %11 DISPLAY_NAME : %12 DEPENDENCIES : %13 |
SERVICE_NAME: %1 TYPE : %2 %3 %4 START_TYPE : %5 %6 ERROR_CONTROL : %7 %8 BINARY_PATH_NAME : %9 LOAD_ORDER_GROUP : %10 TAG : %11 DISPLAY_NAME : %12 DEPENDENCIES : %13 |
| 0x3B | : %1 |
: %1 |
| 0x3C | SERVICE_START_NAME : %1 |
SERVICE_START_NAME : %1 |
| 0x64 | [SC] %1 成功 |
[SC] %1 SUCCESS |
| 0x65 | [SC] %1 失败 %2:%3 |
[SC] %1 FAILED %2:%3 |
| 0x66 | [SC] %1 需要 %2 字节 |
[SC] %1 needs %2 bytes |
| 0x67 | [SC] %1: 更多数据，需要在索引 %3 开始恢复的 %2 字节 |
[SC] %1: more data, need %2 bytes start resume at index %3 |
| 0x68 | [SC] %1: 更多数据，需要 %2 字节 |
[SC] %1: more data, need %2 bytes |
| 0x69 | 错误: 无效 %1 域 |
ERROR: Invalid %1 field |
| 0x6A | 错误: 无效选项 |
ERROR: Invalid Option |
| 0x6B | 错误: 枚举组时不能指定服务名称 |
ERROR: Cannot specify a service name when enumerating a group |
| 0x6C | 错误: 需要服务名称。 |
ERROR: A service name is required |
| 0x6D | 错误: 未知命令 |
ERROR: Unrecognized command |
| 0x6E | 错误: 重置和操作选项必须同时设置 |
ERROR: The reset and actions options must be set simultaneously |
| 0x6F | u |
u |
| 0x71 | 描述: 更改服务的失败操作标志设置。 如果此设置为 0 (默认值)，服务控制管理器(SCM)仅在服务进程终止且 服务处于 SERVICE_STOPPED 以外的状态时在该服务上启用配置的失败操作。 如果此设置为 1，SCM 在服务进程终止且服务使用除 0 以外的 Win32 退出 代码进入 SERVICE_STOPPED 状态时在该服务上启用配置的失败操作。如果未 在服务上配置任何失败操作，则会忽略此设置。用法: sc failureflag [service name] [flag] |
DESCRIPTION: Changes the failure actions flag setting of a service. If this setting is 0 (default), the Service Control Manager (SCM) enables configured failure actions on the service only if the service process terminates with the service in a state other than SERVICE_STOPPED. If this setting is 1, the SCM enables configured failure actions on the service if the service enters the SERVICE_STOPPED state with a Win32 exit code other than 0 in addition to the service process termination as above. This setting is ignored if the service does not have any failure actions configured.USAGE: sc failureflag [service name] [flag] |
| 0x72 | 描述: 检索服务的失败操作标志设置。 如果此设置为 0 (默认值)，服务控制管理器(SCM)仅在服务进程终止且 服务处于 SERVICE_STOPPED 以外的状态时，在该服务上启用配置的失败操作。 如果此设置为 1，SCM 在服务进程终止且服务使用除 0 以外的 Win32 退出代 码进入 SERVICE_STOPPED 状态时在该服务上启用配置的失败操作。如果未在 服务上配置任何失败操作，则会忽略此设置。用法: sc qfailureflag [service name] |
DESCRIPTION: Retrieves the failure actions flag setting of a service. If this setting is 0 (default), the Service Control Manager (SCM) enables configured failure actions on the service only if the service process terminates with the service in a state other than SERVICE_STOPPED. If this setting is 1, the SCM enables configured failure actions on the service if the service enters the SERVICE_STOPPED state with a Win32 exit code other than 0 in addition to the service process termination as above. This setting is ignored if the service does not have any failure actions configured.USAGE: sc qfailureflag [service name] |
| 0x73 | SERVICE_NAME: %1FAILURE_ACTIONS_ON_NONCRASH_FAILURES: TRUE |
SERVICE_NAME: %1FAILURE_ACTIONS_ON_NONCRASH_FAILURES: TRUE |
| 0x74 | SERVICE_NAME: %1FAILURE_ACTIONS_ON_NONCRASH_FAILURES: FALSE |
SERVICE_NAME: %1FAILURE_ACTIONS_ON_NONCRASH_FAILURES: FALSE |
| 0x75 | 描述: 更改服务的服务安全标识符(SID)类型设置。 如果此设置为“unrestricted”，服务控制管理器(SCM)会因为进程中的 第一个服务正在启动而在服务进程下次启动时将此服务的 SID 添加 至服务进程令牌。 此设置仅针对 Win32 用户模式服务有效。 如果此设置为“restricted”，服务控制管理器(SCM)会因为进程中的第 一个服务正在启动而在服务进程下次启动时将此服务的 SID 添加至 服务进程令牌。 此外，此服务的 SID 也会被添加至进程令牌中的受限 SID 列表， 因此该进程令牌将成为一个受限的令牌。有关受限令牌的详细信息， 请参见 MSDN。此设置仅针对 Win32 用户模式服务有效。此外，对 于共享进程服务，共处于进程中的所有服务的 SID 类型必须都被设 为此设置，以便服务生效。 如果此设置为“none”，SCM 不会将服务的 SID 添加至服务进程令牌。用法: sc sidtype [service name] [type]选项: type = |
DESCRIPTION: Changes the service security identifier (SID) type setting of a service. If this setting is \"unrestricted\", the Service Control Manager (SCM) will add this service's SID to the service process token when the service process starts the next time due to the first service in the process being started. This setting is valid only for Win32 user mode services. If this setting is \"restricted\", the Service Control Manager (SCM) will add this service's SID to the service process token when the service process starts the next time due to the first service in the process being started. In addition, this service's SID will also be added to the restricting SID list in the process token. The process token will be a restricted token. See MSDN for details on restricted token. This setting is valid only for Win32 user mode services. In addition, for a share process service, all services cohosted in the process must have this SID type set for this to take effect. If this setting is \"none\", the SCM will not add the service's SID to the service process token. USAGE: sc sidtype [service name] [type]OPTIONS: type = |
| 0x76 | 描述: 查询服务的服务安全标识符(SID)类型设置。 如果此设置为“unrestricted”，服务控制管理器(SCM)会因为进 程中的第一个服务正在启动而在服务进程下次启动时将此服务的 SID 添加至服务进程令牌。 此设置仅针对 Win32 用户模式服务有效。 如果此设置为“restricted”，服务控制管理器(SCM)会因为进程 中的第一个服务正在启动而在服务进程下次启动时将此服务的 SID 添加至服务进程令牌。 此外，此服务的 SID 也会被添加至进程令牌中的受限 SID 列表， 因此该进程令牌将成为一个受限的令牌。有关受限令牌的详细信息， 请参见 MSDN。此设置仅针对 Win32 用户模式服务有效。此外，对 于共享进程服务，共处于进程中的所有服务的 SID 类型必须都被设 为此设置，以便服务生效。 如果此设置为“none”，SCM 不会将服务的 SID 添加至服务进程令牌。用法: sc qsidtype [service name] |
DESCRIPTION: Queries the service security identifier (SID) type setting of a service. If this setting is \"unrestricted\", the Service Control Manager (SCM) will add this service's SID to the service process token when the service process starts the next time due to the first service in the process being started. This setting is valid only for Win32 user mode services. If this setting is \"restricted\", the Service Control Manager (SCM) will add this service's SID to the service process token when the service process starts the next time due to the first service in the process being started. In addition, this service's SID will also be added to the restricting SID list in the process token. The process token will be a restricted token. See MSDN for details on restricted token. This setting is valid only for Win32 user mode services. In addition, for a share process service, all services cohosted in the process must have this SID type set for this to take effect. If this setting is \"none\", the SCM will not add the service's SID to the service process token. USAGE: sc qsidtype [service name] |
| 0x77 | SERVICE_NAME: %1SERVICE_SID_TYPE: UNRESTRICTED |
SERVICE_NAME: %1SERVICE_SID_TYPE: UNRESTRICTED |
| 0x78 | SERVICE_NAME: %1SERVICE_SID_TYPE: NONE |
SERVICE_NAME: %1SERVICE_SID_TYPE: NONE |
| 0x79 | SERVICE_NAME: %1 PRIVILEGES : %2 |
SERVICE_NAME: %1 PRIVILEGES : %2 |
| 0x7B | 描述: 查询服务所需的权限设置。 权限设置会在服务进程因为进程中的第一个服务正在启动而启动时 生效。此时，服务控制管理器(SCM)会计算将以同一个进程为宿主 的所有服务所需的所有权限的联合，然后创建具有这些权限的进程。 如果没有设置此设置，则意味着服务会需要安全子系统所能给予在 该服务的已配置帐户下运行的进程的所有权限。用法: sc qprivs [service name] |
DESCRIPTION: Queries the required privileges setting for a service. The privilege settings take effect when the service process starts due to the first service in the process being started. At that time, the Service Control Manager (SCM) computes the union of all privileges required by all services that will be hosted in the same process and then creates the process with those privileges. An absence of this setting is taken to imply that the service requires all the privileges that the security subsystem allows for a process running in the service's configured account.USAGE: sc qprivs [service name] |
| 0x7C | 描述: 更改服务所需的权限设置。 权限设置会在服务进程因为进程中的第一个服务正在启动而启动时 生效。此时，服务控制管理器(SCM)会计算将以同一个进程为宿主 的所有服务所需的所有权限的联合，然后创建具有这些权限的进程。 如果没有设置此设置，则意味着服务会需要安全子系统所能给予在 该服务的已配置帐户下运行的进程的所有权限。用法: sc privs [service name] [privileges]选项: privileges = [例如: SeBackupPrivilege/SeRestorePrivilege] |
DESCRIPTION: Changes the required privileges setting of a service. The privilege settings take effect when the service process starts due to the first service in the process being started. At that time, the Service Control Manager (SCM) computes the union of all privileges required by all services that will be hosted in the same process and then creates the process with those privileges. An absence of this setting is taken to imply that the service requires all the privileges that the security subsystem allows for the process running in the service's configured account.USAGE: sc privs [service name] [privileges]OPTIONS: privileges = [E.g., SeBackupPrivilege/SeRestorePrivilege] |
| 0x7D | SERVICE_NAME: %1SERVICE_SID_TYPE: RESTRICTED |
SERVICE_NAME: %1SERVICE_SID_TYPE: RESTRICTED |
| 0x7E | SDDL 权限 权限值---------- ----------- GA - GENERIC_ALL GR - GENERIC_READ GW - GENERIC_WRITE GX - GENERIC_EXECUTE RC - READ_CONTROL SD - DELETE WD - WRITE_DAC WO - WRITE_OWNER RP - SERVICE_START WP - SERVICE_STOP CC - SERVICE_QUERY_CONFIG DC - SERVICE_CHANGE_CONFIG LC - SERVICE_QUERY_STATUS SW - SERVICE_ENUMERATE_DEPENDENTS LO - SERVICE_INTERROGATE DT - SERVICE_PAUSE_CONTINUE CR - SERVICE_USER_DEFINED_CONTROL |
SDDL right Right value---------- ----------- GA - GENERIC_ALL GR - GENERIC_READ GW - GENERIC_WRITE GX - GENERIC_EXECUTE RC - READ_CONTROL SD - DELETE WD - WRITE_DAC WO - WRITE_OWNER RP - SERVICE_START WP - SERVICE_STOP CC - SERVICE_QUERY_CONFIG DC - SERVICE_CHANGE_CONFIG LC - SERVICE_QUERY_STATUS SW - SERVICE_ENUMERATE_DEPENDENTS LO - SERVICE_INTERROGATE DT - SERVICE_PAUSE_CONTINUE CR - SERVICE_USER_DEFINED_CONTROL |
| 0x7F | SDDL 权限 权限值---------- ----------- GA - GENERIC_ALL KA - GENERIC_ALL GR - GENERIC_READ GW - GENERIC_WRITE GX - GENERIC_EXECUTE RC - READ_CONTROL SD - DELETE WD - WRITE_DAC WO - WRITE_OWNER RP - SC_MANAGER_QUERY_LOCK_STATUS WP - SC_MANAGER_MODIFY_BOOT_CONFIG CC - SC_MANAGER_CONNECT DC - SC_MANAGER_CREATE_SERVICE LC - SC_MANAGER_ENUMERATE_SERVICE SW - SC_MANAGER_LOCK |
SDDL right Right value---------- ----------- GA - GENERIC_ALL KA - GENERIC_ALL GR - GENERIC_READ GW - GENERIC_WRITE GX - GENERIC_EXECUTE RC - READ_CONTROL SD - DELETE WD - WRITE_DAC WO - WRITE_OWNER RP - SC_MANAGER_QUERY_LOCK_STATUS WP - SC_MANAGER_MODIFY_BOOT_CONFIG CC - SC_MANAGER_CONNECT DC - SC_MANAGER_CREATE_SERVICE LC - SC_MANAGER_ENUMERATE_SERVICE SW - SC_MANAGER_LOCK |
| 0x80 | SERVICE_NAME: %1 %2 TYPE : %3 %4 %5 STATE : %6 %7 WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 |
SERVICE_NAME: %1 %2 TYPE : %3 %4 %5 STATE : %6 %7 WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 |
| 0x81 | SERVICE_NAME: %1DISPLAY_NAME: %2 TYPE : %3 %4 %5 STATE : %6 %7 WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 |
SERVICE_NAME: %1DISPLAY_NAME: %2 TYPE : %3 %4 %5 STATE : %6 %7 WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 |
| 0x82 | SERVICE_NAME: %1 %2 TYPE : %3 %4 %5 STATE : %6 %7 WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 PID : %17 FLAGS : %18 |
SERVICE_NAME: %1 %2 TYPE : %3 %4 %5 STATE : %6 %7 WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 PID : %17 FLAGS : %18 |
| 0x83 | SERVICE_NAME: %1DISPLAY_NAME: %2 TYPE : %3 %4 %5 STATE : %6 %7 WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 PID : %17 FLAGS : %18 |
SERVICE_NAME: %1DISPLAY_NAME: %2 TYPE : %3 %4 %5 STATE : %6 %7 WIN32_EXIT_CODE : %11 (0x%12) SERVICE_EXIT_CODE : %13 (0x%14) CHECKPOINT : 0x%15 WAIT_HINT : 0x%16 PID : %17 FLAGS : %18 |
| 0x84 | 警告: 服务 %1 被配置为交互式服务，其支持正受到抨击。该服务可能无法正常起作用。 |
WARNING: The service %1 is configured as interactive whose support is being deprecated. The service may not function properly. |
| 0x85 | 名称: %1服务 SID: %2状态: 活动 |
NAME: %1SERVICE SID: %2STATUS: Active |
| 0x86 | 描述: 显示与任意名称相对应的服务 SID 字符串。该名称可以是现有或不存在的服务的名称。用法: SC showsid [名称] |
DESCRIPTION: Displays the service SID string corresponding to an arbitrary name. The name can be that of an existing or non-existent service.USAGE: sc showsid [name] |
| 0x87 | [SC] 由于发生错误 %2， %1 失败。 |
[SC] %1 FAILED with error %2. |
| 0x88 | 描述: 更改服务的触发器参数。用法: sc triggerinfo [service name] ...选项: start/device/UUID/HwId1/... start/custom/UUID/data0/.. stop/custom/UUID/data0/... start/strcustom/UUID/data0/.. stop/strcustom/UUID/data0/.. start/lvlcustom/UUID/data0/.. stop/lvlcustom/UUID/data0/.. start/kwanycustom/UUID/data0/.. stop/kwanycustom/UUID/data0/.. start/kwallcustom/UUID/data0/.. stop/kwallcustom/UUID/data0/.. start/networkon stop/networkoff start/domainjoin stop/domainleave start/portopen/parameter stop/portclose/parameter start/machinepolicy start/userpolicy start/rpcinterface/UUID start/namedpipe/pipename delete |
DESCRIPTION: Changes the trigger parameters of a service.USAGE: sc triggerinfo [service name] ...OPTIONS: start/device/UUID/HwId1/... start/custom/UUID/data0/.. stop/custom/UUID/data0/... start/strcustom/UUID/data0/.. stop/strcustom/UUID/data0/.. start/lvlcustom/UUID/data0/.. stop/lvlcustom/UUID/data0/.. start/kwanycustom/UUID/data0/.. stop/kwanycustom/UUID/data0/.. start/kwallcustom/UUID/data0/.. stop/kwallcustom/UUID/data0/.. start/networkon stop/networkoff start/domainjoin stop/domainleave start/portopen/parameter stop/portclose/parameter start/machinepolicy start/userpolicy start/rpcinterface/UUID start/namedpipe/pipename delete |
| 0x89 | SERVICE_NAME: %1 |
SERVICE_NAME: %1 |
| 0x8A | 设备接口到达 : %1 [接口类 GUID] |
DEVICE INTERFACE ARRIVAL : %1 [INTERFACE CLASS GUID] |
| 0x8B | 自定义 : %1 [ETW 提供程序 UUID] |
CUSTOM : %1 [ETW PROVIDER UUID] |
| 0x8C | IP 地址可用性 : %1 [无 IP 地址可用] |
IP ADDRESS AVAILABILITY : %1 [NO IP ADDRESS AVAILABLE] |
| 0x8D | 人体学接口设备 : %1 [接口类 GUID] |
HUMAN INTERFACE DEVICE : %1 [INTERFACE CLASS GUID] |
| 0x8E | 描述: 检索服务的触发器信息。用法: sc qtriggerinfo [service name] |
DESCRIPTION: Retrieves the trigger information of a service.USAGE: sc qtriggerinfo [service name] |
| 0x8F | 数据 : %1 |
DATA : %1 |
| 0x90 | 还没有为任何启动或停止触发器注册服务 %1。 |
The service %1 has not registered for any start or stop triggers. |
| 0x91 | 启动服务 |
START SERVICE |
| 0x92 | 停止服务 |
STOP SERVICE |
| 0x93 | IP 地址可用性 : %1 [首个 IP 地址可用] |
IP ADDRESS AVAILABILITY : %1 [FIRST IP ADDRESS AVAILABLE] |
| 0x94 | 已加入的域的状态 : %1 [已加入的域] |
DOMAIN JOINED STATUS : %1 [DOMAIN JOINED] |
| 0x95 | 加入的域的状态 : %1 [未加入的域] |
DOMAIN JOINED STATUS : %1 [NOT DOMAIN JOINED] |
| 0x96 | 描述: 更改 Win32 服务的首选 NUMA 节点。 此设置仅对自身的进程服务有效。 若要删除现有设置，请将节点号设置为 -1。 如果提供了无效的首选节点号，则更改请求将失败。用法: sc preferrednode [service name] [node number] |
DESCRIPTION: Changes the preferred NUMA node for a Win32 service. This setting is valid only for own process services. To delete an existing setting, set the node number as -1. If an invalid preferred node number is supplied, then the change request will fail.USAGE: sc preferrednode [service name] [node number] |
| 0x97 | 描述: 查询 Win32 服务的首选 NUMA 节点。 此设置仅对自身的进程服务有效。 如果此服务没有首选节点设置，则查询将失败。用法: sc qpreferrednode [service name] |
DESCRIPTION: Queries the preferred NUMA node for a Win32 service. This setting is valid only for own process services. If the service has no preferred node setting, then the query will fail.USAGE: sc qpreferrednode [service name] |
| 0x98 | 首选节点 : %1 |
PREFERRED NODE : %1 |
| 0x99 | [注意: 由于服务启动类型被禁用，因此触发器被禁用。] |
[NOTE: Since the service start type is disabled, the triggers are inactive.] |
| 0x9A | 防火墙端口事件 : %1 [端口打开] |
FIREWALL PORT EVENT : %1 [PORT OPEN] |
| 0x9B | 防火墙端口事件 : %1 [端口关闭] |
FIREWALL PORT EVENT : %1 [PORT CLOSE] |
| 0x9C | 组策略 : %1 [存在计算机策略] |
GROUP POLICY : %1 [MACHINE POLICY PRESENT] |
| 0x9D | 组策略 : %1 [存在用户策略] |
GROUP POLICY : %1 [USER POLICY PRESENT] |
| 0x9E | 名称: %1 服务 SID: %2状态: 非活动 |
NAME: %1 SERVICE SID: %2STATUS: Inactive |
| 0xA2 | 网络事件 : %1 [RPC 接口事件] |
NETWORK EVENT : %1 [RPC INTERFACE EVENT] |
| 0xA3 | 网络事件 : %1 [命名管道事件] |
NETWORK EVENT : %1 [NAMED PIPE EVENT] |
| 0xA6 | 自定义系统状态更改事件 : %1 |
CUSTOM SYSTEM STATE CHANGE EVENT : %1 |
| 0xA7 | 如果其他服务已将命名管道或 RPC 触发器用于与给定服务相同的终结点或接口，则可能会出现此错误。 |
This error may occur if another service is already using a Named Pipe or RPC trigger for the same endpoint or interface as thegiven service. |
| 0xA8 | 描述: 更改运行服务所用的帐户是否 使用管理的密码。 如果此设置为 \"true\"，则服务控制 管理器(SCM)将在服务启动时从 NetLogon 请求帐户密码。 如果此设置为 \"false\"，则 SCM 将使用 配置的帐户密码。用法: sc managedaccount [service name] [type]选项: type = |
DESCRIPTION: Changes whether the account in which the service runs uses a managed password. If this setting is \"true\", the Service Control Manager (SCM) will request the account password from NetLogon when starting the service. If this setting is \"false\", the SCM will use the configured account password.USAGE: sc managedaccount [service name] [type]OPTIONS: type = |
| 0xA9 | 管理的帐户: %1 |
ACCOUNT MANAGED : %1 |
| 0xAA | 描述: 查询为此服务配置的 帐户是否有管理的帐户密码。用法: sc qmanagedaccount [service name] |
DESCRIPTION: Queries whether the account configured for this service has a managed account password.USAGE: sc qmanagedaccount [service name] |
| 0xAB | 错误: 触发器数据值无效 |
ERROR: Invalid trigger data value |
| 0xAC | 描述: 查询是否将服务标记为在受保护的 进程中启动。请注意， 无法更改此设置。用法: sc qprotection [service name] |
DESCRIPTION: Queries whether the service is marked to start in a protected process. Note that this setting cannot be changed.USAGE: sc qprotection [service name] |
| 0xAD | 服务 %1 保护级别: 无。 |
SERVICE %1 PROTECTION LEVEL: NONE. |
| 0xAE | 服务 %1 保护级别: Windows。 |
SERVICE %1 PROTECTION LEVEL: WINDOWS. |
| 0xAF | 服务 %1 保护级别: Windows 简化保护。 |
SERVICE %1 PROTECTION LEVEL: WINDOWS LIGHT. |
| 0xB0 | 服务 %1 保护级别: 反恶意软件简化保护。 |
SERVICE %1 PROTECTION LEVEL: ANTIMALWARE LIGHT. |
| 0xB1 | 服务 %1 保护级别: 无效值。 |
SERVICE %1 PROTECTION LEVEL: INVALID VALUE. |
| 0xB2 | 说明: 查询通过指定的用户服务模板 创建的同一会话中当前用户的 用户服务实例。用法: sc quserservice |
DESCRIPTION: Queries for a user service instance for the current user in the same session created from the user service template specified.USAGE: sc quserservice |
| 0xB3 | 用户服务模板 %1，本地服务实例 %2。 |
USER SERVICE TEMPLATE %1, LOCAL SERVICE INSTANCE %2. |