Part 5 · Windows Services

Chapter 12 · Windows Services

2 min read

Status: ✅ COMPLETE

Scope: The hidden background programs of Windows: what a service is, how the Service Control Manager runs them, startup types, dependencies, accounts, permissions, recovery, failures, and the exact chain that starts one
Time to complete: 75–100 minutes of reading + lab
Prerequisites: Chapter 6 (Boot Process), Chapter 8 (System Processes and Registry), Chapter 9 (Processes), Chapter 11 (Task Manager)
What you'll know after: What every entry in services.msc means, how Windows starts and watches services, which account and permissions they use, and how to find out why one will not start

INTRODUCTION

When Windows finishes starting, you see a desktop. But long before you sign in, and long after you close your last app, dozens of small programs are already working: keeping the clock right, finding the network, printing, scanning for malware, installing updates. These are services.

This chapter lifts the lid. It uses plain words, tables and simple diagrams (this topic is about ideas and rules, not parts you can photograph). Every technical term is explained when it first appears. Most of the lab is look-only, because changing services you do not understand can break a PC.

This chapter explains:

  • What a service is and how it differs from a normal program
  • The Service Control Manager (services.exe) and the registry database it reads
  • The startup types: Automatic, Delayed, Manual, Disabled and Trigger Start
  • How dependencies decide start order and spread failures
  • Which accounts services use and why weaker is safer
  • Who may start, stop or change a service, and how Windows hardens them
  • How Windows restarts crashed services and how to read the error codes and event logs
  • The step-by-step chain from "start" to "running", including svchost.exe

CHAPTER OUTLINE

Chapter Status: Complete
Estimated reading time: 85 minutes
Practical time: 30 minutes
Knowledge check time: 30 minutes