M  E  N  U
 - Guides
 - Links
 - Tools
 - Themes


Services Utility: Remote Registry Service

Display Name (?): Remote Registry
Short Name (?): RemoteRegistry
Executable (?): svchost.exe
Library (?): regsvc.dll
Depends On (?): Remote Procedure Call (RPC)
Supports (?): None.
Description (?): Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start.
OS (?): 2000 Professional, XP Home/Professional, Vista Home/Business, 2000 Server, Server 2003, Vista Server
Startup (?):

Explanation (?):

The remote registry service is used in receiving connections from a remote system so that the host computer's registry can be read and modified. This is mostly only used in remote administration types programs that would be used on business and corporate networks. This service is a very severe security hole on all systems on a network of any sort, especially those on the Internet. Any user with remote access to your computer can modify your system's registry, which is Windows' setting databse, just by using your username and password, which can be guessed if given enough attempts. In any case you should definitely disable this service unless you know that you use it. If you do have a need for it then you should really be sure that you properly secure the computers that have it enabled. Set it to automatic if you need it.

Please visit /tools/services/ for the complete Services utility.