Vernalex.com - Welcome

Display Name (?):

Remote Registry

Short Name (?):

RemoteRegistry

Executable (?):

svchost.exe

Library (?):

regsvc.dll

Depends On (?):

Remote Procedure Call (RPC)

Supports (?):

None.

Description (?):

Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start.

OS (?):

2000 Professional, XP Home/Professional, Vista Home/Business, 2000 Server, Server 2003, Vista Server

Startup (?):

Default	Home	Workstation	Server	Minimal	Tweaked	Automatic
Automatic	Disabled	Automatic	Automatic	Disabled	Disabled	Disabled

Explanation (?):

The remote registry service is used in receiving connections from a remote system so that the host computer's registry can be read and modified. This is mostly only used in remote administration types programs that would be used on business and corporate networks. This service is a very severe security hole on all systems on a network of any sort, especially those on the Internet. Any user with remote access to your computer can modify your system's registry, which is Windows' setting databse, just by using your username and password, which can be guessed if given enough attempts. In any case you should definitely disable this service unless you know that you use it. If you do have a need for it then you should really be sure that you properly secure the computers that have it enabled. Set it to automatic if you need it.