Windows Remote Management (WS-Management) (WinRM) startup type, default configuration, and information
Registry Name:
WinRM
Display Name:
Windows Remote Management (WS-Management)
Description:
Windows Remote Management (WinRM) service implements the WS-Management protocol for remote management. WS-Management is a standard web services protocol used for remote software and hardware management. The WinRM service listens on the network for WS-Management requests and processes them. The WinRM Service needs to be configured with a listener using winrm.cmd command line tool or through Group Policy in order for it to listen over the network. The WinRM service provides access to WMI data and enables event collection. Event collection and subscription to events require that the service is running. WinRM messages use HTTP and HTTPS as transports. The WinRM service does not depend on IIS but is preconfigured to share a port with IIS on the same machine. The WinRM service reserves the /wsman URL prefix. To prevent conflicts with IIS, administrators should ensure that any websites hosted on IIS do not use the /wsman URL prefix.
Default Status:
Stopped
Default Startup Type:
Manual (Delayed Start)
Learn more about the different startup types of Windows services in Microsoft Windows.
Image Path:
C:\WINDOWS\System32\svchost.exe -k NetworkService -p
svchost.exe is a system process that hosts and manages Windows services running from DLL files rather than standalone executable files, allowing Windows to modularize and efficiently manage background tasks.
svchost.exe loads and runs Windows services, such as networking, Windows Update, audio, and many others. Multiple instances of svchost.exe can run simultaneously, each hosting different services. This helps with stability and security—if one service fails, it doesn't crash all services.
DLL File Path:
C:\WINDOWS\system32\WsmSvc.dll
Dependencies:
The service depends on the following system components to function properly:
- RPCSS
- HTTP
System components that depend on this service to function properly:
- None
Log On As:
NT AUTHORITY\NetworkService
Additional Information:
None at this time
Windows Service Startup Type:
In Microsoft Windows, Windows services can be configured with different startup types that determine how and when they are started:
- Automatic: The service starts automatically when Windows boots.
- Automatic (Delayed Start): The service starts automatically after the system has finished booting and initial services have started, helping improve startup performance.
- Manual: The service does not start automatically. It must be started by a user or another process when needed.
- Manual (Trigger Start): The service starts manually or in response to specific system events (triggers), such as device insertion or network changes.
- Disabled: The service is prevented from starting, even if required by the system or an application.