
Microsoft
®
Windows Server
™
2003 White Paper
Windows NT 4.0 Server Upgrade Guide 88
%systemroot%\System32 folder. At startup, Svchost.exe checks the services portion of the
registry to construct a list of services that it needs to load. Multiple instances of Svchost.exe can
run at the same time. Each Svchost.exe session can contain a grouping of services so that
separate services can run depending on how and where Svchost.exe is started. This flexibility
provides better control and debugging.
Svchost.exe groups are identified in the following registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost
Each value under this key represents a separate Svchost group and appears as a separate
instance when you are viewing active processes. Each value is a REG_MULTI_SZ value and
contains the services that run under that Svchost group, as Figure 39 shows. Each Svchost group
can contain one or more service_names extracted from the following registry key, whose
Parameters key contains a ServiceDLL value:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Service
Figure 39. Svchost key in registry
It is helpful to know what processes are running on a computer. By opening the Processes tab in
the Task Manager application, a list of currently running processes can be viewed. Typically more
than one Svchost.exe process will be running on a healthy Windows Server 2003 server as Figure
40 shows. Through the use of these registry locations, you can understand the purpose of each
instance of Svchost.exe.
Komentarze do niniejszej Instrukcji