Security\Security Subkey

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

HKLM\SYSTEM\CurrentControlSet\Services\service-name\Security

Data type Range Default value

REG_BINARY

Security descriptor

(None)

Description

Stores the security descriptor for the service. A security descriptor specifies the security attributes of the service, including the security identifier (SID) and access control lists associated with the service.

Applications view and edit this entry by using the QueryServiceObjectSecurity() and SetServiceObjectSecurity() Win32 APIs.

Change Method

To change the value of this entry, you can use the Services snap-in. You can also use the ChangeServiceConfig API or use SC, a tool included in Windows Server 2003.

Note

  • Not all services have this entry. In its absence, the Security Configuration Manager uses a default security descriptor.