DCOM Server Process Launcher

Description:

The RPC and DCOM features have been split into two services. This one handles all local requests and runs with Local System privileges. Remote Procedure Call (RPC) handles remote requests and runs with limited Network Service privilege. If an attacker compromises the Remote Procedure Call (RPC), then it will only have limited access to the machine.

Note the following things will fail if this service is not running:

  • The builtin defrag will fail to work, and if running Defrag.exe from the command line one gets this error:

    Windows cannot connect to the Disk Defragmenter engine

  • System Information (MsInfo32) will fail to work and give this error:

    Can’t Collect Information
    A network error occurred in connecting to Windows Management Instrumentation. Ensure that your network connection is functioning properly.

  • If Windows Firewall is enabled, then it will fail to start and all incomming traffic will be blocked. More Info MS KB892199
  • Disk Management will fail and give this error:

    The RPC server is unavailable

  • Media Player 10 will fail to burn and sync and give this error:

    The RPC server is unavailable

  • The install of new applications will fail and give this error:

    The InstallShield Engine (iKernel.exe) could not be launched.
    The RPC server is unavailable.

  • Automatic
Default State:
  • Win8/Win7/Vista: Automatic
  • WinXP SP2: Automatic
  • Win2k3 SP1: Automatic
Process Name:
Supports:
Depends:
  • None