Services & background infrastructure
How Windows launches, groups, isolates, and supervises long-running background components.
Official Microsoft docs
Closest official references related to this topic on Microsoft Learn.
Why it matters
Much of Windows functionality lives outside the desktop shell. Services host networking, logging, updates, security features, and background management tasks.
Mental model
A service is a managed long-running workload. The Service Control Manager decides when it starts, how it stops, and under what identity it runs.
Windows building blocks
Names and paths you can look for in Task Manager, Explorer, or documentation.
- Processservices.exe
Service Control Manager process
- ServiceService Control Manager
Starts and controls Windows services
Go one level deeper
Extra detail for readers who want more precision before opening a child topic.
- Services can run as shared (svchost), standalone, or in the user session depending on configuration.
- Failure actions (restart, reboot) are configured per service in the SCM database.
How it works
- 1The Service Control Manager reads configuration and starts services in the right order.
- 2Services often run inside shared host processes like svchost.exe.
- 3Each service has a lifetime, recovery policy, security context, and dependency chain.
Key terms
- SCM
- Service Control Manager; the central service orchestrator in Windows.
- svchost
- A shared host process that can run one or more Windows services.
- Session 0
- The isolated session where services run, separate from interactive desktop sessions.
Why many services appear under one process
Windows groups compatible services into shared hosts to reduce overhead and simplify lifecycle management.
Common misconception
A service is not just 'an app without a window'. It is managed by dedicated OS infrastructure with different identity and lifecycle rules.
Go deeper
You should read next
Ranked from your current topic, related links, branch depth, and any active guided path.
intermediate
Service Control Manager
The boot-time and runtime orchestrator for services and drivers.
Go deeper in this branch
intermediate
Service hosts
How Windows groups services inside host processes such as svchost.exe.
Go deeper in this branch
beginner
Processes & threads
How Windows represents work, isolates applications, and schedules execution.
Related topic
Related topics
Processes & threads
How Windows represents work, isolates applications, and schedules execution.
Access tokens
SIDs, privileges, impersonation, and the identity payload every process carries.
Startup & shutdown
How Windows goes from firmware to an interactive session, and how it tears systems down safely.