4.9. Windows core MSRPC interfaces
Prev
Chapter 4. MSRPC, a.k.a. Microsoft implementation of DCE RPC
Next
4.9. Windows core MSRPC interfaces
4.9.1. lsarpc interface
4.9.2. samr interface
4.9.3. netlogon interface
4.9.4. drsuapi interface
4.9.5. dssetup interface
4.9.6. eventlog interface
4.9.7. pnp interface
4.9.8. srvsvc interface
4.9.9. svcctl interface
4.9.10. winreg interface
4.9.11. wkssvc interface
Windows NT and Active Directory domains are built on the following MSRPC interfaces:
Section 4.9.1, “lsarpc interface”
: Local Security Authority (LSA) RPC service
Section 4.9.2, “samr interface”
: Security Account Manager RPC service
Section 4.9.3, “netlogon interface”
: Netlogon RPC service
Section 4.9.4, “drsuapi interface”
: Active Directory replication service
Section 4.9.5, “dssetup interface”
: Active Directory setup
Remote administration of Windows services is implemented using the following MSRPC interfaces:
Section 4.9.6, “eventlog interface”
: Eventlog service management
Section 4.9.7, “pnp interface”
: Plug and Play service management
Section 4.9.8, “srvsvc interface”
: Server service management
Section 4.9.9, “svcctl interface”
: Windows services management
Section 4.9.10, “winreg interface”
: Windows remote registry access
Section 4.9.11, “wkssvc interface”
: Workstation service management
Windows Vista introduced the following MSRPC core interfaces:
Section 4.12.8, “Windows event logging service”
: Windows event logging service management