In Windows XP, the IPsec Services service runs one RPC service on the following endpoints:

E:\>ifids -p ncalrpc -e ipsec jamal
Interfaces: 8

[...]

  12345678-1234-abcd-ef00-0123456789ab v1.0


E:\>ifids -p ncacn_np -e \pipe\ipsec \\.

Interfaces: 8

[...]

  12345678-1234-abcd-ef00-0123456789ab v1.0

In Windows Server 2003, the RPC service does not seem to set a specific endpoint. If the HKLM\SYSTEM\CCS\Services\PolicyAgent\EnableRemoteMgmt registry value is set to 0 or is not present, the RPC security callback function prevents remote access to this interface.

In Windows Vista, if the EnableRemoteMgmt registry value is set (it is not set by default), the IPsec service registers a named pipe endpoint with a randomly-generated name:

C:\> rpcdump 127.0.0.1

[...]

IfId: 12345678-1234-abcd-ef00-0123456789ab v1.0
Annotation: IPSec Policy Agent endpoint
UUID: 00000000-0000-0000-0000-000000000000
Binding: ncacn_np:127.0.0.1[\\pipe\\d58b3ca461625de0]

[...]

C:\>ifids -p ncacn_np -e \pipe\d58b3ca461625de0 \\.
Interfaces: 1
  12345678-1234-abcd-ef00-0123456789ab v1.0