Where are services hosted by "svchost.exe -k LocalServiceNetworkRestricted" on Windows XP? What is the meaning of "-k LocalServiceNetworkRestricted" parameter?

"svchost.exe -k LocalServiceNetworkRestricted" command is used to invoke the svchost.exe program to load the DLL file for the given service specified in the registry.

"-k LocalServiceNetworkRestricted" is the process grouping parameter. It allows Windows to load multiple DLL files under a single shared svchost.exe process of the same group name.

In other words, all services that are launched by the same "svchost.exe -k LocalServiceNetworkRestricted" command will be running under a single shared process of svchost.exe.

The advantage of using a shared process is to save process resources. But services of a shared process have execution environment dependency. If one service is running into problem, all other services of the same shared process will be impacted.

Here is a list of services hosted by the shared process of "svchost.exe -k LocalServiceNetworkRestricted":

"DHCP Client - dhcpcore.dll" Service on Windows XP

"Windows Audio - Audiosrv.dll" Service on Windows XP

"Event Log - wevtsvc.dll" Service on Windows XP

⇒⇒Windows XP Services Tutorials