Windows RPC Interface Database

A simple database of Windows RPC interfaces, by James Spencer

Protocols by Service

Role/Feature Type Protocols
Active Directory Domain Services (AD DS) Roles
Active Directory Certificate Services (AD CS) Roles
Active Directory Federation Services (AD FS) Roles
Active Directory Lightwight Directory Services (AD LDS) Roles
DHCP Server Roles
DNS Server Roles
Fax Server Roles
File Server Roles
DFS (Distributed Filesystem) Namespaces Roles
DFS (Distributed Filesystem) Replication Roles
File Server Resource Manager Roles
File Server VSS Agent Roles
iSCSI Target Server Roles
iSCSI Target Storage Provider (VDS and VSS) Roles
Server for NFS Roles
Print & Document Services Roles
Network Policy Server Roles
Web Server (IIS) Roles
Volume Activation Services Roles
Windows Deployment Services Roles
Windows Server Update Services Roles
Failover Clustering Features
Message Queuing Features
Terminal Services Features
Disk Management BuiltIn
Event Log BuiltIn
Windows Firewall BuiltIn
Performance Counters BuiltIn
Remote Assistance BuiltIn
WINS BuiltIn
Remote Registry BuiltIn
Remote Shutdown BuiltIn
Services BuiltIn
Task Scheduler BuiltIn
Virtual Smartcard BuiltIn
Telnet BuiltIn
Windows Time Service BuiltIn
Windows Management Instrumentation BuiltIn
Microsoft Exchange Server Other

Protocols

MS-EPM: Endpoint Mapper Protocol

RPC Interface Definitions

Type Interface Description
DCE/RPC e1af8308-5d1f-11c9-91a4-08002b14a0fa None

MC-CCFG: Server Cluster: Configuration (ClusCfg) Protocol

The Server Cluster: Configuration (ClusCfg) Protocol enables users to restore a node that is no longer a configured member of a failover cluster back to its pre-cluster installation state.

RPC Interface Definitions

Type Interface Description
DCE/RPC 52C80B95-C1AD-4240-8D89-72E9FA84025E IClusCfgAsyncEvictCleanup

Associated Roles/Features

Service
Failover Clustering

MC-IISA: Internet Information Services (IIS) Application Host COM Protocol

The Internet Information Services (IIS) Application Host COM Protocol provides read/write access to administrative configuration data that is located on a remote server.

RPC Interface Definitions

Type Interface Description
DCE/RPC FA7660F6-7B3F-4237-A8BF-ED0AD0DCBBD9 IAppHostWritableAdminManager
DCE/RPC 450386DB-7409-4667-935E-384DBBEE2A9E IAppHostPropertySchema
DCE/RPC 832A32F7-B3EA-4B8C-B260-9A2923001184 IAppHostConfigLocationCollection
DCE/RPC 2D9915FB-9D42-4328-B782-1B46819FAB9E IAppHostMethodSchema
DCE/RPC 0DD8A158-EBE6-4008-A1D9-B7ECC8F1104B IAppHostSectionGroup
DCE/RPC 0716CAF8-7D05-4A46-8099-77594BE91394 IAppHostConstantValue
DCE/RPC B80F3C42-60E0-4AE0-9007-F52852D3DBED IAppHostMethodInstance
DCE/RPC 0344CDDA-151E-4CBF-82DA-66AE61E97754 IAppHostElementSchemaCollection
DCE/RPC 8BED2C68-A5FB-4B28-8581-A0DC5267419F IAppHostPropertySchemaCollection
DCE/RPC 7883CA1C-1112-4447-84C3-52FBEB38069D IAppHostMethod
DCE/RPC 09829352-87C2-418D-8D79-4133969A489D IAppHostChangeHandler
DCE/RPC 5B5A68E6-8B9F-45E1-8199-A95FFCCDFFFF IAppHostConstantValueCollection
DCE/RPC 9BE77978-73ED-4A9A-87FD-13F09FEC1B13 IAppHostAdminManager
DCE/RPC ED35F7A1-5024-4E7B-A44D-07DDAF4B524D IAppHostProperty
DCE/RPC 4DFA1DF3-8900-4BC7-BBB5-D1A458C52410 IAppHostConfigException
DCE/RPC 370AF178-7758-4DAD-8146-7391F6E18585 IAppHostConfigLocation
DCE/RPC C8550BFF-5281-4B1E-AC34-99B6FA38464D IAppHostElementCollection
DCE/RPC 08A90F5F-0702-48D6-B45F-02A9885A9768 IAppHostChildElementCollection
DCE/RPC 8F6D760F-F0CB-4D69-B5F6-848B33E9BDC6 IAppHostConfigManager
DCE/RPC E7927575-5CC3-403B-822E-328A6B904BEE IAppHostPathMapper
DCE/RPC DE095DB1-5368-4D11-81F6-EFEF619B7BCF IAppHostCollectionSchema
DCE/RPC 64FF8CCC-B287-4DAE-B08A-A72CBF45F453 IAppHostElement
DCE/RPC EAFE4895-A929-41EA-B14D-613E23F62B71 IAppHostPropertyException
DCE/RPC EF13D885-642C-4709-99EC-B89561C6BC69 IAppHostElementSchema
DCE/RPC 0191775E-BCFF-445A-B4F4-3BDDA54E2816 IAppHostPropertyCollection
DCE/RPC 31A83EA0-C0E4-4A2C-8A01-353CC2A4C60A IAppHostMappingExtension
DCE/RPC D6C7CD8F-BB8D-4F96-B591-D3A5F1320269 IAppHostMethodCollection
DCE/RPC ADA4E6FB-E025-401E-A5D0-C3134A281F07 IAppHostConfigFile
DCE/RPC B7D381EE-8860-47A1-8AF4-1F33B2B1F325 IAppHostSectionDefinitionCollection
DCE/RPC C5C04795-321C-4014-8FD6-D44658799393 IAppHostSectionDefinition

Associated Roles/Features

Service
Web Server (IIS)

MC-MQAC: Message Queuing (MSMQ): ActiveX Client Protocol

The Message Queuing (MSMQ): ActiveX Client Protocol is a collection of Distributed Component Object Model (DCOM) interfaces that expose message queuing functionality for use by client applications.

RPC Interface Definitions

Type Interface Description
DCE/RPC EBA96B22-2168-11D3-898C-00E02C074F6B None
DCE/RPC 12A30900-7300-11D2-B0E6-00E02C074F6B None
DCE/RPC EBA96B24-2168-11D3-898C-00E02C074F6B None
DCE/RPC 2CE0C5B0-6E67-11D2-B0E6-00E02C074F6B None
DCE/RPC EBA96B0E-2168-11D3-898C-00E02C074F6B None
DCE/RPC B196B285-BAB4-101A-B69C-00AA00341D07 None
DCE/RPC 39CE96FE-F4C5-4484-A143-4C2D5D324229 None
DCE/RPC D7D6E07F-DCCD-11D0-AA4B-0060970DEBAE None
DCE/RPC EBA96B1A-2168-11D3-898C-00E02C074F6B None
DCE/RPC EBA96B18-2168-11D3-898C-00E02C074F6B None
DCE/RPC EBA96B23-2168-11D3-898C-00E02C074F6B None
DCE/RPC EBA96B14-2168-11D3-898C-00E02C074F6B None
DCE/RPC FD174A80-89CF-11D2-B0F2-00E02C074F6B None
DCE/RPC F72B9031-2F0C-43E8-924E-E6052CDC493F None
DCE/RPC D7D6E072-DCCD-11D0-AA4B-0060970DEBAE None
DCE/RPC D7D6E075-DCCD-11D0-AA4B-0060970DEBAE None
DCE/RPC 0188401C-247A-4FED-99C6-BF14119D7055 None
DCE/RPC EBA96B15-2168-11D3-898C-00E02C074F6B None
DCE/RPC D7D6E07C-DCCD-11D0-AA4B-0060970DEBAE None
DCE/RPC BE5F0241-E489-4957-8CC4-A452FCF3E23E None
DCE/RPC EBA96B1C-2168-11D3-898C-00E02C074F6B None
DCE/RPC D7D6E077-DCCD-11D0-AA4B-0060970DEBAE None
DCE/RPC D7D6E078-DCCD-11D0-AA4B-0060970DEBAE None
DCE/RPC B196B284-BAB4-101A-B69C-00AA00341D07 None
DCE/RPC D7D6E073-DCCD-11D0-AA4B-0060970DEBAE None
DCE/RPC D7D6E07D-DCCD-11D0-AA4B-0060970DEBAE None
DCE/RPC EBA96B1B-2168-11D3-898C-00E02C074F6B None
DCE/RPC D7D6E079-DCCD-11D0-AA4B-0060970DEBAE None
DCE/RPC D7D6E084-DCCD-11D0-AA4B-0060970DEBAE None
DCE/RPC EBA96B1F-2168-11D3-898C-00E02C074F6B None
DCE/RPC 33B6D07E-F27D-42FA-B2D7-BF82E11E9374 None
DCE/RPC D7D6E07A-DCCD-11D0-AA4B-0060970DEBAE None
DCE/RPC 0188AC2F-ECB3-4173-9779-635CA2039C72 None
DCE/RPC D7D6E085-DCCD-11D0-AA4B-0060970DEBAE None
DCE/RPC EF0574E0-06D8-11D3-B100-00E02C074F6B None
DCE/RPC D7D6E086-DCCD-11D0-AA4B-0060970DEBAE None
DCE/RPC B196B286-BAB4-101A-B69C-00AA00341D07 None
DCE/RPC D9933BE0-A567-11D2-B0F3-00E02C074F6B None
DCE/RPC D7AB3341-C9D3-11D1-BB47-0080C7C5A2C0 None
DCE/RPC D7D6E082-DCCD-11D0-AA4B-0060970DEBAE None
DCE/RPC 0FB15084-AF41-11CE-BD2B-204C4F4F5020 None
DCE/RPC D7D6E083-DCCD-11D0-AA4B-0060970DEBAE None
DCE/RPC EBA96B13-2168-11D3-898C-00E02C074F6B None
DCE/RPC EBA96B1D-2168-11D3-898C-00E02C074F6B None
DCE/RPC EBA96B17-2168-11D3-898C-00E02C074F6B None
DCE/RPC EBA96B20-2168-11D3-898C-00E02C074F6B None
DCE/RPC D7D6E074-DCCD-11D0-AA4B-0060970DEBAE None
DCE/RPC 7FBE7759-5760-444D-B8A5-5E7AB9A84CCE None
DCE/RPC B196B287-BAB4-101A-B69C-00AA00341D07 None
DCE/RPC EBA96B12-2168-11D3-898C-00E02C074F6B None
DCE/RPC EBA96B1E-2168-11D3-898C-00E02C074F6B None
DCE/RPC D7D6E07E-DCCD-11D0-AA4B-0060970DEBAE None
DCE/RPC D7D6E081-DCCD-11D0-AA4B-0060970DEBAE None
DCE/RPC D7D6E07B-DCCD-11D0-AA4B-0060970DEBAE None
DCE/RPC 64C478FB-F9B0-4695-8A7F-439AC94326D3 None
DCE/RPC EBA96B16-2168-11D3-898C-00E02C074F6B None
DCE/RPC EBA96B19-2168-11D3-898C-00E02C074F6B None
DCE/RPC EBA96B10-2168-11D3-898C-00E02C074F6B None
DCE/RPC EBA96B21-2168-11D3-898C-00E02C074F6B None
DCE/RPC D7D6E076-DCCD-11D0-AA4B-0060970DEBAE None
DCE/RPC EBA96B0F-2168-11D3-898C-00E02C074F6B None
DCE/RPC EBA96B11-2168-11D3-898C-00E02C074F6B None
DCE/RPC D7D6E080-DCCD-11D0-AA4B-0060970DEBAE None

Associated Roles/Features

Service
Message Queuing

MS-ADTG: Remote Data Services (RDS) Transport Protocol

RPC Interface Definitions

Type Interface Description
DCE/RPC 0EAC4842-8763-11CF-A743-00AA00A3F00D IDataFactory
DCE/RPC 070669EB-B52F-11D1-9270-00C04FBBBFB3 IDataFactory2
DCE/RPC 4639DB2A-BFC5-11D2-9318-00C04FBBBFB3 IDataFactory3

MS-BKRP: BackupKey Remote Protocol

This protocol encrypts secret values (such as cryptographic keys) so they can be backed up to storage that is not specially protected, and enables decryption of such values if recovery is necessary.

RPC Interface Definitions

Type Interface Description
DCE/RPC 3DDE7C30-165D-11D1-AB8F-00805F14DB40 BackupKey
Named Pipe \\pipe\protected_storage None
Named Pipe \\pipe\ntsvcs None

Associated Roles/Features

Service
Active Directory Domain Services (AD DS)

MS-BPAU: Background Intelligent Transfer Service (BITS) Peer-Caching: Peer Authentication Protocol

The BITS Peer-Caching: Peer Authentication Protocol allows hosts in an Active Directory domain to exchange self-signed X.509 certificates with enough information to associate those certificates securely with a domain account.

RPC Interface Definitions

Type Interface Description
DCE/RPC E3D0D746-D2AF-40FD-8A7A-0D7078BB7092 BitsPeerAuth

MS-BRWSA: Common Internet File System (CIFS) Browser Auxiliary Protocol

The Common Internet File System (CIFS) Browser Auxiliary Protocol, which is used by the master browser server to query configuration information for the domains from the domain master browser server.

RPC Interface Definitions

Type Interface Description
DCE/RPC 6BFFD098-A112-3610-9833-012892020162 MS-BRWSA

Associated Roles/Features

Service
Active Directory Domain Services (AD DS)

MS-CAPR: Central Access Policy Identifier (ID) Retrieval Protocol

The Central Access Policy ID Retrieval (CAPR) Protocol is designed to allow an administrative tool running on one computer to remotely query the set of central access control policies configured on another computer.

RPC Interface Definitions

Type Interface Description
DCE/RPC AFC07E2E-311C-4435-808C-C483FFEEC7C9 lsacap

MS-CMPO: MSDTC Connection Manager: OleTx Transports Protocol

The MSDTC Connection Manager: OleTx Transports Protocol is a peer-to-peer messaging protocol layered over a bidirectional pair of RPC connections.

RPC Interface Definitions

Type Interface Description
DCE/RPC 906B0CE0-C70B-1067-B317-00DD010662DA IXnRemote

MS-CMRP: Failover Cluster: Management API (ClusAPI) Protocol

The Failover Cluster: Management API (ClusAPI) Protocol is an RPC-based protocol that is used for remotely managing a cluster.

RPC Interface Definitions

Type Interface Description
DCE/RPC B97DB8B2-4C63-11CF-BFF6-08002BE23F2F MS-CMRP

Associated Roles/Features

Service
Failover Clustering

MS-COM: Component Object Model Plus (COM+) Protocol

Specifies the Component Object Model Plus (COM+) Protocol, which consists of a DCOM interface (and DCOM protocol extensions) that is used for adding transactions, implementing synchronization, managing multiple object class configurations, enforcing security, and providing additional functionality and attributes to DCOM-based distributed object applications.

RPC Interface Definitions

Type Interface Description
DCE/RPC 97199110-DB2E-11D1-A251-0000F805CA53 ITransactionStream (IID_ITransactionStream)

MS-COMA: Component Object Model Plus (COM+) Remote Administration Protocol

The Component Object Model Plus (COM+) Remote Administration Protocol enables remote clients to register, import, remove, configure, control, and monitor components and conglomerations for an Object Request Broker (ORB).

RPC Interface Definitions

Type Interface Description
DCE/RPC 0E3D6630-B46B-11D1-9D2D-006008B0E5CA ICatalogTableRead
DCE/RPC 3F3B1B86-DBBE-11D1-9DA6-00805F85CFE3 IContainerControl
DCE/RPC 7F43B400-1A0E-4D57-BBC9-6B0C65F7A889 IAlternateLaunch
DCE/RPC 456129E2-1078-11D2-B0F9-00805FC73204 ICatalogUtils
DCE/RPC 8DB2180E-BD29-11D1-8B7E-00C04FD7A924 IRegister
DCE/RPC 182C40FA-32E4-11D0-818B-00A0C9231C29 ICatalogSession
DCE/RPC 971668DC-C3FE-4EA1-9643-0C7230F494A1 IRegister2
DCE/RPC 98315903-7BE5-11D2-ADC1-00A02463D6E7 IReplicationUtil
DCE/RPC 6C935649-30A6-4211-8687-C4C83E5FE1C7 IContainerControl2
DCE/RPC F131EA3E-B7BE-480E-A60D-51CB2785779E IExport2
DCE/RPC 1F7B1697-ECB2-4CBB-8A0E-75C427F4A6F0 IImport2
DCE/RPC A8927A41-D3CE-11D1-8472-006008B0E5CA ICatalogTableInfo
DCE/RPC CFADAC84-E12C-11D1-B34C-00C04F990D54 IExport
DCE/RPC 1D118904-94B3-4A64-9FA6-ED432666A7B9 ICatalog64BitSupport
DCE/RPC 47CDE9A1-0BF6-11D2-8016-00C04FB9988E ICapabilitySupport
DCE/RPC 0E3D6631-B46B-11D1-9D2D-006008B0E5CA ICatalogTableWrite
DCE/RPC C2BE6970-DF9E-11D1-8B87-00C04FD7A924 IImport
DCE/RPC C726744E-5735-4F08-8286-C510EE638FB6 ICatalogUtils2

MS-COMEV: Component Object Model Plus (COM+) Event System Protocol

The Component Object Model Plus (COM+) Event System Protocol is a protocol that exposes DCOM interfaces for storing and managing configuration data for publishers of events and their respective subscribers on remote computers. This protocol also specifies how to get specific information about a publisher and its subscribers.

RPC Interface Definitions

Type Interface Description
DCE/RPC FB2B72A0-7A68-11D1-88F9-0080C7D771BF IEventClass
DCE/RPC FB2B72A1-7A68-11D1-88F9-0080C7D771BF IEventClass2
DCE/RPC 7FB7EA43-2D76-4EA8-8CD9-3DECC270295E IEventClass3
DCE/RPC 4E14FB9F-2E22-11D1-9964-00C04FBBB345 IEventSystem
DCE/RPC 99CC098F-A48A-4E9C-8E58-965C0AFC19D5 IEventSystem2
DCE/RPC 4A6B0E15-2E38-11D1-9965-00C04FBBB345 IEventSubscription
DCE/RPC 4A6B0E16-2E38-11D1-9965-00C04FBBB345 IEventSubscription2
DCE/RPC FBC1D17D-C498-43A0-81AF-423DDD530AF6 IEventSubscription3
DCE/RPC F89AC270-D4EB-11D1-B682-00805FC79216 IEventObjectCollection
DCE/RPC A0E8F27A-888C-11D1-B763-00C04FB926AF IEventSystemInitialize
DCE/RPC F4A07D63-2E25-11D1-9964-00C04FBBB345 IEnumEventObject

MS-COMT: Component Object Model Plus (COM+) Event System Protocol

The Component Object Model Plus (COM+) Tracker Service Protocol enables clients to monitor running instances of components.

RPC Interface Definitions

Type Interface Description
DCE/RPC B60040E0-BCF3-11D1-861D-0080C729264D IGetTrackingData
DCE/RPC 23C9DD26-2355-4FE2-84DE-F779A238ADBD IProcessDump
DCE/RPC 4E6CDCC9-FB25-4FD5-9CC5-C9F4B6559CEC IComTrackingInfoEvents

MS-CSRA: Certificate Services Remote Administration Protocol

The Certificate Services Remote Administration Protocol consists of a set of Distributed Component Object Model (DCOM) interfaces that enable administrative tools to configure the state and policy of a certification authority (CA) on a server.

RPC Interface Definitions

Type Interface Description
DCE/RPC D99E6E71-FC88-11D0-B498-00A0C90312F3 ICertAdminD
DCE/RPC 7FE0D935-DDA6-443F-85D0-1CFB58FE41DD ICertAdminD2

Associated Roles/Features

Service
Active Directory Certificate Services (AD CS)

MS-CSVP: Failover Cluster: Setup and Validation Protocol (ClusPrep)

The Failover Cluster: Setup and Validation Protocol (ClusPrep) remotely configures cluster nodes, cleans up cluster nodes, and validates that hardware and software settings are compatible with Failover Clustering.

RPC Interface Definitions

Type Interface Description
DCE/RPC 491260B5-05C9-40D9-B7F2-1F7BDAE0927F IClusterSetup
DCE/RPC E3C9B851-C442-432B-8FC6-A7FAAFC09D3B IClusterUpdate
DCE/RPC D6105110-8917-41A5-AA32-8E0AA2933DC9 IClusterCleanup
DCE/RPC 85923CA7-1B6B-4E83-A2E4-F5BA3BFBB8A3 IClusterLog
DCE/RPC F1D6C29C-8FBE-4691-8724-F6D8DEAEAFC8 IClusterFirewall
DCE/RPC 12108A88-6858-4467-B92F-E6CF4568DFB6 IClusterStorage2
DCE/RPC 11942D87-A1DE-4E7F-83FB-A840D9C5928D IClusterStorage3
DCE/RPC 2931C32C-F731-4C56-9FEB-3D5F1C5E72BF IClusterNetwork2
DCE/RPC C72B09DB-4D53-4f41-8DCC-2D752AB56F7C ClusterStorage2
DCE/RPC E1568352-586D-43e4-933F-8E6DC4DE317A ClusterNetwork2
DCE/RPC A6D3E32B-9814-4409-8DE3-CFA673E6D3DE ClusterCleanup
DCE/RPC 04D55210-B6AC-4248-9E69-2A569D1D2AB6 ClusterSetup
DCE/RPC 88E7AC6D-C561-4F03-9A60-39DD768F867D ClusterLog
DCE/RPC 3CFEE98C-FB4B-44C6-BD98-A1DB14ABCA3F ClusterFirewall
DCE/RPC 4142DD5D-3472-4370-8641-DE7856431FB0 ClusterUpdate

Associated Roles/Features

Service
Failover Clustering

MS-DCOM: Distributed Component Object Model (DCOM) Remote Protocol

The Distributed Component Object Model (DCOM) Remote Protocol exposes application objects via remote procedure calls (RPCs) and consists of a set of extensions layered on the Microsoft Remote Procedure Call Extensions.

RPC Interface Definitions

Type Interface Description
DCE/RPC 00000131-0000-0000-C000-000000000046 IRemUnknown
DCE/RPC 4D9F4AB8-7D1C-11CF-861E-0020AF6E7C57 IActivation
DCE/RPC 00000143-0000-0000-C000-000000000046 IRemUnknown2
DCE/RPC 000001A0-0000-0000-C000-000000000046 IRemoteSCMActivator
DCE/RPC 99FCFEC4-5260-101B-BBCB-00AA0021347A IObjectExporter
DCE/RPC 00000000-0000-0000-C000-000000000046 IUnknown

MS-DFSNM: Distributed File System (DFS): Namespace Management Protocol

Specifies the Distributed File System (DFS): Namespace Management Protocol, which provides an RPC interface for administering DFS configurations. The client is an application that issues method calls on the RPC interface to administer DFS. The server is a DFS service that implements support for this RPC interface for administering DFS.

RPC Interface Definitions

Type Interface Description
DCE/RPC 4FC742E0-4A10-11CF-8273-00AA004AE673 MS-DFSNM
Named Pipe \\pipe\netdfs None

Associated Roles/Features

Service
Active Directory Domain Services (AD DS)
DFS (Distributed Filesystem) Namespaces

MS-DFSRH: DFS Replication Helper Protocol

The DFS Replication Helper Protocol is made up of a set of distributed component object model (DCOM) interfaces for configuring and monitoring DFS Replication Helper Protocols on a server.

RPC Interface Definitions

Type Interface Description
DCE/RPC E65E8028-83E8-491B-9AF7-AAF6BD51A0CE IServerHealthReport
DCE/RPC 20D15747-6C48-4254-A358-65039FD8C63C IServerHealthReport2
DCE/RPC 4BB8AB1D-9EF9-4100-8EB6-DD4B4E418B72 IADProxy
DCE/RPC C4B0C7D9-ABE0-4733-A1E1-9FDEDF260C7A IADProxy2

Associated Roles/Features

Service
DFS (Distributed Filesystem) Replication

MS-DHCPM: Dynamic Host Configuration Protocol (DHCP) Server Management Protocol

The Microsoft Dynamic Host Configuration Protocol (DHCP) Server Management Protocol, defines the RPC interfaces that provide methods for remotely accessing and administering the DHCP server. This protocol is a client and server protocol based on RPC that is used in the configuration, management, and monitoring of a DHCP server.

RPC Interface Definitions

Type Interface Description
DCE/RPC 6BFFD098-A112-3610-9833-46C3F874532D dhcpsrv
DCE/RPC 5B821720-F63B-11D0-AAD2-00C04FC324DB dhcpsrv2
Named Pipe \\pipe\dhcpserver None

Associated Roles/Features

Service
DHCP Server

MS-DLTM: Distributed Link Tracking: Central Manager Protocol

The Distributed Link Tracking: Central Manager Protocol works with the Distributed Link Tracking (DLT) Workstation Protocol to discover the new location of a file that has moved. DLT can determine whether the file has moved on a mass-storage device, within a computer, or between computers in a network. The DLT Central Manager Protocol keeps track of file and volume moves and other relevant information from participating computers in order to provide this information in response to workstation queries.

RPC Interface Definitions

Type Interface Description
DCE/RPC 4DA1C422-943D-11D1-ACAE-00C04FC2AA3F MS-DLTM

MS-DLTW: Distributed Link Tracking: Workstation Protocol

The Distributed Link Tracking: Workstation Protocol works with the Distributed Link Tracking (DLT) Central Manager Protocol to discover the new location of a file that has moved. DLT can determine whether the file has moved on a mass-storage device, within a computer, or between computers in a network.

RPC Interface Definitions

Type Interface Description
DCE/RPC 300F3532-38CC-11D0-A3F0-0020AF6B0ADD MS-DLTW
Named Pipe \\pipe\ntsvcs None
Named Pipe \\pipe\trkwks None

MS-DMRP: Disk Management Remote Protocol

The Disk Management Remote Protocol is a set of Distributed Component Object Model (DCOM) interfaces that manages storage objects on a machine.

RPC Interface Definitions

Type Interface Description
DCE/RPC D2D79DF5-3400-11D0-B40B-00AA005FF586 IVolumeClient (dmintf)
DCE/RPC 3A410F21-553F-11D1-8E5E-00A0C92C9D5D IDMRemoteServer (dmintf)
DCE/RPC D2D79DF7-3400-11D0-B40B-00AA005FF586 IDMNotify (dmintf)
DCE/RPC 4BDAFC52-FE6A-11D2-93F8-00105A11164A IVolumeClient2 (dmintf)
DCE/RPC DEB01010-3A37-4D26-99DF-E2BB6AE3AC61 IVolumeClient4 (dmintf3)
DCE/RPC 135698D2-3A37-4D26-99DF-E2BB6AE3AC61 IVolumeClient3 (dmintf3)

Associated Roles/Features

Service
Disk Management

MS-DNSP: Domain Name Service (DNS) Server Management

The Domain Name Service (DNS) Server Management Protocol defines the RPC interfaces that provide methods for remotely accessing and administering a DNS server. It is a client and server protocol based on RPC that is used in the configuration, management, and monitoring of a DNS server.

RPC Interface Definitions

Type Interface Description
DCE/RPC 50ABC2A4-574D-40B3-9D66-EE4FD5FBA076 dnsserver
Named Pipe \\pipe\dnsserver None

Associated Roles/Features

Service
DNS Server

MS-DRSR: Directory Replication Service (DRS) Remote Protocol

The Directory Replication Service (DRS) Remote Protocol is an RPC protocol for replication and management of data in Active Directory.

RPC Interface Definitions

Type Interface Description
DCE/RPC 7C44D7D4-31D5-424C-BD5E-2B3E1F323D22 dsaop
DCE/RPC E3514235-4B06-11D1-AB04-00C04FC2DCD2 drsuapi

Associated Roles/Features

Service
Active Directory Domain Services (AD DS)

MS-DSSP: Directory Services Setup Remote Protocol

The Directory Services Setup Remote Protocol exposes an RPC interface that a client can call to obtain domain-related computer state and configuration information.

RPC Interface Definitions

Type Interface Description
DCE/RPC 3919286A-B10C-11D0-9BA8-00C04FD92EF5 lsarpc
Named Pipe \\pipe\lsarpc None

Associated Roles/Features

Service
Active Directory Domain Services (AD DS)

MS-EERR: ExtendedError Remote Data Structure

The ExtendedError Remote Data Structure encodes extended error information. This data structure assumes that the reader has familiarity with the concepts and the requirements that are detailed in [MS-RPCE] and [C706].

RPC Interface Definitions

Type Interface Description
DCE/RPC 14A8831C-BC82-11D2-8A64-0008C7457E5D None

MS-EFSR: Encrypting File System Remote (EFSRPC) Protocol

The Encrypting File System Remote (EFSRPC) Protocol performs maintenance and management operations on encrypted data that is stored remotely and accessed over a network.

RPC Interface Definitions

Type Interface Description
DCE/RPC df1941c5-fe89-4e79-bf10-463657acf44d efsrpc
DCE/RPC C681D488-D850-11D0-8C52-00C04FD90F7E lsarpc
Named Pipe \\pipe\efsrpc None
Named Pipe \\pipe\lsarpc None

MS-EVEN: EventLog Remoting Protocol

The EventLog Remoting Protocol exposes the RPC methods for reading events in both live and backup event logs on remote computers.

RPC Interface Definitions

Type Interface Description
DCE/RPC 82273FDC-E32A-18C3-3F78-827929DC23EA eventlog
Named Pipe \\pipe\eventlog None

Associated Roles/Features

Service
Event Log

MS-EVEN6: EventLog Remoting Protocol Version 6.0

The EventLog Remoting Protocol Version 6.0 protocol exposes RPC methods for reading events in both live and backup event logs on remote computers. This protocol was originally made available for Windows Vista.

RPC Interface Definitions

Type Interface Description
DCE/RPC F6BEAFF7-1E19-4FBB-9F8F-B89E2018337C MS-EVEN6

Associated Roles/Features

Service
Event Log

MS-FASP: Firewall and Advanced Security Protocol

The Firewall and Advanced Security Protocol manages firewall and advanced security components on remote computers.

RPC Interface Definitions

Type Interface Description
DCE/RPC 6B5BDD1E-528C-422C-AF8C-A4079BE4FE48 MS-FASP

Associated Roles/Features

Service
Windows Firewall

MS-FAX: Fax Server and Client Remote Protocol

The Fax Server and Client Remote Protocol is an RPC-based, client-server protocol, and is used to send faxes and to manage the fax server and its queues.

RPC Interface Definitions

Type Interface Description
DCE/RPC 6099FC12-3EFF-11D0-ABD0-00C04FD91A4E faxclient
DCE/RPC EA0A3165-4834-11D2-A6F8-00C04FA346CC sharedfax
Named Pipe \\pipe\sharefax None

Associated Roles/Features

Service
Fax Server

MS-FRS1: File Replication Service Protocol

The File Replication Service Protocol is a replication protocol that is used to replicate files and folders across one or more members in an Active Directory domain. It works to keep copies of a file system tree up to date on all members of a replication group, while allowing any member of the group to change the contents at any time.

RPC Interface Definitions

Type Interface Description
DCE/RPC D049B186-814F-11D1-9A3C-00C04FC9B232 NtFrsApi
DCE/RPC F5CC59B4-4264-101A-8C59-08002B2F8426 frsrpc

Associated Roles/Features

Service
Active Directory Domain Services (AD DS)

MS-FRS2: Distributed File System Replication Protocol

The SD Microsoft Distributed File System Replication Protocol is an RPC interface that replicates files between servers and enables the creation of multimaster optimistic file replication systems.

RPC Interface Definitions

Type Interface Description
DCE/RPC 897E2E5F-93F3-4376-9C9C-FD2277495C27 MS-FRS2

Associated Roles/Features

Service
Active Directory Domain Services (AD DS)
DFS (Distributed Filesystem) Replication

MS-FSRM: File Server Resource Manager Protocol

The File Server Resource Manager Protocol implements a set of a Distributed Component Object Model (DCOM) interfaces for managing the configuration of directory quotas, file screens, and storage report jobs on a machine.

RPC Interface Definitions

Type Interface Description
DCE/RPC 0770687E-9F36-4D6F-8778-599D188461C9 IFsrmFileManagementJob
DCE/RPC 12937789-E247-4917-9C20-F3EE9C7EE783 IFsrmActionCommand
DCE/RPC 1568A795-3924-4118-B74B-68D8F0FA5DAF IFsrmQuotaBase
DCE/RPC 15A81350-497D-4ABA-80E9-D4DBCC5521FE IFsrmStorageModuleDefinition
DCE/RPC 1BB617B8-3886-49DC-AF82-A6C90FA35DDA IFsrmMutableCollection
DCE/RPC 205BEBF8-DD93-452A-95A6-32B566B35828 IFsrmFileScreenTemplate
DCE/RPC 22BCEF93-4A3F-4183-89F9-2F8B8A628AEE IFsrmObject
DCE/RPC 27B899FE-6FFA-4481-A184-D3DAADE8A02B IFsrmReportManager
DCE/RPC 2DBE63C4-B340-48A0-A5B0-158E07FC567E IFsrmActionReport
DCE/RPC 326AF66F-2AC0-4F68-BF8C-4759F054FA29 IFsrmPropertyCondition
DCE/RPC 377F739D-9647-4B8E-97D2-5FFCE6D759CD IFsrmQuota
DCE/RPC 38E87280-715C-4C7D-A280-EA1651A19FEF IFsrmReportJob
DCE/RPC 39322A2D-38EE-4D0D-8095-421A80849A82 IFsrmDerivedObjectsResult
DCE/RPC 4173AC41-172D-4D52-963C-FDC7E415F717 IFsrmQuotaTemplateManager
DCE/RPC 426677D5-018C-485C-8A51-20B86D00BDC4 IFsrmFileGroupManager
DCE/RPC 42DC3511-61D5-48AE-B6DC-59FC00C0A8D6 IFsrmQuotaObject
DCE/RPC 47782152-D16C-4229-B4E1-0DDFE308B9F6 IFsrmPropertyDefinition2
DCE/RPC 4846CB01-D430-494F-ABB4-B1054999FB09 IFsrmQuotaManagerEx
DCE/RPC 4A73FEE4-4102-4FCC-9FFB-38614F9EE768 IFsrmProperty
DCE/RPC 4C8F96C3-5D94-4F37-A4F4-F56AB463546F IFsrmActionEventLog
DCE/RPC 515C1277-2C81-440E-8FCF-367921ED4F59 IFsrmPipelineModuleDefinition
DCE/RPC 5F6325D3-CE88-4733-84C1-2D6AEFC5EA07 IFsrmFileScreen
DCE/RPC 6879CAF9-6617-4484-8719-71C3D8645F94 IFsrmReportScheduler
DCE/RPC 6CD6408A-AE60-463B-9EF1-E117534D69DC IFsrmAction
DCE/RPC 6F4DBFFF-6920-4821-A6C3-B7E94C1FD60C IFsrmPathMapper
DCE/RPC 8276702F-2532-4839-89BF-4872609A2EA4 IFsrmActionEmail2
DCE/RPC 8BB68C7D-19D8-4FFB-809E-BE4FC1734014 IFsrmQuotaManager
DCE/RPC 8DD04909-0E34-4D55-AFAA-89E1F1A1BBB9 IFsrmFileGroup
DCE/RPC 96DEB3B5-8B91-4A2A-9D93-80A35D8AA847 IFsrmCommittableCollection
DCE/RPC 9A2BF113-A329-44CC-809A-5C00FCE8DA40 IFsrmQuotaTemplateImported
DCE/RPC A2EFAB31-295E-46BB-B976-E86D58B52E8B IFsrmQuotaTemplate
DCE/RPC AD55F10B-5F11-4BE7-94EF-D9EE2E470DED IFsrmFileGroupImported
DCE/RPC AFC052C2-5315-45AB-841B-C6DB0E120148 IFsrmClassificationRule
DCE/RPC BB36EA26-6318-4B8C-8592-F72DD602E7A5 IFsrmClassifierModuleDefinition
DCE/RPC BEE7CE02-DF77-4515-9389-78F01C5AFC1A IFsrmFileScreenException
DCE/RPC CB0DF960-16F5-4495-9079-3F9360D831DF IFsrmRule
DCE/RPC CFE36CBA-1949-4E74-A14F-F1D580CEAF13 IFsrmFileScreenTemplateManager
DCE/RPC D2DC89DA-EE91-48A0-85D8-CC72A56F7D04 IFsrmClassificationManager
DCE/RPC D646567D-26AE-4CAA-9F84-4E0AAD207FCA IFsrmActionEmail
DCE/RPC D8CC81D9-46B8-4FA4-BFA5-4AA9DEC9B638 IFsrmReport
DCE/RPC E1010359-3E5D-4ECD-9FE4-EF48622FDF30 IFsrmFileScreenTemplateImported
DCE/RPC E946D148-BD67-4178-8E22-1C44925ED710 IFsrmPropertyDefinitionValue
DCE/RPC EDE0150F-E9A3-419C-877C-01FE5D24C5D3 IFsrmPropertyDefinition
DCE/RPC EE321ECB-D95E-48E9-907C-C7685A013235 IFsrmFileManagementJobManager
DCE/RPC F3637E80-5B22-4A2B-A637-BBB642B41CFC IFsrmFileScreenBase
DCE/RPC F411D4FD-14BE-4260-8C40-03B7C95E608A IFsrmSetting
DCE/RPC F76FBF3B-8DDD-4B42-B05A-CB1C3FF1FEE8 IFsrmCollection
DCE/RPC F82E5729-6ABA-4740-BFC7-C7F58F75FB7B IFsrmAutoApplyQuota
DCE/RPC FF4FA04E-5A94-4BDA-A3A0-D5B4D3C52EBA IFsrmFileScreenManager

Associated Roles/Features

Service
File Server Resource Manager

MS-FSRVP: File Server Remote VSS Protocol

The File Server Remote VSS Protocol is an RPC-based protocol used for creating shadow copies of file shares on a remote computer, and for facilitating backup applications in performing application-consistent backup and restore of data on SMB2 shares.

RPC Interface Definitions

Type Interface Description
DCE/RPC A8E0653C-2744-4389-A61D-7373DF8B2292 FileServerVssAgent
Named Pipe \\pipe\FssagentRpc None

Associated Roles/Features

Service
File Server VSS Agent

MS-GKDI: Group Key Distribution Protocol

The Group Key Distribution Protocol enables clients to obtain cryptographic keys associated with Active Directory security principals.

RPC Interface Definitions

Type Interface Description
DCE/RPC B9785960-524F-11DF-8B6D-83DCDED72085 MS-GKDI

Associated Roles/Features

Service
Active Directory Domain Services (AD DS)

MS-ICPR: ICertPassage Remote Protocol

The ICertPassage Remote Protocol is subset of the Windows Client Certificate Enrollment Protocol, as specified in [MS-WCCE]. This protocol only enables the client to enroll certificates, whereas [MS-WCCE] provides enrollment and additional functionality.

RPC Interface Definitions

Type Interface Description
DCE/RPC 91AE6020-9E3C-11CF-8D7C-00AA00C091BE ICertPassage
Named Pipe \\pipe\cert None

Associated Roles/Features

Service
Active Directory Certificate Services (AD CS)

MS-IISS: Internet Information Services (IIS) ServiceControl

The Internet Information Services (IIS) ServiceControl Protocol is a client-to-server protocol that enables remote control of Internet services as a single unit.

RPC Interface Definitions

Type Interface Description
DCE/RPC E8FB8620-588F-11D2-9D61-00C04F79C5FE IIisServiceControl

Associated Roles/Features

Service
Web Server (IIS)

MS-IMSA: Internet Information Services (IIS) IMSAdminBaseW

The Internet Information Services (IIS) IMSAdminBaseW Remote Protocol defines interfaces that provide Unicode-compliant methods for remotely accessing and administering the IIS metabase associated with an application that manages IIS configuration, such as the IIS snap-in for Microsoft Management Console (MMC).

RPC Interface Definitions

Type Interface Description
DCE/RPC F612954D-3B0B-4C56-9563-227B7BE624B4 IMSAdminBase3W
DCE/RPC 8298D101-F992-43B7-8ECA-5052D885B995 IMSAdminBase2W
DCE/RPC 29822AB8-F302-11D0-9953-00C04FD919C1 IWamAdmin2
DCE/RPC 70B51430-B6CA-11D0-B9B9-00A0C922E750 IMSAdminBaseW
DCE/RPC 29822AB7-F302-11D0-9953-00C04FD919C1 IWamAdmin
DCE/RPC BD0C73BC-805B-4043-9C30-9A28D64DD7D2 IIISCertObj
DCE/RPC 7C4E1804-E342-483D-A43E-A850CFCC8D18 IIISApplicationAdmin

Associated Roles/Features

Service
Web Server (IIS)

MS-IOI: IManagedObject Interface Protocol

The IManagedObject Interface Protocol provides a COM interface used by the common language runtime (CLR) to identify managed objects (objects created by the CLR) that are exported for interoperability with the Component Object Model (COM).

RPC Interface Definitions

Type Interface Description
DCE/RPC 6619A740-8154-43BE-A186-0319578E02DB IRemoteDispatch
DCE/RPC 8165B19E-8D3A-4D0B-80C8-97DE310DB583 IServicedComponentInfo
DCE/RPC C3FCC19E-A970-11D2-8B5A-00A0C9B7C9C4 IManagedObject

MS-IRP: Internet Information Services (IIS) Inetinfo Remote Protocol

The Internet Information Services (IIS) Inetinfo Remote Protocol is an RPC-based client/server protocol that is used for managing Internet protocol servers such as those hosted by IIS.

RPC Interface Definitions

Type Interface Description
DCE/RPC 82AD4280-036B-11CF-972C-00AA006887B0 inetinfo
Named Pipe \\pipe\inetinfo None

Associated Roles/Features

Service
Web Server (IIS)

MS-ISTM: iSCSI Software Target Management Protocol

TODO

RPC Interface Definitions

Type Interface Description
DCE/RPC 4E65A71E-4EDE-4886-BE67-3C90A08D1F29 None
DCE/RPC 866A78BC-A2FB-4AC4-94D5-DB3041B4ED75 None
DCE/RPC B0D1AC4B-F87A-49B2-938F-D439248575B2 None
DCE/RPC E141FD54-B79E-4938-A6BB-D523C3D49FF1 None
DCE/RPC 40CC8569-6D23-4005-9958-E37F08AE192B None
DCE/RPC 1822A95E-1C2B-4D02-AB25-CC116DD9DBDE None
DCE/RPC B4FA8E86-2517-4A88-BD67-75447219EEE4 None
DCE/RPC 3C73848A-A679-40C5-B101-C963E67F9949 None
DCE/RPC 66C9B082-7794-4948-839A-D8A5A616378F None
DCE/RPC 01454B97-C6A5-4685-BEA8-9779C88AB990 None
DCE/RPC D6BD6D63-E8CB-4905-AB34-8A278C93197A None
DCE/RPC 348A0821-69BB-4889-A101-6A9BDE6FA720 None
DCE/RPC 703E6B03-7AD1-4DED-BA0D-E90496EBC5DE None
DCE/RPC 100DA538-3F4A-45AB-B852-709148152789 None
DCE/RPC 592381E5-8D3C-42E9-B7DE-4E77A1F75AE4 None
DCE/RPC 883343F1-CEED-4E3A-8C1B-F0DADFCE281E None
DCE/RPC 6AEA6B26-0680-411D-8877-A148DF3087D5 None
DCE/RPC D71B2CAE-33E8-4567-AE96-3CCF31620BE2 None
DCE/RPC 8C58F6B3-4736-432A-891D-389DE3505C7C None
DCE/RPC 1995785D-2A1E-492F-8923-E621EACA39D9 None
DCE/RPC C10A76D8-1FE4-4C2F-B70D-665265215259 None
DCE/RPC 8D7AE740-B9C5-49FC-A11E-89171907CB86 None
DCE/RPC 8AD608A4-6C16-4405-8879-B27910A68995 None
DCE/RPC B0076FEC-A921-4034-A8BA-090BC6D03BDE None
DCE/RPC 640038F1-D626-40D8-B52B-09660601D045 None
DCE/RPC BB39E296-AD26-42C5-9890-5325333BB11E None
DCE/RPC B06A64E3-814E-4FF9-AFAC-597AD32517C7 None
DCE/RPC A5ECFC73-0013-4A9E-951C-59BF9735FDDA None
DCE/RPC 1396DE6F-A794-4B11-B93F-6B69A5B47BAE None
DCE/RPC DD6F0A28-248F-4DD3-AFE9-71AED8F685C4 None
DCE/RPC 52BA97E7-9364-4134-B9CB-F8415213BDD8 None
DCE/RPC E2842C88-07C3-4EB0-B1A9-D3D95E76FEF2 None
DCE/RPC 312CC019-D5CD-4CA7-8C10-9E0A661F147E None
DCE/RPC 345B026B-5802-4E38-AC75-795E08B0B83F None
DCE/RPC 442931D5-E522-4E64-A181-74E98A4E1748 None
DCE/RPC 1B1C4D1C-ABC4-4D3A-8C22-547FBA3AA8A0 None
DCE/RPC 56E65EA5-CDFF-4391-BA76-006E42C2D746 None
DCE/RPC E645744B-CAE5-4712-ACAF-13057F7195AF None
DCE/RPC FE7F99F9-1DFB-4AFB-9D00-6A8DD0AABF2C None
DCE/RPC 81FE3594-2495-4C91-95BB-EB5785614EC7 None
DCE/RPC F093FE3D-8131-4B73-A742-EF54C20B337B None
DCE/RPC 28BC8D5E-CA4B-4F54-973C-ED9622D2B3AC None

Associated Roles/Features

Service
iSCSI Target Server

MS-LREC: Live Remote Event Capture (LREC) Protocol

The Live Remote Event Capture (LREC) Protocol enables a management station to monitor events on a target system across a network. The protocol supports various monitoring scenarios, such as a _first line of defense_ for troubleshooting, where the remote system does not support the ability to log events locally.

RPC Interface Definitions

Type Interface Description
DCE/RPC 22E5386D-8B12-4BF0-B0EC-6A1EA419E366 NetEventForwarder

MS-LSAT: Local Security Authority (Translation Methods) Remote

The Local Security Authority (Translation Methods) Remote Protocol is implemented in Windows-based products to translate identifiers for security principal between human-readable and machine-readable forms.

RPC Interface Definitions

Type Interface Description
DCE/RPC 12345778-1234-ABCD-EF00-0123456789AB lsarpc
Named Pipe \\pipe\lsarpc None

Associated Roles/Features

Service
Active Directory Domain Services (AD DS)

MS-MQDS: Message Queuing (MSMQ): Directory Service Protocol

The Message Queuing (MSMQ): Directory Service Protocol is an RPC-based protocol that is used by MSMQ clients and Message Queuing servers to remotely access and maintain MSMQ directory objects.

RPC Interface Definitions

Type Interface Description
DCE/RPC 708CCA10-9569-11D1-B2A5-0060977D8118 dscomm2
DCE/RPC 77DF7A80-F298-11D0-8358-00A024C480A8 dscomm

Associated Roles/Features

Service
Message Queuing

MS-MQMP: Message Queuing (MSMQ): Queue Manager Client Protocol

The Message Queuing (MSMQ): Queue Manager Client Protocol enables communication between message queuing client applications and an MSMQ Queue Manager.

RPC Interface Definitions

Type Interface Description
DCE/RPC 76D12B80-3467-11D3-91FF-0090272F9EA3 qmcomm2
DCE/RPC FDB3A030-065F-11D1-BB9B-00A024EA5525 qmcomm

Associated Roles/Features

Service
Message Queuing

MS-MQMR: Message Queuing (MSMQ): Queue Manager Management Protocol

The Message Queuing (MSMQ): Queue Manager Management Protocol that is used for management operations on the MSMQ server, including monitoring the MSMQ installation and the queues.

RPC Interface Definitions

Type Interface Description
DCE/RPC 41208EE0-E970-11D1-9B9E-00E02C064C39 qmmgmt

Associated Roles/Features

Service
Message Queuing

MS-MQQP: Message Queuing (MSMQ): Queue Manager to Queue Manager Protocol

The Message Queuing (MSMQ): Queue Manager to Queue Manager Protocol isan RPC-based protocol used by the queue manager and runtime library to read and purge messages from a remote queue.

RPC Interface Definitions

Type Interface Description
DCE/RPC 1088A980-EAE5-11D0-8D9B-00A02453C337 qm2qm

Associated Roles/Features

Service
Message Queuing

MS-MQRR: Message Queuing (MSMQ): Queue Manager Remote Read Protocol

The Message Queuing (MSMQ): Queue Manager Remote Read Protocol is an RPC-based protocol that is used by MSMQ clients to read or reject a message from a queue, move a message between queues, and purge messages from a queue.

RPC Interface Definitions

Type Interface Description
DCE/RPC 1A9134DD-7B39-45BA-AD88-44D01CA47F28 RemoteRead

Associated Roles/Features

Service
Message Queuing

MS-MSRP: Messenger Service Remote Protocol

The Messenger Service Remote Protocol is a set of RPC interfaces that instructs a server to display short text messages to a console user, to deliver messages to a local or remote server for display to a console user, and to manage the names for which the server receives messages.

RPC Interface Definitions

Type Interface Description
DCE/RPC 17FDD703-1827-4E34-79D4-24A55C53BB37 msgsvc
DCE/RPC 5A7B91F8-FF00-11D0-A9B2-00C04FB6E6FC msgsvcsend

MS-NRPC: Netlogon Remote Protocol

The Netlogon Remote Protocol is an RPC interface that is used for user and machine authentication on domain-based networks; to replicate the user account database for operating systems earlier than Windows 2000 backup domain controllers; to discover, manage, and maintain domain relationships of domain members and domain controllers across domains.

RPC Interface Definitions

Type Interface Description
DCE/RPC 12345678-1234-ABCD-EF00-01234567CFFB logon
Named Pipe \\pipe\netlogon None

Associated Roles/Features

Service
Active Directory Domain Services (AD DS)

MS-NSPI: Name Service Provider Interface (NSPI) Protocol

The Name Service Provider Interface (NSPI) Protocol, which provides messaging clients with a way to access and manipulate addressing data stored by a server. This protocol consists of an abstract data model and a single RPC call interface to manipulate data in that model.

RPC Interface Definitions

Type Interface Description
DCE/RPC F5CC5A18-4264-101A-8C59-08002B2F8426 nspi

Associated Roles/Features

Service
Active Directory Domain Services (AD DS)
DNS Server

MS-OAUT: OLE Automation Protocol

The OLE Automation Protocol uses DCOM as its transport layer and provides support for an additional set of types as well as for a late-bound calling mechanism.

RPC Interface Definitions

Type Interface Description
DCE/RPC 00020400-0000-0000-C000-000000000046 IDispatch
DCE/RPC 00020401-0000-0000-C000-000000000046 ITypeInfo
DCE/RPC 00020402-0000-0000-C000-000000000046 ITypeLib
DCE/RPC 00020403-0000-0000-C000-000000000046 ITypeComp
DCE/RPC 00020404-0000-0000-C000-000000000046 IEnumVARIANT
DCE/RPC 00020411-0000-0000-C000-000000000046 ITypeLib2
DCE/RPC 00020412-0000-0000-C000-000000000046 ITypeInfo2

MS-OCSPA: Microsoft OCSP Administration Protocol

The Microsoft OCSP Administration Protocol consists of a set of distributed component object model (DCOM) interfaces that allows administrative tools to configure the properties of the Online Responder

RPC Interface Definitions

Type Interface Description
DCE/RPC 784B693D-95F3-420B-8126-365C098659F2 IOCSPAdminD

Associated Roles/Features

Service
Active Directory Certificate Services (AD CS)

MS-OXABREF: Microsoft Exchange: Address Book Name Service Provider Interface (NSPI) Referral Protocol

The Address Book Name Service Provider Interface (NSPI) Referral Protocol redirects client address book requests to an appropriate address book server.

RPC Interface Definitions

Type Interface Description
DCE/RPC 1544F5E0-613C-11D1-93DF-00C04FD7BD09 rfri

Associated Roles/Features

Service
Microsoft Exchange Server

MS-OXCRPC: Microsoft Exchange: Wire Protocol Format

The Wire Format Protocol serves as the transport basis for client/server communications over RPC.

RPC Interface Definitions

Type Interface Description
DCE/RPC A4F1DB00-CA47-1067-B31F-00DD010662DA emsmdb
DCE/RPC 5261574A-4572-206E-B268-6B199213B4E4 asyncemsmdb

Associated Roles/Features

Service
Microsoft Exchange Server

MS-PAN: Print System Asynchronous Notification Protocol

The Print System Asynchronous Notification Protocol is an asynchronous protocol that clients use to receive print status notifications from a print server and send server-requested responses to those notifications back to the server.

RPC Interface Definitions

Type Interface Description
DCE/RPC AE33069B-A2A8-46EE-A235-DDFD339BE281 IRPCRemoteObject
DCE/RPC 0B6EDBFA-4A24-4FC6-8A23-942B1ECA65D1 IRPCAsyncNotify

Associated Roles/Features

Service
Print & Document Services

MS-PAR: Print System Asynchronous Remote Protocol

The Print System Asynchronous Remote Protocol defines the communication of print job processing and print system management information between a print client and a print server.

RPC Interface Definitions

Type Interface Description
DCE/RPC 76F03F96-CDFD-44FC-A22C-64950A001209 IRemoteWinspool

Associated Roles/Features

Service
Print & Document Services

MS-PCQ: Performance Counter Query Protocol

The Performance Counter Query Protocol is used for browsing performance counters and retrieving performance counter values from a server.

RPC Interface Definitions

Type Interface Description
DCE/RPC DA5A86C5-12C2-4943-AB30-7F74A813D853 PerflibV2
Named Pipe \\pipe\winreg None

Associated Roles/Features

Service
Performance Counters

MS-PLA: Performance Logs and Alerts Protocol

The Performance Logs and Alerts Protocol, which provides a set of DCOM interfaces to control data collection on a remote system. The control includes starting, stopping, scheduling, and configuration of data collector objects, and the creation of alerts.

RPC Interface Definitions

Type Interface Description
DCE/RPC 03837510-098B-11D8-9414-505054503030 ITraceDataProviderCollection
DCE/RPC 03837543-098B-11D8-9414-505054503030 IFolderAction
DCE/RPC 03837533-098B-11D8-9414-505054503030 IValueMapItem
DCE/RPC 03837541-098B-11D8-9414-505054503030 03837541
DCE/RPC 03837544-098B-11D8-9414-505054503030 IFolderActionCollection
DCE/RPC 03837524-098B-11D8-9414-505054503030 IDataCollectorSetCollection
DCE/RPC 0383753A-098B-11D8-9414-505054503030 ISchedule
DCE/RPC 03837534-098B-11D8-9414-505054503030 IValueMap
DCE/RPC 0383750B-098B-11D8-9414-505054503030 ITraceDataCollector
DCE/RPC 0383751A-098B-11D8-9414-505054503030 IApiTracingDataCollector
DCE/RPC 03837512-098B-11D8-9414-505054503030 ITraceDataProvider
DCE/RPC 0383753D-098B-11D8-9414-505054503030 IScheduleCollection
DCE/RPC 03837506-098B-11D8-9414-505054503030 IPerformanceCounterDataCollector
DCE/RPC 03837520-098B-11D8-9414-505054503030 IDataCollectorSet
DCE/RPC 038374FF-098B-11D8-9414-505054503030 IDataCollector
DCE/RPC 03837514-098B-11D8-9414-505054503030 IConfigurationDataCollector
DCE/RPC 03837502-098B-11D8-9414-505054503030 IDataCollectorCollection
DCE/RPC 03837516-098B-11D8-9414-505054503030 IAlertDataCollector

MS-RAA: Remote Authorization API Protocol

The Remote Authorization API Protocol is used to perform 'what-if' authorization queries on remote computers. It allows applications to simulate an access control decision that would be made when a principal attempts to access a remote resource protected with an authorization policy.

RPC Interface Definitions

Type Interface Description
DCE/RPC 0B1C2170-5732-4E0E-8CD3-D9B16F3B84D7 authzr
Named Pipe \\pipe\lsass None

MS-RAI: Remote Assistance Initiation Protocol

The Remote Assistance Initiation Protocol enables an authorized expert to start Remote Assistance (RA) on a remote novice computer to retrieve data that is required to make a Remote Assistance connection from the expert's computer to the novice's computer.

RPC Interface Definitions

Type Interface Description
DCE/RPC F120A684-B926-447F-9DF4-C966CB785648 IRASrv
DCE/RPC 833E4010-AFF7-4AC3-AAC2-9F24C1457BCE PCHService Class
DCE/RPC 833E4200-AFF7-4AC3-AAC2-9F24C1457BCE IPCHService
DCE/RPC 3C3A70A7-A468-49B9-8ADA-28E11FCCAD5D RASrv Class
DCE/RPC 833E4100-AFF7-4AC3-AAC2-9F24C1457BCE IPCHCollection
DCE/RPC 833E41AA-AFF7-4AC3-AAC2-9F24C1457BCE ISAFSession

Associated Roles/Features

Service
Remote Assistance

MS-RAINPS: Remote Administrative Interface: NPS

The Remote Administrative Interface: Network Policy Server (NPS) Protocol, also known as the Internet Authentication Service (IAS) Data Server Store COM Protocol, is a client-server protocol that enables local or remote administration of remote access policies, configuration, and operational parameters on a Network Policy Server (NPS)

RPC Interface Definitions

Type Interface Description
DCE/RPC C323BE28-E546-4C23-A81B-D6AD8D8FAC7B IIASDataStoreComServer2
DCE/RPC 83E05BD5-AEC1-4E58-AE50-E819C7296F67 IIASDataStoreComServer

Associated Roles/Features

Service
Network Policy Server

MS-RAIW: Remote Administrative Interface: WINS

The Remote Administrative Interface: WINS protocol enables local or remote administration of the Windows Internet Name Service (WINS) within the Microsoft Management Console (MMC) WINS snap-in and the NetSh command line (WINS context).

RPC Interface Definitions

Type Interface Description
DCE/RPC 45F52C28-7F9F-101A-B52B-08002B2EFABE winsif
DCE/RPC 811109BF-A4E1-11D1-AB54-00A0C91E9B45 winsi2
Named Pipe \\pipe\winspipe None

Associated Roles/Features

Service
WINS

MS-RPCL: Remote Procedure Call Location Services Extensions

The Remote Procedure Call Location Services Extensions is a set of extensions and restrictions to the DCE Remote Procedure Call Location Services specification

RPC Interface Definitions

Type Interface Description
DCE/RPC E33C0CC4-0482-101A-BC0C-02608C6BA218 LocToLoc
Named Pipe \\pipe\Locator None

MS-RPRN: Print System Remote Protocol

The Print System Remote Protocol defines the communication of print job processing and print system management between a print client and a print server.

RPC Interface Definitions

Type Interface Description
DCE/RPC 12345678-1234-ABCD-EF00-0123456789AB winspool
Named Pipe \\pipe\spoolss None

Associated Roles/Features

Service
Print & Document Services

MS-RRASM: Routing and Remote Access Server (RRAS) Management Protocol

The Routing and Remote Access Server (RRAS) Management Protocol enables remote management (configuration and monitoring) of RRAS. The RRAS implementation refers to the components that can be configured to provide routing, remote access service, and site-to-site connectivity.

RPC Interface Definitions

Type Interface Description
DCE/RPC 20610036-FA22-11CF-9823-00A0C911E5DF rasrpc
DCE/RPC 5FF9BDF6-BD91-4D8B-A614-D6317ACC8DD8 IRemoteSstpCertCheck
DCE/RPC 6139D8A4-E508-4EBB-BAC7-D7F275145897 IRemoteIPV6Config
DCE/RPC 66A2DB1B-D706-11D0-A37B-00C04FC9DA04 IRemoteNetworkConfig
DCE/RPC 66A2DB20-D706-11D0-A37B-00C04FC9DA04 IRemoteRouterRestart
DCE/RPC 66A2DB21-D706-11D0-A37B-00C04FC9DA04 IRemoteSetDnsConfig
DCE/RPC 66A2DB22-D706-11D0-A37B-00C04FC9DA04 IRemoteICFICSConfig
DCE/RPC 67E08FC2-2984-4B62-B92E-FC1AAE64BBBB IRemoteStringIdConfig
DCE/RPC 8F09F000-B7ED-11CE-BBD2-00001A181CAD dimsvc
Named Pipe \\pipe\router None

MS-RRP: Windows Remote Registry Protocol

The Windows Remote Registry Protocol is a remote procedure call (RPC)-based client/server protocol that is used to remotely manage a hierarchical data store such as the Windows registry.

RPC Interface Definitions

Type Interface Description
DCE/RPC 338CD001-2244-31F1-AAAA-900038001003 winreg
Named Pipe \\pipe\winreg None

Associated Roles/Features

Service
Remote Registry

MS-RSMP: Removable Storage Manager (RSM) Remote Protocol

The Removable Storage Manager (RSM) Remote Protocol is a set of distributed component object model (DCOM) interfaces for applications to manage robotic changers, media libraries, and tape drives. This protocol deals with detailed low-level operating system and storage concepts.

RPC Interface Definitions

Type Interface Description
DCE/RPC 3BBED8D9-2C9A-4B21-8936-ACB2F995BE6C INtmsObjectManagement3
DCE/RPC 8DA03F40-3419-11D1-8FB1-00A024CB6019 INtmsSession1
DCE/RPC D61A27C6-8F53-11D0-BFA0-00A024151983 CNtmsSvr (Removable Storage Manager Class)
DCE/RPC 081E7188-C080-4FF3-9238-29F66D6CABFD IMessenger
DCE/RPC 895A2C86-270D-489D-A6C0-DC2A9B35280E INtmsObjectManagement2
DCE/RPC D02E4BE0-3419-11D1-8FB1-00A024CB6019 INtmsMediaServices1
DCE/RPC DB90832F-6910-4D46-9F5E-9FD6BFA73903 INtmsLibraryControl2
DCE/RPC 4E934F30-341A-11D1-8FB1-00A024CB6019 INtmsLibraryControl1
DCE/RPC 879C8BBE-41B0-11D1-BE11-00C04FB6BF70 IClientSink
DCE/RPC 69AB7050-3059-11D1-8FAF-00A024CB6019 INtmsObjectInfo1
DCE/RPC 7D07F313-A53F-459A-BB12-012C15B1846E IRobustNtmsMediaServices1
DCE/RPC BB39332C-BFEE-4380-AD8A-BADC8AFF5BB6 INtmsNotifySink
DCE/RPC B057DC50-3059-11D1-8FAF-00A024CB6019 INtmsObjectManagement1

MS-RSP: Remote Shutdown Protocol

The Remote Shutdown Protocol is designed for shutting down, or for terminating the shutdown, of a remote computer during the shutdown waiting period.

RPC Interface Definitions

Type Interface Description
DCE/RPC 894DE0C0-0D55-11D3-A322-00C04FA321A1 InitShutdown
DCE/RPC D95AFE70-A6D5-4259-822E-2C84DA1DDB0D WindowsShutdown
Named Pipe \\pipe\InitShutdown None
Named Pipe \\pipe\winreg None

Associated Roles/Features

Service
Remote Shutdown

MS-SAMR: Security Account Manager (SAM) Remote Protocol (Client-to-Server)

The Security Account Manager (SAM) Remote Protocol supports management functionality for an account store or directory containing users and groups. The goal of the protocol is to enable IT administrators and users to manage users, groups, and computers.

RPC Interface Definitions

Type Interface Description
DCE/RPC 12345778-1234-ABCD-EF00-0123456789AC samr
Named Pipe \\pipe\samr None
Named Pipe \\pipe\lsass None

Associated Roles/Features

Service
Active Directory Domain Services (AD DS)

MS-SCMP: Shadow Copy Management Protocol

The Shadow Copy Management Protocol programmatically enumerates shadow copies and configures shadow copy storage on remote machines.

RPC Interface Definitions

Type Interface Description
DCE/RPC 01954E6B-9254-4E6E-808C-C9E05D007696 IVssEnumMgmtObject
DCE/RPC FA7DF749-66E7-4986-A27F-E2F04AE53772 IVssSnapshotMgmt
DCE/RPC 214A0F28-B737-4026-B847-4F9E37D79529 IVssDifferentialSoftwareSnapshotMgmt
DCE/RPC AE1C7110-2F60-11D3-8A39-00C04F72D8E3 IVssEnumObject

Associated Roles/Features

Service
File Server

MS-SCMR: Service Control Manager Remote Protocol

The Service Control Manager Remote Protocol is used for remotely managing the Service Control Manager (SCM), an RPC server that enables service configuration and control of service programs.

RPC Interface Definitions

Type Interface Description
DCE/RPC 367ABB81-9844-35F1-AD32-98F038001003 svcctl
Named Pipe \\pipe\svcctl None

Associated Roles/Features

Service
Services

MS-SRVS: Server Service Remote Protocol

The Server Service Remote Protocol remotely enables file and printer sharingand named pipe access to the server through the Server Message Block Protocol.

RPC Interface Definitions

Type Interface Description
DCE/RPC 4B324FC8-1670-01D3-1278-5A47BF6EE188 srvsvc
DCE/RPC 98716d03-89ac-44c7-bb8c-285824e51c4a srvsvc.dll
DCE/RPC 1a0d010f-1c33-432c-b0f5-8cf4e8053099 srvsvc.dll
Named Pipe \\pipe\srvsvc None

Associated Roles/Features

Service
File Server
Active Directory Domain Services (AD DS)

MS-SWN: Service Witness Protocol

The Service Witness Protocol enables an SMB2 clustered file server to notify SMB2 clients with prompt and explicit notifications about the failure or recovery of a network name and associated services.

RPC Interface Definitions

Type Interface Description
DCE/RPC CCD8C074-D0E5-4A40-92B4-D074FAA6BA28 Witness

MS-TPMVSC: Trusted Platform Module (TPM) Virtual Smart Card Management Protocol

The Trusted Platform Module (TPM) Virtual Smart Card Management Protocol is used to manage virtual smart cards (VSCs) on a remote machine. It provides methods for a protocol client to request creation and destruction of VSCs, and to monitor the status of these operations.

RPC Interface Definitions

Type Interface Description
DCE/RPC 1A1BB35F-ABB8-451C-A1AE-33D98F1BEF4A ITpmVirtualSmartCardManagerStatusCallback
DCE/RPC FDF8A2B9-02DE-47F4-BC26-AA85AB5E5267 ITpmVirtualSmartCardManager2
DCE/RPC 112B1DFF-D9DC-41F7-869F-D67FEE7CB591 ITpmVirtualSmartCardManager
DCE/RPC 3C745A97-F375-4150-BE17-5950F694C699 ITpmVirtualSmartCardManager3

Associated Roles/Features

Service
Virtual Smartcard

MS-TRP: Telephony Remote Protocol

The Telephony Remote Protocol enables implementation of communications applications ranging from voice mail to call centers with multiple agents and switches.

RPC Interface Definitions

Type Interface Description
DCE/RPC 2F5F6521-CA47-1068-B319-00DD010662DB remotesp
DCE/RPC 2F5F6520-CA46-1067-B319-00DD010662DA tapsrv
Named Pipe \\pipe\tapsrv None

MS-TSCH: Task Scheduler Service Remoting Protocol

The Task Scheduler Service Remoting Protocol is used to register and configure a task and to inquire about the status of tasks that are running on a remote machine.

RPC Interface Definitions

Type Interface Description
DCE/RPC 1FF70682-0A51-30E8-076D-740BE8CEE98B atsvc
DCE/RPC 378E52B0-C0A9-11CF-822D-00AA0051E40F sasec
DCE/RPC 86D35949-83C9-4044-B424-DB363231FD0C ITaskSchedulerService
DCE/RPC 0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 schedsvc.dll
DCE/RPC 33d84484-3626-47ee-8c6f-e7e98b113be1 WPTaskScheduler.dll
DCE/RPC 3a9ef155-691d-4449-8d05-09ad57031823 schedsvc.dll
Named Pipe \\pipe\atsvc None

Associated Roles/Features

Service
Task Scheduler

MS-TSGU: Terminal Services Gateway Server Protocol

The Terminal Services Gateway Server Protocol is a mechanism to transport data-link layer (L2) frames on a Hypertext Transfer Protocol over Secure Sockets Layer (HTTPS) connection.

RPC Interface Definitions

Type Interface Description
DCE/RPC 44E265DD-7DAF-42CD-8560-3CDB6E7A2729 TsProxyRpcInterface

Associated Roles/Features

Service
Terminal Services

MS-TSRAP: Telnet Server Remote Administration Protocol

The Telnet Server Remote Administration Protocol is a set of interfaces used for performing management tasks on a Telnet Server.

RPC Interface Definitions

Type Interface Description
DCE/RPC 034634FD-BA3F-11D1-856A-00A0C944138C IManageTelnetSessions

Associated Roles/Features

Service
Telnet

MS-TSTS: Terminal Services Terminal Server Runtime Interface Protocol

The Terminal Services Terminal Server Runtime Interface Protocolis an RPC-based protocol used for remotely querying and configuring various aspects of a terminal server.

RPC Interface Definitions

Type Interface Description
DCE/RPC 497D95A6-2D27-4BF5-9BBD-A6046957133C RCMListener
DCE/RPC 11899A43-2B68-4A76-92E3-A3D6AD8C26CE TermSrvNotification
DCE/RPC 5CA4A760-EBB1-11CF-8611-00A0245420ED IcaApi
DCE/RPC BDE95FDF-EEE0-45DE-9E12-E5A61CD0D4FE RCMPublic
DCE/RPC 484809D6-4239-471B-B5BC-61DF8C23AC48 TermSrvSession
DCE/RPC 88143FD0-C28D-4B2B-8FEF-8D882F6A9390 TermSrvEnumeration
DCE/RPC 53B46B02-C73B-4A3E-8DEE-B16B80672FC0 TSVIPPublic
DCE/RPC 1257B580-CE2F-4109-82D6-A9459D0BF6BC SessEnvPublicRpc
DCE/RPC c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 sysntfy.dll
DCE/RPC b12fd546-c875-4b41-97d8-950487662202 SessEnv.dll
DCE/RPC 29770a8f-829b-4158-90a2-78cd488501f7 SessEnv.dll

Associated Roles/Features

Service
Terminal Services

MS-UAMG: Update Agent Management Protocol

The Update Agent Management Protocol provides a set of types and interfaces that allows callers to manage an update agent and to invoke some update agent operations, such as an update search.

RPC Interface Definitions

Type Interface Description
DCE/RPC 004C6A2B-0C19-4C69-9F5C-A269B2560DB9 IWindowsDriverUpdate4
DCE/RPC 04C6895D-EAF2-4034-97F3-311DE9BE413A IUpdateSearcher3
DCE/RPC 07F7438C-7709-4CA5-B518-91279288134E IUpdateCollection
DCE/RPC 0BB8531D-7E8D-424F-986C-A0B8F60A3E7B IUpdateServiceManager2
DCE/RPC 0D521700-A372-4BEF-828B-3D00C10ADEBD IWindowsDriverUpdateEntryCollection
DCE/RPC 112EDA6B-95B3-476F-9D90-AEE82C6B8181 IUpdate3
DCE/RPC 144FE9B0-D23D-4A8B-8634-FB4457533B7A IUpdate2
DCE/RPC 1518B460-6518-4172-940F-C75883B24CEB IUpdateService2
DCE/RPC 23857E3C-02BA-44A3-9423-B1C900805F37 IUpdateServiceManager
DCE/RPC 27E94B0D-5139-49A2-9A61-93522DC54652 IUpdate4
DCE/RPC 3A56BFB8-576C-43F7-9335-FE4838FD7E37 ICategoryCollection
DCE/RPC 46297823-9940-4C09-AED9-CD3EA6D05968 IUpdateIdentity
DCE/RPC 49EBD502-4A96-41BD-9E3E-4C5057F4250C IWindowsDriverUpdate3
DCE/RPC 4A2F5C31-CFD9-410E-B7FB-29A653973A0F IAutomaticUpdates2
DCE/RPC 4CBDCB2D-1589-4BEB-BD1C-3E582FF0ADD0 IUpdateSearcher2
DCE/RPC 503626A3-8E14-4729-9355-0FE664BD2321 IUpdateExceptionCollection
DCE/RPC 54A2CB2D-9A0C-48B6-8A50-9ABB69EE2D02 IUpdateDownloadContent
DCE/RPC 615C4269-7A48-43BD-96B7-BF6CA27D6C3E IWindowsDriverUpdate2
DCE/RPC 673425BF-C082-4C7C-BDFD-569464B8E0CE IAutomaticUpdates
DCE/RPC 6A92B07A-D821-4682-B423-5C805022CC4D IUpdate
DCE/RPC 70CF5C82-8642-42BB-9DBC-0CFD263C6C4F IWindowsDriverUpdate5
DCE/RPC 7366EA16-7A1A-4EA2-B042-973D3E9CD99B ISearchJob (?)
DCE/RPC 76B3B17E-AED6-4DA5-85F0-83587F81ABE3 IUpdateService
DCE/RPC 7C907864-346C-4AEB-8F3F-57DA289F969F IImageInformation
DCE/RPC 816858A4-260D-4260-933A-2585F1ABC76B IUpdateSession
DCE/RPC 81DDC1B8-9D35-47A6-B471-5B80F519223B ICategory
DCE/RPC 85713FA1-7796-4FA2-BE3B-E2D6124DD373 IWindowsUpdateAgentInfo
DCE/RPC 8F45ABF1-F9AE-4B95-A933-F0F66E5056EA IUpdateSearcher
DCE/RPC 918EFD1E-B5D8-4C90-8540-AEB9BDC56F9D IUpdateSession3
DCE/RPC 91CAF7B0-EB23-49ED-9937-C52D817F46F7 IUpdateSession2
DCE/RPC 9B0353AA-0E52-44FF-B8B0-1F7FA0437F88 IUpdateServiceCollection
DCE/RPC A376DD5E-09D4-427F-AF7C-FED5B6E1C1D6 IUpdateException
DCE/RPC A7F04F3C-A290-435B-AADF-A116C3357A5C IUpdateHistoryEntryCollection
DCE/RPC B383CD1A-5CE9-4504-9F63-764B1236F191 IWindowsDriverUpdate
DCE/RPC BC5513C8-B3B8-4BF7-A4D4-361C0D8C88BA IUpdateDownloadContentCollection
DCE/RPC BE56A644-AF0E-4E0E-A311-C1D8E695CBFF IUpdateHistoryEntry
DCE/RPC C1C2F21A-D2F4-4902-B5C6-8A081C19A890 IUpdate5
DCE/RPC C2BFB780-4539-4132-AB8C-0A8772013AB6 IUpdateHistoryEntry2
DCE/RPC C97AD11B-F257-420B-9D9F-377F733F6F68 IUpdateDownloadContent2
DCE/RPC D40CFF62-E08C-4498-941A-01E25F0FD33C ISearchResult
DCE/RPC D9A59339-E245-4DBD-9686-4D5763E39624 IInstallationBehavior
DCE/RPC DDE02280-12B3-4E0B-937B-6747F6ACB286 IUpdateServiceRegistration
DCE/RPC E7A4D634-7942-4DD9-A111-82228BA33901 IAutomaticUpdatesResults
DCE/RPC ED8BFE40-A60B-42EA-9652-817DFCFA23EC IWindowsDriverUpdateEntry
DCE/RPC EFF90582-2DDC-480F-A06D-60F3FBC362C3 IStringCollection

MS-VDS: Virtual Disk Service (VDS) Protocol

The Virtual Disk Service (VDS) Protocol is a set of distributed component object model (DCOM) interfaces for managing the configuration of disk storage.

RPC Interface Definitions

Type Interface Description
DCE/RPC 15FC031C-0652-4306-B2C3-F558B8F837E2 IVdsServiceSw
DCE/RPC 4DBCEE9A-6343-4651-B85F-5E75D74D983C IVdsVolumeMF2
DCE/RPC 1E062B84-E5E6-4B4B-8A25-67B81E8F13E8 IVdsVDisk
DCE/RPC 2ABD757F-2851-4997-9A13-47D2A885D6CA IVdsHbaPort
DCE/RPC 9CBE50CA-F2D2-4BF4-ACE1-96896B729625 IVdsDiskPartitionMF2
DCE/RPC 4DAA0135-E1D1-40F1-AAA5-3CC1E53221C3 IVdsVolumePlex
DCE/RPC 3858C0D5-0F35-4BF5-9714-69874963BC36 IVdsAdvancedDisk3
DCE/RPC 40F73C8B-687D-4A13-8D96-3D7F2E683936 IVdsDisk2
DCE/RPC 8F4B2F5D-EC15-4357-992F-473EF10975B9 IVdsDisk3
DCE/RPC FC5D23E8-A88B-41A5-8DE0-2D2F73C5A630 IVdsServiceSAN
DCE/RPC B07FEDD4-1682-4440-9189-A39B55194DC5 IVdsIscsiInitiatorAdapter
DCE/RPC 72AE6713-DCBB-4A03-B36B-371F6AC6B53D IVdsVolume2
DCE/RPC B6B22DA8-F903-4BE7-B492-C09D875AC9DA IVdsServiceUninstallDisk
DCE/RPC 538684E0-BA3D-4BC0-ACA9-164AFF85C2A9 IVdsDiskPartitionMF
DCE/RPC 75C8F324-F715-4FE3-A28E-F9011B61A4A1 IVdsOpenVDisk
DCE/RPC 90681B1D-6A7F-48E8-9061-31B7AA125322 IVdsDiskOnline
DCE/RPC 9882F547-CFC3-420B-9750-00DFBEC50662 IVdsCreatePartitionEx
DCE/RPC 83BFB87F-43FB-4903-BAA6-127F01029EEC IVdsSubSystemImportTarget
DCE/RPC EE2D5DED-6236-4169-931D-B9778CE03DC6 IVdsVolumeMF
DCE/RPC 9723F420-9355-42DE-AB66-E31BB15BEEAC IVdsAdvancedDisk2
DCE/RPC 4AFC3636-DB01-4052-80C3-03BBCB8D3C69 IVdsServiceInitialization
DCE/RPC D99BDAAE-B13A-4178-9FDB-E27F16B4603E IVdsHwProvider
DCE/RPC D68168C9-82A2-4F85-B6E9-74707C49A58F IVdsVolumeShrink
DCE/RPC 13B50BFF-290A-47DD-8558-B7C58DB1A71A IVdsPack2
DCE/RPC 6E6F6B40-977C-4069-BDDD-AC710059F8C0 IVdsAdvancedDisk
DCE/RPC 9AA58360-CE33-4F92-B658-ED24B14425B8 IVdsSwProvider
DCE/RPC E0393303-90D4-4A97-AB71-E9B671EE2729 IVdsServiceLoader
DCE/RPC 07E5C822-F00C-47A1-8FCE-B244DA56FD06 IVdsDisk
DCE/RPC 8326CD1D-CF59-4936-B786-5EFC08798E25 IVdsAdviseSink
DCE/RPC 1BE2275A-B315-4F70-9E44-879B3A2A53F2 IVdsVolumeOnline
DCE/RPC 0316560B-5DB4-4ED9-BBB5-213436DDC0D9 IVdsRemovable
DCE/RPC 14FBE036-3ED7-4E10-90E9-A5FF991AFF01 IVdsServiceIscsi
DCE/RPC 3B69D7F5-9D94-4648-91CA-79939BA263BF IVdsPack
DCE/RPC D5D23B6D-5A55-4492-9889-397A3C2D2DBC IVdsAsync
DCE/RPC 88306BB2-E71F-478C-86A2-79DA200A0F11 IVdsVolume
DCE/RPC 118610B7-8D94-4030-B5B8-500889788E4E IEnumVdsObject
DCE/RPC 0AC13689-3134-47C6-A17C-4669216801BE IVdsServiceHba
DCE/RPC 0818A8EF-9BA9-40D8-A6F9-E22833CC771E IVdsService
DCE/RPC 6788FAF9-214E-4B85-BA59-266953616E09 IVdsVolumeMF3
DCE/RPC B481498C-8354-45F9-84A0-0BDD2832A91F IVdsVdProvider
DCE/RPC 10C5E575-7984-4E81-A56B-431F5F92AE42 IVdsProvider
DCE/RPC 38A0A9AB-7CC8-4693-AC07-1F28BD03C3DA IVdsIscsiInitiatorPortal

Associated Roles/Features

Service
iSCSI Target Storage Provider (VDS and VSS)

MS-W32T: W32Time Remote Protocol

The W32Time Remote Protocol is used for controlling and monitoring a time service on a machine. This RPC interface supports time services that synchronize time using the Network Time Protocol (NTP) Version 3, as specified in [RFC1305], as well as platform-specific hardware time sources.

RPC Interface Definitions

Type Interface Description
DCE/RPC 8FB6D884-2388-11D0-8C35-00C04FDA2795 W32Time
Named Pipe \\pipe\W32TIME None
Named Pipe \\pipe\W32TIME_ALT None

Associated Roles/Features

Service
Windows Time Service

MS-WCCE: Windows Client Certificate Enrollment Protocol

The Windows Client Certificate Enrollment Protocol consists of a set of DCOM interfaces that enable clients to request various services from a certification authority (CA). These services enable X.509 digital certificate enrollment, issuance, revocation, and property retrieval.

RPC Interface Definitions

Type Interface Description
DCE/RPC 5422FD3A-D4B8-4CEF-A12E-E87D4CA22E90 ICertRequestD2
DCE/RPC D99E6E70-FC88-11D0-B498-00A0C90312F3 ICertRequestD

Associated Roles/Features

Service
Active Directory Certificate Services (AD CS)

MS-WDSC: Windows Deployment Services Control Protocol

The Windows Deployment Services (WDS) Control Protocol is an RPC interface that provides the ability to remotely invoke services provided by WDS Server. It is a client/server protocol that uses RPC as a transport. The protocol provides a generic invocation mechanism to send requests to the server and receive replies.

RPC Interface Definitions

Type Interface Description
DCE/RPC 1A927394-352E-4553-AE3F-7CF4AAFCA620 WdsRpcInterface

MS-WKST: Workstation Service Remote Protocol

The Workstation Service Remote Protocol remotely queries and configures certain aspects of a Server Message Block network redirector on a remote computer.

RPC Interface Definitions

Type Interface Description
DCE/RPC 6BFFD098-A112-3610-9833-46C3F87E345A wkssvc
DCE/RPC f2c9b409-c1c9-4100-8639-d8ab1486694a wkssvc.dll
DCE/RPC eb081a0d-10ee-478a-a1dd-50995283e7a8 wkssvc.dll
DCE/RPC 7f1343fe-50a9-4927-a778-0c5859517bac wkssvc.dll
Named Pipe \\pipe\wkssvc None

Associated Roles/Features

Service
Active Directory Domain Services (AD DS)

MS-WMI: Windows Management Instrumentation Remote Protocol

The Windows Management Instrumentation Remote Protocol uses the Common Information Model (CIM) to represent various components of the operating system. CIM is the conceptual model for storing enterprise management information.

RPC Interface Definitions

Type Interface Description
DCE/RPC 027947E1-D731-11CE-A357-000000000001 IEnumWbemClassObject
DCE/RPC 1C1C45EE-4395-11D2-B60B-00104B703EFD IWbemFetchSmartEnum
DCE/RPC 2C9273E0-1DC3-11D3-B364-00105A1F8177 IWbemRefreshingServices
DCE/RPC 423EC01E-2E35-11D2-B604-00104B703EFD IWbemWCOSmartEnum
DCE/RPC 44ACA674-E8FC-11D0-A07C-00C04FB68820 IWbemContext
DCE/RPC 44ACA675-E8FC-11D0-A07C-00C04FB68820 IWbemCallResult
DCE/RPC 541679AB-2E5F-11D3-B34E-00104BCC4B4A IWbemLoginHelper
DCE/RPC 7C857801-7381-11CF-884D-00AA004B2E24 IWbemObjectSink
DCE/RPC 9556DC99-828C-11CF-A37E-00AA003240C7 IWbemServices
DCE/RPC A359DEC5-E813-4834-8A2A-BA7F1D777D76 IWbemBackupRestoreEx
DCE/RPC C49E32C7-BC8B-11D2-85D4-00105A1F8304 IWbemBackupRestore
DCE/RPC D4781CD6-E5D3-44DF-AD94-930EFE48A887 IWbemLoginClientID
DCE/RPC DC12A681-737F-11CF-884D-00AA004B2E24 IWbemClassObject
DCE/RPC F1E9C5B2-F59B-11D2-B362-00105A1F8177 IWbemRemoteRefresher
DCE/RPC F309AD18-D86A-11D0-A075-00C04FB68820 IWbemLevel1Login
DCE/RPC 674B6698-EE92-11D0-AD71-00C04FD8FDFF WbemContext (coclass)
DCE/RPC 8BC3F05E-D86B-11D0-A075-00C04FB68820 WbemLevel1Login (coclass)
DCE/RPC 9A653086-174F-11D2-B5F9-00104B703EFD WbemClassObject (coclass)
DCE/RPC C49E32C6-BC8B-11D2-85D4-00105A1F8304 WbemBackupRestore (coclass)

Associated Roles/Features

Service
Windows Management Instrumentation

MS-WSRM: Windows System Resource Manager (WSRM) Protocol

The Windows System Resource Manager (WSRM) Protocol is a set of Distributed Component Object Model (DCOM) interfaces for managing the configuration of processor, memory resources, and accounting functions on a server.

RPC Interface Definitions

Type Interface Description
DCE/RPC 21546AE8-4DA5-445E-987F-627FEA39C5E8 IWRMConfig
DCE/RPC 2A3EB639-D134-422D-90D8-AAA1B5216202 IResourceManager2
DCE/RPC 481E06CF-AB04-4498-8FFE-124A0A34296D IWRMCalendar
DCE/RPC 4F7CA01C-A9E5-45B6-B142-2332A1339C1D IWRMAccounting
DCE/RPC 59602EB6-57B0-4FD8-AA4B-EBF06971FE15 IWRMPolicy
DCE/RPC 943991A5-B3FE-41FA-9696-7F7B656EE34B IWRMMachineGroup
DCE/RPC BC681469-9DD9-4BF4-9B3D-709F69EFE431 IWRMResourceGroup
DCE/RPC C5CEBEE2-9DF5-4CDD-A08C-C2471BC144B4 IResourceManager
DCE/RPC E8BCFFAC-B864-4574-B2E8-F1FB21DFDC18 ResourceManager (coclass)
DCE/RPC F31931A9-832D-481C-9503-887A0E6A79F0 IWRMProtocol
DCE/RPC FC910418-55CA-45EF-B264-83D4CE7D30E0 IWRMRemoteSessionMgmt