Remote Registry

The Remote Registry service enables remote users who have the appropriate permissions to modify registry settings on the domain controller. The service's default configuration allows only members of the Administrators and Backup Operators groups to access the registry remotely. This service is required for the Microsoft Baseline Security Analyzer (MBSA) tool. MBSA enables you to verify which patches are installed on each of the servers in your organization.

If the Remote Registry service stops, only the registry on the local computer can be modified. If you disable this service, any services that explicitly depend on the service cannot start, but registry operations on your local computer are not affected. However, other computers or devices cannot connect to your local computer's registry.

This service is installed by default, and its startup type is Automatic.

The Remote Registry service is dependent upon the following system components:

When the Remote Registry service is started in its default configuration, it logs on by using the Local Service account.

  • Remote Procedure Call (RPC)
  • DCOM Server Process Launcher
  • RPC Endpoint Mapper