Learn about per-user services, how to change the template service startup type, and manage per-user services through group policy and security templates.

Per-user services in Windows

When a user signs in to Windows, the OS creates per-user services. When the user signs out, these services are stopped and deleted. They run in the security context of the user account instead of a built-in security principal. This behavior provides better resource management than the previous approach of running these services associated with a preconfigured account or as tasks.

Windows creates these per-user services based on templates defined in the registry. If you need to manage or control behaviors of these services, you can adjust the template. For example, you can set a template service's startup type to Disabled. In this example, Windows creates the per-user service in a stopped and disabled state.

Use the information in this article to understand per-user services, configure user service templates, and manage per-user services through group policy and security templates.

List of per-user services

The following table lists per-user services in the current version of Windows. Other versions of Windows 10/11 might not have the same services available.

Before you reconfigure any of these services, review this information to understand the implications. For example, if you disable the per-user service, there might be dependent apps that don't work correctly.

View per-user services

You can't view the user service templates outside of the Windows Registry, but you can see the user-specific per-user services. Windows displays these services with the following format: <service name>_LUID where <service name> is the display name of the user service and LUID is a locally unique identifier for the user context.

For example, you might see the following per-user service names:

Contact Data_443f50
Sync Host_443f50
User Data Access_443f50
User Data Storage_443f50

Note: The display name and the service name for all per-user services include the same LUID suffix.

How to disable per-user services

The templates for user services aren't displayed in the Services console (services.msc). To disable a per-user service, you need to directly edit the registry, either with group policy or a scripted solution. The templates are located in the registry at

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

Note: When you disable a per-user service, Windows still creates it when the user signs in, but in a stopped and disabled state. When the user signs out, Windows removes the per-user service.

You can't manage all of the per-user service templates using normal group policy management methods. Because the per-user services aren't displayed in the Services management console, they're also not displayed in the group policy services policy editor.

Additionally, there are four user services that you can't manage with a security template:

• PimIndexMaintenanceSvc
• UnistoreSvc
• UserDataSvc
• WpnUserService

With these restrictions, you can use the following methods to manage per-user service templates:

• A combination of a security template and a script, or group policy preferences registry policy.
• Group policy preferences for all of the services.
• A script for all of the services.

Use a script to manage per-user services

You can create a script to change the startup type for the per-user services. Then use group policy or another management solution such as Microsoft Configuration Manager to deploy the script to targeted devices.

Example 1: Use the Set-Service PowerShell cmdlet

The following sample script uses the Set-Service PowerShell cmdlet to configure the PimIndexMaintenanceSvc service start type to disabled:
PowerShell

Set-Service -Name PimIndexMaintenanceSvc -StartupType Disabled

Example 2: Use the sc.exe config command line

The following sample script uses sc.exe config to configure the PimIndexMaintenanceSvc service start type to disabled:
Windows Command Prompt

sc.exe configure PimIndexMaintenanceSvc start= disabled

Note: The space after = is intentional.

Managing user service templates with the Windows Registry

If you can't use group policy preferences to manage the per-user services, you can edit the Windows Registry. To disable a user service template, change the startup type for each service to 4, which is Disabled.

Caution: Don't directly edit the registry unless there's no other alternative. The Registry Editor or Windows don't validate these manual modifications to the registry. Incorrect values can be stored, which can result in unrecoverable errors in the system. When possible, instead of editing the registry directly, use group policy or other supported Windows tools to accomplish these tasks. If you must edit the registry, use extreme caution.

Example 1: Use the reg.exe command line command to edit the registry

1 As an administrator, run cmd.exe to open a Windows command prompt.
2 The following example includes multiple commands that disable the specified Windows services by changing their Start value in the Windows Registry to 4:

Windows Command Prompt 

REG.EXE ADD HKLM\System\CurrentControlSet\Services\CDPUserSvc /v Start /t REG_DWORD /d 4 /f
REG.EXE ADD HKLM\System\CurrentControlSet\Services\OneSyncSvc /v Start /t REG_DWORD /d 4 /f
REG.EXE ADD HKLM\System\CurrentControlSet\Services\PimIndexMaintenanceSvc /v Start /t REG_DWORD /d 4 /f
REG.EXE ADD HKLM\System\CurrentControlSet\Services\UnistoreSvc /v Start /t REG_DWORD /d 4 /f
REG.EXE ADD HKLM\System\CurrentControlSet\Services\UserDataSvc /v Start /t REG_DWORD /d 4 /f
REG.EXE ADD HKLM\System\CurrentControlSet\Services\WpnUserService /v Start /t REG_DWORD /d 4 /f

Example 2: Use the Registry Editor user interface to edit the registry

1 As an administrator, run regedit.exe to open the Registry Editor.
2 Browse to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services and then select the user service template. For example, CDPSvc.
3 In the list of values, open the Start value.
4 Change the Value data to 4.

Example 3: Prevent the creation of per-user services

You can prevent Windows from creating a per-user service when a user signs on.
In the same service template node of the registry, set UserServiceFlags to 0.

L’intégrité des données consiste à garantir que les données restent exactes, complètes et cohérentes tout au long de leur cycle de vie, et qu’elles ne sont pas modifiées sans autorisation.

Add HTTPS support to Icecast2 using Let's Encrypt

Do you have native SSL support in your icecast2 package?

If you love to use the official package, first check if you have SSL support in your already installed icecast2 package:

ldd /usr/bin/icecast2 | grep ssl

If you don't see anything, you have no native support for SSL. In this case you can choose one of these options:

• Option A: remove the package and install something else
• Option B: setup a frontend webserver using nginx
• Option C: setup a frontend webserver using Apache (← this answer)

How to use Apache to setup a frontend webserver with HTTPs support, to serve Icecast2

To visit Icecast over https://, you can install Apache and use it as frontend webserver, listening on standard port 443. It's easy to use Let's Encrypt to create a free certificate for Apache. Once it works, you can pass the traffic to Icecast2.

 Browser
 │
 │ https://example.com/radio.mp3
 ▼
┌───────────┐
│           │
│ Apache    │:443
│           │
└┬──────────┘
 │
 │ http://localhost:8080/radio.mp3
 ▼
┌───────────┐
│           │
│ Icecast   │:8080
│           │
└───────────┘

If you use Debian GNU/Linux, here the guide:

https://wiki.debian.org/Icecast2

The core of the solution is to enable an apache VirtualHost like this:

#
# Apache VirtualHost serving my Icecast under HTTPs (:443)
#
# This frontend webserver passes all the traffic to
# the underlying Icecast, listening on port 8000.
#
# The certificate comes from Let's Encrypt.
#
# Credits: https://stackoverflow.com/a/71383133/3451846
<virtualhost *:443>

  ServerName example.com

  # this path is not useful and it's used only for Let's Encrypt's temporary files during the renewal process
  DocumentRoot /var/www/html

  # send all traffic to Icecast in plaintext
  <Location "/">
    ProxyPass        http://localhost:8000/
    ProxyPassReverse http://localhost:8000/
  </Location>

  # these files are served from /var/www/html to serve Let's Encrypt temporary files
  <Location "/.well-known/acme-challenge">
    ProxyPass !
  </Location>

  <IfFile /etc/letsencrypt/live/example.com/cert.pem>
    SSLEngine on
    SSLCertificateFile      /etc/letsencrypt/live/example.com/cert.pem
    SSLCertificateKeyFile   /etc/letsencrypt/live/example.com/privkey.pem
    SSLCertificateChainFile /etc/letsencrypt/live/example.com/chain.pem
  </IfFile>

</virtualhost>

<VirtualHost *:80>
  ServerName example.com

  Redirect / https://example.com/
</VirtualHost>

And then enable it and issue your certificate:

letsencrypt certonly --domain example.com --webroot --webroot-path /var/www/html

But this is explained maybe better from the above guide.

At the moment the guide does not cover nginx but other answers might give a similar practical example using that technology as well as apache2. The benefit of involving a frontend webserver like apache2 or nginx is that you don't have to touch Icecast. Also, it allows to serve Icecast2 among your already-existing websites, if any.

Other answers might want to talk about an Icecast2's native interface with Let's Encrypt. At the moment I can share just the apache2 method that is the one I use in production since years without any problem. Moreover since I use Debian GNU/Linux, my package has not SSL support.

WoW64 - aka Windows (32-bit) on Windows (64-bit) - is a subsystem that enables 32-bit Windows applications to run on 64-bit Windows. Most people today are familiar with WoW64 on Windows x64, where they can run x86 applications. WoW64 has been with us since Windows XP, and x64 wasn’t the only architecture where WoW64 has been available - it was available on IA-64 architecture as well, where WoW64 has been responsible for emulating x86. Newly, WoW64 is also available on ARM64, enabling emulation of both x86 and ARM32 appllications.

Some malware samples are known to do various checks to determine if they are running in a virtual machine. One of the common checks is to look for the presence of certain hardware components that are typically not emulated in virtualized environments. One such component is the CPU fan.

The main purpose of my Raspberry Pi is to act as a central music box. This task can easily be solved with MPD and Icecast2. Read on and get it working within...

The SRVCC however is not an alternative for delivery, but a rather a handover process of a voice call previously started in the LTE (whether One Voice - VoLTE LTE or IMS Full Voice).

Everything we have seen so far is based on the making of voice call in the legacy network. But as we have seen these are 'temporary' solutions until the 'final' solution - VoLTE - is available.

The first implementation alternative that emerged was the VoLGA, tried to use what are already available, with minimal changes required.

While making a voice call may seem simple, largely depends on the scenario where the user is, and alternatives available for its completion. So it is necessary to understand well what are all the possibilities and the most important concepts of these key scenarios.

De nos jours on rencontre de nombreux termes techniques en anglais : « megabyte », « URL » ou encore « plugin ».

Pourtant, ces nouveaux mots ont souvent un équivalent francais qu'il conviendrait d'utiliser. En voici une liste bien pratique. Bonne lecture !

Multi functional app to find duplicates, empty folders, similar images etc. - qarmin/czkawka

Have a problem or need information for a Panasonic Telephone, Lumix Camera, Television, Microwave Oven or other consumer product? Visit the Panasonic Official support page for consumer products, operational assistance, troubleshooting, warranty, repair, service, firmware, operating manuals or parts and accessory information.

How to update the firmware of 8BitDo's gamepads without using Upgrade Tools

In the past 8BitDo offered the firmware files for their gamepads as downlodable ZIP archives on their support site. But for their more recent versions, the Upgrade Tool is required in order to download and flash the firmware onto their gamepads. Unfortunately there is no native linux version of the Upgrade Tool available as of today.

Le GLT à Rochefort

Dernière mise à jour 22/04/2006.

Le GLT (Guided Light Transit) a été conçu par la société BN (à l'époque filiale à 97% de Bombardier). La société désirait proposer aux villes de taille moyenne un véhicule de grande capacité ne demandant pas de grosses infrastructures fixes comme le tram en nécessite. Pour plus d'informations techniques, reportez-vous au chapitre consacré au TVR de Nancy. Le "tram léger guidé"fut présenté en primeur à Bruxelles (sur l'actuel site de Bruparck) en 1985.

Anubis weighs the soul of your connection using a sha256 proof-of-work challenge in order to protect upstream resources from scraper bots.

This program is designed to help protect the small internet from the endless storm of requests that flood in from AI companies. Anubis is as lightweight as possible to ensure that everyone can afford to protect the communities closest to them.

Anubis is a bit of a nuclear response. This will result in your website being blocked from smaller scrapers and may inhibit "good bots" like the Internet Archive. You can configure bot policy definitions to explicitly allowlist them and we are working on a curated set of "known good" bots to allow for a compromise between discoverability and uptime.

ripple effect on a bootstrap card

DxWnd : Windows hooker - intercepts system calls to make Win32 programs run in a window, to enhance application compatibility, to enhance video modes, to stretch timing and emulate CD disk data and audio tracks. It is typically very useful to run old Windows games.

--
Essayer ça avec Monster Truck Madness 2

DVD et upscaling, vous faites comment?

Il s'avère que les weebs¹ sont des gros nerds de l'optimisation de la qualité vidéo. Je suis tombé sur ce guide² qui aborde en profondeur la configuration de mpv. Il présente, entre autre, les options d'interpolation, d'upscaling, ou encore les shaders.

Cela m'a ainsi permis de découvrir uosc³ qui est une refonte de l'OSD de mpv. Il propose, par exemple, la génération à la volée de thumbnails sur la timeline, et plein d'autres fonctions très pratiques, le tout sans gréver les performances.

Bref, je conseille à tous les aficionados de cette excellent lecteur multimédia qu'est MPlayer mplayer2 mpv.

--

¹ : https://fr.wikipedia.org/wiki/Japonophilie#XXIe_si%C3%A8cle
² : https://iamscum.wordpress.com/guides/videoplayback-guide/mpv-conf/
³ : https://github.com/tomasklaen/uosc