Remote Registry

GPTKB entity

Statements (17)
Predicate Object
gptkbp:instanceOf Windows service
gptkbp:canBeDisabled Yes
gptkbp:canBeStartedManually Yes
gptkbp:developedBy gptkb:Microsoft
gptkbp:documentation https://learn.microsoft.com/en-us/windows/win32/services/remote-registry-service
https://www.w3.org/2000/01/rdf-schema#label Remote Registry
gptkbp:includedIn gptkb:Microsoft_Windows
gptkbp:introducedIn gptkb:Windows_2000
gptkbp:portUsed RPC (Dynamic ports)
gptkbp:purpose Allows remote users to modify registry settings
gptkbp:riskFactor Potential attack vector if enabled
gptkbp:runsOn Local Service
gptkbp:service gptkb:RemoteRegistry
gptkbp:serviceDisplayName gptkb:Remote_Registry
gptkbp:status Disabled (Windows 10 and later)
gptkbp:bfsParent gptkb:Remote_Registry_Service
gptkbp:bfsLayer 8