Windows 10: Per-user services <service name>_LUID. How to change LUID to USERNAME or constant?

User-specific per-user services are displayed using the <service name>_LUID format where LUID is the locally unique identifier. To keep backward compatibility I need to leave <service name>_* format, but instead of LUID use USERNAME or constant. This is required for effective firewall rules management. LUID has a new value every boot and firewall manager always treats the same service as a new service because of the new name. How can I make per-user service name the same after reboot?

:)

 

User Services in the Services.msc module

Thank you. I couldn't find anything about this and didn't doubt Tairiku Okami but I knew that the correct terminology was outside of my knowledge.

That's great! Thanks for sharing this link. I am going to check it out.

And I imagine that where to find the template will be explained or referred to in the document you provided? This here, (LUID) is the keyword I was searching for.

Yes. This helps a lot. Thank you very much. I will incorporate all this new information onto my article and hopefully that too will be of use.

 

User Services in the Services.msc module

They aren't mysterious services. They're the result of gradually moving the management of some system-wide services to a per-user service model. What you are seeing is a parent service (known as the template service) spawning a temporary per-user service that can be managed without affecting the parent service.

I agree with @TairikuOkami's opinion that this is to prevent tampering... most likely to prevent mass scripted attacks rather than tinkering by individual users. As a result the purpose appears to be general hardening of a potential attack vector... so nothing mysterious at all about them.

(Microsoft has also gradually implemented other methods of preventing service tampering, for example from within the Services console, by adding an additional Security sub-key to several services and by adding Remediation services that regularly check registry settings for changes... but that, IMO, is mainly to prevent 3rd-party tools from affecting services like, for example, Windows Update.).

To differentiate between the two (template and per-user), the per-user service name is the template name plus an underscore character and locally unique identifier (LUID) appended, e.g. AarSvc_1d4b74c (where _1d4b74c is the LUID). All per-user services share the same LUID, suggesting that the LUID is a random session identifer. To further differentiate, the template service has been removed from view in the Services console.

This Microsoft document - Per-user services in Windows 10 and Windows Server - explains their function and rationale in much greater detail.

It describes several methods of managing per-user services and provides a warning and reason why not to manage template services directly using the registry. It's not that you can't... but any mistake could render a device unable to start or boot to the desktop.

It also describes a method of amending template services to disable per-user services from being spawned. I'm a little surprised that there's not a warning against this as well. (I haven't tried.)

Hope this helps...

 

meaning of common suffix of services

Hi noellapin,



Thank you for posting in Microsoft Community.



Per-user services are services that are created when a user signs into Windows or Windows Server and are stopped and deleted when that user signs out. These services run in the security context of the user account. You can't view
the template services in the Services console, but you can see the user-specific per-user services - they are displayed using the <service name>_LUID format (where LUID is the locally unique identifier).

For example, you might see the following per-user services listed in the Services console:

CPDUserSVC_443f50

ContactData_443f50



For more information, you may refer :

Per-user services in Windows 10 and Windows Server

Sc qc

However, let me help to point you in the right direction. I would suggest you to post your query in

TechNet Forums where you will find professionals with expertise on Service Control Manager for Windows 10 and that would be the appropriate forum.



Regards,

Vivian S