Remote Registry (RemoteRegistry) Service Defaults in Windows XP

Enables remote users to modify registry settings on your computer. If this service is stopped, the registry can be modified only by users on your computer. If this service is disabled, any services that explicitly depend on it will fail to start.

Default Settings

Startup type:
Windows XP Home SP0N/A
Windows XP ProfessionalAutomatic
Windows XP Home SP1N/A
Windows XP Professional SP1Automatic
Windows XP Home SP2N/A
Windows XP Professional SP2Automatic
Windows XP Home SP3N/A
Windows XP Professional SP3Automatic
Display name:Remote Registry
Service name:RemoteRegistry
Service type:share
Error control:normal
Object:NT AUTHORITY\LocalService
Path:%SystemRoot%\system32\svchost.exe -k LocalService
Registry key:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry

Default Behavior

Remote Registry is a Win32 service. In Windows XP it is starting automatically along with the operating system. Then the Remote Registry service is running as NT AUTHORITY\LocalService in a shared process of svchost.exe. Other services and drivers are allowed to run in the same process. If the Remote Registry fails to start, the technical information about the error is added to the Event Log. Windows XP startup should proceed, but a message box should be displayed informing the user that the RemoteRegistry service has failed to start.


Remote Registry depends on the Remote Procedure Call (RPC) service.

Restore Default Startup Configuration for Remote Registry

1. Select your Windows XP edition and service pack, and then click Download.

2. Save the WinXP_RemoteRegistry_Service_Startup.cmd file to a local storage device.

3. Run the saved file.

4. Restart the computer.

The RemoteRegistry service is using the regsvc.dll file that is located in the %WinDir%\system32 folder. If the file is changed, damaged or deleted, you can restore its original version from Windows XP installation media.