eventlog
initshutdown
lsarpc
lsass
mdssvc
msftewds
netdfs
netlogon
ntsvcs
plugplay
samr
srvsvc
svcctl
winreg
wkssvc