This view shows the configuration of services that are present in the capture project. A brief overview about services can be found on the MSDN website here, and an in-depth description of windows services applications can be found here.
|
Be aware: These settings will only be applied to RPP, MSI, or MST projects that are built. If changes need to be made to services for other project types,then it must be done using the methods particular to the specific project type. |
Exclude
Although the standard exclusions in RayPack are thorough, it might be required to manually exclude services from the resulting project / package that is to be created from the capture project, depending on your own environment. Excluding an entry is accomplished by selecting the item to be excluded, opening the context menu, and then clicking the EXCLUDE option. As an alternative, exclusion may be achieved by left-clicking an item and using the key combination Control + E.
One may also notice that the INCLUDE option has become active, as the selected item is marked as excluded and can now be included. The user may also select multiple items to be excluded using the standard windows mechanism for selecting multiple items from a list.
Include
During the capture process, if a service changes or is created on the system, then it may be required to manually include a specific service in the resulting project / package that is to be created from the capture project. Excluding an entry is accomplished by selecting the item to be excluded, opening the context menu, and then clicking the INCLUDE option. As an alternative, inclusion may be achieved by left-clicking an item and using the key combination Control + I.
One may also notice that the EXCLUDE option has become active, as the selected item is marked as included and can now be included. The user may also select multiple items to be excluded using the standard windows mechanism for selecting multiple items from a list.
|
Be aware: Services not installed by the captured application are excluded by default. For example, if a captured application installs a service called MyService and disables a service called ThirdPartyService, both changes will be captured and displayed, but only the former will be included and the latter will be excluded (if the exclusions did not define otherwise). This practice eliminates the risk of capturing background noise (especially on Windows 10 / 11), and minimises the risk of unmanaged control of services that do not belong to the current package. If control of a third-party or system service is required, the service change must be manually included.
More information about the Services can be found in this chapter: Coverage + Exclusions |
Information
This view shows the various properties of the service. In this view you may change the various properties to meet your own needs.
Display Name:
The display name to be used by user interface programs to identify the service such as services.msc. This string has a maximum length of 256 characters. The name is case-preserved in the service control manager. Display name comparisons are always case-insensitive. This is not to be confused wit the actual name of the service as used by the service control manager.
Description:
The display name to be used by user interface programs to identify the service. This string has a maximum length of 256 characters. The name is case-preserved in the service control manager. Display name comparisons are always case-insensitive.
Executable:
This is the fully qualified path to the service binary file. If the path contains a space, it must be quoted so that it is correctly interpreted. The path can also include arguments for an auto-start service (for example, "C:\Program Files\UltrasVNC\WinVNC.exe arg1 arg2"). These arguments are passed to the service entry point (typically the main function).
Start Type:
Here are the service start options. This parameter can be one of the following values.
•Auto Start (0x02) - A service started automatically by the service control manager during system startup.
•Demand Start (0x03) - A service started by the service control manager when a process calls the StartService function.
•Disabled (0x04) - A service that cannot be started. Attempts to start the service resulting in the error code ERROR_SERVICE_DISABLED.
The start types Boot Start (0x00) and System Start (0x01) are not selectable, as they are only relevant for drivers and are therefore not available. If these types of service have been captured, then please examine the capture project for drivers that have been installed. These will have to be dealt with separately depending on the type of project that is to be generated.
|
Note: The Auto Start (Delayed) parameter is only valid for Windows Vista or later operating systems. |
Error Control:
Here we discuss the severity of the error and action taken, if this service fails to start. This parameter can be one of the following values:
•Critical (0x03) - The startup program logs the error in the event log, if possible. If the last-known-good configuration is being started, the startup operation fails. Otherwise, the system is restarted with the last-known good configuration.
•Ignore (0x0) - The startup program ignores the error and continues the startup operation.
•Normal (0x01) - The startup program logs the error in the event log, but continues the startup operation.