{"id":99145,"date":"2018-07-03T07:00:00","date_gmt":"2018-07-03T21:00:00","guid":{"rendered":"https:\/\/blogs.msdn.microsoft.com\/oldnewthing\/?p=99145"},"modified":"2019-03-13T00:39:55","modified_gmt":"2019-03-13T07:39:55","slug":"20180703-00","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/oldnewthing\/20180703-00\/?p=99145","title":{"rendered":"How can I determine why the System process is listening on port 80?"},"content":{"rendered":"<p>A customer observed that the System process was listening on port 80 and couldn&#8217;t figure out why. <\/p>\n<p>The <code>netsh http show urlacl<\/code> command will show which URLs have been reserved, as well as the access control lists (ACLs) associated with them. <\/p>\n<pre>\nReserved URL : http:\/\/+:80\/Temporary_Listen_Addresses\/\n  User: \\Everyone\n    Listen: Yes\n    Delegate: No\n    SDDL: D:(A;;GX;;;WD)\n\nReserved URL : http:\/\/+:80\/0131501b-d67f-491b-9a40-c4bf27bcb4d4\/\n  User: NT AUTHORITY\\NETWORK SERVICE\n    Listen: Yes\n    Delegate: No\n    SDDL: D:(A;;GX;;;NS)\n\nReserved URL : http:\/\/+:80\/116B50EB-ECE2-41ac-8429-9F9E963361B7\/\n  User: NT AUTHORITY\\NETWORK SERVICE\n    Listen: Yes\n    Delegate: No\n    SDDL: D:(A;;GX;;;NS)\n<\/pre>\n<p>At this point, you have information you can enter into a search engine to see what they&#8217;re about. <\/p>\n<p>The first URL is used by the Windows Communication Framework; <a HREF=\"https:\/\/docs.microsoft.com\/en-us\/dotnet\/framework\/wcf\/feature-details\/how-to-replace-the-wcf-url-reservation-with-a-restricted-reservation\">this web page tells you how to modify or delete it<\/a>. <\/p>\n<p>The second one is assigned to <a HREF=\"https:\/\/msdn.microsoft.com\/en-us\/library\/dd359780.aspx\">[MS-PCHC]: Peer Content Caching and Retrieval: Hosted Cache Protocol<\/a>, which appears to be used for <a HREF=\"https:\/\/msdn.microsoft.com\/en-us\/library\/aa964314(v=vs.85).aspx\">subnet-level peer caching as part of Windows BranchCache<\/a>. <\/p>\n<p>The third one is assigned to <a HREF=\"https:\/\/msdn.microsoft.com\/en-us\/library\/dd303297.aspx\">[MS-PCCRR]: Peer Content Caching and Retrieval: Retrieval Protocol<\/a>, which also part of Windows BranchCache. <\/p>\n<p>The customer confirmed that disabling BranchCache caused Windows to stop listening on the second and third URLs. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>netsh can tell you.<\/p>\n","protected":false},"author":1069,"featured_media":111744,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[104],"class_list":["post-99145","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-oldnewthing","tag-tipssupport"],"acf":[],"blog_post_summary":"<p>netsh can tell you.<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/posts\/99145","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/users\/1069"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/comments?post=99145"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/posts\/99145\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/media\/111744"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/media?parent=99145"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/categories?post=99145"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/oldnewthing\/wp-json\/wp\/v2\/tags?post=99145"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}