Endpoint Protection

 View Only
  • 1.  What is udhisapi.dll

    Posted Apr 13, 2009 03:05 PM
    What is udhisapi.dll and why does svchost need it?
    Is it ONLY for WMP to SHARE or network files?
    If so, we can trash or block it? (no file sharing allowed and no, WPM shoudl not be using the Internet here to get MP3 file information from the web)

    Can I safely block access to udhisapi.dll  and have things work well?


  • 2.  RE: What is udhisapi.dll
    Best Answer

    Posted Apr 13, 2009 03:12 PM
    A quick search and found this:

    The Universal Plug and Play (UPnP) Device Host ISAPI Extension or the udhisapi.dll module is associated with Microsoft Windows Operating System as part of the UPnP Device Host, which provides support in hosting compliant UPnP devices. The udhisapi.dll module is an extension of the Internet Server Application Programming Interface (ISAPI) allowing communications to and from ISAPI-compliant servers. The udhisapi.dll module, together with UPnP Device Host, enables a computer to act as a host, communicating with UPnP devices across the network.

    Microsoft implemented UPnP technology with the release of Windows XP operating systems. As a local service of Windows XP, the UPnP Device Host is activated by simple service discovery protocol (SSDP), which provides a mechanism allowing the dynamic discovery of network devices. The SSDP service listens for UPnP connections at transmission control protocol (TCP) port 5000 and user datagram protocol (UDP) port 1900. The SSDP service uses two functions, namely, Options and Announce. The Options function is used to determine if a network device exists, while the Announce function is used by network devices to announce their existence.

    After discovery of existing network devices, the UPnP Device Host, along with the udhisapi.dll module, does the following:

    1. Announce the device in accordance to UPnP's discovery protocol.

    2. Respond to queries for the device's description.

    3. Route control requests to the part of the device's code that implement its functions.

    4. Maintain event subscriptions to services that the device provides.

    5. Send event notifications to subscribers when the state of the device's service changes.

    Though it is not a crucial part of the OS, the udhisapi.dll module is essential to networking and resource sharing. Microsoft's UPnP Audio/Video server Windows Media Connect (WMC) utilized the udhisapi.dll module. However, with the release of Windows Media Player (WMP) version 11, WMC functionalities were now built into WMP 11 with its Media Sharing Feature.



  • 3.  RE: What is udhisapi.dll

    Posted Apr 13, 2009 03:40 PM
    So possibly needed for sharing a printer, for example - so another workstation can see that printer as if local in a way......
    OK, makes sense! I'll exclude it from logging and blocking then. I was in test mode and noted that it seemed to come up every now and then.
    Now tell me - I used GOOGLE to search for that, spending 30 minutes, NOTHING, then decided I'd hit on the folks here who seem to have a vast/diverse knowledge of things. What did YOU use to search!?


  • 4.  RE: What is udhisapi.dll

    Posted Apr 13, 2009 03:46 PM
    Sometimes I find that seaching too hard is the problem!  I simply went to yahoo (my primary search tool) and searched on "what is udhisapi" and clicked on the first link.  I agree that it sounds like file and printer sharing may be affected, but didn't want to make any recommendations without futher research.