The settings for system services are recorded under [Hkey_local_machine\system\controlset001\services\termservice]. So what is the difference between ControlSet001, ControlSet002 and ControlSet?
By default:
CONTROLSET001: System-realistic configuration information.
ControlSet: Run-time configuration. When Windows starts, a copy is copied from ControlSet001 as the current configuration information for the operating system. The changes we made to the computer configuration are written directly to the
CurrentControlSet, during the restart, Windows overwrites the ControlSet001 with CurrentControlSet content to ensure that the two control groups are consistent.
CONTROLSET002: "Last successfully started configuration information". When the operating system is successfully started each time (referring to a successful login), it copies the data from CurrentControlSet and ControlSet001 to
The ControlSet002.
----------------------------------------------------------------------------
However, this sequence and number are not immutable, and the change occurs after using the last Known Good configuration. At this point, the system will treat 002 as the system's actual configuration information, and 001 of the problematic control group will be
Backups are sealed up.
The next configuration that will be used is recorded under [Hkey_local_machine\system\system\select]:
The "current" data item represents the group of controls that Windows XP uses during this startup.
The "Default" data item represents the group of controls that Windows XP will use the next time it starts, the same as the control group that this startup uses.
The "LastKnownGood" data item represents the group of controls that Windows XP will use when you select Last Known Good Configuration during startup.
The "Failed" data item represents a group of controls in which Windows XP saves data that failed to start the production. This group of controls does not actually exist until the first time that the user invokes the last Known Good Configuration option.