Re: Disabling non-Microsoft services?

Once you're sure of the syntax, you can edit the default logon script to
include the appropriate command. It's at
C:\Windows\SYSVOL\sysvol\<domainname>\scripts\SBS_LOGIN_SCRIPT.bat. Make a
backup copy before editing.

The only possible issue I can see is that if the users' permissions don't
allow them to change a service startup type, it probably won't work from a
login script. I'm not sure without testing, but my guess would be that if
you do this logged in with domain admin rights it'll work, but if an
ordinary user does it from a login script it won't.




"Sean Vreeland" <SeanVreeland@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:38787B6D-C599-4065-AEFF-5F768032D410@xxxxxxxxxxxxxxxx
Humm, looks like it could work.

I wonder if I could make a logon script from this somehow?


"Dave Nickason [SBS MVP]" wrote:

Just one more idea. You'll have to be the guinea pig for this tool
because
I've never tried it, but I'm going to now that I'm aware of it.

On your XP PC, go to a command prompt and type "SC /?" without the
quotes.
Or just search Help and Support for SC. It's a cool command line tool
that
lets you control services remotely from a command line.

As I said, I have not tried this, but it looks like you do:

sc \\<computername> stop <servicename>
sc \\<computername> config <servicename> start= disabled

I just gave this a quick look as I'm running out the door, so check the
syntax before trying it on any unsuspecting victims. If it works on one
PC,
you can just create a quick batch file and run it.


"Sean Vreeland" <SeanVreeland@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:29A92C96-FD96-4499-B3A7-95DBB13D5126@xxxxxxxxxxxxxxxx
Yeah, this won't help me because this particular service isn't on the
Server.
. .any more ideas?


"Dave Nickason [SBS MVP]" wrote:

You can control this in Group Policy under Computer Configuration ->
Windows
Settings -> Security Settings -> System Services. I've never tried
it,
so
your mileage may vary. Also, it appears to only show services that
exist
on
the server, so I'm not sure how you can control one that's not
installed
on
the server. You'll want to note anything you set or change for undo
purposes if you get unintended results.


"Sean Vreeland" <SeanVreeland@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message
news:5C18C340-686C-4707-8C2F-E27ABA7468D1@xxxxxxxxxxxxxxxx

Is there a way to create a GPO that would disable non-Microsoft
services?

There is a Symantec service that is installed called "SAVROAM" when
installing Symantec AntiVirus 10.0 Corporate Edition. By default,
this
service is automatically set to AUTOMATIC. However, this creates
problems
for me, I need it to be disabled, however, I don't want to go around
to
each
and every workstation and disable it.

So, is there a way to create a GPO that would disable this service?









.

Relevant Pages

  • Re: Disabling non-Microsoft services?
    ... Also, in the syntax of the DC command, you have to specify a computer name. ... I wonder if I could make a logon script from this somehow? ... installing Symantec AntiVirus 10.0 Corporate Edition. ...
    (microsoft.public.windows.server.sbs)
  • Re: logon/logoff scripts and runas
    ... I think the runas command does load the user profile unless /noprofile is ... > Logon scripts run as part of the "Windows Session" setup process that, ... >> I have a GPO that specifies a logon script in User Configuration/Windows ...
    (microsoft.public.windows.group_policy)
  • RE: Active Directory DNS
    ... You may use a tool called Print Migrator to facilitate the migration. ... Use logon script and GPO to remap the shared files ... You can use Net use command to re-map the driver. ... Assign startup script and logon script ...
    (microsoft.public.windows.server.migration)
  • Re: Public non MSI applications. ZAP files
    ... > in IT related business, you are not the only one involved ... > When I first used a logon script, ... > (the command prompt when a vbs script is executed) ... > When working in IT, ignorant and arrogant HR, Directors ...
    (microsoft.public.win2000.group_policy)
  • Re: Printing problem
    ... Using a logon script is certainly one solution, but an alternative is to put ... the command I suggested into the Startup folder of the user that needs to ... their own computer and need to print on network printers. ...
    (microsoft.public.win2000.networking)