Re: Disabling non-Microsoft services?

Tech-Archive recommends: Fix windows errors by optimizing your registry

Oh, okay, yeah, this should work fine.

Thanks!

"Dave Nickason [SBS MVP]" wrote:

You can use %computername% to indicate that the target is whatever computer
it's running on. For example:

sc \\%computername% stop <servicename>

You can see what happens by going to a command prompt and typing "echo
%computername%" which returns the actual computer name, or "echo
\\%computername%" which returns it preceded by the two backslashes.

As I said, I haven't tried any of this, so you'll want to test it on one PC
before letting it loose in a login script.


"Sean Vreeland" <SeanVreeland@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:DF86084A-22C8-431E-8DC3-13174C590645@xxxxxxxxxxxxxxxx
Well, another downfall to this is that if the service is already disabled,
then it would probably give some type of error?

Also, in the syntax of the DC command, you have to specify a computer
name.
. . so how would that work, if I were applying this logon script to the
entire domain?


Also, I tested the actual DC command and it works.

"Dave Nickason [SBS MVP]" wrote:

Once you're sure of the syntax, you can edit the default logon script to
include the appropriate command. It's at
C:\Windows\SYSVOL\sysvol\<domainname>\scripts\SBS_LOGIN_SCRIPT.bat. Make
a
backup copy before editing.

The only possible issue I can see is that if the users' permissions don't
allow them to change a service startup type, it probably won't work from
a
login script. I'm not sure without testing, but my guess would be that
if
you do this logged in with domain admin rights it'll work, but if an
ordinary user does it from a login script it won't.




"Sean Vreeland" <SeanVreeland@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:38787B6D-C599-4065-AEFF-5F768032D410@xxxxxxxxxxxxxxxx
Humm, looks like it could work.

I wonder if I could make a logon script from this somehow?


"Dave Nickason [SBS MVP]" wrote:

Just one more idea. You'll have to be the guinea pig for this tool
because
I've never tried it, but I'm going to now that I'm aware of it.

On your XP PC, go to a command prompt and type "SC /?" without the
quotes.
Or just search Help and Support for SC. It's a cool command line tool
that
lets you control services remotely from a command line.

As I said, I have not tried this, but it looks like you do:

sc \\<computername> stop <servicename>
sc \\<computername> config <servicename> start= disabled

I just gave this a quick look as I'm running out the door, so check
the
syntax before trying it on any unsuspecting victims. If it works on
one
PC,
you can just create a quick batch file and run it.


"Sean Vreeland" <SeanVreeland@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message
news:29A92C96-FD96-4499-B3A7-95DBB13D5126@xxxxxxxxxxxxxxxx
Yeah, this won't help me because this particular service isn't on
the
Server.
. .any more ideas?


"Dave Nickason [SBS MVP]" wrote:

You can control this in Group Policy under Computer
Configuration ->
Windows
Settings -> Security Settings -> System Services. I've never tried
it,
so
your mileage may vary. Also, it appears to only show services that
exist
on
the server, so I'm not sure how you can control one that's not
installed
on
the server. You'll want to note anything you set or change for
undo
purposes if you get unintended results.


"Sean Vreeland" <SeanVreeland@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message
news:5C18C340-686C-4707-8C2F-E27ABA7468D1@xxxxxxxxxxxxxxxx

Is there a way to create a GPO that would disable non-Microsoft
services?

There is a Symantec service that is installed called "SAVROAM"
when
installing Symantec AntiVirus 10.0 Corporate Edition. By
default,
this
service is automatically set to AUTOMATIC. However, this creates
problems
for me, I need it to be disabled, however, I don't want to go
around
to
each
and every workstation and disable it.

So, is there a way to create a GPO that would disable this
service?













.

Relevant Pages