Restarting Disabled Services Remotely

From: David Jones (kk7gw_at_yahoo.com)
Date: 07/23/03 

Date: Wed, 23 Jul 2003 13:55:13 -0700

You'll want to play around with the "sc.exe" command,
which allows you to modify the service database remotely.

Just remember that nothing prevents people from just
stopping them again if you don't change the underlying
problems...

>-----Original Message-----
>I have an issue where developers with admin rights in my
>area are stopping & disabling our AntiVirus product
>service. I have tried remotely & even locally from the
>prompt (don't want to use the Services GUI) by importing
a
>good registry hive to set the Service state back to
either
>Automatic or Manual (either will do) and then trying to
>start the service - both with NET START and the
>Sysinternals utility PSSERVICE. Both methods remotely
and
>locally give an error as follows:-
>
>System error 1058 has occurred.
>The service cannot be started, either because it is
>disabled or because it has no enabled devices associated
>with it.
>
>If you then use the GUI to check on the service status,
it
>is set to Auto /Manual but not running. Clicking on the
>button to Start the service then works.
>
>We have a mix of NT4 and XP but I am more concerned with
>the XP machines. Any ideas anyone? And no, the
developers
>need to keep the admin rights and once we are able to
>remotely restart these services (without a reboot!) I
will
>be switching from 'Interact with the desktop' to a
>specific admin account only, but that is down the line.
>Thanks
>.
>

Quantcast