Disabling Services on a Non-Responsive Computer

I was faced with a client that had a server rendered unresponsive but somewhat functional by malfunctioning anti-virus software.  The services would either hang upon being stopped, or automatically restart themselves.

 I could not get remote desktop to respond, and was not in a position to go to the client location to investigate.  Thankfully some remote administration utilities were working, and RegEdit was one of them.

 Remember that each service in Windows lives in the Registry under HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\<shortservicename>

 The shortservicename is that same name that you would use with the NET START or NET STOP commands, and can be found by opening the Services Administrative Tool and going to the properties of the service and reading the Service Name Property off the General tab.

 To disable a service from starting, navigate to its key as described above and change the Start value to 4.  4 is the numerical value for the Disabled status.  Then you can reboot the computer and the problematic services will not start.

Hope this helps someone;

James

Leave a Reply

You must be logged in to post a comment.