Remove services on Startup for a domain.

[Anakha56]

Morning All,

A couple of weeks back my boss decided that Trend was not cutting it anymore and that Sophos had the better package. So he went along and purchased Sophos and installed it, then asked Sophos to install on every PC and remove any other antivirus program it found which it did, partially. You see we also were trialling something from Trend which prevented USB Devices from being used as well as a few other things now because they are not antivirus related Sophos did not remove them. Now whenever these PC's start they are loading these services and it is causing some problems on some machines.

So instead of walking to every machine and using msconfig to stop them, reboot then remove I would like to make a script to stop then remove the services when the Workstations startup in the morning. So how would I go about doing this? I dont have the services name right now will only get them tonight when I get to work.

Thank's for any assist .

[ChuckNorris]

Hey Anakha,

I'm not a server expert(getting there) but we did also have a problem with Trend previously, well installing a new version but the old one refused to uninstall completely. If I recall correctly, we had to run the Trend removal tool as well as to delete registry entries. That also stopped the services throughout the network from starting. I'll check through my notes, I'm sure I have the procedure.

Also, what version of Trend was it? Officescan, Worry-free, Scanmail etc?

Wish I could help with the script but they are not my strong point

[Anakha56]

Neither are they mine .

I will do a hunt for the Trend removal tool, it was the latest OfficeScan and Scanmail I think.

[ChuckNorris]

I think the URL was http://www.trendmicro.com/download , should find the tool there.

I'll pop you the registry entries to delete once I find them.

Officescan 10 and Scanmail 8 or the otherway around.

[ChuckNorris]

Did you manage to find the services names btw?

[hamin_aus]

Here is a VB script that will disable the service.

Code: Select all

strComputer = "."
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
Set colServiceList = objWMIService.ExecQuery("Select * from Win32_Service " _
                & "where Name='WinDefend'")

For Each objService In colServiceList
    errReturnCode = objService.ChangeStartMode("Disabled")
Next 

My example disables the Windoes Defender (WinDefend) service, but just substitute your sevrice name.

You can put that in the AD login script in group policy and Bob's you're Uncle who gave you "lap rides" as a child...

[KillerByte]

Here is a VB script that will disable the service.

Code: Select all

strComputer = "."
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
Set colServiceList = objWMIService.ExecQuery("Select * from Win32_Service " _
                & "where Name='WinDefend'")

For Each objService In colServiceList
    errReturnCode = objService.ChangeStartMode("Disabled")
Next 

My example disables the Windoes Defender (WinDefend) service, but just substitute your sevrice name.

You can put that in the AD login script in group policy and Bob's you're Uncle who gave you "lap rides" as a child...

Jamin to the rescue

[Anakha56]

I also found this little guy:

http://www.xiirus.net/articles/article- ... pqg9d.aspx

Delete a Windows Service Using the Command Line

Developing and debugging Windows Services in Visual Studio 2005 usually means creating setup projects to install and uninstall them. One of the quirks of using installers, however, is that sometimes the Windows service fails to uninstall. Below is the manual way of deleting or uninstalling a Windows service using the command line in Windows Vista and XP.

C:>sc delete [service name]

The utility also has other functions relating to Windows Services. Check them out.

If you liked this little howto. Please, consider sharing it. Thank you!

[ChuckNorris]

Bye bye services

good stuff jamin and anakha, i gotta save this page for future ref!!!

+100 to both of you!