![\"Photo](\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/hsg-7-31-14-1.png\" "\\"Photo")
<\/a><\/p>\nMike F Robbins is a senior systems engineer with 20 years of professional experience as an IT pro. Mike has provided enterprise computing solutions for educational, financial, health care, and manufacturing customers. He’s a Windows PowerShell MVP and self-proclaimed evangelist who uses Windows PowerShell on a daily basis to administer and manage Windows Server, Hyper-V, SQL Server, Exchange Server, SharePoint, Active Directory, Remote Desktop, EqualLogic storage area networks, AppAssure, and Backup Exec.<\/p>\n
Mike is the winner of the advanced category in the 2013 PowerShell Scripting Games. He has written guest blog posts for the Hey, Scripting Guy! Blog, PowerShell.org, and PowerShell Magazine, and he is a contributing author of a chapter in PowerShell Deep Dives<\/a>. Mike is the leader and cofounder of the Mississippi PowerShell User Group<\/a>. Mike is also a frequent speaker at Windows PowerShell and SQL Server Saturday technology events. He blogs at mikefrobbins.com<\/a> and can be found on twitter at @mikefrobbins<\/a>.<\/p>\n Here’s Mike…<\/p>\n When it comes to the subject of checking the status of services with Windows PowerShell, the first cmdlet that comes to mind is Get-Service<\/b>, so we’ll take a look at it first.<\/p>\n Get-Service -Name sppsvc |<\/p>\n Select-Object -Property *<\/p>\n As shown in the previous example, Get-Service<\/b> has a Status<\/b> property, but the issue is that it doesn’t have a property that tells us whether the service is set to be started automatically, so there’s no way of knowing whether the service should be running.<\/p>\n Because the Get-Service<\/b> cmdlet doesn’t have properties that contain the necessary information to determine what the start mode of a service is, we’ll resort to using Windows Management Instrumentation (WMI). In this scenario, I’m going to maintain backwards compatibility with Windows PowerShell 2.0, so I’ll use the Get-WmiObject<\/b> cmdlet instead of Get-CimInstance<\/b> cmdlet.<\/p>\n Get-WmiObject -Class Win32_Service -Filter {State != 'Running' and StartMode = 'Auto'}<\/p>\n In this example, notice the following:<\/p>\n To learn more about the service that isn’t started, we need to determine if any additional properties exist that could provide us with additional information. Any cmdlet that produces output can be piped to the Get-Member<\/b> cmdlet to determine what properties and methods exist, so that’s exactly what we’ll do in this scenario. We’re specifically looking for properties, so we’ll specify that via the MemberType<\/b> property of Get-Member<\/b>:<\/p>\n Get-WmiObject -Class Win32_Service -Filter {State != 'Running' and StartMode = 'Auto'} |<\/p>\n Get-Member -MemberType Properties<\/p>\n The DisplayName<\/b> property looks promising to give us a friendlier name for this service:<\/p>\n Get-WmiObject -Class Win32_Service -Filter {State != 'Running' and StartMode = 'Auto'} |<\/p>\n Select-Object -Property DisplayName, Name, StartMode, State<\/p>\n To determine a little more information about this service, let’s take a look at it in the GUI. We’re specifically looking to see what the GUI says the startup type is.<\/p>\n We’ve just discovered that querying WMI for the startup mode of services doesn’t differentiate services that are set to start automatically from the ones that are set to start automatically with a delayed start. This could be a problem because the delayed start services might return a false positive if we make the assumption that services set to automatic should be running. The delayed start services aren’t necessarily supposed to be running because, by definition, their startup is delayed.<\/p>\n To determine which services are set to start automatically, but not with a delayed start, we’ll need to query the registry:<\/p>\n Get-ItemProperty 'HKLM:\\SYSTEM\\CurrentControlSet\\Services\\*' |<\/p>\n Where-Object {$_.Start -eq 2 -and $_.DelayedAutoStart -ne 1} |<\/p>\n Select-Object -Property PSChildName<\/p>\n We’re specifically looking for services that have a value of 2 for the Start<\/b> property. This can mean automatic or automatic with delayed start. We’re also looking for services that don’t have a value of 1 for the DelayedAutoStart<\/b> property. The DelayedAutoStart<\/b> property is created when a service is set to start automatically with a delayed start. If the service is changed later, that property will remain, but its value will be 0 if the service is set to start automatically (not a delayed start). If the service is set to manual, the Start<\/b> property will be 3, and if it’s disabled, it will be 4.<\/p>\n Get-Item -Path 'HKLM:\\SYSTEM\\CurrentControlSet\\Services\\sppsvc'<\/p>\n Now we need to combine what we previously accomplished by querying WMI with the information we retrieved from the registry to eliminate the delayed start services. In the following example, I’ve stopped the Windows Audio and Print Spooler services on the local computer so we should receive some results, but the Software Protection service should be excluded this time.<\/p>\n Get-WmiObject -Class Win32_Service -Filter {State != 'Running' and StartMode = 'Auto'} |<\/p>\n ForEach-Object {Get-ItemProperty -Path "HKLM:\\SYSTEM\\CurrentControlSet\\Services\\$($_.Name)" |<\/p>\n Where-Object {$_.Start -eq 2 -and $_.DelayedAutoStart -ne 1}} |<\/p>\n Select-Object -Property @{label='ServiceName';expression={$_.PSChildName}}<\/p>\n While we could accomplish the tasks we set out to accomplish with a one-liner as in the previous example. For remote machines, this command needs to run locally on the remote computer because the registry provider doesn’t natively support remote access. We’ll write a couple of reusable functions that use the Windows PowerShell remoting Invoke-Command<\/b> cmdlet. These functions could be integrated into a Windows PowerShell script module.<\/p>\n Note<\/b> You can download the two functions that are used from this point forward from the Script Center Repository<\/a>.<\/p>\n Get-MrAutoStoppedService -ComputerName dc01, sql01, sql02, web01<\/p>\n You could also retrieve the computer names from a text file (or from Active Directory) and pipe them to these functions. This time, we’ll use the Start-MrAutoStoppedService<\/b> function to start the services that should be running. We’ll also use the Credential<\/b> parameter to specify alternate credentials when connecting to the remote computers.<\/p>\n Get-Content -Path C:\\Scripts\\servers.txt |<\/p>\n Start-MrAutoStoppedService -Credential (Get-Credential)<\/p>\n Now when we check to see if any services on our servers aren’t running, nothing is returned because all of the services that should be running are running.<\/p>\n Get-Content -Path C:\\Scripts\\servers.txt |<\/p>\n Get-MrAutoStoppedService<\/p>\n We could schedule the Start-MrAutoStoppedService<\/b> function to run periodically by using a scheduled task, and then use the following command to notify us via email if problems were found and action was taken.<\/p>\n if (Get-Content -Path C:\\Scripts\\servers.txt | Start-MrAutoStoppedService | Out-String -OutVariable Services) { <\/p>\n $Params = @{<\/p>\n From = 'serverstatus@mikefrobbins.com'<\/p>\n SmtpServer = 'mail.mikefrobbins.com'<\/p>\n Subject = 'Server Service Status Update'<\/p>\n To = 'helpdesk@mikefrobbins.com'<\/p>\n Body = "The following services are configured with a startup type of Automatic. They were in the stopped state and they have now been started: `n $Services"<\/p>\n }<\/p>\n Send-MailMessage @Params<\/p>\n }<\/p>\n ~Mike<\/p>\n Thanks, Mike, for sharing your time and knowledge.<\/p>\n I invite you to follow me on Twitter<\/a> and Facebook<\/a>. If you have any questions, send email to me at scripter@microsoft.com<\/a>, or post your questions on the Official Scripting Guys Forum<\/a>. See you tomorrow. Until then, peace.<\/p>\n Ed Wilson, Microsoft Scripting Guy<\/b> <\/p>\n","protected":false},"excerpt":{"rendered":" Summary: Windows PowerShell MVP, Mike Robbins, shows us how to use Windows PowerShell to check the status of Windows services and improve the accuracy of results. Microsoft Scripting Guy, Ed Wilson, is here. Welcome back guest blogger, Mike Robbins. Mike F Robbins is a senior systems engineer with 20 years of professional experience as an […]<\/p>\n","protected":false},"author":596,"featured_media":87096,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[56,344,31,3,39,45],"class_list":["post-908","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scripting","tag-guest-blogger","tag-mike-f-robbins","tag-operating-system","tag-scripting-guy","tag-services","tag-windows-powershell"],"acf":[],"blog_post_summary":" Summary: Windows PowerShell MVP, Mike Robbins, shows us how to use Windows PowerShell to check the status of Windows services and improve the accuracy of results. Microsoft Scripting Guy, Ed Wilson, is here. Welcome back guest blogger, Mike Robbins. Mike F Robbins is a senior systems engineer with 20 years of professional experience as an […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/908","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/users\/596"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/comments?post=908"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/908\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media\/87096"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media?parent=908"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/categories?post=908"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/tags?post=908"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}<\/a><\/p>\n<\/a><\/p>\n\n
<\/a><\/p>\n<\/a><\/p>\n<\/a><\/p>\n<\/a><\/p>\n<\/a><\/p>\n<\/a><\/p>\n<\/a><\/p>\n<\/a><\/p>\n<\/a><\/p>\n<\/a><\/p>\n