RE: Scripting to disable services

[<peter.schaub () thomson com>]

Check out
http://www.microsoft.com/technet/sysinternals/utilities/psservice.mspx

The PsTools suite is very robust and efficient, def check out the other
apps as well.

"PsService enables you to logon to a remote system using a different
account, for cases when the account from which you run it doesn't have
required permissions on the remote system"...unlike the SC utility in
windows.
C:\>psservice /?

PsService v2.21 - Service information and configuration utility
Copyright (C) 2001-2006 Mark Russinovich
Sysinternals - www.sysinternals.com

PsService lists or controls services on a local or remote system.

Usage: psservice [\\Computer [-u Username [-p Password]]] <cmd> <optns>
Cmd is one of the following:
   query      Queries the status of a service
   config     Queries the configuration
   setconfig  Sets the configuration
   start      Starts a service
   stop       Stops a service
   restart    Stops and then restarts a service
   pause      Pauses a service
   cont       Continues a paused service
   depend     Enumerates the services that depend on the one specified
   find       Searches for an instance of a service on the network
   security   Reports the security permissions assigned to a service
Use the username and password to log into the remote computer in cases
where
your account does not have permissions to perform the action you
specify.



-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of twofish () gmail com
Sent: Saturday, September 15, 2007 09:26
To: security-basics () securityfocus com
Subject: Scripting to disable services

Howdy!

I'm trying to find a way to script a mass disable of services on a
series of standalone WinXP SP2 boxes.

I need to be able to be run it locally under admin, without installing
additional software (i.e. default XP SP2).

Need to disable about 25 services. 

Additionally, anyone with knowledge of systems set up under NISPOM
standards:  I'm getting a TON of 560 failures.  Any techniques on audit
log reductions?

Thanks!
d