4.60 ServiceRemove

Use this Knowledge Script to detect when Windows services are added or removed in the monitoring interval. This script raises an event when changes are made to the services installed on the target computer. The script monitors only changes in the list of automatic services (startup type), including installations and uninstallations of services in automatic startup and changing a service from automatic to disabled/manual or vice-versa.

NOTE:If a computer is restarted after a service is removed, the agent counters are reset. Once the counters are reset, AppManager cannot detect the service removal and does not raise an event.

4.60.1 Resource Objects

Windows 2003 Server or later

4.60.2 Default Schedule

The default schedule for this script is Every 30 minutes.

4.60.3 Setting Parameter Values

Set the following parameters as needed:

Description

How to Set It

Raise event?

Set to y to raise an event when changes are made to the services installed on the target computer. The default is y.

Collect data?

Set to y to collect data for charts and reports. If enabled, data collection returns the number of services currently installed. The default is n.

Event severity level

Set the event severity level, from 1 to 40, to indicate the importance of an event in which service changes are detected. The default is 12 (yellow event indicator).