Services are applications or innate operating system components that run on a Windows server and provide services to the local machine, the network, or both. Services may be configured to start up automatically, or they may be configured to be started manually. Services can also be disabled. You can start, stop, and restart services in the GUI with the Services.msc application, at the Command Prompt with the net commands, and in Windows PowerShell with the start-service, stop-service, and restart-service commands. When troubleshooting service problems, be sure to consider service dependencies, check for appropriate configuration settings, and verify that the service is running with the proper privileges.
- Research the Software Protection service online to discover its purpose and functions.
- Configure the Print Spooler service to start using the Automatic (Delayed Start) startup type.
- Discover the service name for the DNS Client service and then restart the service using the Command Prompt.
- Configure the options for the Disk Defragmenter service so that it starts automatically (without a delay) and so that it restarts should a failure occur.
Answers for Exercises
- You can simply search for Application Management service on Windows Server in a search engine. You may also choose to use the following page: http://www.blackviper.com/wiki/Software_Protection.
- This may be performed from within the Services.msc application. Launch Services.msc, double-click on the Print Spooler service, and choose the Startup Type value of Automatic (Delayed Start).
- You can discover service names by double-clicking on the service in Services.msc and then viewing the Service Name field on the General tab of the service Properties dialog. You must use the net stop service_name and net start service_name to restart a service at the Command Prompt.
- Configure the Disk Defragmenter service in the Services.msc application. Double-click on the service to open the Properties dialog. Set the Startup Type value to Automatic on the General tab. On the Recovery tab, set the First Failure value to Restart The Service. Click OK to save your changes.
- 1. What service must be running so that a user can check for updates at the Microsoft Update website?
- A. Microsoft Update
- B. Windows Update
- C. Workstation
- D. Server
- 2. True or false: Only Microsoft provides services that run on Windows Server operating systems?
- 3. What service startup type will require a change in the startup type value before you can manually start the service?
- A. Disabled
- B. Manual
- C. Automatic (Delayed Start)
- D. Automatic
- 4. What security principle states that a system should have no more capabilities that it requires to perform its intended purpose?
- 5. What Windows service must be running in order to encrypt and decrypt individual folders on the C: drive of the server?
- A. Encrypting File System
- B. Group Policy Client
- C. Server
- D. Workstation
- 6. Define a service.
- 7. Define service dependencies.
- 8. Which one of the following is not a common cause for service problems?
- A. Service dependencies
- B. Improper service configuration
- C. Excessive available memory
- D. Insufficient privileges
- 9. Which of the following services provide some level of remote access to servers? (Choose two.)
- A. Windows Remote Management
- B. Volume Shadow Copy
- C. Remote Desktop Services
- D. Print Spooler
- 10. True or false: Only Windows Server operating systems include the Server service.
Answers for Review Questions
- 1. B The Windows Update service allows users to check for updates at the Windows Update or Microsoft Update websites.
- 2. False Third-party vendors can and often do provide services that run on Windows servers.
- 3. A When a service is set to the Disabled startup type, you cannot even start the service manually. You must first change the startup type to Manual, Automatic, or Automatic (Delayed Start) and then you can start the service manually.
- 4. Least privilege. The principle of least privilege states that users and systems should have no greater access than is required to perform their intended duties. This definition means that systems can do what they need to do and nothing more. Other systems can access the secured system to perform their intended operations and can do nothing more. Least privilege is essential to secure network operations.
- 5. A The EFS service provides the functionality required to implement encryption on the NTFS files system. If the service is not running, users will be unable to access data encrypted with EFS.
- 6. An application or innate operating system component that runs on Windows and provides services to the local machine, the network, or both.
- 7. The services on which another service depends or the other services that depend on a specific service.
- 8. C The old saying is true: you can never have too much memory in a Windows computer. You can certainly have more than the operating system can use, but you should always give a server as much memory as you can. The three common causes of service problems are service dependency issues, improper service configuration, and insufficient privileges.
- 9. A, C The Remote Desktop Services service must be running to allow a user to control the Windows Server Desktop across the network. Through this service, a user can log on to the Windows Server Desktop using the Remote Desktop Connection client. The user can control the Desktop using her keyboard and mouse as if she were sitting at the server locally.
- 10. False The Server service, as well as the Workstation service, is on both the Windows Server operating systems and the Windows clients, such as Windows 7 and Windows Vista.