Powershell script to monitor all automatic services on server

I have the following powershell script to monitor all automatic services on a server. It has exclusions for specific services and some that contain a part of a name. This script runs as expected if run directly on the server to be monitored. However if creating the component monitor in SAM it will always return the result that all services are running even if that is not the case. Can someone help as to what I have wrong?

# Define services to exclude by exact display name
$servicesToExclude = @("Performance Logs and Alerts","Microsoft .NET Framework NGEN v4.0.30319_X86", "Microsoft .NET Framework NGEN v4.0.30319_X64","Google Update Service (gupdate)","Remote Registry","Software Protection","Windows Update","Microsoft Exchange Notifications Broker","Background Intelligent Transfer Service","Windows Biometric Service","Microsoft Edge Update Service (edgeupdate)","Volume Shadow Copy","BrSplService","Dropbox Update Service (dbupdate)","Downloaded Maps Manager","Net.Msmq Listener Adapter","Net.Pipe Listener Adapter","Net.Tcp Listener Adapter")

# Define partial names of services to exclude
$partialNamesToExclude = @("*Sync Host_*", "*Clipboard User Service_*", "*GoogleUpdater*")

$RunResults = New-Object System.Collections.Generic.List[System.Object]

# Get all services set to Automatic startup type
$services = Get-Service | Where-Object { $_.StartType -eq 'Automatic' -and $servicesToExclude -notcontains $_.DisplayName -and $partialNamesToExclude -notlike $_.DisplayName }

# Initialize a flag to track if any service is not running
$anyServiceNotRunning = $false
$nonRunningServices = @()

# Check each service and collect non-running services
foreach ($service in $services) {
if ($service.Status -ne 'Running') {
$anyServiceNotRunning = $true
$nonRunningServices += $service.DisplayName
}
}

# Check if any service is not running
if ($anyServiceNotRunning) {
Write-Host "Statistic: 1"
Write-Host "Message: Non-running services - $($nonRunningServices -join ', ')"

} else {
Write-Host "Statistic: 0"
Write-Host "Message: All services set to Automatic start are running."
}

Find more posts tagged with

powershell monitor

windows services

sam monitoring

Accepted answers

All comments

adam.beedell

At a glance

$_.DisplayName -and $partialNamesToExclude -notlike $_.DisplayName

I dont think this works as intended

I'd probably take a measure-object .. .count to use for statistic and the good/bad switch logic. If .count >0 then bad else good

Needs some exit codes

I'll see if I can play with this some more but time is scarse

michaelj

I modified the script and it now returns results as expected except it is not taking into account the services with partial names that match the $partialNamesToExclude variable.

# Define partial names of services to exclude
$partialNamesToExclude = @("*Sync Host_*", "*Clipboard User Service_*", "*GoogleUpdater*")

# Pass the server IP of machine being checked
$remoteserver = '${IP}'

# Get all services set to Automatic startup type exluding the services defined above
$services = Get-Service -ComputerName $remoteserver | Where-Object { $_.StartType -eq 'Automatic' -and $servicesToExclude -notcontains $_.DisplayName -and $partialNamesToExclude -notlike $_.DisplayName }

# Initialize a flag to track if any service is not running
$anyServiceNotRunning = $false
$nonRunningServices = @()

# Check if any service is not running and write the specified output depending on result
if ($anyServiceNotRunning) {
Write-Host "Statistic: 1"
Write-Host "Message: Non-running services - $($nonRunningServices -join ', ')"

} else {
Write-Host "Statistic: 0"
Write-Host "Message: All services set to Automatic start are running."
}

adam.beedell

If you dont connect to the server, you'll get an "all OK" message which is a bit scary, try this edit:

# Define partial names of services to exclude
$partialNamesToExclude = @("*Sync Host_*", "*Clipboard User Service_*", "*GoogleUpdater*")

# Pass the server IP of machine being checked
$remoteserver = '${IP}'

# Get all services set to Automatic startup type exluding the services defined above
Try{
$services = Get-Service -ComputerName $remoteserver | Where-Object { $_.StartType -eq 'Automatic' -and $servicesToExclude -notcontains $_.DisplayName -and $partialNamesToExclude -notlike $_.DisplayName }
}
catch
{
Write-Host "Statistic: 0"
Write-Host "Failed to connect"
Exit 1
}

$notrunningservices = $services | Where-Object {$_.Status -ne 'Running'}
$statistic = $notrunningservices | Measure-Object
$statistic = $statistic.Count

# Check if any service is not running and write the specified output depending on result
if ($statistic -gt 0) {
Write-Host "Statistic: $statistic"
Write-Host "Message: Non-running services - $($notrunningservices.displayname -join ', ')"
Exit 0
} else {
Write-Host "Statistic: 0"
Write-Host "Message: All $($services.count) services set to Automatic start are running, "
Exit 0
}

adam.beedell

@michaelj

Wrote a copy of this using WMI / sans script impersonation. Not sure which version's best but hey

# Define partial names of services to exclude
$partialNamesToExclude = @("*Sync Host_*", "*Clipboard User Service_*", "*GoogleUpdater*")

# Pass the server IP of machine being checked
$remoteserver = '${IP}'

#Get Cred
$cred = get-credential ${CREDENTIAL}

# Get all services set to Automatic startup type exluding the services defined above
Try{
#$services = Get-Service -ComputerName $remoteserver | Where-Object { $_.StartType -eq 'Automatic' -and $servicesToExclude -notcontains $_.DisplayName -and $partialNamesToExclude -notlike $_.DisplayName }
$services = Get-WMIObject Win32_Service -computer $remoteserver -credential $cred | Where-Object { $_.StartMode -eq 'Auto' -and $servicesToExclude -notcontains $_.DisplayName -and $partialNamesToExclude -notlike $_.DisplayName }
}
catch
{
Write-Host "Statistic: 0"
Write-Host "Failed to connect"
Exit 1
}

#$notrunningservices = $services | Where-Object {$_.Status -ne 'Running'}
$notrunningservices = $services | Where-Object {$_.State -ne 'Running'}
$statistic = $notrunningservices | Measure-Object
$statistic = $statistic.Count