Windows 10: Windows Service Auditor: audit and track services on Windows

Windows Service Auditor is a free portable program for Microsoft Windows devices to track and audit services on the machine it is run on.

The application offers assistance to system administrators who need to figure out why services started, stopped, or were updated or deleted on Windows devices. It can also be used to check system events, e.g. to analyze other events associated with specific services on the system; this makes it a good tool to check for errors in the logs without having to use the Windows Event Viewer or other event log tools.



The list of services is loaded when you run the program. Services are listed in alphabetical order and information such as the name and description, current status (running, stopped) are provided.

A service's events are displayed in the lower half of the interface when you select a service. It may take a second to load the events.

Events are listed with information that includes type, time, source, ID, user, and description. There is no option to sort the data differently, e.g. by user.

Double-click on an event to display the information in a popup window; you may copy the data to the Clipboard with a click on the copy link in the interface.



To make better use of the program, it is necessary to enable advanced security audit policies on the device. Check Services > Enable Auditing in Windows Service Auditor. If the policies are not enabled yet on the device, you get an informational screen that explains what needs to be done.

Windows administrators may check out Microsoft's Docs website for additional information on advanced security audit policies (including how to enable them).

Windows will capture additional information when the policies are enabled; this includes usernames for more events, operations that caused the event, and the duration.

Users can start and stop services using Windows Service Auditor. Other options include exporting data to CSV files, and to launch system tools such as the Event Viewer, Services Manager, or Task Manager from within the application.

Closing Words


Windows Service Auditor is a specialized program for Windows. It may be of interest to system administrators who need to analyze certain services on the system for errors or issues (caused by users or otherwise), but may also be useful to home users who need to analyze the behavior of services, e.g. why it is there or stopping.

Now You: How do you manage services on Windows?

Thank you for being a Ghacks reader. The post Windows Service Auditor: audit and track services on Windows appeared first on gHacks Technology News.

read more...

 

Securing Windows 2000/XP/Server 2003 services HOW TO

I will try changing their settings sometime, the one thing I've noticed about this guide is that it doesn't list the Windows services that NEED to be left as local system, so some people might not be too sure what they're doing and worry about any that aren't listed. Just a suggestion that you might want to include in any future revisions. *Smile

The non-default ones I have that you have not listed are:

.Net Runtime Optimization Service v2.0.50727_X86
Ati HotKey Poller
ATI Smart
AVG E-mail Scanner
AVG7 Alert Manager Server
AVG7 Update Service
BlueSoleil Hid Service
Bluetooth Support Service
ewido anti-spyware 4.0 guard
iPod Service
Messenger Sharing USN Journal Reader Service
Service Layer
Windows Defender Service

The problem is that the only ones of these I actually use are The AVG and Windows Defender services and occasionally the "Service Layer" service (related to Nokia PC Suite) and the "Messenger Sharing USN Journal Reader Service" (related to WindowsLive Messenger). Anyway, I'll see how much I can secure those and post back how I get on. I'll try to test it sometime this week just I'm a bit waring of changing the AVG settings because the only way to test if it was still working would be for a virus to be detected... and I' rather I didn't get viruses!

 

windows xp installation and dual core am

could someone please list the steps they follow to install windows with a dual core processor and windows xp service pack to. I'm reletively new to amd dual core and i feel i'm missing a step. All help will be appreciated. thanx

 

Windows 7 services

Still just do it manually-if at all-with Black Viper's recommendations.

Like him, I'm old school. *Stick Out Tongue