Skip to content

Instantly share code, notes, and snippets.

@t94j0
Last active September 28, 2017 03:42
Show Gist options
  • Save t94j0/4b7f9dbd1d714be42079ca768b6145fe to your computer and use it in GitHub Desktop.
Save t94j0/4b7f9dbd1d714be42079ca768b6145fe to your computer and use it in GitHub Desktop.
Many of the default services on Windows 10
$defaultServices = @("AppInfo", "AudioEndpointBuilder", "Audiosrv", "BFE", "BITS", "BrokerInfrastructure", "CertPropSvc", "CoreMessagingRegistrar", "CryptSvc", "DeviceAssociationService", "Dhcp", "DiagTrack", "Dnscache", "SecurityHealthServMpsSvc", "DoSvc", "DPS", "TimeBrokerSvc", "ProfSvc", "Winmgmt", "EventLog", "LicenseManager", "EventSystem", "wuauserv", "WpnService", "Wcmsvc", "FontCache", "WSearch", "stisvc", "WinDefend", "FontCache", "CDPSvc", "WdNisSvc", "tiledatamodelsvc", "lmhosts", "WdiSest", "TrkWks", "Schedule", "UserManager", "lfsvc", "gpsvc", "StorSvc", "SystemEventsBroker", "hidserv", "iphlpsvc", "LSM", "SysMain", "netprofm", "NcbService", "NlaSvc", "nsi", "SENS", "PlugPlay", "ShellHWDetection", "Power", "StateRepository", "PcaSvc", "RpcSs", "Spooler", "SessionEnv", "SSDPSRV", "wscsvc", "LanmanServer", "TermService", "UmRdpService", "WlanSvc", "WinHttpAutoProxySvc", "DcomLaunch", "DusmSvc", "KeyIso", "LanmanWorkstation", "QWAVE", "RpcEptMapper", "VaultSvc", "AppXSvc", "ClipSVC", "COMSysApp", "dmwappushsvc", "SamSs", "sppsvc", "TrustedInstaller", "WerSvc", "wlidsvc")
Get-WmiObject win32_service | ?{ $defaultServices -notcontains $_.Name } | ?{ $_.State -eq "Running" } | select Name, DisplayName, PathName
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment