Solved

Windows 8.1 Services Configuration

Posted on 2014-10-22
5
170 Views
Last Modified: 2014-12-07
Hello all,

I am using GFI Max Monitoring, and I keep receiving errors that Windows 8 (and 8.1) machines are automatically stopping the Managed Antivirus (MAV) service; resulting in lost communication for the MAV.  I have read that Windows 8/8.1 automatically stops services that are not in use after a period of time (most recently the GP Client service).  

I would like to know if anyone knows of a way to disable this action.  The MAV service is necessary to maintain communications with the monitoring service so that the computer is protected.  

This only occurs on Windows 8/8.1 workstations.  

Reference on the GP Client service as it pertains to Windows 8/8.1:  
https://social.technet.microsoft.com/Forums/windows/en-US/a3685737-b1d5-4cc8-ab19-8ea978a9b5d2/group-policy-client-servicesmsc

Thank you in advance.
0
Comment
Question by:hardintech
  • 3
  • 2
5 Comments
 
LVL 54

Expert Comment

by:McKnife
ID: 40398100
Look at the event log (system) to see why that service stopped.
0
 

Author Comment

by:hardintech
ID: 40410927
Thank you for your answer, McKnife.  After further troubleshooting and attempts at resolution, the actual problem is not related to the notion I  mentioned in my original post.  The machines are not stopping the service, as the service is somehow being uninstalled (resulting in a service that won't start, as opposed to being stopped).  As I continue to work on this, I will update as I am able (even if it means a new thread is required, due to relevance).  Although I cannot mark this as answered -because the issues are unrelated- I do thank you for your input.
0
 
LVL 54

Expert Comment

by:McKnife
ID: 40410948
Alright, come back if needed and good luck.
0
 

Accepted Solution

by:
hardintech earned 0 total points
ID: 40477325
My apologies for being silent on this for so long.  This issue has turned out to be a mix of an installation (software) issue and a communication issue.  The MAV agent was unable to communicate with its reporting server because of a failed portion of its own installation (failure to install the necessary service).  The resolution was to uninstall the agent, remove the agent's record from the reporting entity, and reinstall the agent on the monitored machine.  Upon restart, the agent reported as expected, and all related services were active.  Thank you again, McKnife, for your assistance on this issue.
0
 

Author Closing Comment

by:hardintech
ID: 40485325
The solution for this issue was obtained mostly through trial and error and an evaluation of how the agent reports to its server.  Once the miscommunication was discovered, and the installation actions corrected, the agent performed as it was intended.  Although the respondent (McKnife) provided very valuable information, it was stated that the service wasn't being "stopped" so much as it was simply not present.  Upon realizing that it was absent, it became evident that a reinstallation of the monitoring software would be part of the solution.  Since the reporting server sometimes relies on existing (rather than newly-queried or newly-installed agent report) entries when reporting statuses of deployed agents, the agent can submit a report that a service is stopped, but the reporting server will not accept that report -replacing it with a "thumbs-up" report.  Conversely, a newly-reinstalled agent can report a "thumbs-up" after previously reporting a problem, and the reporting server can see the old (pre-reinstallation) agent record, and report it's results (no communication, all is well, etc...).  This is not a frequent issue, but was perplexing for me nonetheless.  I hope this explanation makes it easier for someone else to understand as well.
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you thought ransomware was bad, think again! Doxware has the potential to be even more damaging.
One of the biggest threats facing all high-value targets are APT's.  These threats include sophisticated tactics that "often starts with mapping human organization and collecting intelligence on employees, who are nowadays a weaker link than network…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question