Forum Discussion

8 Replies

  • Hi A, Depending on your license, you could make use of proactive remediations. You can create a detection script which will check if the service is running. If that's not the case, the remediation script will kick in which starts the service. More info can be found here: https://learn.microsoft.com/en-us/mem/analytics/proactive-remediations If you don't have the required licences, you could create a custom powershell script which deploys a scheduled task that regularly checks the service and starts the service if it's stopped. Regards, Ruud
    • AB21805's avatar
      AB21805
      Bronze Contributor
      Hi, I do have the license, what would the scripts look like?

      Thanks in advanced
      • RGijsbersRademakers's avatar
        RGijsbersRademakers
        Iron Contributor
        A few examples can be found here: https://learn.microsoft.com/en-us/mem/analytics/powershell-scripts

        In the try sections, you would put something like
        $result = Get-Service wildsvc
        If ( $result.status -eq stopped){
        Write-Host "Match"
        Exit 1}
        Else {
        Exit 0 }

        The remediation script would then contain a Start-Service wildsvc

        Regards,
        Ruud

Resources