Services in Windows are one of the most important parts of the operating system. Previously, to get the status of a service on Windows, you had to use the services.msc graphical snap-in or the sc.exe command-line tool (for example, sc.exe query wuauserv). In this article, we’ll take a look at how to check the status of a service on Windows using PowerShell.
You can use the Get-Service PowerShell cmdlet to get a list of all the services installed on the Windows operating systems, their status, and startup type. This one and other cmdlets that are used to get the status and manage Windows services, first time appeared in PowerShell 1.0. In this, article we will show typical examples of how to use Get-Service cmdlet to get the status of a service on local or remote computers (running or stopping). Also, we’ll discuss the type of services startup, and cover how to determine the dependencies of services.
You can get a list of services on a local or remote computer by using the Get-Service cmdlet. When running Get-Service command without parameters, it returns a list of all services on the local computer.
To get the complete syntax of the Get-Service cmdlet, run the command:
get-help Get-Service
SYNTAX Get-Service [[-Name] <string[]>] [-ComputerName <string[]>] [-DependentServices] [-RequiredServices] [-Include <string[]>] [-Exclude <string[]>] [<CommonParameters>]
Use Get-Service to Check Windows Service Status
This command will list all local Windows services, their status (running, stopped, or paused), and display name:
Get-Service
The cmdlet returns a list of services sorted by name. The list contains the following Windows service properties:
- Status — shows if the server is Running or Stopped.
- Name — displays the short name of the service (used most often).
- Display Name — full name of the service (more descriptive and human-readable).
To save the services list to a text file for future investigation, use the Out-File cmdlet:
Get-Service | Out-File "C:\PS\Current_Services.txt"
To get two or more service states, you need to specify their names divided by commas:
get-service bits, wuauserv
If you need to display only running services, use this command:
Get-Service | Where-Object {$_.Status -EQ "Running"}
The pipeline operator (|) passes the results to the PowerShell Where-Object filter, which selects only those services for which the Status parameter is set to “Running”. If you want to display only the stopped services, specify “Stopped”.
You can get all the properties of the service object using the Get-Member.
get-service | get-member
As you can see, these objects have the Typename — System.ServiceProcess.ServiceController. The screenshot shows all the available properties and methods of service objects in Windows (most of them are not used when displaying by default).
You can display the properties of the specific service. For example, we need to display the Display Name, Status, and features of the Windows Update (wuauserv) service:
get-service wuauserv | select Displayname,Status,ServiceName,Can*
DisplayName : Windows Update
Status : Stopped
CanPauseAndContinue : False
CanShutdown : False
CanStop : False
You can find all services that can be paused and resumed without a Windows restart:
Get-Service | Where-Object {$_.canpauseandcontinue -eq "True"}
For example, to get the type of Windows services startup type, run the command (works in PowerShell 5.1, introduced in Windows 10/Windows Server 2016):
Get-Service | select -property name,starttype
Hint. You can check the PowerShell version on your computer with the command:
$PSVersionTable
If you need to get the startup type of the service only, run:
(Get-Service -Name wuauserv).StartType
There are 4 possible types of starting services:
- Automatic — automatic start during Windows boot.
- AutomaticDelayedStart — startup after system boot.
- Manual — manual start.
- Disabled — the service is disabled.
You can filter the services list by the service name using the asterisk as a wildcard:
get-service wi*
Also, note that PowerShell is not a case-sensitive language. It means that the following commands will return equal results:
get-service win* get-service WIN*
To exclude some services from the resulting list you can use the -Exclude option:
Get-Service -Name "win*" -Exclude "WinRM"
You can sort services in descending order by the value of the Status property (running services are displayed earlier than stopped):
get-service s* | sort-object status – Descending
Tip. Unfortunately, the Get-Service cmdlet doesn’t allow you to get information about the user account under which the service is running. If you need to find all the services running under non-default system accounts, use the Get-CIMInstance cmdlet:
Get-CIMInstance -Class Win32_Service -filter "StartName != 'LocalSystem' AND NOT StartName LIKE 'NT Authority%' " |Select-Object SystemName, Name, Caption, StartMode, StartName, State | Sort-Object StartName
A fairly common task for an administrator when troubleshooting Windows problems is to check which of the Windows services that should be running automatically are currently stopped. You can use the FilterScript option to search for services that have the Automatic startup type and not currently running:
Get-Service | where -FilterScript {$_.Status -ne 'Running' -and $_.StartType -eq 'Automatic'} | ft 'Name','StartType','Status'
Also note that PowerShell Core 7.x introduces additional properties of the Get-Service that are not available in Windows PowerShell 5.1 (for example UserName, BinaryPathName, StartType). You can get the value of these properties in the pwsh.exe console (PowerShell 7.x).
Get-Service wuauserv | select Username,Starttype,BinaryPathName
How to Check if a Specific Service Exists via PowerShell?
If you want to check whether a specific Windows service currently exists, you can use the following commands (usually this check is used in various scripts):
$servicename = “SomeService” if (Get-Service $servicename -ErrorAction SilentlyContinue) { Write-Host "$servicename exists" # do something } Else { Write-Host ” $servicename not found” # do something }
You can check if a specific Windows service exists on a list of remote computers/servers. To perform this task, you need to save the list of remote computers to the text file comp_list.txt in a simple format:
server1 server2 server3 PC21 PC34
Now run the following PowerShell script:
$servicename = "SomeService" $list = get-content “c:\ps\comp_list.txt” foreach ($server in $list) { if (Get-Service $servicename -computername $server -ErrorAction 'SilentlyContinue'){ Write-Host "$servicename exists on $server " # do something } else{write-host "No service $servicename found on $server."} }
Use PowerShell to Check Service Status on a Remote Computer
You can use the Get-Service cmdlet to get the status of services not only on the local but also on remote computers. To do this, use the –ComputerName parameter. You can use the NetBIOS, FQDN name, or an IP address as a computer name. Connection to remote computers is established not through PowerShell Remoting (WinRM), but Service Manager (similar to the sc.exe command).
get-service wuauserv -ComputerName remotePC1
In PowerShell v3, you can get the status of the services on multiple remote computers at once (their names must be separated with commas).
get-service spooler -ComputerName remotePC1,remotePC2, remotePC3| format-table Name,Status,Machinename –autosize
Use the format-table cmdlet in this example to get a more convenient table with the list of the status of services.
Also, you can get the health of the service on a list of remote computers. It’s being stored in a plain text file:
$list = get-content “c:\ps\comp_list.txt” Get-Service -Computername (Get-Content -path “c:\ps\comp_list.txt”) -Name spooler | Select-Object MachineName,Name,Displayname,Status | Sort-Object Status
Or you can check the service state on all computers in a specific AD OU:
$Computers = (Get-ADComputer -SearchBase ‘OU=Servers,OU=UK,DC=theitbros,DC=com’).names foreach ($computer in $computers) { Get-Service -ComputerName $computer.Name -Name wuauserv | Where-Object {$_.status -eq "running"} | select status,name,machinename }
To restart a service on a remote computer, use the following command:
Get-Service wuauserv -ComputerName server1| Restart-Service
Note. The Get-Service cmdlet in PowerShell Core (PowerShell 6.x and 7.x), unlike Windows PowerShell 5.1, does not have the ComputerName parameter, so you cannot use it to check the status of services on remote computers.
To access remote computers from within PowerShell Core, you must use PowerShell Remoting over WinRM. For example, you can poll service status on multiple remote computers using the Invoke-Command. For example:
$cred = Get-Credential Invoke-Command -ComputerName dc03,dc02 {get-service wuauserv} -Credential $cred
Use Get-Service to Display Service Dependencies
The Get-Service cmdlet has two other useful parameters you can use when managing Windows services. The DependentServices parameter returns services that depend on this service. The RequiredServices parameter returns the services on which this service depends.
The following command receives the services that needed to be run before starting the LanmanWorkstation service:
Get-Service -Name LanmanWorkstation –RequiredServices
The next command returns dependent services that require the LanmanWorkstation service:
Get-Service -Name LanmanWorkstation -DependentServices
If you manually stop all dependence services, you won’t be able to run your service. In order to automatically run all dependency services, use the following PowerShell one-liner:
get-service servicename | Foreach {start-service $_.name -passthru; start-service $_.DependentServices -passthru}
Managing Windows Services via PowerShell
There are other useful cmdlets in the PowerShell module for managing services. To list all available PowerShell commands used to manage Windows services, run:
Get-Command -Noun Service
You can use these cmdlets to start, stop, restart, or change the startup type of the service.
To manage services, be sure to run powershell.exe as an administrator. You must start, stop, restart, or change the startup type of the service.
Stop service:
Stop-Service -Name Windefend
When you stop some services, an error may appear:
Stop-Service: Cannot stop service ‘SQL Server (MSSQLSERVER) (MSSQLSERVER)’ because it has dependent services. It can only be stopped if the Force flag is set.
To force stop this and the dependent service, use the -Force parameter:
Stop-Service –Name MSSQLSERVER -Force
Start the service:
Start-Service -Name Windefend
Restart the service:
Restart-Service -Name Windefend
If you need to change the startup type of the service (for example, from Automatic to Disabled), run:
Set-Service 'WinRM' -StartupType Disabled
Some Windows services can be suspended using the Suspend-Service command:
Get-Service -Name 'wuauserv'|Suspend-Service
If you try to suspend a service that does not support this method, an error will appear:
Suspend-Service : Service ‘Windows Update (wuauserv)’ cannot be suspended because the service does not support being suspended or resumed.
To find the Windows services you can pause, run the command:
Get-Service | where CanPauseAndContinue | select -Property Name,CanPauseAndContinue,DisplayName
The Resume-Service commandlet is used to start the suspended service:
Get-Service -Name 'Winmgmt' | Suspend-Service | Resume-Service
To create a new service with the New-Service commandlet, you must specify its name and the path to the binary file:
New-Service -Name 'MyNewService' -BinaryPathName 'C:\ps\testsvc.exe'
To delete a service:
Remove-Service -Name 'MyNewService'
Note. The Remove-Service cmdlet is available in PowerShell Core 6.x +.
- How to Search and Delete Malicious Emails in Office 365? - January 29, 2023
- How to Install Google Chrome for Fedora? - January 29, 2023
- Lens Kubernetes IDE — Opensource Lens Desktop - January 27, 2023
you uploaded great artice , I wondered after reading your article , so much thanks .getting services using powershell is great and very usefull to all windows users.
I will you all the best for keep posting new articles
WMI query can show a list of all services in bulk and filter results (such as as started/stopped, service name, description etc).
1. Run WMI query in ROOT\CIMV2 namespace:
– Start WMI Explorer or any other tool which can run WMI queries.
– Run WMI query: SELECT * FROM Win32_Service
2. Run wmic command-line interface:
– Press WIN+R
– Type “wmic”, press Enter
– In wmic command prompt type: /node:RemoteComputerName service
3. Run Powershell script:
– thru WMI object: Get-WmiObject -Namespace ROOT\CIMV2 -Class Win32_Service -Computer RemoteComputerName
4. Select specific columns:
– run: Get-WmiObject -Namespace ROOT\CIMV2 -Class Win32_Service -Computer RemoteComputerName | Select-Object DisplayName, Started, StartMode, PSComputerName
5. Sort results:
– run: Get-WmiObject -Namespace ROOT\CIMV2 -Class Win32_Service -Computer RemoteComputerName | Select-Object DisplayName, Started, StartMode, PSComputerName | Sort-Object DisplayName
6. Filter results:
– run: Get-WmiObject -Namespace ROOT\CIMV2 -Class Win32_Service -Computer RemoteComputerName | Select-Object DisplayName, Started, StartMode, PSComputerName | Where-Object -FilterScript {$_.DisplayName -like “Microsoft*”}
7. Save to CSV file:
– run: Get-WmiObject -Namespace ROOT\CIMV2 -Class Win32_Service -Computer RemoteComputerName | Select-Object DisplayName, Started, StartMode, PSComputerName | Export-CSV “c:\file.csv” -Append -NoTypeInformation
Read this kb to execute this command on multiple computers https://www.action1.com/kb/list_of_services_on_remote_computer.html
I’m trying to make a PowerShell script which pulls Status of different services in different servers. I need it in below format but don’t know where to start. Please help me.
ServiceName Server1 Server2 Server3
Service1 Running Stopped Running
Service2 Running Running Running
Great article. I’m looking for some example if the service name have to words. For example:
Data usage
DHCP Client
If write get-service netlogon will show an output. But if I write get-service dhcp client it will show an error. So I wondering how to use get-service with a service name that have two or more words. Thanks.
Found it. get-service -name dh*
Status Name DisplayName
—— —- ———–
Running Dhcp DHCP Client
So the command is get-service dhcp
The idea that everyone uses text file is old fashioned. I persoanlly hate it becuase you need extra functions to remove them.
$Computers = Get-adcomputers -filter {name -like A*} is a better use.
Secondly Microsoft has removed the -computername switch from get-service. So you article being found in a search for “powershell 7” get-service remote computer is not right
‘(Get-Service -Name wuauserv).StartupType’ is wrong to identify if “disabled”
Like this:
if((Get-Service -computername $server -Name “ArcGIS Server”).StartType -ieq “disabled”){continue}