You can remotely start, stop, pause, or resume a service, as well as remove a service or change its start type on selected Kaspersky Endpoint Agent for Windows hosts. To do so, you must create a service management task.
To create a service management task:
This opens the task table.
This opens the task creation window.
If you enter the hash of a service that is loaded from a DLL, Kaspersky Anti Targeted Attack Platform simultaneously compares the specified hash with the hash of the service DLL and the hash of the svchost process.
The program supports the following operations with services:
When you remove a service, processes that the service has started keep running until the system is restarted or the process is terminated.
You can assign the task only to hosts with Kaspersky Endpoint Agent for Windows 3.12 and higher. Host with earlier versions of Kaspersky Endpoint Agent for Windows and Kaspersky Endpoint Agent for Linux hosts are displayed in the list of hosts but cannot be selected.
The service management task is created. The task runs automatically after it is created.
Stopping, pausing, deleting services or changing the start type of services that affect the functioning on the host is strongly discouraged.
Users with the Security auditor role cannot create service management tasks.
Users with the Security officer role do not have access to tasks.