1.    12 Jul 2017 #1
    Join Date : Oct 2016
    Posts : 27

    'Remote Desktop Services' Services keeps setting itself to 'Automatic'

    The 'Remote Desktop Services' service (under Services.msc) keeps setting itself to 'Automatic'.

    Does anyone know how to stop this? I've set it to 'Disabled' and turned off the service multiple times but it seems to automatically set itself to 'Automatic' and activate itself. This even happens without restarting the computer.

    Is this indicative of malware/virus activity?

    How can I ensure this service remains disabled?

    I've long suspected this computer is hacked and this activity could be associated with remote access of one form or another. If this indicates known malware please inform me of the usual suspects.

    Much appreciated.
      My ComputerSystem Spec
  2.    12 Jul 2017 #2
    Join Date : Oct 2014
    Posts : 2,855
    Windows 10.4 Home 1709 x64

    It is definitely not normal, especially for this service. Pick 2-3 scanners and check for malware.

    10 Free and Portable Offline Antivirus Scanners

    Try this, run CMD as admin and copy/paste:
    reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowToGetHelp" /t REG_DWORD /d "0" /f
    reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnsolicited" /t REG_DWORD /d "0" /f
    reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnsolicitedFullControl" /t REG_DWORD /d "0" /f
    reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "fDenyTSConnections" /t REG_DWORD /d "1" /f
    reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "TSAppCompat" /t REG_DWORD /d "0" /f
    reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "TSEnabled" /t REG_DWORD /d "0" /f
    reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "TSUserEnabled" /t REG_DWORD /d "0" /f
    schtasks /Change /TN "Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask" /Disable
    schtasks /End /TN "Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask"
    sc config TermService start= disabled
    net stop TermService /y
      My ComputerSystem Spec
  3.    13 Jul 2017 #3
    Join Date : Jul 2015
    Posts : 182
    win 10 home

    A few years ago, a Norton user was ranting about the security software resetting the Service to 'Automatic'. No one in the Norton Support Forum volunteered to prove the user wrong/right.

    My own experience, and I use Norton, says a reboot resets the Service to 'Automatic'. When I had the occasion to check, it usually shows it as previously set, 'Disabled'. Only after a reboot does it show the Service running.

    It's an inconvenience, the reflexive checking, I've learned to live with.
      My ComputerSystem Spec


Similar Threads
Thread Forum
Solved Windows 10 -Using Remote Desktop Services with a SHA256 (SHA-2)? How?
Hello, I've searched the internet high and low to find the answer to this problem and have not come up with much. I have Windows 10 Professional and I run a remote desktop protocol in order to access my PC remotely. The self-signed certificated...
General Support
Solved Server Manager Does not Populate Remote Desktop Services Overview
I have an RDWEB setup (Server 2012R2). Server Manager>Remote Desktop Services>Overview does not populate the Deployment Servers, RD Sessions Host or collections on my Windows 10 laptop (with RSAT installed). Server Manager>Remote Desktop...
Drivers and Hardware
Default (factory) settings for msc.services (services)
Just wondering if anyone can direct me to a source that shows the factory default settings for Windows 10 services. Thanks.
Performance & Maintenance
New Services
Ran across this list (attached) while I was researching an event log error..... Source: Windows 10 Testers Topic - Page 21 - Operating Systems and Software - Linus Tech Tips The last one on the list, UsoSvc - Update Orchestrator Service:...
General Support
New services
Any idea, what do new services do, besides the usual nothing saying description? :sarc: CoreMessaging dmwappushsvc
General Support
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 20:15.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App

Windows 10 Forums