Windows 10: 'Remote Desktop Services' Services keeps setting itself to 'Automatic'

  1.    12 Jul 2017 #1

    'Remote Desktop Services' Services keeps setting itself to 'Automatic'

    The 'Remote Desktop Services' service (under Services.msc) keeps setting itself to 'Automatic'.

    Does anyone know how to stop this? I've set it to 'Disabled' and turned off the service multiple times but it seems to automatically set itself to 'Automatic' and activate itself. This even happens without restarting the computer.

    Is this indicative of malware/virus activity?

    How can I ensure this service remains disabled?

    I've long suspected this computer is hacked and this activity could be associated with remote access of one form or another. If this indicates known malware please inform me of the usual suspects.

    Much appreciated.
      My ComputerSystem Spec

  2. TairikuOkami's Avatar
    Posts : 3,328
    10.5 Home 1803 x64
       12 Jul 2017 #2

    It is definitely not normal, especially for this service. Pick 2-3 scanners and check for malware.

    10 Free and Portable Offline Antivirus Scanners

    Try this, run CMD as admin and copy/paste:
    reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowToGetHelp" /t REG_DWORD /d "0" /f
    reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnsolicited" /t REG_DWORD /d "0" /f
    reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnsolicitedFullControl" /t REG_DWORD /d "0" /f
    reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "fDenyTSConnections" /t REG_DWORD /d "1" /f
    reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "TSAppCompat" /t REG_DWORD /d "0" /f
    reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "TSEnabled" /t REG_DWORD /d "0" /f
    reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "TSUserEnabled" /t REG_DWORD /d "0" /f
    schtasks /Change /TN "Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask" /Disable
    schtasks /End /TN "Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask"
    sc config TermService start= disabled
    net stop TermService /y
      My ComputerSystem Spec

  3.    13 Jul 2017 #3

    A few years ago, a Norton user was ranting about the security software resetting the Service to 'Automatic'. No one in the Norton Support Forum volunteered to prove the user wrong/right.

    My own experience, and I use Norton, says a reboot resets the Service to 'Automatic'. When I had the occasion to check, it usually shows it as previously set, 'Disabled'. Only after a reboot does it show the Service running.

    It's an inconvenience, the reflexive checking, I've learned to live with.
      My ComputerSystem Spec


Related Threads
Hello, I've searched the internet high and low to find the answer to this problem and have not come up with much. I have Windows 10 Professional and I run a remote desktop protocol in order to access my PC remotely. The self-signed certificated...
I have an RDWEB setup (Server 2012R2). Server Manager>Remote Desktop Services>Overview does not populate the Deployment Servers, RD Sessions Host or collections on my Windows 10 laptop (with RSAT installed). Server Manager>Remote Desktop...
Just wondering if anyone can direct me to a source that shows the factory default settings for Windows 10 services. Thanks.
New Services in General Support
Ran across this list (attached) while I was researching an event log error..... Source: Windows 10 Testers Topic - Page 21 - Operating Systems and Software - Linus Tech Tips The last one on the list, UsoSvc - Update Orchestrator Service:...
New services in General Support
Any idea, what do new services do, besides the usual nothing saying description? :sarc: CoreMessaging dmwappushsvc
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 21:31.
Find Us