Win32_Service

Indicates whether the service can be paused.

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, AcceptPause

# filtering all instances with AcceptPause set to $true:
Get-CimInstance -ClassName Win32_Service | Where-Object AcceptPause -eq $true | Select-Object -Property Name, AcceptPause

AcceptStop

Indicates whether the service can be stopped.

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, AcceptStop

# filtering all instances with AcceptStop set to $true:
Get-CimInstance -ClassName Win32_Service | Where-Object AcceptStop -eq $true | Select-Object -Property Name, AcceptStop

Caption

STRING MAX 64 CHAR

Short description of the service - a one-line string.

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, Caption

# reading property value:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, Caption | Foreach-Object {

  $caption = $_.Caption
  $value = $_.Caption
  "${caption}: Caption = $value"
}

CheckPoint

Value that the service increments periodically to report its progress during a long start, stop, pause, or continue operation. For example, the service increments this value as it completes each step of its initialization when it is starting up. The user interface program that invokes the operation on the service uses this value to track the progress of the service during a lengthy operation. This value is not valid and should be zero when the service does not have a start, stop, pause, or continue operation pending.

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, CheckPoint

# reading property value:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, CheckPoint | Foreach-Object {

  $caption = $_.Caption
  $value = $_.CheckPoint
  "${caption}: CheckPoint = $value"
}

CreationClassName

Name of the first concrete class to appear in the inheritance chain used in the creation of an instance. When used with the other key properties of the class, this property allows all instances of this class and its subclasses to be uniquely identified.

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, CreationClassName

# reading property value:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, CreationClassName | Foreach-Object {

  $caption = $_.Caption
  $value = $_.CreationClassName
  "${caption}: CreationClassName = $value"
}

DelayedAutoStart

If $true, the service is started after other auto-start services are started plus a short delay.

This property is not supported before Windows Server® 2016 and Windows® 10.

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, DelayedAutoStart

# filtering all instances with DelayedAutoStart set to $true:
Get-CimInstance -ClassName Win32_Service | Where-Object DelayedAutoStart -eq $true | Select-Object -Property Name, DelayedAutoStart

Description

Description of the object.

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, Description

# reading property value:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, Description | Foreach-Object {

  $caption = $_.Caption
  $value = $_.Description
  "${caption}: Description = $value"
}

DesktopInteract

Indicates whether the service can create or communicate with windows on the desktop, and thus interact in some way with a user. Interactive services must run under the Local System account. Most services are not interactive; that is, they do not communicate with the user in any way.

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, DesktopInteract

# filtering all instances with DesktopInteract set to $true:
Get-CimInstance -ClassName Win32_Service | Where-Object DesktopInteract -eq $true | Select-Object -Property Name, DesktopInteract

DisplayName

Name of the service as viewed in the Services snap-in. This string has a maximum length of 256 characters. Note that the display name and the service name (which is stored in the registry) are not always the same.

For example, the DHCP Client service has the service name Dhcp but the display name DHCP Client. The name is case-preserved in the Service Control Manager. However, DisplayName comparisons are always case-insensitive.

Constraint: Accepts the same value as the Name property.

Example: “Atdisk”

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, DisplayName

# reading property value:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, DisplayName | Foreach-Object {

  $caption = $_.Caption
  $value = $_.DisplayName
  "${caption}: DisplayName = $value"
}

ErrorControl

Severity of the error if this service fails to start during startup. The value indicates the action taken by the startup program if failure occurs. All errors are logged by the computer system.

Value	Description
Ignore	User is not notified.
Normal	User is notified. Usually this will be a message box display notifying the user of the problem.
Severe	System is restarted with the last-known-good configuration.
Critical	System attempts to restart with a good configuration. If the service fails to start a second time, startup fails.
Unknown	Severity of the error is unknown.

Available values:

'Ignore', 'Normal', 'Severe', 'Critical', 'Unknown'

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, ErrorControl

# reading property value:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, ErrorControl | Foreach-Object {

  $caption = $_.Caption
  $value = $_.ErrorControl
  "${caption}: ErrorControl = $value"
}

ExitCode

Windows error code that defines errors encountered in starting or stopping the service.

This property is set to ERROR_SERVICE_SPECIFIC_ERROR (1066) when the error is unique to the service represented by this class, and information about the error is available in the ServiceSpecificExitCode property. The service sets this value to NO_ERROR when running, and again upon normal termination.

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, ExitCode

# reading property value:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, ExitCode | Foreach-Object {

  $caption = $_.Caption
  $value = $_.ExitCode
  "${caption}: ExitCode = $value"
}

InstallDate

DATETIME

Date object is installed. This property can be empty.

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, InstallDate

# reading property value:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, InstallDate | Foreach-Object {

  $caption = $_.Caption
  $value = $_.InstallDate
  "${caption}: InstallDate = $value"
}

Name

KEY PROPERTY STRING

Unique identifier of the service that provides an indication of the functionality that is managed. This functionality is described in the Description property of the object.

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name

# reading property value:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, Name | Foreach-Object {

  $caption = $_.Caption
  $value = $_.Name
  "${caption}: Name = $value"
}

PathName

Fully qualified path to the service binary file that implements the service.

Example: “\SystemRoot\System32\drivers\afd.sys”

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, PathName

# reading property value:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, PathName | Foreach-Object {

  $caption = $_.Caption
  $value = $_.PathName
  "${caption}: PathName = $value"
}

ProcessId

Process identifier of the service.

Example: 324

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, ProcessId

# reading property value:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, ProcessId | Foreach-Object {

  $caption = $_.Caption
  $value = $_.ProcessId
  "${caption}: ProcessId = $value"
}

ServiceSpecificExitCode

Service-specific error code for errors that occur while the service is either starting or stopping.

The exit codes are defined by the service represented by this class. This value is only set when the ExitCode property value is ERROR_SERVICE_SPECIFIC_ERROR (1066).

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, ServiceSpecificExitCode

# reading property value:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, ServiceSpecificExitCode | Foreach-Object {

  $caption = $_.Caption
  $value = $_.ServiceSpecificExitCode
  "${caption}: ServiceSpecificExitCode = $value"
}

ServiceType

Type of service provided to calling processes.

Available values:

'Kernel Driver', 'File System Driver', 'Adapter', 'Recognizer Driver', 'Own Process', 'Share Process', 'Interactive Process'

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, ServiceType

# reading property value:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, ServiceType | Foreach-Object {

  $caption = $_.Caption
  $value = $_.ServiceType
  "${caption}: ServiceType = $value"
}

Started

Indicates whether or not the service is started.

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, Started

# filtering all instances with Started set to $true:
Get-CimInstance -ClassName Win32_Service | Where-Object Started -eq $true | Select-Object -Property Name, Started

StartMode

Start mode of the Windows base service.

Value	Description
Boot	Device driver started by the operating system loader (valid only for driver services).
System	Device driver started by the operating system initialization process. This value is valid only for driver services.
Auto	Service to be started automatically by the service control manager during system startup. Auto services are started even if a user does not log on.
Manual	Service to be started by the Service Control Manager when a process calls the StartService method. These services do not start unless a user logs on and starts them.
Disabled	Service that cannot be started until its StartMode is changed to either Auto or Manual.

Available values:

'Boot', 'System', 'Auto', 'Manual', 'Disabled'

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, StartMode

# reading property value:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, StartMode | Foreach-Object {

  $caption = $_.Caption
  $value = $_.StartMode
  "${caption}: StartMode = $value"
}

StartName

Account name under which a service runs. Depending on the service type, the account name may be in the form of “DomainName\Username” or UPN format (“Username@DomainName”). The service process is logged by using one of these two forms when it runs. If the account belongs to the built-in domain, then “.\Username” can be specified. For kernel or system-level drivers, StartName contains the driver object name (that is, “\FileSystem\Rdr” or “\Driver\Xns”) which the I/O system uses to load the device driver. Additionally, if NULL is specified, the driver runs with a default object name created by the I/O system based on the service name.

Example: “DWDOM\Admin”

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, StartName

# reading property value:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, StartName | Foreach-Object {

  $caption = $_.Caption
  $value = $_.StartName
  "${caption}: StartName = $value"
}

State

WRITEABLE STRING

Current state of the base service.

Available values:

'Stopped', 'Start Pending', 'Stop Pending', 'Running', 'Continue Pending', 'Pause Pending', 'Paused', 'Unknown'

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, State

# reading property value:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, State | Foreach-Object {

  $caption = $_.Caption
  $value = $_.State
  "${caption}: State = $value"
}

Status

STRING MAX 10 CHAR

Current status of an object. Various operational and nonoperational statuses can be defined.

Available values:

'Degraded','Error','Lost Comm','No Contact','NonRecover','OK','Pred Fail','Service','Starting','Stopping','Stressed','Unknown'

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, Status

# reading property value:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, Status | Foreach-Object {

  $caption = $_.Caption
  $value = $_.Status
  "${caption}: Status = $value"
}

SystemCreationClassName

Type name of the system that hosts this service.

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, SystemCreationClassName

# reading property value:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, SystemCreationClassName | Foreach-Object {

  $caption = $_.Caption
  $value = $_.SystemCreationClassName
  "${caption}: SystemCreationClassName = $value"
}

SystemName

Name of the system that hosts this service.

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, SystemName

# reading property value:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, SystemName | Foreach-Object {

  $caption = $_.Caption
  $value = $_.SystemName
  "${caption}: SystemName = $value"
}

TagId

Unique tag value for this service in the group. A value of 0 (zero) indicates that the service does not have a tag. A tag can be used to order service startup within a load order group by specifying a tag order vector in the registry located at HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\GroupOrderList.

Tags are only evaluated for Kernel Driver and File System Driver start type services that have Boot or System start modes.

# returning class instances:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, TagId

# reading property value:
Get-CimInstance -ClassName Win32_Service | Select-Object -Property Name, TagId | Foreach-Object {

  $caption = $_.Caption
  $value = $_.TagId
  "${caption}: TagId = $value"
}

WaitHint