Analysis for windows running services

Content Authoring
1

(imported topic written by garretdavis91)

I’m trying to find the install location of the application on a windows server and the properties are not working correctly when I try to use services for this information.

I have tried this syntax below and it works for some services, but not all for some reason.

(image paths of it) of services whose (service name of it starts with “BES”)

If does find the BES stuff, but if I look for TSM it does not work on all servers. Out of 100 servers only 5 servers actually show it.

If I use this to list ALL services it does list TSM there.

running services

So why on some servers would this syntax work, but on most it not work?

TIA

2

(imported comment written by BenKus)

Maybe it is a case issue…

Try:

(image paths of it) of services whose (service name of it as lowercase starts with “bes”)

Also, make sure you want the service name and not the display name…

Ben

3

(imported comment written by garretdavis91)

Nope…does not make a difference.

Here is another that does not list TSM.

(service names of it, image paths of it) of running services

If I just do “running services” TSM shows up…

4

(imported comment written by SystemAdmin)

I’m seeing the same behavior.

q: (Display name of it, image paths of it) of running services whose (Display name of it starts with "TSM")
T: 0.353 ms
 
q: (Display name of it) of running services whose (Display name of it starts with "TSM")
A: TSM Central Scheduler Service
A: TSM Journal Service
T: 0.177 ms
 
q: (image path of it) of running services whose (Display name of it starts with "TSM")
E: Singular expression refers to nonexistent object.
 
q: running services whose (Service name of it starts with "TSM")
A: "TSM Central Scheduler Service" "TSM Central Scheduler Service" "Running"
A: "TSM Journal Service" "TSM Journal Service" "Running"
T: 126.436 ms
5

(imported comment written by SystemAdmin)

For those that notice it, I used Service name in the last query, but if I used Display name, it still reports the same results.

6

(imported comment written by SystemAdmin)

Changing boldImage Path* to

Image Paths

simply results in no returned values …

q: (image paths of it) of running services whose (Display name of it starts with "TSM")
T: 0.384 ms
7

(imported comment written by BenKus)

I bet the image path is not properly set for this service… You might look in the registry at “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services” and see if it has an image path (and if it is valid).

Ben

8

(imported comment written by SystemAdmin)

The Tivoli Storage Manager Scheduler Service has the following exported Image Path …

"ImagePath"="\"C:\\Program Files\\tivoli\\tsm\\baclient\\dsmcsvc.exe\""

when looking at both it and the TSM Journaling Service in RegEdit, their Image Path values are type REG_SZ.

9

(imported comment written by BenKus)

Does that file exist?

Ben

10

(imported comment written by SystemAdmin)

Yes, the dsmcsvc.exe file exists in the indicated location.

11

(imported comment written by BenKus)

Hmmm… Almost every service I see uses REG_EXPAND_SZ rather than REG_SZ… I bet that is the issue…

You might just look up the reg value directly…

Ben

12

(imported comment written by SystemAdmin)

q: value "ImagePath" of key "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TSM Central Scheduler Service" of registry
A: "C:\Program Files\tivoli\tsm\baclient\dsmcsvc.exe"
T: 380.548 ms