Re: Can a service be installed and hidden?



Hi Remy,

Thanks for the input. Although I don't want the users to be able to stop the
service, I still need to be able to uninstall the service such as when
uninstalling the program. I was thinking of adding a password to the OnStop
event but I can't seem to be able to do this gracefully or successfully. If
there are resources out there that you are aware of, I would appreciate it
if you could forward them to me. Your help is greatly appreciated and I
thank you in advance.

Andy

"Remy Lebeau (TeamB)" <no.spam@xxxxxxxxxxx> wrote in message
news:44b3401f$1@xxxxxxxxxxxxxxxxxxxxxxxxx

"Andy" <aadiabo@xxxxxxxxxxxxx> wrote in message
news:44b31de0$1@xxxxxxxxxxxxxxxxxxxxxxxxx

I'm trying to create an Audit Trail application required for a
project that logs every file action in the computer.

You do not need to hide a service for that. And besides, NT-based OS
versions already have a built-in audit log anyway. Your application can
use
ReportEvent() to add messages to the logs that appear in the built-in
Event
Log viewer.

But its useless if someone can just stop the service from the Control
Panel.

It is very easy for a service to prevent the user from stopping it.
Assuming you are using TService, simply set the Stopped parameter to false
in its OnStop event. You should also set the Win32ErrCode property, such
as
to ERROR_ACCESS_DENIED, so that the action is logged and the user can see
why the service would not stop.


Gambit




.



Relevant Pages

  • Re: Can a service be installed and hidden?
    ... project that logs every file action in the computer. ... versions already have a built-in audit log anyway. ... ReportEventto add messages to the logs that appear in the built-in Event ...
    (borland.public.delphi.thirdpartytools.general)
  • Re: Disk space on C: shrinking rapidly after SP1
    ... FWIW, my SBS is installed on an 8 GB c: partition with 1.25 GB free, and I ... >> you can probably archive or delete old ISA and IIS logs (see ... >> and make a list of all the patches with uninstall options listed there. ...
    (microsoft.public.windows.server.sbs)
  • Re: Talking to friends
    ... There is no reason to uninstall it. ... If it logs on automatically, click the "Show menu" box at the top. ... I cannot persuade it to start again so I can register with the correct email addressing. ...
    (microsoft.public.windowsxp.newusers)
  • Re: LinkSys Media Center Extender disconnection, error code 000100
    ... I uninstall the AntiVirus and the same error on the extender and logs on the ... PC event viewer. ... the media center pc the following event are logs. ...
    (microsoft.public.windows.mediacenter)
  • Re: Disk space on C: shrinking rapidly after SP1
    ... You may find whole categories of logs this way - for example, ... Anything that can't be uninstalled from control panel, ... > and the client apps folder. ...
    (microsoft.public.windows.server.sbs)