This product pack includes various instructions to help the admin explore and manage local services running on devices. It also provides functionality to contextualize investigations to specific users on a device.

Key Features

  • Provides Windows Services aggregated information about service name and state.
  • Checks the status of predefined critical services including BITS, WMI, Windows Server Service, RPC Server, SCCM Client, Nomad Client, Windows Defender. If found not running then start the service. Useful for BaU or WSS situations.


  • This Product Pack contains instructions.
  • Upload the Product pack either with the help of Tachyon Product Pack Deployment Tool or directly by clicking on Upload button from Instruction set in 1E Platform.
  • Create an Instruction Set named Windows Service Management and move all the instructions from Unassigned Set to this set, unless you use Product Pack Deployment Tool which creates it automatically.


  1. Go to Explorer and search for any instruction in this pack, For Example Get the applied group policies list for user and device with duration of it.
  2. Click on Ask this question.
  3. This will Check which GPOs applied for user and machine. Gives the duration of policy.


Join Our Newsletter

Copyright © 1E 2022 All Rights Reserved

This website is designed for desktop. If using a mobile browser please change to desktop view.