---
id: aa9f1322-6481-11ee-8c99-0242ac120002
---

# Windows Service Failure and Restart
---

This incident type involves checking if a particular Windows service is running, and if it's not, then restarting it twice. This can occur due to various reasons, such as unexpected shutdown, system failure, or software malfunction. The aim is to ensure that the Windows service is up and running to avoid any disruptions in the system's functionality.

### Parameters
```shell
export SERVICE_NAME="PLACEHOLDER"

export LOG_FILE_PATH="PLACEHOLDER"
```

## Debug

### Next Step
```shell
powershell

# Check if the service is running

Get-Service -Name ${SERVICE_NAME}
```

### Restart the service
```shell
Restart-Service -Name ${SERVICE_NAME}
```

### Check the status of the service after restarting it
```shell
Get-Service -Name ${SERVICE_NAME} | Select-Object -Property Status
```

### Check the service's recovery options
```shell
Get-Service -Name ${SERVICE_NAME} | Select-Object -ExpandProperty CanStop, CanPauseAndContinue, CanShutdown, CanStop, StartupType, RecoveryOptions, RecoveryAction
```

### Check the service's event logs for any related errors
```shell
Get-EventLog -LogName System -Source ${SERVICE_NAME} -After (Get-Date).AddDays(-7) -EntryType Error
```

## Repair

### Check the logs and system events to determine the root cause of the service failure.
```shell


#!/bin/bash



# set the name of the service to be checked

SERVICE_NAME=${SERVICE_NAME}



# set the log file path

LOG_FILE=${LOG_FILE_PATH}



# check the system logs for any errors related to the service

if grep -q "error" "$LOG_FILE"; then

    # if errors are found, print the last 10 lines of the log file for review

    tail -n 10 "$LOG_FILE"

else

    echo "No errors found in the system logs."

fi


```

### If the service is stopped due to system failure, perform a system reboot and restart the service.
```shell
bash

#!/bin/sh

# Windows service remediation script



SERVICE_NAME=${SERVICE_NAME}



# Check if the service is running

sc query $SERVICE_NAME | findstr /i "STATE" | findstr "RUNNING"

if [ $? -eq 0 ]

then

  echo "$SERVICE_NAME service is running."

else

  echo "$SERVICE_NAME service is not running."



  # Perform a system reboot

  shutdown /r /t 0



  # Wait for the system to reboot

  sleep 60



  # Restart the service

  net start $SERVICE_NAME



  echo "Service restarted successfully."

fi


```


This incident type involves checking if a particular Windows service is running, and if it's not, then restarting it twice. This can occur due to various reasons, such as unexpected shutdown, system failure, or software malfunction. The aim is to ensure that the Windows service is up and running to avoid any disruptions in the system's functionality.


```shell
export SERVICE_NAME="PLACEHOLDER"

export LOG_FILE_PATH="PLACEHOLDER"
```


### Next Step

```shell
powershell

# Check if the service is running

Get-Service -Name ${SERVICE_NAME}
```

### Restart the service

```shell
Restart-Service -Name ${SERVICE_NAME}
```

### Check the status of the service after restarting it

```shell
Get-Service -Name ${SERVICE_NAME} | Select-Object -Property Status
```

### Check the service's recovery options

```shell
Get-Service -Name ${SERVICE_NAME} | Select-Object -ExpandProperty CanStop, CanPauseAndContinue, CanShutdown, CanStop, StartupType, RecoveryOptions, RecoveryAction
```

### Check the service's event logs for any related errors

```shell
Get-EventLog -LogName System -Source ${SERVICE_NAME} -After (Get-Date).AddDays(-7) -EntryType Error
```


### Check the logs and system events to determine the root cause of the service failure.

```shell


#!/bin/bash



# set the name of the service to be checked

SERVICE_NAME=${SERVICE_NAME}



# set the log file path

LOG_FILE=${LOG_FILE_PATH}



# check the system logs for any errors related to the service

if grep -q "error" "$LOG_FILE"; then

    # if errors are found, print the last 10 lines of the log file for review

    tail -n 10 "$LOG_FILE"

else

    echo "No errors found in the system logs."

fi


```

### If the service is stopped due to system failure, perform a system reboot and restart the service.

```shell
bash

#!/bin/sh

# Windows service remediation script



SERVICE_NAME=${SERVICE_NAME}



# Check if the service is running

sc query $SERVICE_NAME | findstr /i "STATE" | findstr "RUNNING"

if [ $? -eq 0 ]

then

  echo "$SERVICE_NAME service is running."

else

  echo "$SERVICE_NAME service is not running."



  # Perform a system reboot

  shutdown /r /t 0



  # Wait for the system to reboot

  sleep 60



  # Restart the service

  net start $SERVICE_NAME



  echo "Service restarted successfully."

fi


```


Windows Service Failure and Restart

Overview

Parameters

Debug

Next Step

Restart the service

Check the status of the service after restarting it

Check the service's recovery options

Repair

Check the logs and system events to determine the root cause of the service failure.

If the service is stopped due to system failure, perform a system reboot and restart the service.

Learn more

Related Runbooks

Support