Monday, March 28, 2011

How to stop the ‘SBCore Service’ Service” or “How to use SBS2003 as a normal server


I've found this article by Jeremy at http://www.jeremycole.com/blog/2008/06/24/how-to-stop-the-sbcore-service-service-or-how-to-use-sbs2003-as-a-normal-server/


 

Most of this info was found here: http://forums.speedguide.net/showthread.php?t=173731

Note: Removing this service apparently violates the license agreement for Microsoft Small Business Server. See the details here if you care.

Tools you'll need – Process Explorer from www.sysInternals.com
http://technet.microsoft.com/en-us/sysinternals/default.aspx

As you probably know, you have a service called "SBCore Service", which executes the following process: C:\WINDOWS\system32\sbscrexe.exe

If you kill it, it just restarts – and if you try and stop it you are told Access Denied.

If you fire up Process Explorer, you can select the process and Suspend it, now we can start to disable the thing.

Run regedt32.exe and find:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SBCore

Right click this, choose Permissions and give the "Administrators" group on the local machine full access (don't forget to replace permissions on child nodes).

Press F5 in regedt32 to refresh, and you'll see all of the values and data under this key.

Select the "Start" DWORD and change it from 2 to 4 – this sets the service to the "Disabled" state as far as the MMC services snap-in (and windows for that matter) is concerned.

In the original instructions, the author left the service as Disabled and just denied access to the executable:

Next, adjust the permissions on the file C:\WINDOWS\system32\sbscrexe.exe so that EVERYONE account is
denied any sort of access to this file.

Then go back to process explorer, and kill the sbscrexe.exe process, if it doesn't restart – congratulations!

Load up the services MMC snap-in and you should find that "SBS Core Services" is stopped and marked as Disabled.

I decided that I wanted the service gone completely, so (after exporting it), I just deleted the registry key while in regedt32.

After rebooting, I verified that the service was indeed gone from the list of services in MMC, and there was no sbscrexe.exe process running. Then I moved the file sbscrexe.exe from C:\windows\system32 into a tidy little folder along with my exported registry key to keep for future evaluation. Something like a disgusting little bug under glass.

No comments:

Post a Comment