So customer calls up saying exchange isn't working, and when he remoted in he could see all the services disabled.
All the exchange services, IIS, update, plus a bunch of others were all set to disabled state.
Apon changing to automatic they started again fine and now email works, but how they got into this state is the worry.
I believe, from something similar years ago, that in msconfig there is diagnostic startup, which might result in said services being disabled. Again though, after another 'normal' reboot, why wouldn't they revert back to normal? And, how would it have gone into diag startup in the first place?
Anyway, a few other people on google seem to have had the same problem over the years but no one has really found a solution. At this stage we aren't ruling out a virus however it is a server with almost 0 access to the web so doubtful.
And exchange 2007 8.1 (some 0s missing) on server 2008 SBS (windows server standard FE 2007 SP2)