Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have been seeing an issue in Windows 8 RP and Windows 8 RTM that is stumping us. The first time each day, when the machines come up, the Security Center service (always), and sometimes other services such as the Hyper-V Virtual Machine Manager and IP Helper, despite all being set to "Automatic" or "Automatic (Delay Start)", all are not actually starting. We have some user reports that it works until either SCCM is installed or the workstation is moved to the local workstation OU, but we don't see any GP settings or SC settings that would explain how this is happening. The event logs aren't showing anything useful as best as we can tell, and neither are the local CCM log files, but it's possible we aren't looking at the right things or in the right ways to see what they are trying to tell us.

We don't see this issue on Windows 7 that we know of.

SCCM is 2012. Evaluating the user or machine policies manually (via Control Panel) doesn't stop any services.

Later boots don't seem to have the issue. If we leave the machine up overnight, then at some time the services stop. The last time we saw that was 12:37 am, and all that is in the logs about that time is the WMI service changing from auto start to disabled and then back about thirty seconds later. We don't have any evidence the two things are connected, but it seems unlikely they aren't.

I know there's a lot of "not helpful" information here but this is the most we have right now.

Ideas? I am hoping someone else has seen this and can point me at a quick answer as users are starting to complain about the issue. Or at least can give me a better idea of what to look for.

share|improve this question
up vote 0 down vote accepted

From a coworker:

I have found the culprit (verified that is breaks security center, believe it is the direct access issue as well)

It is the Scheduled Task called “Configuration Manager Health Evaluation”. This tasks runs every night at around midnight ... You can not remove/modify the task as it will be replaced every startup from the SCCM client itself.

I guess I know why the SCCM client isn’t supported on Windows 8 officially yet ;)

share|improve this answer

This was occurring on my Server 2008 R2 Hyper-V host server. Every night it would stop the hyper-v services and I would be wondering why. Definitely not just a Window 8 issue (although now that I think about it, I am seeing this on my W8 test machines as well). addresses the cause of this. The workaround in the article does work. SP1 does fix it... that is if you don't forget to update the clients (like I did).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.