Constant error from Service SyncHost & CDPUserSvc on Windows Server 2016

Question

We are are running a couple of Windows Server 2016 boxes for some of our environments to start testing things out but we have been getting constant errors from the two above services not running. Essentially, the above services create themselves as users log in, so when the user logs out the service is left in a stopped state and we can't start it or alert it so our monitoring system continues to alert us about useless errors. All the services do is sync maps, contacts, and e-mail so i'm not sure why they are even included in the Windows Service 2016 image.

I'm curious to see if anyone else has ran into this issue and has possibly found a solution or does everyone just ignore them?

Our monitoring solution is Zabbix, and the reason these services are picked up is because Zabbix scans for all services running on the host machine. I am not aware of any way to make the discovery rules filter out services that start with CDP_ or Service_ in our version of zabbix so i'm just trying to find a good workaround. We are running version 2 of zabbix

Screenshot of what error looks like

Answer 1

You seem to be using custom discovery of the Windows services, probably based on this solution. While this key does not seem to have a built-in filtering, you should be able to filter either by plain regexp, or, more likely, by a global regexp. Alternatively, you could hack the script itself and amend the hardcoded exceptions.

If using Zabbix filtering, you should first create a global regexp that negates the things you want to exclude (like the ones starting with CDP_ and Service_), then use that global regexp in the LLD rule filtering as outlined in the LLD documentation.

If you would like to hack the script, look for the SET EXCEPTIONS section and add your own exceptions. Keep in mind that you will have to deploy your modified version to all the affected boxes - the Zabbix filtering above will be less involved in that regard.