Some Windows services can be triggered to start at certain events. These services have ‘Tigger Start’ in their startup name behind whatever you configured (like Manual).<\/p>\n
Powershell does not have a native method to register the type of event that triggers such a service, C++ and C# do…..and Powershell can natively run C#.<\/p>\n
To trigger a service, you’ll need its guid first:<\/p>\n
run sc triggerinfo <SERVICENAME><\/p>\n
This will give you a GUID, for example for the WebClient service:<\/p>\n
22b6d684-fa63-4578-87c9-effcbe6643c7<\/pre>\nYou can then use this GUID in the following script to trigger your service from Powershell \ud83d\ude42<\/p>\n
\n\n$Source = @"\nusing System;\nusing System.Text;\nusing System.Security;\nusing System.Collections.Generic;\nusing System.Runtime.Versioning;\nusing Microsoft.Win32.SafeHandles;\nusing System.Runtime.InteropServices;\nusing System.Diagnostics.CodeAnalysis;\nnamespace JosL.WebClient{\npublic static class Starter{\n[StructLayout(LayoutKind.Explicit, Size=16)]\npublic class EVENT_DESCRIPTOR{\n[FieldOffset(0)]ushort Id = 1;\n[FieldOffset(2)]byte Version = 0;\n[FieldOffset(3)]byte Channel = 0;\n[FieldOffset(4)]byte Level = 4;\n[FieldOffset(5)]byte Opcode = 0;\n[FieldOffset(6)]ushort Task = 0;\n[FieldOffset(8)]long Keyword = 0;\n}\n\n[StructLayout(LayoutKind.Explicit, Size = 16)]\npublic struct EventData{\n[FieldOffset(0)]\ninternal UInt64 DataPointer;\n[FieldOffset(8)]\ninternal uint Size;\n[FieldOffset(12)]\ninternal int Reserved;\n}\n\npublic static void startService(){\nGuid webClientTrigger = new Guid(0x22B6D684, 0xFA63, 0x4578, 0x87, 0xC9, 0xEF, 0xFC, 0xBE, 0x66, 0x43, 0xC7);\n\nlong handle = 0;\nuint output = EventRegister(ref webClientTrigger, IntPtr.Zero, IntPtr.Zero, ref handle);\n\nbool success = false;\n\nif (output == 0){\nEVENT_DESCRIPTOR desc = new EVENT_DESCRIPTOR();\nunsafe\n{\nuint writeOutput = EventWrite(handle, ref desc, 0, null);\nsuccess = writeOutput == 0;\nEventUnregister(handle);\n}\n}\n}\n\n[DllImport("Advapi32.dll", SetLastError = true)]\npublic static extern uint EventRegister(ref Guid guid, [Optional] IntPtr EnableCallback, [Optional] IntPtr CallbackContext, [In][Out] ref long RegHandle);\n\n[DllImport("Advapi32.dll", SetLastError = true)]\npublic static extern unsafe uint EventWrite(long RegHandle, ref EVENT_DESCRIPTOR EventDescriptor, uint UserDataCount, EventData* UserData);\n\n[DllImport("Advapi32.dll", SetLastError = true)]\npublic static extern uint EventUnregister(long RegHandle);\n}\n}\n"@\n$compilerParameters = New-Object System.CodeDom.Compiler.CompilerParameters\n$compilerParameters.CompilerOptions="\/unsafe"\nAdd-Type -TypeDefinition $Source -Language CSharp -CompilerParameters $compilerParameters\n[JosL.WebClient.Starter]::startService()\n\n<\/pre>\n","protected":false},"excerpt":{"rendered":"Some Windows services can be triggered to start at certain events. These services have ‘Tigger Start’ in their startup name behind whatever you configured (like Manual). Powershell does not have a native method to register the type of event that triggers such a service, C++ and C# do…..and Powershell can natively run C#. To trigger … Continue reading How to start a “Trigger Start” windows service with Powershell without elevation \/ admin rights<\/span>