{
	"id": "e4088a90-e2e8-49c9-ab67-991961e63068",
	"created_at": "2026-04-06T02:13:17.951906Z",
	"updated_at": "2026-04-10T03:20:36.135899Z",
	"deleted_at": null,
	"sha1_hash": "b75e51806b4c5231255b8dffb3eee326fca3bb51",
	"title": "Set up Recovery Actions to Take Place When a Service Fails",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 36009,
	"plain_text": "Set up Recovery Actions to Take Place When a Service Fails\r\nBy Archiveddocs\r\nArchived: 2026-04-06 02:01:54 UTC\r\nApplies To: Windows 7, Windows 8, Windows Server 2008 R2, Windows Server 2012\r\nIf a service fails, you can use the Services snap-in to specify what action to take (for example, running a program\r\nor script) on the first or second service failure, or on subsequent failures.\r\nMembership in Account Operators , Domain Admins , Enterprise Admins , or equivalent, is the minimum\r\nrequired to complete this procedure. Review the details in \"Additional considerations\" in this topic.\r\n1. Click Start , in the Start Search box, type services.msc , and then press ENTER.\r\n2. In the details pane, right-click the service for which you want to set up recovery actions, and then click\r\nProperties .\r\n3. On the Recovery tab, click the action that you want in First failure , Second failure , and Subsequent\r\nfailures , and then click OK .\r\nIf you click Run a Program , under Run program , type the full path for the specified computer.\r\nUniversal Naming Convention (UNC) names are not supported. For example, type\r\nC:\\scripts\\handlefailure.cmd , rather than \\\\computername\\c$\\scripts\\handlefailure.cmd .\r\nPrograms or scripts that you specify should not require user input.\r\nIf you click Restart the Computer , click Restart Computer Options to specify how long the\r\ncomputer waits before restarting. You can also create a message to send automatically to remote\r\nusers before the computer restarts.\r\nSelect Enable actions for stops with errors in order to trigger the recovery actions that the service\r\nstopped with an error.\r\nTo perform this procedure, you must be a member of the Account Operators group, the Domain Admins\r\ngroup, the Enterprise Admins group, or you must have been delegated the appropriate authority. As a\r\nsecurity best practice, consider using Run as to perform this procedure.\r\nRecovery actions are available only on computers running Windows 2000 or later.\r\nServices\r\nSource: https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc753662(v=ws.11)\r\nhttps://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc753662(v=ws.11)\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"references": [
		"https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc753662(v=ws.11)"
	],
	"report_names": [
		"cc753662(v=ws.11)"
	],
	"threat_actors": [],
	"ts_created_at": 1775441597,
	"ts_updated_at": 1775791236,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/b75e51806b4c5231255b8dffb3eee326fca3bb51.pdf",
		"text": "https://archive.orkl.eu/b75e51806b4c5231255b8dffb3eee326fca3bb51.txt",
		"img": "https://archive.orkl.eu/b75e51806b4c5231255b8dffb3eee326fca3bb51.jpg"
	}
}