Disable CDPUUserSvc_ & Sync Host_ (in a domain environment)

[edscdk]

I'm locking down a windows image and these two services! (as well as a few others)

I'm working on an initial build and ideally want them disabled in the build (since I don't trust our group policy's to work)

CDPUUserSvc_<random number>
Sync Host_<random number>

Does anyone have a way to disable creation of these or a way to disable them (bear in mind they have a random number on the end)

I'm too stupid to know how to enumerate services starting with CDPUUserSvc_ in a script so if anyone has one please let me know!

Manually doing it is not an option!

 

[LizardKing]

Thats simple enough to do in Powershell
something like

Get-Service | where name -Like "CDPUUserSvc_*" | Set-Service disable

It will likely have to be run as admin to work

 

[Django x2]

More to the point, why? None of what you've mentioned is guideline from either MSFT, EUDSG or the NCSC deltas. What are your reasons for wanting to do this?