Managing Windows
services across enterprise devices is a common administrative task, especially
when enforcing network security policies. This PowerShell script provides a simple
yet effective solution to control the startup behavior of the Wired AutoConfig
service (dot3svc) by modifying its registry configuration.
- Overview of the Script
The script is designed
to:
- Enable or disable the dot3svc (Wired
AutoConfig) service
- Modify the service startup type via
registry
- Log all actions in a structured format
- Support both installation (enable)
and uninstallation (disable) scenarios
This makes it suitable
for deployment through tools like SCCM, Intune, or automation pipelines.
- What is dot3svc?
The Wired
AutoConfig (dot3svc) service is responsible for IEEE 802.1X
authentication on wired Ethernet networks. It is commonly used in
enterprise environments where:
- Network access is controlled via
authentication policies
- Devices must comply with security
standards before connecting
- Certificate-based or credential-based
authentication is enforced
Enabling or disabling
this service directly impacts network access behavior and compliance.
- Logging Mechanism
The script includes a
reusable logging function:
PowerShell
function Write-Log
``
Show more lines
- Key Features:
- Logs are stored in:
- C:\ProgramData\GlobalClient\LogFiles
- Daily log file creation using date format
- Captures:
- Timestamp
- Log level (INFO, WARNING, ERROR)
- Message details
This ensures
traceability and simplifies troubleshooting.
- Registry Configuration