Stop the Server Service after the scan (WMI)

info Nessus Plugin ID 144456
New! Plugin Severity Now Using CVSS v3

The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.


The server service was stopped after the scan.


To perform a full credentialed scan, Nessus needs the ability to connect to the remote server service (LanmanServer). If the service is down and if Nessus automatically enabled the server service for the duration of the scan, this plugin will stop it afterwards.

Plugin Details

Severity: Info

ID: 144456

File Name: wmi_stop_server_svc.nbin

Version: 1.25

Type: local

Family: Settings

Published: 12/18/2020

Updated: 9/20/2021

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: WMI/shutdown_lanmanserver_after_scan

Excluded KB Items: Host/dead