I need WER disabled in some servers. To achieve this, according to the documentation I ran the Disable-WindowsErrorReporting cmdlet, which upon returning True confirmed that the operation had been successful.
After that, running the Get-WindowsErrorReporting cmdlet showed that it was in the "Disabled" state.
Going to the registry editor and checking "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting" showed that the "Disabled" value was indeed set to 1. 
But when checking under services.msc, the "Windows Error Reporting Service (WerSvc) was showing as still running and with the Automatic startup value.
I restarted the server and the service was still running.
My question is: does disabling WER still leave the WerSvc running? Why would that be? Does the service remain active but stops reporting?
How can I validate quickly that WER is indeed disabled (tried hanging the Sysinternal's NotMyFault.exe app but I did not get WER's dialog box with it either Enabled or Disabled)
