Cfengine 3 example unit_service_disable.html
body common control

{
bundlesequence  => { "winservice" };
}

###########################################################

bundle agent winservice

{
vars:

  "bad_services" slist => { "Alerter",  "ClipSrv" };

services:

 windows::

  "$(bad_services)"

       service_policy => "disable",
       comment => "Disable services that create security issues";
}
}