today's #techsupport patient: "sfc /scannow" -> "Windows Resource Protection could not start the repair service"

A quick look in services.msc showed half the services, nearly all of them microsoft services, disabled. (i guess they should be automatic? they're not well documented, & that seemed to work.)