"Access Denied" Error Message When Trying to Start a Service in Windows 2000

Article ID: 256299 - View products that this article applies to.
This article was previously published under Q256299
Notice
This article applies to Windows 2000. Support for Windows 2000 ends on July 13, 2010. The Windows 2000 End-of-Support Solution Center
(http://support.microsoft.com/?scid=http%3a%2f%2fsupport.microsoft.com%2fwin2000)
is a starting point for planning your migration strategy from Windows 2000. For more information see the Microsoft Support Lifecycle Policy
(http://support.microsoft.com/lifecycle/)
.
Expand all | Collapse all

SYMPTOMS

After you configure a group policy to set permissions on a service, the service in Control Panel may not function properly. If you try to open the service properties, you may receive the following error message:
Unable to open service DNS Server for reading on Local Computer.
Error 5: Access is Denied.
In addition, if you type net start "service" at the command line, you may receive the following error message:
System Error 5 has occurred

Access is Denied
Back to the top | Give Feedback

CAUSE

This behavior occurs because you need the following permissions to open the properties of a service, and to stop, start, or pause a service:
  • Read
  • Stop, Start, and Pause
NOTE: This is also true when using net commands at the command line.
Back to the top | Give Feedback

RESOLUTION

To resolve this issue, reapply the policy and give the user the correct permissions.

For additional information about how to apply a system service security policy correctly, click the article number below to view the article in the Microsoft Knowledge Base:
256345
(http://support.microsoft.com/kb/256345/EN-US/ )
Configuring Group Policies to Set Security for System Services
Back to the top | Give Feedback

STATUS

Microsoft has confirmed this to be a problem in Microsoft Windows 2000.
Back to the top | Give Feedback

MORE INFORMATION

When you add a user through Group Policy Editor in the System Service Security Policy, the default permissions are start, stop, and pause.

If you are unable to change permissions through a policy because the policy is not applied, see the following Microsoft Knowledge Base article:
257247
(http://support.microsoft.com/kb/257247/EN-US/ )
Policy Changing System Service Permissions Does Not Apply
Back to the top | Give Feedback

Properties

Article ID: 256299 - Last Review: February 28, 2007 - Revision: 3.4
APPLIES TO
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional Edition
  • Microsoft Windows 2000 Datacenter Server
Keywords: 
kbbug kberrmsg kbpending KB256299
Back to the top | Give Feedback

Give Feedback

 
Back to the topBack to the top