Access Denied error w/ User=Administrator on msconfig

[Tom]

WinXP Pro SP2 all MS updates
I have recently been receiving the message "An Access Denied error was
returned while attempting to change a service. You may need to log on using
an Administrator account to make the specified changes." Both my UserID
which has Administrator privileges AND the Administrator are getting the
message. I have ran McAfee against my system and all is OK.
Is there a parameter in the Registry to change for this or what are my
options?
TIA,
[PS: The System Configuration utility comes up every time I reboot (cold or
warm). When I do request that a Startup program not be launch (unchecking
the box) I get the above message but the changes do seem to take on the
couple I've done. Hence, I get the message of NOT being able to make the
change but there's a strong case that the changes DO take affect.

 

[R. McCarty]

When you say System Configuration Utility do you mean MSConfig ?

To resolve this you really need to determine what Service Start mode
is being modified. I would review the System Event Log and check
the details box for each Error ( Red Icon ).
Click Start, Run ( type ) EventVwr.Msc [Enter]

Not that it relates to your issue but McAfee isn't the best choice for
security software and it may be blocking the attempt to change the
Service start mode.

 

[Tom]

Yes, MSConfig. I have briefly checked the System Event Logs and I don't find
any Errors that apply. Other ideas?

When you say System Configuration Utility do you mean MSConfig ?

To resolve this you really need to determine what Service Start mode
is being modified. I would review the System Event Log and check
the details box for each Error ( Red Icon ).
Click Start, Run ( type ) EventVwr.Msc [Enter]

Not that it relates to your issue but McAfee isn't the best choice for
security software and it may be blocking the attempt to change the
Service start mode.

WinXP Pro SP2 all MS updates
I have recently been receiving the message "An Access Denied error was
returned while attempting to change a service. You may need to log on
using
an Administrator account to make the specified changes." Both my UserID
which has Administrator privileges AND the Administrator are getting the
message. I have ran McAfee against my system and all is OK.
Is there a parameter in the Registry to change for this or what are my
options?
TIA,
[PS: The System Configuration utility comes up every time I reboot (cold
or
warm). When I do request that a Startup program not be launch (unchecking
the box) I get the above message but the changes do seem to take on the
couple I've done. Hence, I get the message of NOT being able to make the
change but there's a strong case that the changes DO take affect.

 

[John John (MVP)]

Does this happen with all services or only a select few services?

Permissions may have been revoked on the
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\<ServiceName>
key(s). You can use Regedit to verify the permissions on the service
key(s) in question and grant yourself necessary permissions on the
ServiceName key.

You can usually easily fix this permission problem by propagating the
permissions from the HKLM\SYSTEM\CurrentControlSet\Services key on down
to all its child objects. To do so, using Regedit, right click on the
HKLM\SYSTEM\CurrentControlSet\Services key and select Permissions...
Click on the Advanced button and at the bottom of the Permissions tab
make sure that there is a check mark is in the:

"Inherit from parent the permission entries that apply to child objects..."

Then put a check mark on:

"Replace permission entries on all child objects with entries shown here
that apply to child objects."

Click on apply and accept to propagate inheritable permissions to child
objects, click OK when done and exit Regedit and try modify the service
again. Keep in mind that some Anti-Virus applications or other security
suites monitor changes to certain registry keys and that they may change
the permissions again, this would be done for example to prevent malware
from disabling the AV application or the firewall.

John

Yes, MSConfig. I have briefly checked the System Event Logs and I don't find
any Errors that apply. Other ideas?

:

When you say System Configuration Utility do you mean MSConfig ?

To resolve this you really need to determine what Service Start mode
is being modified. I would review the System Event Log and check
the details box for each Error ( Red Icon ).
Click Start, Run ( type ) EventVwr.Msc [Enter]

Not that it relates to your issue but McAfee isn't the best choice for
security software and it may be blocking the attempt to change the
Service start mode.

WinXP Pro SP2 all MS updates
I have recently been receiving the message "An Access Denied error was
returned while attempting to change a service. You may need to log on
using
an Administrator account to make the specified changes." Both my UserID
which has Administrator privileges AND the Administrator are getting the
message. I have ran McAfee against my system and all is OK.
Is there a parameter in the Registry to change for this or what are my
options?
TIA,
[PS: The System Configuration utility comes up every time I reboot (cold
or
warm). When I do request that a Startup program not be launch (unchecking
the box) I get the above message but the changes do seem to take on the
couple I've done. Hence, I get the message of NOT being able to make the
change but there's a strong case that the changes DO take affect.

 

[R. McCarty]

Maybe, Use SysInternals AutoRuns to more exactly check what is
starting at boot time.
http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx
Use it instead of MSConfig to control your Startups & Watchdogs.

Yes, MSConfig. I have briefly checked the System Event Logs and I don't
find
any Errors that apply. Other ideas?

When you say System Configuration Utility do you mean MSConfig ?

To resolve this you really need to determine what Service Start mode
is being modified. I would review the System Event Log and check
the details box for each Error ( Red Icon ).
Click Start, Run ( type ) EventVwr.Msc [Enter]

Not that it relates to your issue but McAfee isn't the best choice for
security software and it may be blocking the attempt to change the
Service start mode.

WinXP Pro SP2 all MS updates
I have recently been receiving the message "An Access Denied error was
returned while attempting to change a service. You may need to log on
using
an Administrator account to make the specified changes." Both my
UserID
which has Administrator privileges AND the Administrator are getting
the
message. I have ran McAfee against my system and all is OK.
Is there a parameter in the Registry to change for this or what are my
options?
TIA,
[PS: The System Configuration utility comes up every time I reboot
(cold
or
warm). When I do request that a Startup program not be launch
(unchecking
the box) I get the above message but the changes do seem to take on the
couple I've done. Hence, I get the message of NOT being able to make
the
change but there's a strong case that the changes DO take affect.

 

[Tom]

So, if I understand you correctly, making this change will set the
Administrator AND all users with Adminstrator rights, such as my UserID -
whether or not my UserID is related to a domain, which it is?
I just did what you suggested and I'm going to reboot.
TIA

Does this happen with all services or only a select few services?

Permissions may have been revoked on the
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\<ServiceName>
key(s). You can use Regedit to verify the permissions on the service
key(s) in question and grant yourself necessary permissions on the
ServiceName key.

You can usually easily fix this permission problem by propagating the
permissions from the HKLM\SYSTEM\CurrentControlSet\Services key on down
to all its child objects. To do so, using Regedit, right click on the
HKLM\SYSTEM\CurrentControlSet\Services key and select Permissions...
Click on the Advanced button and at the bottom of the Permissions tab
make sure that there is a check mark is in the:

"Inherit from parent the permission entries that apply to child objects..."

Then put a check mark on:

"Replace permission entries on all child objects with entries shown here
that apply to child objects."

Click on apply and accept to propagate inheritable permissions to child
objects, click OK when done and exit Regedit and try modify the service
again. Keep in mind that some Anti-Virus applications or other security
suites monitor changes to certain registry keys and that they may change
the permissions again, this would be done for example to prevent malware
from disabling the AV application or the firewall.

John

Yes, MSConfig. I have briefly checked the System Event Logs and I don't find
any Errors that apply. Other ideas?

:

When you say System Configuration Utility do you mean MSConfig ?

To resolve this you really need to determine what Service Start mode
is being modified. I would review the System Event Log and check
the details box for each Error ( Red Icon ).
Click Start, Run ( type ) EventVwr.Msc [Enter]

Not that it relates to your issue but McAfee isn't the best choice for
security software and it may be blocking the attempt to change the
Service start mode.


WinXP Pro SP2 all MS updates
I have recently been receiving the message "An Access Denied error was
returned while attempting to change a service. You may need to log on
using
an Administrator account to make the specified changes." Both my UserID
which has Administrator privileges AND the Administrator are getting the
message. I have ran McAfee against my system and all is OK.
Is there a parameter in the Registry to change for this or what are my
options?
TIA,
[PS: The System Configuration utility comes up every time I reboot (cold
or
warm). When I do request that a Startup program not be launch (unchecking
the box) I get the above message but the changes do seem to take on the
couple I've done. Hence, I get the message of NOT being able to make the
change but there's a strong case that the changes DO take affect.

 

[Tom]

I just rebooted (Restart) and I still get the message when I attempt to make
the changes. As stated before, the changes (checkboxes) get changed but I
still get the message. So, it seems like things are functioning properly
with the exception of this message.
I'll be offline for about 6+hours - chores....
TIA!!

Does this happen with all services or only a select few services?

Permissions may have been revoked on the
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\<ServiceName>
key(s). You can use Regedit to verify the permissions on the service
key(s) in question and grant yourself necessary permissions on the
ServiceName key.

You can usually easily fix this permission problem by propagating the
permissions from the HKLM\SYSTEM\CurrentControlSet\Services key on down
to all its child objects. To do so, using Regedit, right click on the
HKLM\SYSTEM\CurrentControlSet\Services key and select Permissions...
Click on the Advanced button and at the bottom of the Permissions tab
make sure that there is a check mark is in the:

"Inherit from parent the permission entries that apply to child objects..."

Then put a check mark on:

"Replace permission entries on all child objects with entries shown here
that apply to child objects."

Click on apply and accept to propagate inheritable permissions to child
objects, click OK when done and exit Regedit and try modify the service
again. Keep in mind that some Anti-Virus applications or other security
suites monitor changes to certain registry keys and that they may change
the permissions again, this would be done for example to prevent malware
from disabling the AV application or the firewall.

John

Yes, MSConfig. I have briefly checked the System Event Logs and I don't find
any Errors that apply. Other ideas?

:

When you say System Configuration Utility do you mean MSConfig ?

To resolve this you really need to determine what Service Start mode
is being modified. I would review the System Event Log and check
the details box for each Error ( Red Icon ).
Click Start, Run ( type ) EventVwr.Msc [Enter]

Not that it relates to your issue but McAfee isn't the best choice for
security software and it may be blocking the attempt to change the
Service start mode.


WinXP Pro SP2 all MS updates
I have recently been receiving the message "An Access Denied error was
returned while attempting to change a service. You may need to log on
using
an Administrator account to make the specified changes." Both my UserID
which has Administrator privileges AND the Administrator are getting the
message. I have ran McAfee against my system and all is OK.
Is there a parameter in the Registry to change for this or what are my
options?
TIA,
[PS: The System Configuration utility comes up every time I reboot (cold
or
warm). When I do request that a Startup program not be launch (unchecking
the box) I get the above message but the changes do seem to take on the
couple I've done. Hence, I get the message of NOT being able to make the
change but there's a strong case that the changes DO take affect.

 

[John John (MVP)]

It will reset the permissions on the child objects to whatever
permissions you have on the parent, or in this case the
HKLM\SYSTEM\CurrentControlSet\Services key. As with all things in life,
you can't inherit from your parents what they don't have!

If the HKLM\SYSTEM\CurrentControlSet\Services key has insufficient
permissions then you may want to look at this:

Solving setup errors by using the SubInACL tool to repair file and
registry permissions
http://blogs.msdn.com/astebner/archive/2006/09/04/739820.aspx

If you are logged on to the domain keep in mind that domain policies
override local user rights or local polices and that you may need to
logon to the local administrator account to make certain changes, you
may have to take this up with the domain administrator.

John

So, if I understand you correctly, making this change will set the
Administrator AND all users with Adminstrator rights, such as my UserID -
whether or not my UserID is related to a domain, which it is?
I just did what you suggested and I'm going to reboot.
TIA

:

Does this happen with all services or only a select few services?

Permissions may have been revoked on the
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\<ServiceName>
key(s). You can use Regedit to verify the permissions on the service
key(s) in question and grant yourself necessary permissions on the
ServiceName key.

You can usually easily fix this permission problem by propagating the
permissions from the HKLM\SYSTEM\CurrentControlSet\Services key on down
to all its child objects. To do so, using Regedit, right click on the
HKLM\SYSTEM\CurrentControlSet\Services key and select Permissions...
Click on the Advanced button and at the bottom of the Permissions tab
make sure that there is a check mark is in the:

"Inherit from parent the permission entries that apply to child objects..."

Then put a check mark on:

"Replace permission entries on all child objects with entries shown here
that apply to child objects."

Click on apply and accept to propagate inheritable permissions to child
objects, click OK when done and exit Regedit and try modify the service
again. Keep in mind that some Anti-Virus applications or other security
suites monitor changes to certain registry keys and that they may change
the permissions again, this would be done for example to prevent malware
from disabling the AV application or the firewall.

John

Tom wrote:

Yes, MSConfig. I have briefly checked the System Event Logs and I don't find
any Errors that apply. Other ideas?

:



When you say System Configuration Utility do you mean MSConfig ?

To resolve this you really need to determine what Service Start mode
is being modified. I would review the System Event Log and check
the details box for each Error ( Red Icon ).
Click Start, Run ( type ) EventVwr.Msc [Enter]

Not that it relates to your issue but McAfee isn't the best choice for
security software and it may be blocking the attempt to change the
Service start mode.



WinXP Pro SP2 all MS updates
I have recently been receiving the message "An Access Denied error was
returned while attempting to change a service. You may need to log on
using
an Administrator account to make the specified changes." Both my UserID
which has Administrator privileges AND the Administrator are getting the
message. I have ran McAfee against my system and all is OK.
Is there a parameter in the Registry to change for this or what are my
options?
TIA,
[PS: The System Configuration utility comes up every time I reboot (cold
or
warm). When I do request that a Startup program not be launch (unchecking
the box) I get the above message but the changes do seem to take on the
couple I've done. Hence, I get the message of NOT being able to make the
change but there's a strong case that the changes DO take affect.

 

[Nightowl]

I have recently been receiving the message "An Access Denied error was
returned while attempting to change a service. You may need to log on using
an Administrator account to make the specified changes." Both my UserID
which has Administrator privileges AND the Administrator are getting the
message. I have ran McAfee against my system and all is OK.
Is there a parameter in the Registry to change for this or what are my
options?
TIA,
[PS: The System Configuration utility comes up every time I reboot (cold or
warm). When I do request that a Startup program not be launch (unchecking
the box) I get the above message but the changes do seem to take on the
couple I've done. Hence, I get the message of NOT being able to make the
change but there's a strong case that the changes DO take affect.

McAfee is very likely the culprit here. It is one of several programs
that behave this way. See this thread:
http://forums.mcafeehelp.com/showthread.php?p=514762

and particularly this response from "Brookz, McAfee T3 Technical
Support":

"This is happening by design. It is a protection feature to stop viruses
from changing settings in msconfig areas.

"As long as you are logged in as a user with Administrator rights, the
changes WILL take effect, even though you will see that warning popup."

Hope this helps.

 

[Kelly]

Harmless, the changes are being made.

--

All the Best,
Kelly (MS-MVP/DTS&XP)

Taskbar Repair Tool Plus!
http://www.kellys-korner-xp.com/taskbarplus!.htm

SupportSpace
www.supportspace.com/pages?aiu=kellyskorner

 

[Tom]

THanks, Nightow!, great info. I never thought of this as a security type
issue even though it IS. Hmmm.
Glad to know that it's normal (?!).
Thanks to all the others, too!

I have recently been receiving the message "An Access Denied error was
returned while attempting to change a service. You may need to log on using
an Administrator account to make the specified changes." Both my UserID
which has Administrator privileges AND the Administrator are getting the
message. I have ran McAfee against my system and all is OK.
Is there a parameter in the Registry to change for this or what are my
options?
TIA,
[PS: The System Configuration utility comes up every time I reboot (cold or
warm). When I do request that a Startup program not be launch (unchecking
the box) I get the above message but the changes do seem to take on the
couple I've done. Hence, I get the message of NOT being able to make the
change but there's a strong case that the changes DO take affect.

McAfee is very likely the culprit here. It is one of several programs
that behave this way. See this thread:
http://forums.mcafeehelp.com/showthread.php?p=514762

and particularly this response from "Brookz, McAfee T3 Technical
Support":

"This is happening by design. It is a protection feature to stop viruses
from changing settings in msconfig areas.

"As long as you are logged in as a user with Administrator rights, the
changes WILL take effect, even though you will see that warning popup."

Hope this helps.