Access Denied error w/ User=Administrator on msconfig

[Guest Tom]

WinXP Pro SP2 all MS updates

I have recently been receiving the message "An Access Denied error was

returned while attempting to change a service. You may need to log on using

an Administrator account to make the specified changes." Both my UserID

which has Administrator privileges AND the Administrator are getting the

message. I have ran McAfee against my system and all is OK.

Is there a parameter in the Registry to change for this or what are my

options?

TIA,

[PS: The System Configuration utility comes up every time I reboot (cold or

warm). When I do request that a Startup program not be launch (unchecking

the box) I get the above message but the changes do seem to take on the

couple I've done. Hence, I get the message of NOT being able to make the

change but there's a strong case that the changes DO take affect.

[Guest R. McCarty]

Re: Access Denied error w/ User=Administrator on msconfig

 

When you say System Configuration Utility do you mean MSConfig ?

 

To resolve this you really need to determine what Service Start mode

is being modified. I would review the System Event Log and check

the details box for each Error ( Red Icon ).

Click Start, Run ( type ) EventVwr.Msc [Enter]

 

Not that it relates to your issue but McAfee isn't the best choice for

security software and it may be blocking the attempt to change the

Service start mode.

 

"Tom" <Tom@discussions.microsoft.com> wrote in message

news:EDB7ABDC-D401-4705-9ABB-4FD9D75B8EF9@microsoft.com...

> WinXP Pro SP2 all MS updates

> I have recently been receiving the message "An Access Denied error was

> returned while attempting to change a service. You may need to log on

> using

> an Administrator account to make the specified changes." Both my UserID

> which has Administrator privileges AND the Administrator are getting the

> message. I have ran McAfee against my system and all is OK.

> Is there a parameter in the Registry to change for this or what are my

> options?

> TIA,

> [PS: The System Configuration utility comes up every time I reboot (cold

> or

> warm). When I do request that a Startup program not be launch (unchecking

> the box) I get the above message but the changes do seem to take on the

> couple I've done. Hence, I get the message of NOT being able to make the

> change but there's a strong case that the changes DO take affect.

[Guest Tom]

Re: Access Denied error w/ User=Administrator on msconfig

 

Yes, MSConfig. I have briefly checked the System Event Logs and I don't find

any Errors that apply. Other ideas?

 

"R. McCarty" wrote:

> When you say System Configuration Utility do you mean MSConfig ?

>

> To resolve this you really need to determine what Service Start mode

> is being modified. I would review the System Event Log and check

> the details box for each Error ( Red Icon ).

> Click Start, Run ( type ) EventVwr.Msc [Enter]

>

> Not that it relates to your issue but McAfee isn't the best choice for

> security software and it may be blocking the attempt to change the

> Service start mode.

>

> "Tom" <Tom@discussions.microsoft.com> wrote in message

> news:EDB7ABDC-D401-4705-9ABB-4FD9D75B8EF9@microsoft.com...

> > WinXP Pro SP2 all MS updates

> > I have recently been receiving the message "An Access Denied error was

> > returned while attempting to change a service. You may need to log on

> > using

> > an Administrator account to make the specified changes." Both my UserID

> > which has Administrator privileges AND the Administrator are getting the

> > message. I have ran McAfee against my system and all is OK.

> > Is there a parameter in the Registry to change for this or what are my

> > options?

> > TIA,

> > [PS: The System Configuration utility comes up every time I reboot (cold

> > or

> > warm). When I do request that a Startup program not be launch (unchecking

> > the box) I get the above message but the changes do seem to take on the

> > couple I've done. Hence, I get the message of NOT being able to make the

> > change but there's a strong case that the changes DO take affect.

>

>

>

[Guest John John (MVP)]

Re: Access Denied error w/ User=Administrator on msconfig

 

Does this happen with all services or only a select few services?

 

Permissions may have been revoked on the

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\<ServiceName>

key(s). You can use Regedit to verify the permissions on the service

key(s) in question and grant yourself necessary permissions on the

ServiceName key.

 

You can usually easily fix this permission problem by propagating the

permissions from the HKLM\SYSTEM\CurrentControlSet\Services key on down

to all its child objects. To do so, using Regedit, right click on the

HKLM\SYSTEM\CurrentControlSet\Services key and select Permissions...

Click on the Advanced button and at the bottom of the Permissions tab

make sure that there is a check mark is in the:

 

"Inherit from parent the permission entries that apply to child objects..."

 

Then put a check mark on:

 

"Replace permission entries on all child objects with entries shown here

that apply to child objects."

 

Click on apply and accept to propagate inheritable permissions to child

objects, click OK when done and exit Regedit and try modify the service

again. Keep in mind that some Anti-Virus applications or other security

suites monitor changes to certain registry keys and that they may change

the permissions again, this would be done for example to prevent malware

from disabling the AV application or the firewall.

 

John

 

Tom wrote:

> Yes, MSConfig. I have briefly checked the System Event Logs and I don't find

> any Errors that apply. Other ideas?

>

> "R. McCarty" wrote:

>

>

>>When you say System Configuration Utility do you mean MSConfig ?

>>

>>To resolve this you really need to determine what Service Start mode

>>is being modified. I would review the System Event Log and check

>>the details box for each Error ( Red Icon ).

>>Click Start, Run ( type ) EventVwr.Msc [Enter]

>>

>>Not that it relates to your issue but McAfee isn't the best choice for

>>security software and it may be blocking the attempt to change the

>>Service start mode.

>>

>>"Tom" <Tom@discussions.microsoft.com> wrote in message

>>news:EDB7ABDC-D401-4705-9ABB-4FD9D75B8EF9@microsoft.com...

>>

>>>WinXP Pro SP2 all MS updates

>>>I have recently been receiving the message "An Access Denied error was

>>>returned while attempting to change a service. You may need to log on

>>>using

>>>an Administrator account to make the specified changes." Both my UserID

>>>which has Administrator privileges AND the Administrator are getting the

>>>message. I have ran McAfee against my system and all is OK.

>>>Is there a parameter in the Registry to change for this or what are my

>>>options?

>>>TIA,

>>>[PS: The System Configuration utility comes up every time I reboot (cold

>>>or

>>>warm). When I do request that a Startup program not be launch (unchecking

>>>the box) I get the above message but the changes do seem to take on the

>>>couple I've done. Hence, I get the message of NOT being able to make the

>>>change but there's a strong case that the changes DO take affect.

>>

>>

>>

[Guest R. McCarty]

Re: Access Denied error w/ User=Administrator on msconfig

 

Maybe, Use SysInternals AutoRuns to more exactly check what is

starting at boot time.

http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

Use it instead of MSConfig to control your Startups & Watchdogs.

 

"Tom" <Tom@discussions.microsoft.com> wrote in message

news:780B1088-746C-4C85-B63C-5FF7C4B08028@microsoft.com...

> Yes, MSConfig. I have briefly checked the System Event Logs and I don't

> find

> any Errors that apply. Other ideas?

>

> "R. McCarty" wrote:

>

>> When you say System Configuration Utility do you mean MSConfig ?

>>

>> To resolve this you really need to determine what Service Start mode

>> is being modified. I would review the System Event Log and check

>> the details box for each Error ( Red Icon ).

>> Click Start, Run ( type ) EventVwr.Msc [Enter]

>>

>> Not that it relates to your issue but McAfee isn't the best choice for

>> security software and it may be blocking the attempt to change the

>> Service start mode.

>>

>> "Tom" <Tom@discussions.microsoft.com> wrote in message

>> news:EDB7ABDC-D401-4705-9ABB-4FD9D75B8EF9@microsoft.com...

>> > WinXP Pro SP2 all MS updates

>> > I have recently been receiving the message "An Access Denied error was

>> > returned while attempting to change a service. You may need to log on

>> > using

>> > an Administrator account to make the specified changes." Both my

>> > UserID

>> > which has Administrator privileges AND the Administrator are getting

>> > the

>> > message. I have ran McAfee against my system and all is OK.

>> > Is there a parameter in the Registry to change for this or what are my

>> > options?

>> > TIA,

>> > [PS: The System Configuration utility comes up every time I reboot

>> > (cold

>> > or

>> > warm). When I do request that a Startup program not be launch

>> > (unchecking

>> > the box) I get the above message but the changes do seem to take on the

>> > couple I've done. Hence, I get the message of NOT being able to make

>> > the

>> > change but there's a strong case that the changes DO take affect.

>>

>>

>>

[Guest Tom]

Re: Access Denied error w/ User=Administrator on msconfig

 

So, if I understand you correctly, making this change will set the

Administrator AND all users with Adminstrator rights, such as my UserID -

whether or not my UserID is related to a domain, which it is?

I just did what you suggested and I'm going to reboot.

TIA

 

"John John (MVP)" wrote:

> Does this happen with all services or only a select few services?

>

> Permissions may have been revoked on the

> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\<ServiceName>

> key(s). You can use Regedit to verify the permissions on the service

> key(s) in question and grant yourself necessary permissions on the

> ServiceName key.

>

> You can usually easily fix this permission problem by propagating the

> permissions from the HKLM\SYSTEM\CurrentControlSet\Services key on down

> to all its child objects. To do so, using Regedit, right click on the

> HKLM\SYSTEM\CurrentControlSet\Services key and select Permissions...

> Click on the Advanced button and at the bottom of the Permissions tab

> make sure that there is a check mark is in the:

>

> "Inherit from parent the permission entries that apply to child objects..."

>

> Then put a check mark on:

>

> "Replace permission entries on all child objects with entries shown here

> that apply to child objects."

>

> Click on apply and accept to propagate inheritable permissions to child

> objects, click OK when done and exit Regedit and try modify the service

> again. Keep in mind that some Anti-Virus applications or other security

> suites monitor changes to certain registry keys and that they may change

> the permissions again, this would be done for example to prevent malware

> from disabling the AV application or the firewall.

>

> John

>

> Tom wrote:

>

> > Yes, MSConfig. I have briefly checked the System Event Logs and I don't find

> > any Errors that apply. Other ideas?

> >

> > "R. McCarty" wrote:

> >

> >

> >>When you say System Configuration Utility do you mean MSConfig ?

> >>

> >>To resolve this you really need to determine what Service Start mode

> >>is being modified. I would review the System Event Log and check

> >>the details box for each Error ( Red Icon ).

> >>Click Start, Run ( type ) EventVwr.Msc [Enter]

> >>

> >>Not that it relates to your issue but McAfee isn't the best choice for

> >>security software and it may be blocking the attempt to change the

> >>Service start mode.

> >>

> >>"Tom" <Tom@discussions.microsoft.com> wrote in message

> >>news:EDB7ABDC-D401-4705-9ABB-4FD9D75B8EF9@microsoft.com...

> >>

> >>>WinXP Pro SP2 all MS updates

> >>>I have recently been receiving the message "An Access Denied error was

> >>>returned while attempting to change a service. You may need to log on

> >>>using

> >>>an Administrator account to make the specified changes." Both my UserID

> >>>which has Administrator privileges AND the Administrator are getting the

> >>>message. I have ran McAfee against my system and all is OK.

> >>>Is there a parameter in the Registry to change for this or what are my

> >>>options?

> >>>TIA,

> >>>[PS: The System Configuration utility comes up every time I reboot (cold

> >>>or

> >>>warm). When I do request that a Startup program not be launch (unchecking

> >>>the box) I get the above message but the changes do seem to take on the

> >>>couple I've done. Hence, I get the message of NOT being able to make the

> >>>change but there's a strong case that the changes DO take affect.

> >>

> >>

> >>

>

[Guest Tom]

Re: Access Denied error w/ User=Administrator on msconfig

 

I just rebooted (Restart) and I still get the message when I attempt to make

the changes. As stated before, the changes (checkboxes) get changed but I

still get the message. So, it seems like things are functioning properly

with the exception of this message.

I'll be offline for about 6+hours - chores....

TIA!!

 

"John John (MVP)" wrote:

> Does this happen with all services or only a select few services?

>

> Permissions may have been revoked on the

> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\<ServiceName>

> key(s). You can use Regedit to verify the permissions on the service

> key(s) in question and grant yourself necessary permissions on the

> ServiceName key.

>

> You can usually easily fix this permission problem by propagating the

> permissions from the HKLM\SYSTEM\CurrentControlSet\Services key on down

> to all its child objects. To do so, using Regedit, right click on the

> HKLM\SYSTEM\CurrentControlSet\Services key and select Permissions...

> Click on the Advanced button and at the bottom of the Permissions tab

> make sure that there is a check mark is in the:

>

> "Inherit from parent the permission entries that apply to child objects..."

>

> Then put a check mark on:

>

> "Replace permission entries on all child objects with entries shown here

> that apply to child objects."

>

> Click on apply and accept to propagate inheritable permissions to child

> objects, click OK when done and exit Regedit and try modify the service

> again. Keep in mind that some Anti-Virus applications or other security

> suites monitor changes to certain registry keys and that they may change

> the permissions again, this would be done for example to prevent malware

> from disabling the AV application or the firewall.

>

> John

>

> Tom wrote:

>

> > Yes, MSConfig. I have briefly checked the System Event Logs and I don't find

> > any Errors that apply. Other ideas?

> >

> > "R. McCarty" wrote:

> >

> >

> >>When you say System Configuration Utility do you mean MSConfig ?

> >>

> >>To resolve this you really need to determine what Service Start mode

> >>is being modified. I would review the System Event Log and check

> >>the details box for each Error ( Red Icon ).

> >>Click Start, Run ( type ) EventVwr.Msc [Enter]

> >>

> >>Not that it relates to your issue but McAfee isn't the best choice for

> >>security software and it may be blocking the attempt to change the

> >>Service start mode.

> >>

> >>"Tom" <Tom@discussions.microsoft.com> wrote in message

> >>news:EDB7ABDC-D401-4705-9ABB-4FD9D75B8EF9@microsoft.com...

> >>

> >>>WinXP Pro SP2 all MS updates

> >>>I have recently been receiving the message "An Access Denied error was

> >>>returned while attempting to change a service. You may need to log on

> >>>using

> >>>an Administrator account to make the specified changes." Both my UserID

> >>>which has Administrator privileges AND the Administrator are getting the

> >>>message. I have ran McAfee against my system and all is OK.

> >>>Is there a parameter in the Registry to change for this or what are my

> >>>options?

> >>>TIA,

> >>>[PS: The System Configuration utility comes up every time I reboot (cold

> >>>or

> >>>warm). When I do request that a Startup program not be launch (unchecking

> >>>the box) I get the above message but the changes do seem to take on the

> >>>couple I've done. Hence, I get the message of NOT being able to make the

> >>>change but there's a strong case that the changes DO take affect.

> >>

> >>

> >>

>

[Guest John John (MVP)]

Re: Access Denied error w/ User=Administrator on msconfig

 

It will reset the permissions on the child objects to whatever

permissions you have on the parent, or in this case the

HKLM\SYSTEM\CurrentControlSet\Services key. As with all things in life,

you can't inherit from your parents what they don't have!

 

If the HKLM\SYSTEM\CurrentControlSet\Services key has insufficient

permissions then you may want to look at this:

 

Solving setup errors by using the SubInACL tool to repair file and

registry permissions

http://blogs.msdn.com/astebner/archive/2006/09/04/739820.aspx

 

If you are logged on to the domain keep in mind that domain policies

override local user rights or local polices and that you may need to

logon to the local administrator account to make certain changes, you

may have to take this up with the domain administrator.

 

John

 

Tom wrote:

> So, if I understand you correctly, making this change will set the

> Administrator AND all users with Adminstrator rights, such as my UserID -

> whether or not my UserID is related to a domain, which it is?

> I just did what you suggested and I'm going to reboot.

> TIA

>

> "John John (MVP)" wrote:

>

>

>>Does this happen with all services or only a select few services?

>>

>>Permissions may have been revoked on the

>>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\<ServiceName>

>>key(s). You can use Regedit to verify the permissions on the service

>>key(s) in question and grant yourself necessary permissions on the

>>ServiceName key.

>>

>>You can usually easily fix this permission problem by propagating the

>>permissions from the HKLM\SYSTEM\CurrentControlSet\Services key on down

>>to all its child objects. To do so, using Regedit, right click on the

>>HKLM\SYSTEM\CurrentControlSet\Services key and select Permissions...

>>Click on the Advanced button and at the bottom of the Permissions tab

>>make sure that there is a check mark is in the:

>>

>>"Inherit from parent the permission entries that apply to child objects..."

>>

>>Then put a check mark on:

>>

>>"Replace permission entries on all child objects with entries shown here

>>that apply to child objects."

>>

>>Click on apply and accept to propagate inheritable permissions to child

>>objects, click OK when done and exit Regedit and try modify the service

>>again. Keep in mind that some Anti-Virus applications or other security

>>suites monitor changes to certain registry keys and that they may change

>>the permissions again, this would be done for example to prevent malware

>>from disabling the AV application or the firewall.

>>

>>John

>>

>>Tom wrote:

>>

>>

>>>Yes, MSConfig. I have briefly checked the System Event Logs and I don't find

>>>any Errors that apply. Other ideas?

>>>

>>>"R. McCarty" wrote:

>>>

>>>

>>>

>>>>When you say System Configuration Utility do you mean MSConfig ?

>>>>

>>>>To resolve this you really need to determine what Service Start mode

>>>>is being modified. I would review the System Event Log and check

>>>>the details box for each Error ( Red Icon ).

>>>>Click Start, Run ( type ) EventVwr.Msc [Enter]

>>>>

>>>>Not that it relates to your issue but McAfee isn't the best choice for

>>>>security software and it may be blocking the attempt to change the

>>>>Service start mode.

>>>>

>>>>"Tom" <Tom@discussions.microsoft.com> wrote in message

>>>>news:EDB7ABDC-D401-4705-9ABB-4FD9D75B8EF9@microsoft.com...

>>>>

>>>>

>>>>>WinXP Pro SP2 all MS updates

>>>>>I have recently been receiving the message "An Access Denied error was

>>>>>returned while attempting to change a service. You may need to log on

>>>>>using

>>>>>an Administrator account to make the specified changes." Both my UserID

>>>>>which has Administrator privileges AND the Administrator are getting the

>>>>>message. I have ran McAfee against my system and all is OK.

>>>>>Is there a parameter in the Registry to change for this or what are my

>>>>>options?

>>>>>TIA,

>>>>>[PS: The System Configuration utility comes up every time I reboot (cold

>>>>>or

>>>>>warm). When I do request that a Startup program not be launch (unchecking

>>>>>the box) I get the above message but the changes do seem to take on the

>>>>>couple I've done. Hence, I get the message of NOT being able to make the

>>>>>change but there's a strong case that the changes DO take affect.

>>>>

>>>>

>>>>

[Guest Nightowl]

Re: Access Denied error w/ User=Administrator on msconfig

 

Tom <Tom@discussions.microsoft.com> wrote on Sat, 21 Jun 2008:

>I have recently been receiving the message "An Access Denied error was

>returned while attempting to change a service. You may need to log on using

>an Administrator account to make the specified changes." Both my UserID

>which has Administrator privileges AND the Administrator are getting the

>message. I have ran McAfee against my system and all is OK.

>Is there a parameter in the Registry to change for this or what are my

>options?

>TIA,

>[PS: The System Configuration utility comes up every time I reboot (cold or

>warm). When I do request that a Startup program not be launch (unchecking

>the box) I get the above message but the changes do seem to take on the

>couple I've done. Hence, I get the message of NOT being able to make the

>change but there's a strong case that the changes DO take affect.

 

McAfee is very likely the culprit here. It is one of several programs

that behave this way. See this thread:

http://forums.mcafeehelp.com/showthread.php?p=514762

 

and particularly this response from "Brookz, McAfee T3 Technical

Support":

 

"This is happening by design. It is a protection feature to stop viruses

from changing settings in msconfig areas.

 

"As long as you are logged in as a user with Administrator rights, the

changes WILL take effect, even though you will see that warning popup."

 

Hope this helps.

--

Nightowl

[Guest Kelly]

Re: Access Denied error w/ User=Administrator on msconfig

 

Harmless, the changes are being made.

 

--

 

All the Best,

Kelly (MS-MVP/DTS&XP)

 

Taskbar Repair Tool Plus!

http://www.kellys-korner-xp.com/taskbarplus!.htm

 

SupportSpace

http://www.supportspace.com/pages?aiu=kellyskorner

 

"Tom" <Tom@discussions.microsoft.com> wrote in message

news:EDB7ABDC-D401-4705-9ABB-4FD9D75B8EF9@microsoft.com...

> WinXP Pro SP2 all MS updates

> I have recently been receiving the message "An Access Denied error was

> returned while attempting to change a service. You may need to log on

> using

> an Administrator account to make the specified changes." Both my UserID

> which has Administrator privileges AND the Administrator are getting the

> message. I have ran McAfee against my system and all is OK.

> Is there a parameter in the Registry to change for this or what are my

> options?

> TIA,

> [PS: The System Configuration utility comes up every time I reboot (cold

> or

> warm). When I do request that a Startup program not be launch (unchecking

> the box) I get the above message but the changes do seem to take on the

> couple I've done. Hence, I get the message of NOT being able to make the

> change but there's a strong case that the changes DO take affect.

[Guest Tom]

Re: Access Denied error w/ User=Administrator on msconfig

 

THanks, Nightow!, great info. I never thought of this as a security type

issue even though it IS. Hmmm.

Glad to know that it's normal (?!).

Thanks to all the others, too!

 

 

"Nightowl" wrote:

> Tom <Tom@discussions.microsoft.com> wrote on Sat, 21 Jun 2008:

>

> >I have recently been receiving the message "An Access Denied error was

> >returned while attempting to change a service. You may need to log on using

> >an Administrator account to make the specified changes." Both my UserID

> >which has Administrator privileges AND the Administrator are getting the

> >message. I have ran McAfee against my system and all is OK.

> >Is there a parameter in the Registry to change for this or what are my

> >options?

> >TIA,

> >[PS: The System Configuration utility comes up every time I reboot (cold or

> >warm). When I do request that a Startup program not be launch (unchecking

> >the box) I get the above message but the changes do seem to take on the

> >couple I've done. Hence, I get the message of NOT being able to make the

> >change but there's a strong case that the changes DO take affect.

>

> McAfee is very likely the culprit here. It is one of several programs

> that behave this way. See this thread:

> http://forums.mcafeehelp.com/showthread.php?p=514762

>

> and particularly this response from "Brookz, McAfee T3 Technical

> Support":

>

> "This is happening by design. It is a protection feature to stop viruses

> from changing settings in msconfig areas.

>

> "As long as you are logged in as a user with Administrator rights, the

> changes WILL take effect, even though you will see that warning popup."

>

> Hope this helps.

> --

> Nightowl

>