• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 395
  • Last Modified:

Net Start returns Access Denied

I have a system driver that's registered in the Registry under "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MyService.  I normaly set the start mode to 3 and manually start the service after the system boots up with "net start MyService. "  This works fine as long as I log in as Administrator, but if I log in as a user, I get an Access Denied error from net start.  Why is this?  I don't see anything in the net start documentation that says you have to be administrator to use it, and all of the directories in the path to my .sys file and the .sys file itself allow reading and execution by users. The .sys, by the way, is in C:\WINDOWS\System32\drivers.

Thanks for any help.
Steve
0
steva
Asked:
steva
  • 3
  • 2
1 Solution
 
RevelationCSCommented:
does the user have access under the GPO to start/stop services? From the sounds of it, this is where the issue is coming in at...
0
 
stevaAuthor Commented:
The GPO access rights don't seem to be the problem.  The machine is not in a domain. Looking at the local group policies in C:\Windows\System32\Group Policies there's nothing under Users except a scripts folder, of which both the log on and log off sub folders are empty.

Next I looked at Local Security Settings with secpol.msc but I didn't see anything there about permission to start services.  I did see an item "load and unlod device drivers" which wasn't being allowed for users and which could be a problem because starting my service will load a .sys file. But even after allowing this, I get the same "System 5 error: Access Denied" when I try net start MyService.

0
 
RevelationCSCommented:
0
 
RevelationCSCommented:
0
 
stevaAuthor Commented:
Yes, I think that's where the problem is.  Unfortunately, I don't have the option of changing the group policies on the machine I'm installing on.  My intention was to install my product and then have it automatically start up no matter who logged on to the machine, but that's beginning to look unrealistic.  I know there are ways to run scripts when machines come up but these too seem to be tied back into group policy as well.

Oh well.  Thanks for the help.  I released the points to you.

Steve
0

Featured Post

Automating Your MSP Business

The road to profitability.
Delivering superior services is key to ensuring customer satisfaction and the consequent long-term relationships that enable MSPs to lock in predictable, recurring revenue. What's the best way to deliver superior service? One word: automation.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now