Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1755
  • Last Modified:

Windows XP Service permissions

Hello everybody,

Please consider the following scenario:

Got Process Explorer from http://www.sysinternals.com/Utilities/ProcessExplorer.html and with its "help" I managed to change the permissions for a service, like this:

Locate the process (avguard.exe in my case) as a child of services.exe, right click it, properties, services tab, permissions. On the permission window it popped up, i've removed all permissions for the Administrators group by checking all Deny boxes and as a consequence, the permissions button under the services tab has been disabled and i'm unable to reset the permissions. Re-installing the product yields messages like "cannot install service", even if everything has been previously removed.

The questions are:
- Is there another way of getting to that dialog where you can set permissions for a service, besides using process explorer?
- How can I reset the permissions, considering that the problem persist even after reinstalling the product?

Thanks in advance

PS: I've used Winspector to enable the Permissions button and the error message is "Cannot open service"

PPS: Please, no guessing. I don't have the time to "try rebooting, try reinstalling". Thanks.
0
Dragon_Krome
Asked:
Dragon_Krome
  • 3
1 Solution
 
Michael PfisterCommented:
1) Uninstall AVGuard
2) start regedit and navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\avguard (key name is guessed, don't have this software).
3) delete the entire key and all its subkeys
4) re-install AVGuard
0
 
Michael PfisterCommented:
Maybe the sc command can overwrite the perms: http://support.microsoft.com/kb/914392/en-us
0
 
Dragon_KromeAuthor Commented:
Well, I've done what you said and it seems the issue was solved, but the first time after the deletion of the key the service didn't install itself anymore. As a matter of fact, i checked the permissions on that key with regedit and everything seemed to be ok. weird stuff..

by the way, the sc command didn't work, failed with access denied.
0
 
Michael PfisterCommented:
I've looked at the permissions to the key as well and the permissions to the servcie have nothing to do with the permissions to the registry key.
The permissions are coded under ..\Services\servicename\Security\Security, but I was unable to change the settings by just exporting and importing this key.
Anyway, glad it helped.

0

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now