“Access Denied” Error Message When Trying to Start a Service in Windows 2000


Symptoms – After you configure a group policy to set permissions on a service, the service in Control Panel may not function properly. If you try to open the service properties, you may receive the following error message:

Unable to open service DNS Server for reading on Local Computer.
Error 5: Access is Denied.

In addition, if you type net start “service” at the command line, you may receive the following error message:

System Error 5 has occurred

Access is Denied

Cause– This behavior occurs because you need the following permissions to open the properties of a service, and to stop, start, or pause a service:

  • Read
  • Stop, Start, and Pause

NOTE: This is also true when using net commands at the command line.

Resolution – To resolve this issue, reapply the policy and give the user the correct permissions.

For additional information about how to apply a system service security policy correctly, click the article number below to view the article in the Microsoft Knowledge Base:

256345  Configuring Group Policies to Set Security for System Services
Status – Microsoft has confirmed this to be a problem in Microsoft Windows 2000.
More Info – When you add a user through Group Policy Editor in the System Service Security Policy, the default permissions are start, stop, and pause.

If you are unable to change permissions through a policy because the policy is not applied, see the following Microsoft Knowledge Base article:

257247  Policy Changing System Service Permissions Does Not Apply
Applies to

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional Edition
  • Microsoft Windows 2000 Datacenter Server

For any questions, queries please do not hesitate to leave a comment in the queries page at the bottom of the page or contact us at compfaqz@gmail.com

Join us on facebook



Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s