Re: Access is denied error 5
From: Pavel Lebedinsky (m_pll)
Date: Mon, 24 Jan 2005 15:03:48 -0800
Try running filemon and regmon from SysInternals and look
for access denied errors.
If that doesn't help, attach windbg to the service process,
set a breakpoint on kernel32!CreateProcessW (or CreateProcessA)
and trace its execution using the "wt -or" command to see
where the error comes from.
> Currently there are some machines that have problems running an
> that is a Windows Service. When Service goes to create a process it gets
> error 5 on some machines “Access is denied”.
> The machines (both good and bad) report that they are at Windows 5.0.2195
> Service Pack 4 Build 2195.
> The Service currently has access to the desired executable. The path
> variable also had the executable in its path.
> The Service process can indeed “open” the executable for read (it also
> execute access).
> The Service usually attempts to “CreateProcessAsUser” however
> short-circuiting it to merely do a “CreateProcess” fails in a similar
> (Access Denied).
> The Service appears to have access to the Winstat0\Default desktop since
> is installed with “SERVICE_INTERACTIVE_PROCESS”.
> Using SysInternals ProcessViewer I have checked the Security attributes
> the Windows Service on a "good" machine and “bad” machine. I can see
> appreciable differences. However a few (3 fields) do not provide a value
> the bad machine however they are shown as “Disabled” on my good
> machine. The
> three items are “SeLoadDriverPriv, SeSystemtimePrivilege,
> None of these privileges appear to have any bearing on creating a
> However… the difference is noted.
> It appears that the "bad" machines can't create a process for some reason.
> Any ideas???