Re: Why would services.msc & services.exe be "Access Denied" in WinXP?

From: Susan Sharm (susanshaarm_at_yahoo.com)
Date: 11/06/05 

Date: 6 Nov 2005 09:51:58 -0800

Steven L Umbach wrote:
> If you see no security tab then you will have to disable simple
> file sharing by opening Windows Explorer and then selecting tools/folder
> options/view - use simple file sharing that you would want to uncheck.

Thanks again Steven for the wonderful advice (I wish more people were
like you!).

When I right click & select properties on the "services.msc" file, I
see only two tabs "general" & "summary". On "services.exe" I see four
tabs "general", "version", "compatibility", & "summary". As you noted,
there was no "security" tab available.

So, in that system32 window, I selected the menu "tools", "folder
options", "view", and I turned off (unchecked) these two which had
"simple" in the description:
- display simple folder view in Explorer's Folders list
- use simple file sharing (Recommended)

Thanks to your advice, this action added a "security" tab to the
right-click properties of both services.exe and services.msc (I never
knew about this so I'm glad I learned something interesting today!).

Here is what I saw in the "security" tab of a right-clicked properties
of "services.msc" (given the "Full Computer Name is "SUSAN" and I'm
logged in as "Administrator" and I know of no other logins on this
computer other than administrator.

Group or user names:
- Administrators (SUSAN\Administrators)
--- Full Control [^]Allow [ ]Deny
--- Modify [^]Allow [ ]Deny
--- Read & Execute [^]Allow [ ]Deny
--- Read [^]Allow [ ]Deny
--- Write [^]Allow [ ]Deny
--- Special Permissions [ ]Allow [ ]Deny
- Power Users (SUSAN\Power Users)
--- Full Control [ ]Allow [ ]Deny
--- Modify [ ]Allow [ ]Deny
--- Read & Execute [^]Allow [ ]Deny
--- Read [^]Allow [ ]Deny
--- Write [ ]Allow [ ]Deny
--- Special Permissions [ ]Allow [ ]Deny
- SYSTEM
--- Full Control [^]Allow [ ]Deny
--- Modify [^]Allow [ ]Deny
--- Read & Execute [^]Allow [ ]Deny
--- Read [^]Allow [ ]Deny
--- Write [^]Allow [ ]Deny
--- Special Permissions [ ]Allow [ ]Deny
- Users (SUSAN\]Users)
--- Full Control [ ]Allow [ ]Deny
--- Modify [ ]Allow [ ]Deny
--- Read & Execute [^]Allow [ ]Deny
--- Read [^]Allow [ ]Deny
--- Write [ ]Allow [ ]Deny
--- Special Permissions [ ]Allow [ ]Deny

I'm confused what this is telling me. There is an additional "Advanced"
button which, for the "Administrators (SUSAN\Administrators)" selection
shows the four tabs "Permissions", "Auditing", "Owner", & "Effective
Permissions" which are lengthy but summarized below:

Permissions:
- Allow Users (SUSAN\Users) Read & Execute <not inherited>
- Allow Power Users (SUSAN\Power Users) Read & Execute <not inherited>
- Alow Administrators (SUSAN\Administrators) Full Control <not
inherited>
- Alow SYSTEM Full Control <not inherited>
- [ ]Inherit from parent the auditing entries that apply to child
objects
Auditing:
- [^]Inherit from parent the auditing entries that apply to child
objects
Owner:
- Current owner of this item: Administrators (SUSAN\Administrators)
Effective Permissions:
- All the boxes are grey

Leaving everything as noted above (only having unchecked simple file
permissions), I still see "access denied" when I type "services.msc"
into the start run menu. Do you have a suggestion as to which
permission to change above?

Thanks in advance,
Susan