Some processes indicate 'access denied' in Process Explorer

Anonymous
2024-01-25T17:17:01+00:00

Hello,

3 win servers 2019 with, and not domain.

Administrator account, ProceXP whit max privileges, UAC disabled.

2 first, OK. The last, 'access denied' for Services.exe, smss.exe, csrss.exe and wininit.exe

What?

Thanks

***moved from Windows/Windows 10/Security and privacy***

Windows for business | Windows Server | Performance | System performance

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question. To protect privacy, user profiles for migrated questions are anonymized.

0 comments No comments
{count} vote

2 answers

Sort by: Most helpful
  1. Anonymous
    2024-01-30T02:57:57+00:00

    Hello

    Thank you for posting in Microsoft Community forum.

     From our experience of access denied, this issue usually caused by account settings. We suggest you create a new account and see if the files can be accessed. If the new account works fine, you need to rebuild the Admin account.

    Also, it's possible that the "access denied" error you're seeing in Process Explorer is due to the fact that the processes you mentioned are protected by Windows Resource Protection (WRP). WRP is a feature in Windows that helps prevent unauthorized changes to critical system files and registry keys.

    To view these processes in Process Explorer, you may need to run it as an administrator. You can do this by right-clicking on the Process Explorer icon and selecting "Run as administrator".

    If you're still seeing the "access denied" error after running Process Explorer as an administrator, it's possible that there is a security software or policy in place that is preventing access to these processes. You may want to check with your IT department or security team to see if there are any restrictions in place.

    I hope this helps! Let me know if you have any other questions.

    Best Regards,

    Zack Lu

    1 person found this answer helpful.
    0 comments No comments
  2. Anonymous
    2024-01-31T18:07:55+00:00

    Hello Zack Lu. Thank you very much for your answer.
    I have created a new administrative account with identical results.
    I have also run sfc /scannow, and no errors are detected.
    There is no antivirus, except for WinDefender, which is stopped.
    I have always used Process Explorer to verify the signatures of each executable image on the servers I manage, and this problem makes me insecure.
    And it only happens to me on this host. The other two, work correctly, as can be seen in the captured images.

    Any ideas?

    Best Regards

    3 people found this answer helpful.
    0 comments No comments