Access Denied in Windows Command Prompt

Question

Access Denied in Windows Command Prompt

Nathan Chen 20

Good day,

I am attempting to run the following command in CMD:

sc managedaccount mpssvc false

However, an error message is returned stating: [SC] OpenService FAILED 5: Access is denied.

I am an administrator and I ran the command prompt as an administrator. Please assist me in resolving this issue. Thank you.

Accepted answer

2 additional answers

Your answer

Answer 1

MotoX80 36,291

Not sure how this might have happened

To Dave's point, do you have an idea how that got changed? If you don't, then my concern would be that other settings have been changed and even if you get that reset you might be fighting other oddities. In that case it might be safer to put up a new server as he suggested.

You can try psexec. That will let you run a command as the system account.

[https://learn.microsoft.com/en-us/sysinternals/downloads/psexec

psexec \\localhost -s sc config mpssvc obj= "NT Authority\LocalService"

Nathan Chen 20 Reputation points

2023-01-18T01:24:21.6733333+00:00

Using psexec worked! I deeply appreciate your help! My firewall is active now.

Answer 2

MotoX80 36,291

Why do you want to run that command?

The firewall should be set to run as LocalService.

C:\>sc qc mpssvc
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: mpssvc
        TYPE               : 20  WIN32_SHARE_PROCESS
        START_TYPE         : 2   AUTO_START
        ERROR_CONTROL      : 1   NORMAL
        BINARY_PATH_NAME   : C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p
        LOAD_ORDER_GROUP   : NetworkProvider
        TAG                : 0
        DISPLAY_NAME       : Windows Defender Firewall
        DEPENDENCIES       : mpsdrv
                           : bfe
        SERVICE_START_NAME : NT Authority\LocalService

C:\>

Did you try to configure the service to run as a managed account?

An educated guess would be that the Windows Defender has a self protection mechanism that is blocking you. You could try turning Defender off temporarily or maybe boot into safe mode.

https://www.bing.com/search?q=how%20to%20temporarily%20disable%20windows%20defender

Nathan Chen 20 Reputation points

2023-01-17T17:26:48.86+00:00

Hello, thank you for responding. I am on a Server 2019 virtual machine and I am attempting to start the Windows Defender Firewall service. Its startup type shows as Automatic but the service is stopped. Upon trying to start it, I receive error 1079. As a result, I go to the Log On Tab and find that the service is running under "Network Service" instead of "Local Service". However, I am unable to change it as it is greyed out. Thus, I go online and look for a solution, and I find this: https://social.technet.microsoft.com/Forums/en-US/f62c1cf2-388e-4dbe-8be2-d4a6ebe712cc/windows-services-properties-logon-tab-greyed-out

The solution suggests running the command that I am attempting to run. However, upon running that command, I receive an Access is Denied error as said above. Is there any way I can change Network Service to Local Service?
MotoX80 36,291 Reputation points

2023-01-17T17:37:06.5166667+00:00
Try this.

sc config mpssvc obj= "NT Authority\LocalService"
Nathan Chen 20 Reputation points

2023-01-17T23:41:57.61+00:00

Unfortunately, it was to no avail. The same error was returned as mentioned above.

As you can see, the entire section for "Log On" is greyed out with the account being set to Network Service.

The VM is running DNS and AD. Does that have anything to do with it? Please advise.

Answer 3

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more

Share via

Access Denied in Windows Command Prompt

2 additional answers

Your answer