Uninstalling protected service.

Question

I have tried implementing the Protecting anti malware service referring the following msdn post:

https://msdn.microsoft.com/en-us/library/windows/desktop/dn313124(v=vs.85).aspx

I have successfully installed the protected service with the help of ELAM as mentioned in the post. Now I want to uninstall this protected service. Using the same protected service while uninstalling ChangeServiceConfig2 fails with error(5) Access Denied, when I try to set SERVICE_LAUNCH_PROTECTED_INFO from SERVICE_LAUNCH_PROTECTED_ANTIMALWARE_LIGHT to SERVICE_LAUNCH_PROTECTED_NONE, the service handle provided to this function has SERVICE_ALL_ACCESS rights. To uninstall this service i need to mark it as unprotected.  We can mark this service as unprotected with help of registry by modifying "LaunchedProtected" value from 3 to 0 at registry path "HKLM\System\CurrentControlSet\Services\Test Service".

How can we mark this service as unprotected with help of ChangeServiceConfig2 ?

Answer 1

Hi,

The support for that project is MSDN so check with the experts there.

Windows Developer Support

https://developer.microsoft.com/en-us/windows/support

Rob - SpiritX