TheBoubou
TheBoubou

Reputation: 19933

Error 5 : Access Denied when starting windows service

I'm getting this error when I try to start a windows service I've created in C#:

alt text

My Code so far:

private ServiceHost host = null;

public RightAccessHost()
{
    InitializeComponent();
}

protected override void OnStart(string[] args)
{
    host = new ServiceHost(typeof(RightAccessWcf));
    host.Open();
}

protected override void OnStop()
{
    if (host != null)
        host.Close();
    host = null;
}

Update #1

I solved the issue above by granting permissions to the account NETWORK SERVICE but now I have an another problem:

alt text

Update #2

Service cannot be started. System.InvalidOperationException: Service 'RightAccessManagementWcf.RightAccessWcf' has zero application (non-infrastructure) endpoints. This might be because no configuration file was found for your application, or because no service element matching the service name could be found in the configuration file, or because no endpoints were defined in the service element. at System.ServiceModel.Description.DispatcherBuilder.EnsureThereAreNonMexEndpoints(ServiceDescription description) at System.ServiceModel.Description.DispatcherBuilder.InitializeServiceHost(ServiceDescription description, ServiceHostBase serviceHost) at System.ServiceModel.ServiceHostBase.InitializeRuntime() at System.ServiceModel.ServiceHostBase.OnOpen(TimeSpan timeout) at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout) at RightAccessHosting.RightAccessHost.OnStart(String[] args) in C:\Users....

Upvotes: 132

Views: 399880

Answers (30)

OfirD
OfirD

Reputation: 10510

All other answers talk about permissions issues - which make sense, given that's what the error message refers to.

However, in my case, it was caused by a simple exception in my service code (System.IndexOutOfRangeException, but it could be anything).

Hence, when this error occurs, one should look inside their log and look for exceptions.

Upvotes: 0

Aage
Aage

Reputation: 6252

Make sure the Path to executable points to an actual executable (Right click service -> Properties -> General tab). Via powershell (and sc.exe) you can install a service without pointing it to an actual executable... ahem.

Upvotes: 25

Jamie Butterworth
Jamie Butterworth

Reputation: 627

I was getting this error because I misread the accepted answer from here: Create Windows service from executable.

sc.exe create <new_service_name> binPath= "<path_to_the_service_executable>"

For <path_to_service_executable>, I was using the path of the executable's folder, e.g. C:\Folder.

It needs to be the path of the executable, e.g. C:\Folder\Executable.exe.

Upvotes: 22

Amrik Singh
Amrik Singh

Reputation: 503

check windows event log for detailed error message. I resolved the same after checking event log.

Upvotes: 0

Sisir
Sisir

Reputation: 5418

As the error popup suggests this is related to permission. So run the service as "LocalSystem" account.

To do the same, Right Click on serviceProcessInstaller -> Properties -> Account and set it to "LocalSystem" instead of the default "User". Install the service and voila.

Upvotes: -1

Vijay kumar.S
Vijay kumar.S

Reputation: 31

One of the causes for this error is insufficient permissions (Authenticated Users) in your local folder. To give permission for 'Authenticated Users' Open the security tab in properties of your folder, Edit and Add 'Authenticated Users' group and Apply changes.

Once this was done I was able to run services even through network service account (before this I was only able to run with Local system account).

Upvotes: 3

Harshith Rai
Harshith Rai

Reputation: 3066

I don't know if my answer would make sense to many, but I too faced the same issue and the solution was outrageously simple. All I had to do was to open the program which I used to run the code as an administrator. (right-click --> Run as Administrator).

That was all.

Upvotes: 0

Nur Uddin
Nur Uddin

Reputation: 1840

I got the solution:

1. Go to local service window(where all services found)
2. Just right click on your service name: 
3. click on "properties" 
4. go to "log on" tab
5. select "local system account"
6. click "ok"

now you can try to start the service.

Upvotes: 10

Sankar
Sankar

Reputation: 51

In my case, I had to add 'Authenticated Users' in the list of 'Group or User Names' in the folder where the executable was installed.

Upvotes: 3

MagTun
MagTun

Reputation: 6205

Right click on the service in service.msc and select property.

You will see a folder path under Path to executable like C:\Users\Me\Desktop\project\Tor\Tor\tor.exe

Navigate to C:\Users\Me\Desktop\project\Tor and right click on Tor.

Select property, security, edit and then add. In the text field enter LOCAL SERVICE, click ok and then check the box FULL CONTROL

Click on add again then enter NETWORK SERVICE, click ok, check the box FULL CONTROL

Then click ok (at the bottom)

Upvotes: 2

kudzai zishumba
kudzai zishumba

Reputation: 732

if you are a having an access denied error code 5. then probably in your code your service is trying to interact with some files in the system like writing to a log file

open the services properties select log on tab and check option to allow service to interact with the desktop, click allow service to interact with desktop

Upvotes: 5

Akshay Anand
Akshay Anand

Reputation: 434

In my case following was not checked.

enter image description here

Upvotes: 7

Justin Skiles
Justin Skiles

Reputation: 9523

I realize this post is old, but there's no marked solution and I just wanted to throw in how I resolved this.

The first Error 5: Access Denied error was resolved by giving permissions to the output directory to the NETWORK SERVICE account.

The second Started and then stopped error seems to be a generic message when something faulted the service. Check the Event Viewer (specifically the 'Windows Logs > Application') for the real error message.

In my case, it was a bad service configuration setting in app.config.

Upvotes: 134

Jay Shah
Jay Shah

Reputation: 3771

Use LocalSystem Account instead of LocalService Account in Service Installer.

You can do this either from doing below change in design view of your service installer:
Properties of Service Process Installer -> Set Account to LocalSystem.

or by doing below change in in designer.cs file of your service installer:

this.serviceProcessInstaller1.Account = System.ServiceProcess.ServiceAccount.LocalSystem;

Upvotes: 1

smali
smali

Reputation: 4805

In my case I kept the project on desktop and to access the desktop we need to add permission to the folder so I simply moved my project folder to C:\ directory now its working like a charm.

Upvotes: 0

Rashmi Pandit
Rashmi Pandit

Reputation: 23868

I had windows service hosted using OWIN and TopShelf. I was not able to start it. Same error - "Access denied 5"

I ended up giving all the perms to my bin/Debug.

The issue was still not resolved.

So I had a look in the event logs and it turned out that the Microsoft.Owin.Host.HttpListener was not included in the class library containing the OWIN start up class.

So, please make sure you check the event log to identify the root cause before beginning to get into perms, etc.

Upvotes: 3

SabineA
SabineA

Reputation: 83

I had this issue on a service that I was deploying, and none of the other suggestions on this question worked. In my case, it was because my .config (xml) wasn't valid. I made a copy and paste error when copying from qualif to prod.

Upvotes: -1

santhosh
santhosh

Reputation: 41

This error happens when there is a error in your OnStart method. You cannot open a host directly in OnStart method because it will not actually open when it is called, but instead it will wait for the control. So you have to use a thread. This is my example.

public partial class Service1 : ServiceBase
{
    ServiceHost host;
    Thread hostThread;
    public Service1()
    {
        InitializeComponent();
         hostThread= new Thread(new ThreadStart(StartHosting));

    }

    protected override void OnStart(string[] args)
    {
        hostThread.Start();
    }

    protected void StartHosting()
    {
        host = new ServiceHost(typeof(WCFAuth.Service.AuthService));
        host.Open();
    }

    protected override void OnStop()
    {
        if (host != null)
            host.Close();
    }
}

Upvotes: 3

Frank Bryce
Frank Bryce

Reputation: 8456

I had this issue today on a service that I was developing, and none of the other suggestions on this question worked. In my case, I had a missing .dll dependency in the folder where the service ran from.

When I added the dependencies, the issue went away.

Upvotes: 0

Alexander Puchkov
Alexander Puchkov

Reputation: 5973

In may case system run out of free space on local disk.

Upvotes: 0

milan
milan

Reputation: 1

Click the Start menu and choose Run or use the keyboard shortcut of Win+R.

In the dialog box, type lusrmgr.msc. When this application opens, click Users in the left-hand panel and then right click Administrator in the right-hand panel. Click Properties in the menu.

In the Administrator Properties dialog, choose the Member Of tab, then click the Add... button at the lower right. From the next dialog, choose Advanced...

Another dialog will appear. From there click Find Now on the right. A list of search results will appear at the bottom of the dialog. Select Network Services from this list and click OK on each of the open dialogs.

Upvotes: -3

Szhlopp
Szhlopp

Reputation: 51

After banging my had against my desk for a few hours trying to figure this out, somehow my "Main" method got emptied of it's code!

ServiceBase[] ServicesToRun;
ServicesToRun = new ServiceBase[] 
{ 
    new DMTestService()
};
ServiceBase.Run(ServicesToRun);

Other solutions I found:

  • Updating the .NET framework to 4.0
  • Making sure the service name inside the InitializeComponent() matches the installer service name property

    private void InitializeComponent()
    ...
    this.ServiceName = "DMTestService";
    
  • And a nice server restart doesn't hurt

Szhlopp

Upvotes: 0

meda
meda

Reputation: 45500

I accidentally set my service to run as Local service solution was to switch to Local System

Upvotes: 0

Asmita Chavan
Asmita Chavan

Reputation: 171

I also got the same error , It resolved by Right click on Service > Properties >Log On > log on as : Local System Account.

Upvotes: 17

Guilherme Noronha
Guilherme Noronha

Reputation: 11

I have monitored sppsvc.exe using process monitor and found out that it was trying to write to the HKEY_LOCAL_MACHINE\SYSTEM\WPA key. After giving permissions to NETWORK SERVICE on this key, I was able to start the service and Windows suddenly recognized that it was activated again.

Upvotes: 1

Darshana
Darshana

Reputation: 602

If you are getting this error on a server machine try give access to the folder you got the real windows service exe. You should go to the security tab and select the Local Service as user and should give full access. You should do the same for the exe too.

Upvotes: 0

Nicholas Blumhardt
Nicholas Blumhardt

Reputation: 31897

For me - the folder from which the service was to run, and the files in it, were encrypted using the Windows "Encrypt" option. Removing that and - voila!

Upvotes: 3

cmcginty
cmcginty

Reputation: 117176

This worked for me.

  1. Right-click on top-level folder containing the service executable. Go to Properties
  2. Go to "Security" Tab
  3. Click "EDIT"
  4. Click "ADD"
  5. Enter the name "SYSTEM", click OK
  6. Highlight SYSTEM user, and click ALLOW check-box next to "Full control"
  7. Click OK twice

Upvotes: 24

Mike de Klerk
Mike de Klerk

Reputation: 12338

Computer -> Manage -> Service -> [your service] properties. Then the the tab with the account information. Play with those settings, like run the service with administrator account or so.

That did it for me.

EDIT: What also can be the problem is that, most services are run as LOCAL SERVICE or LOCAL SYSTEM accounts. Now when you run C:/my-admin-dir/service.exe with those accounts but they are not allowed to execute anything in that directory, you will get error 5. So locate the executable of the service, RMB the directory -> Properties -> Security and make sure that the account the service is run with, is in the list of users that are alloewd to have full control over the directory.

Upvotes: 33

Chris
Chris

Reputation: 1

For the error 5, i did the opposite to the solution above. "The first Error 5: Access Denied error was resolved by giving permissions to the output directory to the NETWORK SERVICE account."

I changed mine to local account, instead of network service account, and because i was logged in as administrator it worked

Upvotes: 0

Related Questions