Error: "An Access Denied error was returned while attempting to change a service. You may need to log on using an Administrator account to make the specified changes."

Article:TECH167463  |  Created: 2011-08-18  |  Updated: 2011-08-29  |  Article URL http://www.symantec.com/docs/TECH167463
Article Type
Technical Solution


Issue



The following error appears when msconfig is used to make startup changes on a Windows XP computer, where Symantec Endpoint Protection 12.1 is installed:

An Access Denied error was returned while attempting to change a service. You may need to log on using an Administrator account to make the specified changes.


Error



An Access Denied error was returned while attempting to change a service. You may need to log on using an Administrator account to make the specified changes.


Environment



This does not occur on Windows 7 clients.


Cause



This is an issue with msconfig that is addressed in Vista/Win7.  In Symantec Endpoint Protection 12.1 we have introduced additional protection of our services, registry values, and files.  We are protecting and denying write access to our SCM entry.  Msconfig decides to open all services with all access (or with some access we don't allow) and they get access denied.  The problem is that msconfig in Windows XP is opening or querying services that do not need to changed or modified.


Solution



The behavior of msconfg has been modified in Windows Vista and Windows 7 where msconfig does not attempt to open or query our values.  The user or administrator does not receive this pop up in these environments.  In Windows XP, the user can click through the pop-up and the changes will persist.  Symantec Endpoint Protection 12.1 is not preventing or blocking the use of the msconfig tool.



 


Supplemental Materials

SourceETrack
Value2514948


Article URL http://www.symantec.com/docs/TECH167463


Terms of use for this information are found in Legal Notices