Cannot Start Windows Service in NetworkService account

前端 未结 3 1562
甜味超标
甜味超标 2020-12-05 21:20

I have a windows service project implementation that I am trying to install as network service.

process = new ServiceProcessInstaller();
process.Account = Se         


        
3条回答
  •  -上瘾入骨i
    2020-12-05 22:14

    Your Net Start MyService is probably not running with escalated privileges. Your command requires (I believe) Administrative Privileges.

    Update

    Not sure why, but your privileges on your service are weird. By default privileges of services should look like:

    D:(A;CI;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)
    
    ACE Type: ACCESS_ALLOWED_ACE_TYPE
    Trustee: NT AUTHORITY\SYSTEM
    AccessMask:
      ADS_RIGHT_DELETE
      ADS_RIGHT_READ_CONTROL
      ADS_RIGHT_WRITE_DAC
      ADS_RIGHT_WRITE_OWNER
      ADS_RIGHT_DS_CREATE_CHILD
      ADS_RIGHT_DS_DELETE_CHILD
      ADS_RIGHT_ACTRL_DS_LIST
      ADS_RIGHT_DS_SELF
      ADS_RIGHT_DS_READ_PROP
      ADS_RIGHT_DS_WRITE_PROP
      ADS_RIGHT_DS_DELETE_TREE
      ADS_RIGHT_DS_LIST_OBJECT
      ADS_RIGHT_DS_CONTROL_ACCESS
    

    However your's looks like:

    D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)
    
    ACE Type: ACCESS_ALLOWED_ACE_TYPE
    Trustee: NT AUTHORITY\SYSTEM
    AccessMask:
      ADS_RIGHT_READ_CONTROL
      ADS_RIGHT_DS_CREATE_CHILD
      ADS_RIGHT_ACTRL_DS_LIST
      ADS_RIGHT_DS_SELF
      ADS_RIGHT_DS_READ_PROP
      ADS_RIGHT_DS_WRITE_PROP
      ADS_RIGHT_DS_DELETE_TREE
      ADS_RIGHT_DS_LIST_OBJECT
      ADS_RIGHT_DS_CONTROL_ACCESS
    

    I'm not sure exactly how that came to be. Try uninstalling and reinstalling?

    You can download SddlParse (google it :) to parse out the Security Descriptor Definition Language.

提交回复
热议问题