[c#] Error 5 : Access Denied when starting windows service

I'm getting this error when I try to start a windows service I've created in C#:

My Code so far:

private ServiceHost host = null;

public RightAccessHost()
{
    InitializeComponent();
}

protected override void OnStart(string[] args)
{
    host = new ServiceHost(typeof(RightAccessWcf));
    host.Open();
}

protected override void OnStop()
{
    if (host != null)
        host.Close();
    host = null;
}

Update #1

I solved the issue above by granting permissions to the account NETWORK SERVICE but now I have an another problem:

Update #2

Service cannot be started. System.InvalidOperationException: Service 'RightAccessManagementWcf.RightAccessWcf' has zero application (non-infrastructure) endpoints. This might be because no configuration file was found for your application, or because no service element matching the service name could be found in the configuration file, or because no endpoints were defined in the service element. at System.ServiceModel.Description.DispatcherBuilder.EnsureThereAreNonMexEndpoints(ServiceDescription description) at System.ServiceModel.Description.DispatcherBuilder.InitializeServiceHost(ServiceDescription description, ServiceHostBase serviceHost) at System.ServiceModel.ServiceHostBase.InitializeRuntime() at System.ServiceModel.ServiceHostBase.OnOpen(TimeSpan timeout) at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout) at RightAccessHosting.RightAccessHost.OnStart(String[] args) in C:\Users....

I also got the same error , It resolved by Right click on Service > Properties >Log On > log on as : Local System Account.

I got the solution:

1. Go to local service window(where all services found)
2. Just right click on your service name: 
3. click on "properties" 
4. go to "log on" tab
5. select "local system account"
6. click "ok"

now you can try to start the service.

After banging my had against my desk for a few hours trying to figure this out, somehow my "Main" method got emptied of it's code!

ServiceBase[] ServicesToRun;
ServicesToRun = new ServiceBase[] 
{ 
    new DMTestService()
};
ServiceBase.Run(ServicesToRun);

Other solutions I found:

• Updating the .NET framework to 4.0

• Making sure the service name inside the InitializeComponent() matches the installer service name property

  private void InitializeComponent()
  ...
  this.ServiceName = "DMTestService";
  

• And a nice server restart doesn't hurt

Szhlopp

In my case following was not checked.

Your code may be running in the security context of a user that is not allowed to start a service.

Since you are using WCF, I am guessing that you are in the context of NETWORK SERVICE.

see: http://support.microsoft.com/kb/256299

Computer -> Manage -> Service -> [your service] properties. Then the the tab with the account information. Play with those settings, like run the service with administrator account or so.

That did it for me.

EDIT: What also can be the problem is that, most services are run as LOCAL SERVICE or LOCAL SYSTEM accounts. Now when you run C:/my-admin-dir/service.exe with those accounts but they are not allowed to execute anything in that directory, you will get error 5. So locate the executable of the service, RMB the directory -> Properties -> Security and make sure that the account the service is run with, is in the list of users that are alloewd to have full control over the directory.

For me - the folder from which the service was to run, and the files in it, were encrypted using the Windows "Encrypt" option. Removing that and - voila!

I realize this post is old, but there's no marked solution and I just wanted to throw in how I resolved this.

The first Error 5: Access Denied error was resolved by giving permissions to the output directory to the NETWORK SERVICE account.

The second Started and then stopped error seems to be a generic message when something faulted the service. Check the Event Viewer (specifically the 'Windows Logs > Application') for the real error message.

In my case, it was a bad service configuration setting in app.config.

In may case system run out of free space on local disk.

I had this issue on a service that I was deploying, and none of the other suggestions on this question worked. In my case, it was because my .config (xml) wasn't valid. I made a copy and paste error when copying from qualif to prod.

if you are a having an access denied error code 5. then probably in your code your service is trying to interact with some files in the system like writing to a log file

open the services properties select log on tab and check option to allow service to interact with the desktop,

For the error 5, i did the opposite to the solution above. "The first Error 5: Access Denied error was resolved by giving permissions to the output directory to the NETWORK SERVICE account."

I changed mine to local account, instead of network service account, and because i was logged in as administrator it worked

If you are getting this error on a server machine try give access to the folder you got the real windows service exe. You should go to the security tab and select the Local Service as user and should give full access. You should do the same for the exe too.

Use LocalSystem Account instead of LocalService Account in Service Installer.

You can do this either from doing below change in design view of your service installer:
Properties of Service Process Installer -> Set Account to LocalSystem.

or by doing below change in in designer.cs file of your service installer:

this.serviceProcessInstaller1.Account = System.ServiceProcess.ServiceAccount.LocalSystem;

check windows event log for detailed error message. I resolved the same after checking event log.

This error happens when there is a error in your OnStart method. You cannot open a host directly in OnStart method because it will not actually open when it is called, but instead it will wait for the control. So you have to use a thread. This is my example.

public partial class Service1 : ServiceBase
{
    ServiceHost host;
    Thread hostThread;
    public Service1()
    {
        InitializeComponent();
         hostThread= new Thread(new ThreadStart(StartHosting));

    }

    protected override void OnStart(string[] args)
    {
        hostThread.Start();
    }

    protected void StartHosting()
    {
        host = new ServiceHost(typeof(WCFAuth.Service.AuthService));
        host.Open();
    }

    protected override void OnStop()
    {
        if (host != null)
            host.Close();
    }
}

I have monitored sppsvc.exe using process monitor and found out that it was trying to write to the HKEY_LOCAL_MACHINE\SYSTEM\WPA key. After giving permissions to NETWORK SERVICE on this key, I was able to start the service and Windows suddenly recognized that it was activated again.

I don't know if my answer would make sense to many, but I too faced the same issue and the solution was outrageously simple. All I had to do was to open the program which I used to run the code as an administrator. (right-click --> Run as Administrator).

That was all.

As the error popup suggests this is related to permission. So run the service as "LocalSystem" account.

To do the same, Right Click on serviceProcessInstaller -> Properties -> Account and set it to "LocalSystem" instead of the default "User". Install the service and voila.

I had windows service hosted using OWIN and TopShelf. I was not able to start it. Same error - "Access denied 5"

I ended up giving all the perms to my bin/Debug.

The issue was still not resolved.

So I had a look in the event logs and it turned out that the Microsoft.Owin.Host.HttpListener was not included in the class library containing the OWIN start up class.

So, please make sure you check the event log to identify the root cause before beginning to get into perms, etc.

In my case I kept the project on desktop and to access the desktop we need to add permission to the folder so I simply moved my project folder to C:\ directory now its working like a charm.

Click the Start menu and choose Run or use the keyboard shortcut of Win+R.

In the dialog box, type lusrmgr.msc. When this application opens, click Users in the left-hand panel and then right click Administrator in the right-hand panel. Click Properties in the menu.

In the Administrator Properties dialog, choose the Member Of tab, then click the Add... button at the lower right. From the next dialog, choose Advanced...

Another dialog will appear. From there click Find Now on the right. A list of search results will appear at the bottom of the dialog. Select Network Services from this list and click OK on each of the open dialogs.

I was getting this error because I misread the accepted answer from here: Create Windows service from executable.

sc.exe create <new_service_name> binPath= "<path_to_the_service_executable>"

For <path_to_service_executable>, I was using the path of the executable's folder, e.g. C:\Folder.

It needs to be the path of the executable, e.g. C:\Folder\Executable.exe.

I accidentally set my service to run as Local service solution was to switch to Local System

Right click on the service in service.msc and select property.

You will see a folder path under Path to executable like C:\Users\Me\Desktop\project\Tor\Tor\tor.exe

Navigate to C:\Users\Me\Desktop\project\Tor and right click on Tor.

Select property, security, edit and then add. In the text field enter LOCAL SERVICE, click ok and then check the box FULL CONTROL

Click on add again then enter NETWORK SERVICE, click ok, check the box FULL CONTROL

Then click ok (at the bottom)

Make sure the Path to executable points to an actual executable (Right click service -> Properties -> General tab). Via powershell (and sc.exe) you can install a service without pointing to an actual executable... ahem.

I had this issue today on a service that I was developing, and none of the other suggestions on this question worked. In my case, I had a missing .dll dependency in the folder where the service ran from.

When I added the dependencies, the issue went away.

One of the causes for this error is insufficient permissions (Authenticated Users) in your local folder. To give permission for 'Authenticated Users' Open the security tab in properties of your folder, Edit and Add 'Authenticated Users' group and Apply changes.

Once this was done I was able to run services even through network service account (before this I was only able to run with Local system account).

Have a look at Process Utilities > Process monitor from http://www.sysinternals.com.

This is tool that allows you monitor what a process does. If you monitor this service process, you should see an access denied somewhere, and on what resource the access denied is given.

This worked for me.

1. Right-click on top-level folder containing the service executable. Go to Properties
2. Go to "Security" Tab
3. Click "EDIT"
4. Click "ADD"
5. Enter the name "SYSTEM", click OK
6. Highlight SYSTEM user, and click ALLOW check-box next to "Full control"
7. Click OK twice

In my case, I had to add 'Authenticated Users' in the list of 'Group or User Names' in the folder where the executable was installed.