Thanks Ed,
 
i managed to lock myself out from making any changes to that service
using subinacl :)
I ended up delete the security reg key and then SEP installed fine.
I guess WinXP reset the security to default of the key is missing
allthouhg a new one wasn't recreated.
 
thanks
OS
 
 

________________________________

From: Ziots, Edward [mailto:[EMAIL PROTECTED] 
Sent: Monday, June 02, 2008 3:45 PM
To: NT System Admin Issues
Subject: RE: Change rights of system account to stop services



Try looking at Subinacl.exe (SubInAcl version 5.2.3790.1180)

 

Here is the services default DACL on XP SP2

 

C:\>subinacl /verbose=1 /service WZCSVC /display=dacl

 

================

+Service WZCSVC

================

/perm. ace count   =5

/grant=system=lqsetopiu

/grant=builtin\administrators=f

/grant=authenticated users=lqseiu

/grant=builtin\power users=lqsetopiu

/grant=builtin\users=lqsetopiu

 

 

Elapsed Time: 00 00:00:00

Done:        1, Modified        0, Failed        0, Syntax errors
0

Last Done  : WZCSVC

 

HTH

EZ

 

Edward E. Ziots

Network Engineer

Lifespan Organization

MCSE,MCSA,MCP,Security+,Network+,CCA

Phone: 401-639-3505

-----Original Message-----
From: Osama Salah [mailto:[EMAIL PROTECTED] 
Sent: Monday, June 02, 2008 6:50 AM
To: NT System Admin Issues
Subject: Change rights of system account to stop services

 

 

I'm trying to installed SEP 11 and get an error when trying to stop the
WZC service.

Symantec has an article about it but no real solution. They mention two
applications that change service privileges and suggest to install the
latest version. I don't have any of those.

 

 

"Symantec has confirmed that during the installation of third-party
wireless management software the software adjusts the operating system's
default security policy for the Wireless Zero Configuration Service.
Some of this software removes the necessary rights for the System
account to access the service. Symantec Endpoint Protection requires the
service to be stopped during installation so it can properly register
components with the operating system. "

 

How do I the necessary rights to the system account to stop services?

 

regards,

Osama

 

 

________________________________

Disclaimer:This communication contains information that is confidential
and may also be legally privileged. It is for the exclusive use of the
intended recipient(s). If you are not the intended recipient,disclosure,
copying, distribution or other use of, or taking of any action in
reliance upon, this communication or the information in it is prohibited
and may be unlawful. If you have received this communication in error
please notify the sender by return email, delete it from your system and
destroy any copies.

________________________________

 

 






--------------------------------------------------------------------------------------------------------------------------
Disclaimer: This communication contains information that is confidential and 
may also be legally privileged. 
It is for the exclusive use of the intended recipient(s). If you are not the 
intended recipient, disclosure, copying,
distribution or other use of, or taking of any action in reliance upon, this 
communication or the information in it is
prohibited and may be unlawful. If you have received this communication in 
error please notify the sender by return email,
delete it from your system and destroy any copies.
--------------------------------------------------------------------------------------------------------------------------

~ Upgrade to Next Generation Antispam/Antivirus with Ninja!    ~
~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm>  ~

Reply via email to