Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Programming > ASP .Net > ASP .Net Security > DPAPI Service Start access is denied

Reply
Thread Tools

DPAPI Service Start access is denied

 
 
Martin
Guest
Posts: n/a
 
      09-06-2004
Hi,

Following the procedures for "How To:Use DPAPI (User Store) from ASP.NET
with Enterprise Services" from Building Secure ASP NET Applciations pdf,
after installing the service, I try to start it, but get the error
"Services - Could not start the DPAPI Service server on Local Computer.
Error 5: Access is denied".

My OS is Windows XP Pro. The local account configured to run this service
has "Log on as a batch job" and "Log on locally" user rights as per the
instructions.

What's the problem?

Quick answer required, please

Thanks
Martin


 
Reply With Quote
 
 
 
 
Martin
Guest
Posts: n/a
 
      09-06-2004
It works if I make the local dpapi account a member of local administrators,
so there's nothing wrong with the code. I guess this is another security
policy I need to set, but don't know which one.

????

Martin

"Martin" <> wrote in message
news:%...
> Hi,
>
> Following the procedures for "How To:Use DPAPI (User Store) from ASP.NET
> with Enterprise Services" from Building Secure ASP NET Applciations pdf,
> after installing the service, I try to start it, but get the error
> "Services - Could not start the DPAPI Service server on Local Computer.
> Error 5: Access is denied".
>
> My OS is Windows XP Pro. The local account configured to run this service
> has "Log on as a batch job" and "Log on locally" user rights as per the
> instructions.
>
> What's the problem?
>
> Quick answer required, please
>
> Thanks
> Martin
>
>



 
Reply With Quote
 
 
 
 
Nicole Calinoiu
Guest
Posts: n/a
 
      09-08-2004
I cannot reproduce the problem under Windows XP SP2. A few questions:

1. Have you deviated in any way from the procedure described in that
document?
2. Of what group(s) is the local account a member?
3. Is this happening on your dev machine or another machine on which you've
installed the service?
4. Prior to attempting to start the service, did you log on with the
account credentials in order to create a profile for it?



"Martin" <> wrote in message
news:%...
> Hi,
>
> Following the procedures for "How To:Use DPAPI (User Store) from ASP.NET
> with Enterprise Services" from Building Secure ASP NET Applciations pdf,
> after installing the service, I try to start it, but get the error
> "Services - Could not start the DPAPI Service server on Local Computer.
> Error 5: Access is denied".
>
> My OS is Windows XP Pro. The local account configured to run this service
> has "Log on as a batch job" and "Log on locally" user rights as per the
> instructions.
>
> What's the problem?
>
> Quick answer required, please
>
> Thanks
> Martin
>
>




 
Reply With Quote
 
Martin
Guest
Posts: n/a
 
      09-08-2004
Hi Nicole,

Please see my answers below. I am using Windows XP Sp1. Is there a way I
can further detail on what acces is being to denied to what resource?

Thanks for your help
Martin

"Nicole Calinoiu" <ngcalinoiu REMOVETHIS AT gmail DOT com> wrote in message
news:%...
> I cannot reproduce the problem under Windows XP SP2. A few questions:
>
> 1. Have you deviated in any way from the procedure described in that
> document?

I don't believe so, but how can I be sure? As I say the code works if the
account is in local admins.

> 2. Of what group(s) is the local account a member?

Users

> 3. Is this happening on your dev machine or another machine on which

you've
> installed the service?

My dev machine

> 4. Prior to attempting to start the service, did you log on with the
> account credentials in order to create a profile for it?

Yes, but i didn't stay logged on very long. How can I show that the profile
is created? C:\Documents and Settings has a local sub dir for this user.

>
>
>
> "Martin" <> wrote in message
> news:%...
> > Hi,
> >
> > Following the procedures for "How To:Use DPAPI (User Store) from ASP.NET
> > with Enterprise Services" from Building Secure ASP NET Applciations pdf,
> > after installing the service, I try to start it, but get the error
> > "Services - Could not start the DPAPI Service server on Local Computer.
> > Error 5: Access is denied".
> >
> > My OS is Windows XP Pro. The local account configured to run this

service
> > has "Log on as a batch job" and "Log on locally" user rights as per the
> > instructions.
> >
> > What's the problem?
> >
> > Quick answer required, please
> >
> > Thanks
> > Martin
> >
> >

>
>
>



 
Reply With Quote
 
Nicole Calinoiu
Guest
Posts: n/a
 
      09-09-2004
Martin,

If you've really followed the steps properly, then I'm a bit stumped. Here
are a few things to try:

1. Check if the user you want to use to launch the service actually has
permissions to run the service executable and the DLLs. If not, adjust the
ACLs to allow this.

2. If #1 doesn't help, turn on audit logging of all access failures. To do
this, launch the "Local Security Settings" mmc, then ensure that failure
audit logging is enabled for every policy under Security Settings\Local
Policies\Audit Policy. Once this is done, try launching the service again,
then check the event log to see if any failures were logged due to the
attempt.

3. If #1 doesn't help, the only thing I can think of is to start over from
scratch (new VStudio projects, new user, etc.) to ensure that you are
actually following the procedure exactly.

HTH,
Nicole


"Martin" <> wrote in message
news:...
> Hi Nicole,
>
> Please see my answers below. I am using Windows XP Sp1. Is there a way I
> can further detail on what acces is being to denied to what resource?
>
> Thanks for your help
> Martin
>
> "Nicole Calinoiu" <ngcalinoiu REMOVETHIS AT gmail DOT com> wrote in
> message
> news:%...
>> I cannot reproduce the problem under Windows XP SP2. A few questions:
>>
>> 1. Have you deviated in any way from the procedure described in that
>> document?

> I don't believe so, but how can I be sure? As I say the code works if the
> account is in local admins.
>
>> 2. Of what group(s) is the local account a member?

> Users
>
>> 3. Is this happening on your dev machine or another machine on which

> you've
>> installed the service?

> My dev machine
>
>> 4. Prior to attempting to start the service, did you log on with the
>> account credentials in order to create a profile for it?

> Yes, but i didn't stay logged on very long. How can I show that the
> profile
> is created? C:\Documents and Settings has a local sub dir for this user.
>
>>
>>
>>
>> "Martin" <> wrote in message
>> news:%...
>> > Hi,
>> >
>> > Following the procedures for "How To:Use DPAPI (User Store) from
>> > ASP.NET
>> > with Enterprise Services" from Building Secure ASP NET Applciations
>> > pdf,
>> > after installing the service, I try to start it, but get the error
>> > "Services - Could not start the DPAPI Service server on Local Computer.
>> > Error 5: Access is denied".
>> >
>> > My OS is Windows XP Pro. The local account configured to run this

> service
>> > has "Log on as a batch job" and "Log on locally" user rights as per the
>> > instructions.
>> >
>> > What's the problem?
>> >
>> > Quick answer required, please
>> >
>> > Thanks
>> > Martin
>> >
>> >

>>
>>
>>

>
>



 
Reply With Quote
 
Martin
Guest
Posts: n/a
 
      09-10-2004
Nicole,

My local account didn't have access to the dlls and exe. The basic service
runs now I have given the account read and execute permissions. I haven't
done any other testing or completed the last steps of the how to yet, but I
am over that hurdle.

Thanks very much for yoiur help.

Martin

"Nicole Calinoiu" <ngcalinoiu REMOVETHIS AT gmail DOT com> wrote in message
news:...
> Martin,
>
> If you've really followed the steps properly, then I'm a bit stumped.

Here
> are a few things to try:
>
> 1. Check if the user you want to use to launch the service actually has
> permissions to run the service executable and the DLLs. If not, adjust

the
> ACLs to allow this.
>
> 2. If #1 doesn't help, turn on audit logging of all access failures. To

do
> this, launch the "Local Security Settings" mmc, then ensure that failure
> audit logging is enabled for every policy under Security Settings\Local
> Policies\Audit Policy. Once this is done, try launching the service

again,
> then check the event log to see if any failures were logged due to the
> attempt.
>
> 3. If #1 doesn't help, the only thing I can think of is to start over

from
> scratch (new VStudio projects, new user, etc.) to ensure that you are
> actually following the procedure exactly.
>
> HTH,
> Nicole
>
>
> "Martin" <> wrote in message
> news:...
> > Hi Nicole,
> >
> > Please see my answers below. I am using Windows XP Sp1. Is there a way

I
> > can further detail on what acces is being to denied to what resource?
> >
> > Thanks for your help
> > Martin
> >
> > "Nicole Calinoiu" <ngcalinoiu REMOVETHIS AT gmail DOT com> wrote in
> > message
> > news:%...
> >> I cannot reproduce the problem under Windows XP SP2. A few questions:
> >>
> >> 1. Have you deviated in any way from the procedure described in that
> >> document?

> > I don't believe so, but how can I be sure? As I say the code works if

the
> > account is in local admins.
> >
> >> 2. Of what group(s) is the local account a member?

> > Users
> >
> >> 3. Is this happening on your dev machine or another machine on which

> > you've
> >> installed the service?

> > My dev machine
> >
> >> 4. Prior to attempting to start the service, did you log on with the
> >> account credentials in order to create a profile for it?

> > Yes, but i didn't stay logged on very long. How can I show that the
> > profile
> > is created? C:\Documents and Settings has a local sub dir for this user.
> >
> >>
> >>
> >>
> >> "Martin" <> wrote in message
> >> news:%...
> >> > Hi,
> >> >
> >> > Following the procedures for "How To:Use DPAPI (User Store) from
> >> > ASP.NET
> >> > with Enterprise Services" from Building Secure ASP NET Applciations
> >> > pdf,
> >> > after installing the service, I try to start it, but get the error
> >> > "Services - Could not start the DPAPI Service server on Local

Computer.
> >> > Error 5: Access is denied".
> >> >
> >> > My OS is Windows XP Pro. The local account configured to run this

> > service
> >> > has "Log on as a batch job" and "Log on locally" user rights as per

the
> >> > instructions.
> >> >
> >> > What's the problem?
> >> >
> >> > Quick answer required, please
> >> >
> >> > Thanks
> >> > Martin
> >> >
> >> >
> >>
> >>
> >>

> >
> >

>
>



 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Win32 Service: Access Denied when creating service Rajiv Abraham Ruby 3 04-16-2010 10:34 AM
DPAPI (Machine Store) Access Denied Problem. Sachin Chavan ASP .Net Security 7 05-12-2006 07:10 AM
403 Forbidden: You were denied access because: Access denied by access control list Southern Kiwi NZ Computing 6 03-19-2006 05:19 AM
Web Service + Anon Access, but getting 401 Access Denied Error Alex Washtell via .NET 247 ASP .Net Web Services 1 04-05-2005 04:57 PM
Access Denied - Network Service vs Local Service mangia ASP .Net Security 3 09-27-2004 09:26 PM



Advertisments
 



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57