JSI Tip 8949. When you use Group Policy to set security on a system service, the policy does NOT apply?

In addition to the subject behavior, you may receive and Access Denied when configuring the policy.

NOTE: See How do I configure Group Policies to set permissions on a service?

NOTE: See How do I add a 3rd party service to the system services in group policy?

Normally, when you implement service security settings in Group Policy, the Everyone group is granted Full Control. If you remove the Everyone group, you may experience this behavior, specially if the System account and Service account are NOT granted Full Control.

To reset permission so that Group Policy can apply:

1. Open the Registry Editor.

2. Navigate to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\<Service Key>\Security.

3. Delete the Security sub-key.

4. Exit the Registry Editor.

5. Shutdown and restart your computer.

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.