SUBINACL Gets Access Denied

Question

I am trying to get the SUBINACL utility to simply display information about the MSDTC service.

Typing subinacl / service mstdc and get error 5 access denied

C:\temp>subinacl /service msdtc msdtc - OpenService Error : 5 Access is denied. Elapsed Time: 00 00:00:00 Done: 1, Modified 0, Failed 1, Syntax errors 0 Last Done : msdtc Last Failed: msdtc - OpenService Error : 5 Access is denied. 

If I run the same command for the DHCP service, it gives me all the security. I run it under administrator. Is there somewhere in the registry where I can fix this for MSDTC ???

I am using Windows 64 R2 64 bit.

Thanks.

Answer 1

Just spend a few hours on this, if you have the same problem, you can reset the ACL access list and add it then - just run these lines from the comamnd line (cmd) from the administrator account:

• sc sdset MSDTC D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)

• subinacl /service msdtc /grant="Network Service"="QSETIL"*

Answer 2

I ran into the same issue on Windows 7 Ultimate x64 SP1 when I followed these steps:

http://pongsathonkeng.blogspot.com/2011/02/msdtc-setup.html

I think these are steps to solve the problem:

• icacls c: \ windows \ system32 \ msdtc \ msdtc.log / grant "networkervice": F

  As indicated here:

  http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/eb8835d9-5f5b-4df2-8c68-4a61d5e44d6b/

• subinacl / service msdtc / grant = "Network Service" = QSETIL

  As also indicated here:

  http://blogs.msdn.com/b/chrisforster/archive/2008/08/18/acl-problem-with-the-msdtc-service.aspx

• reboot