OpenSCManager remote request failed 5 access denied

Question

I am writing a script that periodically checks that certain services are running on remote workstations. I have a hell of a time when the command "SC \ workst1 query" runs from one test machine to another. Both machines are running XP pro SP3. None of them are part of the domain. Both are in the same workgroup, and the administrator accounts have the same passwords.

I continue to receive the message "[SC] OpenSCManager FAILED 5: Access is denied" from any workstation to another. I tried using elevated privileges for both. Windows Firewall software is disabled. There are no messages in the security event logs. When (as an administrator) I try to go to "Computer Management" → "connect to another computer" and get access to the remote services that I get "Error 5 Access is denied."

I can successfully set the file system share between the two machines, and "net use \ workst1 \ IPC $ / user: Administrator" succeeds, but the SC request still fails. I use IP addresses, not hostnames in these commands, but this does not help. I do not know what else to try. Thanks for the help.

Answer 1

Try running commands as an administrator

start-> (enter cmd in the search field), right-click on cmd , Run as administrator → run the command

Answer 2

You must have administrator rights on the remote computer. In addition, you must access the disk before calling sc. This can be done on the command line using

net use \\remotemachine\admin$ <password> /user:<username> 

admin $ is a hidden shared drive available to administrators that sc uses to manage services.

Answer 3

I had the same issue today, trying to check if the service is enabled remotely. I could solve the problem of changing user account control for remote restrictions in windows:

To disable remote UAC restrictions, follow these steps:

• Click Start, click Run, type regedit and then press ENTER.
• Locate and highlight the following registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
• If the LocalAccountTokenFilterPolicy registry LocalAccountTokenFilterPolicy does not exist, follow these steps:
  From the Edit menu, select New , and then click DWORD Value . Type LocalAccountTokenFilterPolicy and then press ENTER. Right-click LocalAccountTokenFilterPolicy and select Modify . In the Value field, enter 1 and click OK.
• Close the registry editor.

Read more about this decision in this site .

Answer 4

Your user must be removed from the Manager and local users and groups

Answer 5

The problem with UAC is obvious: you have to press the lever to configure UAC. Also, when installing services, you can use the following command

SC create SERVICENAME DisplayName = "DISPLAYNAME" binPath = "PATH OF EXE" start = disabled type = share