SUBINACL被拒绝访问

Question

Im trying to get SUBINACL utility to just display information of the MSDTC service.

Im typing subinacl /service mstdc and I get an error 5 access denied

C:\temp>subinacl /service msdtc

msdtc - OpenService Error : 5 Access is denied.
Elapsed Time: 00 00:00:00
Done:        1, Modified        0, Failed        1, Syntax errors        0
Last Done  : msdtc
Last Failed: msdtc - OpenService Error : 5 Access is denied.

If I run the same command for DHCP service it gives me all the security. I am running it under the administrator. Is there somewhere in the registry where I can fix this for the MSDTC ???

I am using Windows 2008 R2 64 Bit.

Thanks.

Answer 1

只需要花几个小时来处理它，如果你有同样的问题，你可以重置ACL访问列表然后添加它 - 只需从管理员帐户的comamnd行（cmd）执行这些行：

1. sc sdset MSDTC D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)

2. subinacl /service msdtc /grant="Network Service"="QSETIL"*

Answer 2

I was experiencing the same issue on Windows 7 Ultimate x64 SP1 when I was following the steps here:

http://pongsathonkeng.blogspot.com/2011/02/msdtc-setup.html

I think these are the steps to resolve the issue:

1. icacls c:\\windows\\system32\\msdtc\\msdtc.log /grant "networkservice":F

   As indicated here:

   http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/eb8835d9-5f5b-4df2-8c68-4a61d5e44d6b/

2. subinacl /service msdtc /grant="Network Service"=QSETIL

   As also indicated here:

   http://blogs.msdn.com/b/chrisforster/archive/2008/08/18/acl-problem-with-the-msdtc-service.aspx

3. restart