Hi all, I've been trying to retrieve the ACLs of the service DcomLaunch by means of the call subinacl /service dcomlaunch Unfortunately the call fails with the error: dcomlaunch - OpenService Error : 5 Access is denied. Elapsed Time: 00 00:00:00 Done: 1, Modified 0, Failed 1, Syntax errors 0 Last Done : dcomlaunch Last Failed: dcomlaunch - OpenService Error : 5 Access is denied. Do you know any possibility how the ACLs of the service can be queried? Is it possible distinguish between services - vital for Windows (not reconfigurable), - and services that can be customized, depending on requested security level? Thanks in advance for your response. Regards, Andreas

Hi, Based on my understanding, Most of the services launched by Svchost.ese cannot be queried. Also, the services need running with Safe Mode also cannot be queried. This command is used for for granting "start, stop, or pause services" rights to other users and groups. Juke Chou TechNet Community Support