How to reset SDDL values for SCM

Hello!

I have a by misstake set to low SDDL permissions on the Service Control
Manager it self...
this is the command i used to set the wrong SDDL (locking my self out...)
sc sdset scmanager D:(A;;CCLCRPRC;;;AU)
resulting in only read access...

the correct command should have been:
sc sdset scmanager
D:(A;;CCLCRPRC;;;AU)(A;;CCLCRPWPRC;;;SY)(A;;KA;;;BA)S:(AU;FA;KA;;;WD)(AU;OIIOFA;GA;;;WD)
Will reset back to RTM values according to this
http://support.microsoft.com/kb/907460

1. Where does those SDDL values for the SCM its self get saved?
2. How do I revert to the original values now when only have readaccess fo
AU (geting access denied, ehen trying to reset)?

Could a reinstall of SP2 correct this problem?

Best Regards
Anders

Tom_Reeleezee
Thu Mar 27 10:44:44 PDT 2008

Hello Anders,

I have about the same problem.
By mistake i used a space in the SDDL string, because of this my
access is now alo readonly

"sc sdshow scmanager"
now shows

D:(A;;CC;;;AU)(A;;CCLCRPRC;;;IU)S:(AU;FA;KA;;;WD)(AU;OIIOFA;GA;;;WD)

I've already tried to reinstall SP2, but no luck

Have you found a solution for this problem ?

Kind Regards,
Tom

Tom_Reeleezee
Thu Mar 27 13:33:08 PDT 2008

Hello,

I've just solved my problem after an extensive search in google.

you can simply reset als scmanager permissions bij removing this key
from the registry of jour computer

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ServiceGroupOrder
\Security

Just delete this key and reboot your computer
after this the security settings for scmanager wil be reset to there
default value

Kind Regards,
Tom

Anders
Sun Mar 30 14:03:00 PDT 2008

Thank you very much Tom!
Your tips worked perfectly!

Have a nice day
/
Anders

"Tom_Reeleezee" wrote:

> Hello,
>
> I've just solved my problem after an extensive search in google.
>
> you can simply reset als scmanager permissions bij removing this key
> from the registry of jour computer
>
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ServiceGroupOrder
> \Security
>
> Just delete this key and reboot your computer
> after this the security settings for scmanager wil be reset to there
> default value
>
> Kind Regards,
> Tom
>
>