1 of 1 people found this helpful
Any errors in Windws event log? What user context is it configured to run under?
Any AV, HIPS components installed recently in server? Other security products? Was whole server restarted again?
Did you try to remove this service and install it again?
In the application log, I'm receiving:
Event Type: Information
Event Source: McLogEvent
Event Category: None
Event ID: 257
Time: 8:42:29 PM
User: NT AUTHORITY\SYSTEM
Blocked by access protection rule. Access to object \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\SafeBoot Database Server was blocked by rule Common Maximum Protection:Prevent programs registering as a service.
Not sure if that is McAfee AV thing or not, I'm chasing down the security admin now. While I wait, does anyone know off the top of their heads what would change in my environment to create this block?
Changed McAfee VirusScan policy pushed by ePO?
https://kc.mcafee.com/corporate/index?page=answers&type=search&searchid=12791984 63181&question_box="Blocked+by+access+protection+rule.++Access+to+object"https://kc.mcafee.com/corporate/index?page=answers&type=search&searchid=12791984 63181&question_box=%22Blocked+by+access+protection+rule.++Access+to+object%22