Access Denied Error During CheckStatus Call

Description

Log contains this error:

2017-10-24 10:43:07,558 [23] ERROR w3wp [(null)] - Request processed with error response 'rcGeneralError'
System.InvalidOperationException: Cannot open eWayTimer service on computer .. ---> System.ComponentModel.Win32Exception: Access is denied
--- End of inner exception stack trace ---
   v System.ServiceProcess.ServiceController.GetServiceHandle(Int32 desiredAccess)
   v System.ServiceProcess.ServiceController.GenerateStatus()
   v System.ServiceProcess.ServiceController.get_Status()
   v eWay.Core.WmiWrapper.ServiceWrapper.GetServiceStatus(String serviceName)
   v eWayWSImpala.CheckConfigurationProcessors.CheckTimerProcessor.Execute()
   v System.Collections.Generic.List`1.ForEach(Action`1 action)
   v eWayWSImpala.eWayWS.CheckStatus()

Version

All versions of eWay-CRM

Difficulty

High

Resolution

User under which application on IIS runs has no permissions to query Microsoft Windows services. eWay-CRM uses NETWORK SERVICE user who has this permission. In some cases, other users with limited permissions must be used.

You can set permissions only for eWayTimer to this user. At first, download SubInACL.exe. The application is no longer supported by Microsoft, it is not available on their web.

Permissions to query status of the service can be set in this way:

SubInACL.exe /service eWayTimer /grant=DOMAIN\eway=S

DOMAIN\eway is identification of user's account.

eWayTimer is default name of eWayTimer service.