When I try to start a service I created in Visual Studio I receive the following error:
System error 5 has occurred.
Access is denied.
I am running the command line with elevated privileges, so it's not that problem. Is there any place I can look to see what error is occuring.
To get it to work I needed to add permissions to the output bin\debug folder for my service project.
The Local Service account didn't have permissions to the output .exe file, and this was why the error was occuring.
I see you've fixed the problem; but in reality, you shouldn't normally be running the service from a project's bin folder anyway - the files should be put somewhere project and profile independent (for example, under program files). For debugging purposes (when it will be in the bin folder), you can detect whether it is a service in Main(), and if it is being run interactively just run the service code directly, rather than the usual service-start setup.
You can detect either by adding a command line argument, or you can try checking Environment.UserInteractive.
I had the same problem because my project and its source code was in a folder that had NTFS's Encrypting File System (EFS) enabled. This caused by compiled assemblies being encrypted aswell and the user running my service didn't have permissions to decrypt them. Removing EFS was the easy solution for this. It can be done by command line using CIPHER.EXE, which is a Windows tool.
Do not simply start the service under a different username or admin. (Unless your service actually requires admin privileges of course!) This is a security hole and creates a bad user experience.
The actual issue is that the service hasn't been assigned any permissions in the first place.
However, it must be noted that Microsoft didn't exactly make them easy to change - service permissions are similar to regular file permissions but unfortunately cannot be altered with a simple right click. They can however be read via:
sc.exe sdshow <service name>
And written via:
sc.exe sdset <service name> <permissions>
<service name> is your service name.<permissions> is the permissions in SDDL format.So use sdshow to get the permissions, then sdset to update them with your requirement(s). SDDL a cacophony of seemingly random letters beyond the scope of this post and more reminiscent of Unix than Windows.
In short instance adding the descriptor (A;;RPWP;;;WD) would allow (A) everyone (WD) to start (RP) and stop (WP) the named service.