Diagnostic Policy Service wont start

*Edit* Don't be afraid of the code. If you don't understand it, but still know a little bit about computers, skip it and read on. I could use all the help I can get with this problem. */Edit*

Hope this is the right spot for this:

I've tried all I could, searched the internet and couldn't find anything. I get this message whenever I go into my services and try to start the diagnostics policy service.

"Windows could not start the diagnostic policy service service [sic] on local computer.
Error 5: Access is denied

It could well be that Some permission required to run this service was given to the administrator account and not the correct group/name.

I kinda need this service even though it isn't vital because we all know how tricky computers can be, I'd love to keep this service to find out what is wrong with my internet connection in its off days.
Also, I don't have a sys restore

This is the rest of the error in Event Viewer:

The Diagnostic Policy Service service terminated with the following error:
Access is denied.

Log Name: System
Source: Service Control Manager eve...
Event ID: 7023
Level: Error
User: N/A
OpCode: Info
More Information: Event ID 7023
Logged: [time]
Task Category: None
Keywords: Classic
Computer: [Name]

- System

- Provider

[ Name] Service Control Manager
[ Guid] {555908D1-A6D7-4695-8E1E-26931D2012F4}
[ EventSourceName] Service Control Manager

- EventID 7023

[ Qualifiers] 49152

Version 0

Level 2

Task 0

Opcode 0

Keywords 0x80000000000000

- TimeCreated

[ SystemTime] 2010-09-01T01:03:13.000Z

EventRecordID 94701

Correlation

- Execution

[ ProcessID] 0
[ ThreadID] 0

Channel System

Computer Gaming-Computer

Security


- EventData

param1 Diagnostic Policy Service
param2 %%5

I tried restore, but did not seem to work.

I tried this:

From the Microsoft Website:
The prevent these errors message, change the Server and Computer Browser services to Manual Startup:

1. Click Start, point to Settings, and then click Control Panel.
2. Double-click the Services icon.
3. In the list of installed services, click Computer Browser.
4. Click Startup.
5. Change the Startup Type to Manual, and then click OK.
6. In the list of installed services, click Server, and then click Startup.
7. Change the Startup Type to Manual, and then click OK.
8. Click Close.
9. Restart your computer.
   
   I don't really know the implications of changing these services to manual. Windows Vista Service Pack 2 Service Configurations by Black Viper says that even bare bones keeps them both automatic, so my guess is its a good idea not to disable these.
   
   Disabling them did not do a thing, so I restarted them. Anyone know of anything else I can do?

tried doing this:

To review the error code:

1. Click the Start button, Run, then type cmd to open a command prompt.
2. Type sc query service_name (where service_name is the name of the service) at the command prompt to display the general Windows WIN32_EXIT_CODE error code that the Service Control Manager encountered when trying to stop the service. Note: If the WIN32_EXIT_CODE is zero, then SCM did not attempt to stop the service because the error was detected first.
3. For descriptions of the Windows error codes, either see System Error Codes (Windows), or type net helpmsg exit_code (where exit_code is the 4 digit number of the error code) at the command prompt to display the meaning of the WIN32_EXIT_CODE. For more information about the net helpmsg command, see Content not found. For more information about the sc command, see SC Command Reference Help (Sc).
   
   This is off of the Microsoft website that the event viewer led me to: Event ID 7023
   
   Typed in Cmd prompt (Ran As Admin): sc query Diagnostic Policy Service
   
   Didn't seem to work
   
   Could be wrong and not what I was supposed to do, but I'm mostly computer illiterate.

As well, I did this and it did not work; off of microsoft's website

In Windows Vista

• Click Start and then type cmd in the Start Search box.
• In the results area, right-click cmd.exe, and then click Run as administrator. You will be prompted to type the password for an administrator account. Click Continue if you are the administrator or type the administrator password. Then, click Continue.

In Windows Vista, type the following command, and then press ENTER:secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose

Tried doing this but could not locate the MpsSvc account to give it the permissions, and when I tried it couldn't find it.

The error means "Access is denied". This may happen if the "MpsSvc" account doesn't have the necessary permissions for the related registry keys.

For the NT Service\MpsSvc account, it needs permissions for the following keys:

• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch
  permission needed: Query Value;Set Value
  
  Done
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy
  permission needed: Full Control;Read
  
  Done
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy
  permission needed: Full Control;Read
  
  Done

For the DHCP Client service, the issue may occur if the "NT Service\DHCP" account does not have the necessary permissions for the following keys:

• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp
  permission needed: Query value, Create value, Enumerate Subkeys, Notify, Read Control
  
  ! Done except I cannot find any Create value
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp\Configurations
  permission needed: Full Control, Read
  
  Done
  
  
  For the "Diagnostic Policy Service" service, the issue may occur when the account Trustedinstaller is missing the permissions for the key below:
  
  
  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DPS\Parameters
  permission needed: Full Control, Read
  
  Done

Is there anyone able to help out, or did I post this in the wrong section on the forums?

Bump*

Anyone? If this isn't the right place for this, may This thread be moved to the right place?

This was something else in Command Prompt I tried

Microsoft Windows [Version 6.0.6002]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Windows\system32>net start mpssvc
The requested service has already been started.

More help is available by typing NET HELPMSG 2182.


C:\Windows\system32>sc query mpssvc

SERVICE_NAME: mpssvc
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

C:\Windows\system32>netsh int ip reset c:\resetlog.txt
Reseting Echo Request, OK!
Reseting Global, OK!
Reseting Interface, OK!
A reboot is required to complete this action.


Also, just now gave these member groups to the administrator account. Not recommended?



Anyone have anything?

I have a sidebar app that connects to xm online radio, used to work but now connects, gets the information, displays song title and everything but doesn't play music. I have a similar thing on firefox toolbar and that one is able to play, I am able to connect to the internet. I am able to play other sounds within the system and itunes. Bonjour, like xm radio, cannot connect and has issues. I think these all suffer from the same source but I cannot find it to fix it.

Here is a list of installed programs. Understandably many are useless and I need to take the time to uninstall them.

I changed Diagnostic Policy Service to log on as local system account instead of this account as per a suggestion, but now get this error:

Windows could not start diagnostic policy service on local computer.

Error 1079: The account specified for this service is different from the account specified for other services running in the same process.

Is there a way to change the other services log on, and a way to find out what those services are?

Edit - Okay I changed it back almost positive that was wrong. But perhaps my other services are wrong as well...? Blackviper time

Here are my settings for my services if it helps?

Hello,

Sorry about this late reply. I will try my best, but I am not sure I will have any more success than you

First, let us try and gather some information:

SFC:

Run sfc /scannow from the Command Prompt, and then parse the logs, and upload. I don't think this is the problem, but we may as well check the easy to start with. To parse the logs, see the top yellow box here: http://www.vistax64.com/tutorials/66978-system-files-sfc-command.html

Get me a Registry Export:

Run reg QUERY HKLM\SYSTEM\CurrentControlSet\Services\DPS /s > %userprofile%\Desktop\reglook.txt from the Command Prompt. Upload (not copy and paste) the new reglook.txt, now on your Desktop.

Get me a Registry Permissions Export:

Download subinacl.exe from here: Download details: SubInACL (SubInACL.exe)

I know Vista is not listed, but it works.

Run cd C:\Program Files (x86)\Windows Resource Kits\Tools from the Command Line. I think this is right, I have never tried this particular program on x64. If not, cd C:\Program Files\Windows Resource Kits\Tools will do.

Now, subinacl /outputlog=%userprofile%\Desktop\regpermlook.txt /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DPS

Again, please upload regpermlook.txt from your Desktop, rather than copy and paste.

Thanks!

Richard

Hey, thanks for the replay

I got impatient thinking no one could help, but sometimes I just need to grow up lol

Alright, here is the SFC View attachment sfcdetails.txt

And the Registry Export View attachment reglook.txt


I downloaded subinacl.exe but could not seem to do any of these in the elevated command prompt:

"Run cd C:\Program Files (x86)\Windows Resource Kits\Tools from the Command Line. I think this is right, I have never tried this particular program on x64. If not, cd C:\Program Files\Windows Resource Kits\Tools will do."

These are the commands and replies:

C:\Windows\system32>cd C:\Program Files (x86)\Windows Resource Kits\Tools
The system cannot find the path specified.

Then for the second one:

C:\Windows\system32>cd C:\Program Files\Windows Resource Kits\Tools
The system cannot find the path specified.


Don't know whats up with all that, But some random information: my drive is in fact labeled C:.

I don't know anything more about this part:

"Now, subinacl /outputlog=%userprofile%\Desktop\regpermlook.txt /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DPS"

unless it only directly follows the last command that did not work, and therefore keeps me from accessing it.

I really appreciate your help

Edit**If I was supposed to use subinacl.exe as a separate command prompt, it wouldn't let me, but it seems familiar and I am sure somewhere in my messing with windows I came across some tool that disables its features. I will try to recall it, some service or something. I'll work more on it later tomorrow, its 5am o.0

Hello,

Don't worry. I have no problems with you trying things. It makes things easier for me, you may find the fix, and everybody else did (very slightly) find it a difficult question. If you have any bright ideas, do try them. I eventually took the plunge with this thread. Coincidently, another one just like this thread has popped up. I wonder why.

Thanks for those uploads. Unfortunately, I made a massive mistake in my last instructions I meant to say that once you have downloaded that subinacl.exe file, you have to double click on it and install it. Sorry, that was my mistake. Please forgive me

Now, the instructions should work. If they still do not, download the attached file to the Desktop. Then follow these instructions:

Start Command Prompt. Type cd %UserProfile%\Desktop and press enter.

Copy and paste into that same Command Prompt window: subinacl /outputlog=%userprofile%\Desktop\regpermlook.txt /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DPS and press enter.Now upload the regpermlook.txt file from your Desktop.

Sorry about the confusion.

Richard

Alright, no problem.

I tried to run the subinacl but it only seemed to make a command prompt open and close real quick, but perhaps that is normal. I followed all your new instructions and here is the regpermlook.

View attachment regpermlook.txt


This is interesting to me and I'd love to figure out the problem and learn a bit from whats going on with this computer. Like I said before, the only things I can think of that have been messed with are permissions and services. I double checked my services so there must be some permission somewhere that is absent that this service needs in order to run.

If you do figure this out, you'll have done something most others haven't, simply because I've not come accross any solutions in all the weeks I've been searching the internet. If not, well. Then I'll just have to live with it until I crack and get Win7

Tried:

The DHCP Client service does not start after you upgrade a Windows 2000 Server-based domain controller to Windows Server 2003

I followed these steps but it did not seem to work. perhaps if I rebooted, but I will do that (reboot) tomorrow and post

I found this post:

" 12-06-2009
sunopop


Posts: n/a


Re: Cannot start the Diagnostic Policy Service

..while searching everywhere to find an answer to this issue and
realizing there is no specific answer out there that I could find. I
was able to put 2 and 2 together thru all the readings and this is what
I was able to do to my system....low and behold it is working great
now.

go to the security properties of your C: drive and make sure that USERS
and CREATOR OWNER are included in the group.

open your registry editor as an administrator,
goto...HKEY_LOCAL_MACHINE...SYSTEM...ControlSet001 ...Services...WdiServiceHost

make sure the Object name is NTAUTHORITY\LocalService
Do the same for the WdiSystemHost folder and the DPS folder

these have to match in order to work.

Reboot and try your diagnose and repair option for internet connection,
it should work now.


--
sunopop

That registry fix is safe, and I want you to try it. However, I am going to add to it slightly:

Please perform a regedit > File > Export > All backup, AND an ERUNT registry backup: ERUNT and NTREGOPT

Just in case something goes wrong!

Open your registry editor as an administrator,
goto...HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WdiServiceHost

make sure the Object name is "NTAUTHORITY\LocalService"
Do the same for the WdiSystemHost folder and the DPS key (folder)

Now repeat this for HKEY_LOCAL_MACHINE...SYSTEM...CurrentControlSet ...Services...WdiServiceHost

and the other two keys mentioned.

Thanks!

Richard

P.S. If things get worse, restore from the regedit backup, though I don't think they will.

Basically,

HKEY_LOCAL_MACHINE>SYSTEM>ControlSet001>Services>WdiSystemHost and HKEY_LOCAL_MACHINE>SYSTEM>CurrentControlSet>Services>WdiSystemHost both have the ObjectName value set to LocalSystem instead of NT AUTHORITY\LocalService. All the others have the correct ObjectName value.

got this error for both of them-

"Cannot edit ObjectName: Error writing the value's new contents."

So this is likely my problem right here.

DustSailor said:

HKEY_LOCAL_MACHINE>SYSTEM>ControlSet001>Services>WdiSystemHost
Tried to edit object name but got this error-

"Cannot edit ObjectName: Error writing the value's new contents."

So this is probably my problem right here.

Click to expand...

Ah ah! That is good! Try the rest and report back.

sorry, that was an early post that you responded to. I have the edit up. The others hold true to the proper values, it is only those two that are incorrect. Maybe its to do with the service's "log on as" settings?

So after editing the services (registry is now correct), I still get the original error and Diagnostic Policy Service still wont start

I am now getting this error in event viewer as well: (I'll post some others too but don't think they are related)

Event ID: 1108
The event logging service encountered an error while processing an incoming event published from Microsoft-Windows-Security-Auditing.
Source: Eventlog

Not a big error though, don't know much about auditing but guess they are like reports the computer makes up or something? It doesn't effect me that I'm aware of so it isn't something I'm worried about looking into.

Here are some others
Evnt ID 1002
The program iTunes.exe version 10.0.0.68 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Problem Reports and Solutions control panel. Process ID: e30 Start Time: 01cb4fed6f054199 Termination Time: 2098
Src: Application Hang

not important, a one time occurrence deal

Evnt ID 100
412: ERROR: read_msg errno 10054 (An existing connection was forcibly closed by the remote host.)
Src Bonjour Service

this one may have more to do with my problem as I believe bonjour is effected by it somehow. think it doesn't allow it to function like its meant to, even though its a good install and i have a very good connection to the internet

evnt id 7
The device, \Device\CdRom0, has a bad block.
src cdrom

this one is new, apparently something is up with my cd rom (it functions properly... i think)

WARNING
evnt id 1003
Your computer was not able to renew its address from the network (from the DHCP Server) for the Network Card with network address 001FC60110C2. The following error occurred:
The operation was canceled by the user.. Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.
src Dhcp-Client

I see Dhcp-Client come up a lot in research, perhaps my problem can be found with whatever the Dhcp-Client is. some settings that can be changed perhaps?

evnt id 134
NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time-nw.nist.gov,0x9'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)
src time-service

this one isn't anything, every once in a while it cannot connect for any number of reasons and posts an error. i can sync the time manually and it works, so i know it is connecting


Also, when I resume from hybrid sleep, my network connection is lost and does not automatically get it back. Since I cannot have the diagnostics policy service running, all i can do is disable then enable my wireless and wired connections to make it work again. Dunno if this is related or just some other hard to find problem