Software⏱️ 3 min read📅 2026-06-11

How to Fix: PsExec error - "Couldn't install PSEXESVC service: Access is denied

Psexec error - Access is denied when trying to install PSEXESVC service.

Quick Answer: Try adding the LocalAccountTokenFilterPolicy key in the registry for each target, set to 1, and see if that resolves the issue.

📋 Table of Contents

  1. 🔍 Why This Happens
  2. ✅ Best Solutions to Fix It
  3. ✨ Wrapping Up

The 'Couldn't install PSEXESVC service: Access is denied' error occurs when the PsExec.exe application is unable to access the local system's services registry to install or configure the PSEXESVC service. This issue affects users who are using PsExec to run scripts on remote computers, particularly those with UAC enabled.

This error can be frustrating as it prevents the user from executing their script remotely and may impact productivity. However, by following the steps outlined in this guide, you should be able to resolve the issue and continue using PsExec successfully.

🔍 Why This Happens

  • The primary reason for this error is that the PsExec.exe application requires administrative privileges to install or configure the PSEXESVC service. When UAC (User Account Control) is enabled, it restricts access to certain system services and registry entries, causing PsExec to fail when trying to install the PSEXESVC service.
  • An alternative reason for this error could be that the account being used by PsExec does not have the necessary permissions to access the local system's services registry.

✅ Best Solutions to Fix It

Enabling UAC and Granting Necessary Permissions

  1. Step 1: Step 1: Enable UAC on the target computer. To do this, open the Control Panel, navigate to User Accounts, and select User Account Control Settings. Move the slider to the right to enable UAC.
  2. Step 2: Step 2: Grant the necessary permissions to the account being used by PsExec. Open the Command Prompt as an administrator and run the command 'icacls %systemroot% emp emp.* /inheritance:r' to reset the inheritance of the temp directory. Then, run the command 'icacls %systemroot% emp emp.* /setowner:BID {0}' where BID is the SID of the account being used by PsExec.
  3. Step 3: Step 3: Restart the target computer and try running the script again using PsExec.

Using an Alternate Account or Disabling UAC

  1. Step 1: Step 1: Use an alternate account that has the necessary permissions to access the local system's services registry. You can do this by modifying the script to use a different username and password.
  2. Step 2: Step 2: Disable UAC on the target computer. To do this, open the Control Panel, navigate to User Accounts, and select User Account Control Settings. Move the slider to the left to disable UAC. However, be aware that disabling UAC may introduce security risks.

✨ Wrapping Up

By following these steps, you should be able to resolve the 'Couldn't install PSEXESVC service: Access is denied' error and continue using PsExec successfully. Remember to always test your scripts on a non-production environment before running them on production systems.

Did this fix your problem?

If not, try searching for specific error codes.

🔍 Search Error Database

❓ Frequently Asked Questions

🛠️ Related Fixes

How to Fix: Pc crashes shortly after launching game (rainbow

Fix Pc crashes shortly after launching game (rainbow six siege). Compl

How to Fix: Installing an APK on a locked down phone

Installing an APK on a locked down phone: Try using a rooted device, e

How to Fix: New PC build- no signal and no clue

Fix New PC build- no signal and no clue. Complete troubleshooting guid