windowswindows-servicesregistrywindows-10applocker

Unable To Set Application Identity Service to Start Automatically


On Windows 10 Enterprise laptops I found the AppIDSvc was stopped and its Startup Type was set to Manual (Trigger start). When I attempted to change the Startup Type to Automatic via the GUI, it produced the error "Access is denied" even though services.msc from run from an elevated cmd prompt.

The only way to work around this was to edit the registry and changing Start=2 at HKLM\SYSTEM\CurrentControlSet\Services\AppIDSvc.

I was able to start the service manually. Also I have modified the registry permission to "Full Control". I tried to reinstall Windows from ISO but the problem persists. Unfortunately Microsoft doesn't reply to this problem clearly on MSDN and Support Forum.


Solution

  • Microsoft docs say: Starting with Windows 10, the Application Identity service is now a protected process. Because of this, you can no longer manually set the service Startup type to Automatic. They provide a way to start with GPO, although I don't have such setting as they are referring to. https://technet.microsoft.com/en-us/itpro/windows/keep-secure/configure-the-application-identity-service