Failed to enumerate objects in container. Why this happens. Adding the command to change the ownership of objects to TrustedInstaller in the context menu of the explorer

Hello friends! The other day, once again, I stumbled upon an error when starting some system services. Why say that again? The fact is that I meet with her already   not for the first time, but somehow I could not get to the description of the ways by which I successfully coped with error 5.

So we meet several possible solutionsthat can help you if you find problems with starting services, namely " Errors 5. Access denied". In general, I will first describe the very essence of the error I am talking about, so that you can identify the same problem or something completely different.

This article describes the supported and unsupported methods for undoing or restoring changes to the following items. You may need to check the following security settings to resolve the permissions issue. Below are the parameters defined in the protection models.

The following tools are available to troubleshoot various security areas. The final group of results. Recommended steps for analyzing and configuring security. This utility allows you to filter the results and save them to a file for the next revision. You can use this tool to resolve security issues with file access and the registry. For example: you can filter the "result" after several attempts to "reject".

So, opening the services menu and selecting the item I need, I get into their properties, where in the item on how to start the service, I set the value to "Automatic" and also click on the "Start" button to start it immediately. But alas, instead of a successful start, a small window is displayed on the screen, with a rather strange message that the service could not be started due to “Error 5. Access is denied”.

For more information, click here. Download from here or perform direct monitoring. Click the link below for more details. It can be used to view information about the initial value of the service, so you can change or deactivate it. Recommended procedures and additional Information   for authors of access control lists.

The following links. For users, system developers, and administrators who need to, refer to the links available at the end of this article. Check the name, publisher, or location information displayed in the dialog box. If none of this information matches, we recommend that you click Cancel.


Security settings blocked the execution of a signed application with an expired certificate or are not yet valid. For security, applications must now meet the requirements for high or high security settings or should be part of the list of site exceptions that can be launched.


  • Message.
  • Security settings blocked the execution of an unprotected application.
It is recommended not to run such an application.

This message surprised me that there was a lack of rights, although I worked at the computer by logging in using the system administrator account, and as you know, all possible rights to change the properties and settings of the operating system are present.

How to solve the problem with Error 5?

Solutions to this type of problem, namely, correcting the causes of the “error 5. Access denied”, when launching services, there are not a few, it all depends on the situation that the user encountered. Further, as usual, I will not describe one hundred percent method that will help everyone, since there is no such thing, but I will write about how I would come out of this situation with a positive result.

Such applications have the highest level of risk, since the publisher is not identified, and the application may be given access to personal information on the computer. Displayed message: security settings blocked execution of self-signed application. To ensure security, applications should now meet the requirements for high or high security requirements or should be part of the list of site exceptions that may be running.


Name of the author of the publication: no published author. . This feature protects end-user systems from unauthorized developers who used stolen or illegally purchased certificates to sign applications.

Some examples of the correction of error 5, I found on the network, to others I was getting myself. In general, let's see what helped me in my practice to get rid of the problems with the launch of services, well, and you try to do the same at home, perhaps one of the options I have suggested will work for you.

“Error 5. Access is denied” when starting system services, solutions

1.   Opening full access to the drive "C".   I do not know why this is so, but I came across computers where it’s safe system disk   rights were set exclusively for reading and no longer on anything, and this parameter was set for all accounts. But, as soon as I returned all security ticks, error 5 disappeared forever, but the service started its work without any problems.

To return the rights, you need to go to the properties of the system disk "C" and go to the tab " Security". Having missed the list of users and groups, we go down to the buttons “Change” - “Add”.

In the area that appears, type the word “ Everything”, Which means that we will establish the same access rights for absolutely all users of the system.


If everything is so, then in the previous step you did not make mistakes, click on “OK”.

For those who are still windows user   XP, you should pay attention to the fact that by default you may not see the "Security" tab. In order to return it to its place, follow a few simple steps.

  1. Open any folder;
  2. From above click on “Service”;
  3. "Folder properties";
  4. "View";
  5. In the list additional parameters   We remove the mark from the use of simplified general access.

After that, we perform the above described actions and, of course, we check if you managed with this method to cope with error 5 or not.

2.   Also, there is another way that I got on the Microsoft support pages. Seeing this advice in the comments, I decided to try it and the problem with error 5 when starting the service, I decided.

The first step will be opening command line   on behalf of the administrator, if you are exactly on this account, then you can not soared and just open cmd using the "Run".


Now in the appeared window we register this: net localgroup admin / add networkservice (Important: if you have English. OS then instead of admin. specify the Administrator) and click on the "Enter" key.

Then we do this: net localgroup Administrators / add localservice . (Administrators)


When finished with the commands, close the command prompt window and restart the computer.

If the commands were entered correctly and you were lucky, then error 5, which prevents services from starting, should disappear, and the services themselves will start without any access denied messages.

3.   We are trying to fix the error with access denied when starting services using the registry of the operating system.

But, before we rush to crush our registry, we first need to find out the name of the service that does not want to run. To do this, in the list of services, open the properties of the service we need and look at the line “ Service name". Remembering it go directly to work with the registry.

Registry Editor - run it using the "Run" window. If you do not understand what they mean, then you.

You should open up big list   services arranged in alphabetical order. In order to understand what kind of service we need, I said to see her name in the properties. So we are looking for a section with the appropriate name, right-click to bring up the section menu and select the line “ Permissions».


It should display the same security setting as I described in the first paragraph. In general, we are looking at what would be installed in the "Administrators" and "Users" groups. full access.


  If they are absent there at all, then we correct this matter, in the same way as I showed it at the beginning of the article.

4.    Consider another point that is also associated with access to drive C, but this time not all users, namely LOCAL SERVICE.

So, again we go into the security properties of the system disk. Next, after the list of users and groups, click on the "Add" button.


In the window that appears, click on "Search". As a result, a list should appear from which we need to select "" and click on the "OK" buttons.


This group should be added to the user list, now for going down a little lower to the “Permissions for LOCAL” window, set all possible checkboxes and apply the changes.

In theory, the service after that should start, well, but error 5, without a trace.

5.   Alternatively, you can also disable or delete your antivirus and try to start the service without it. The fact is that some antivirus software   besides software   establish in addition their services that could take away from you the right to enable or disable certain local services.

6.   Well, one hundred percent option, of course, is, I know that not everyone will do it, but I can tell you with confidence that it will definitely help get rid of error 5 with the denial of access to launching the service, well, it will also relieve the computer from other glitches and problems 🙂

At this point I’ll probably finish my article, but if you can use at least one of the above options, then do not forget to join us.

Consider a situation where when you try to change the NTFS-rights of a folder or file, an error of applying security occurs:

Error applying security settings to: drive: \\ Folder name \\ file name Failed to enumerate objects in the container. Access denied

In order to set new permissions for such an object, you need to change the owner.

Why does this happen

Such an effect can be obtained if for example:

  • you copied / moved files from another computer;
  • connected another's hard drive;
  • reinstall the system.

The essence is the same: your account or the group to which it belongs does not have access rights to change the object's security settings.

How to change the owner of a folder or file

Suppose we have a folder c: \\ temp and we cannot change the security settings of the files inside it:


What should be done:

1. Call the folder properties.

2. Click the tab Security.

3. Click the button Additionally:


5. Click Additionally:


6.   Search:

7. Select the user or group you want to assign as the owner of the object, and click OK:

8. Click Ok:


9. Check the box Replace owner subcontainers and objectsif needed, and click Ok:

(in our case it is necessary to change the owner of all attached files)


Now you need to wait until the end of the application of the new owner for all files. This can take quite a long time if there are many files. After the process is completed, you can change the NTFS user rights on the Security tab.

If, when you try to change the owner, the message still pops up

If at the end you still have the error “failed to make an enumeration”, then surely one or several nested objects not only changed their owner, but also disabled inheritance. You need n rove permissions of all subfolders and files, find an object with disabled inheritance and andchange the owner specifically for the nested object by calling its own properties.

Like this article? Share with friends: