Windows sysinternals

390 Part III Troubleshooting—”The Case of the Unexplained...”
He also noticed that other songs that played were in the default Music folder, while the one
that failed was in his Documents folder. He compared the permissions between the songs
that played and the one that failed, and he found that those that played granted “Read &
execute” access to the WMPNetworkSvc service. 1 He added that permission to the file that
had failed to play. (See Figure 16-14.) The song then played correctly. Problem solved.
FIGURE 16-14 Granting access to the WMPNetworkSvc service.
The Case of the Crashing Proksi Utility
The user had been using a utility called Proksi for over a year when it started crashing. To
diagnose the issue, he ran Procmon while reproducing the issue. After the utility crashed,
he stopped the trace. Scanning through the results (shown in Figure 16-15), he found an
“ACCESS DENIED” result when attempting to open a file for Generic Write permissions.
FIGURE 16-15 Procmon reports “ACCESS DENIED” right before AeDebug handles the crash.
1 In Windows Vista and newer, services are assigned security identifiers (SIDs), and it becomes possible to grant or
deny access to specific services.
www.it-ebooks.info