13

I want to host wcf in window service. I've done several times before without any problem. This time After I installed the service and click on start I get the following error in EventViewer.

Service cannot be started. System.ServiceModel.AddressAccessDeniedException: HTTP could not register URL http://+:.../.../. Your process does not have access rights to this namespace (see http://go.microsoft.com/fwlink/?LinkId=70353 for details).

When I host the same service, same address on ConsoleApplication - all right.

I saw the questions here and here, but none of the solutions helped me.

Does anyone have an idea?

Community
  • 1
  • 1
Harry
  • 1,686
  • 2
  • 15
  • 21

2 Answers2

17

As for your answer, that's a bit of shotgun debugging. You now have a network service with administrator privileges:

LocalSystem Account (Windows):

The LocalSystem account [...] has extensive privileges on the local computer, and acts as the computer on the network. Its token includes the NT AUTHORITY\SYSTEM and BUILTIN\Administrators SIDs; these accounts have access to most system objects.

Most services do not need such a high privilege level. If your service does not need these privileges, and it is not an interactive service, consider using the LocalService account or the NetworkService account. For more information, see Service Security and Access Rights.

So you'd better run this service as NetworkService, and give it the proper permissions to use the port you're trying to use as explained in Configuring HTTP and HTTPS:

netsh http add urlacl url=http://+:80/MyUri user="NT AUTHORITY\NETWORK SERVICE"
Community
  • 1
  • 1
CodeCaster
  • 147,647
  • 23
  • 218
  • 272
7

I found that changing installer account to LocalSystem did the job :-)

Harry
  • 1,686
  • 2
  • 15
  • 21
  • 3
    It took me awhile to find how to do this, so here are the steps: Open the services program (Start -> view local services in Win 7), finding your service in the list, right click on it, click properties, the go to the log on tab. I changed mine to my Active Directory account and password. – AlignedDev May 03 '13 at 13:24
  • If you want to change the service itself, without change service instance manually. Change the property "Account" of the ServiceProcessInstaller. – Harry May 21 '13 at 12:56