FIX: Windows could not start the Network Policy Server Service on Local Computer

This tutorial should work for other services as well.

Before we begin, you may have stumbled upon this tutorial while having a problem with another service. The tutorial may also work for another service. Ultimately, it’s about the permissions rather than the service itself. Googling on ‘Windows could not start the Service on Local Computer‘ should be sufficient.

FIX: Windows could not start the Network Policy Server service on Local Computer. Error: 0x80070005: Access is denied.

Let’s fix ‘Windows could not start the Network Policy Service on Local Computer.

  • Go to the following directory:
    C:\Windows\System32
  • Search for directory IAS.
  • Right-click it and select Properties.
  • Go to the tab Security.

Here you’ll see all users and groups that have permissions to this directory. The NETWORK SERVICE user needs full control over C:\Windows\System32\IAS.

  • Click Add.
  • Search for user NETWORK SERVICE.
  • Click OK.
  • Check Full Control and click Apply.
FIX: Windows could not start the Network Policy Server service on Local Computer. Error: 0x80070005: Access is denied.

You will get another popup asking if you really want to change a system directory. Click Yes.

FIX: Windows could not start the Network Policy Server service on Local Computer. Error: 0x80070005: Access is denied.

What’s up with dnary.xsd?

It is possible that you cannot apply the permissions on file dnary.xsd.

  • Open the Properties for dnary.xsd.
  • Go to the tab Security.
  • Open Advanced.
  • Change the Owner to yourself.

Now you can add NETWORK SERVICE to this file specifically.


There is a question mark on your map!

This post is a side quest from another tutorial. I ran into this while troubleshooting another issue.

There is a question mark ‘?’ on your map!

Published by

Bas Wijdenes

My name is Bas Wijdenes and I work as a PowerShell Automation Engineer @ Wortell.

Leave a Reply

Your email address will not be published. Required fields are marked *