It probably means that the account logging on the service doesn't have
authority to access
the security descriptors (security id's or acls) of the file/directory.

The account must posses the following user rights:
        Backup Files
        Restore Files
        Access Auditing and Security Log

Domain/Domain accounts posses these rights by default, the Backup Operators
group has the first two but not
the third.  The local system account (the default account for logging on
services) also has all three rights but be aware that this accounts has no
domain authority so attempting to access remote NTFS file/dir security info
will fail.

Hope this helps ......


Pete Tanenhaus
ADSM Client Development