X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:from:date:message-id:subject:to
	:content-type; q=dns; s=default; b=woghkGqrXLr7G/Qf151ng+AeAYJ3Y
	sgx4eU/JHxyqmtoaGlAK2krUEpc+dvoXwtndkiAUPFXdNlMfFWKDIZ0ad8JHKi3F
	AjBJ4TS4B4PPQqXNSxWJ5+6sFfEAQL2Du1log4TTXujaBaKJyseSwnre1l8NsPRz
	fY6JRAx5v37mSs=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:from:date:message-id:subject:to
	:content-type; s=default; bh=q1np1FMXjDwmJwTVjkYl52D5tqo=; b=LGH
	1PBwOqWYqiW5EKt3aaW1tk2/EBe/OmQGSVYEH8ldxRtWWnv3FwxIoqg3PrW5ThWz
	DvzhdtxceptDc2gJWbq6uM9RYzFoa/GNs4SXIeoDN5G2ioDZzL1LO502dLThJAf/
	xUJba7gJi7HF8WY+9i5EaOGnHmbQ/SLS622mruHs=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-1.9 required=5.0 tests=BAYES_00,FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,SPF_PASS autolearn=ham version=3.3.2 spammy=logon, authentication, Medium, logins
X-HELO:	mail-yb0-f173.google.com
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:from:date:message-id:subject :to; bh=u5VMjyN3YrYQNTF/BTOYLr1twlzZUVii9NPq3eqWz1U=; b=WhjxRrcAkUAyu0pHTCrrE6/oOqSo2UMay5Jpp2QYxkM8ALXCB1+Xj3ZQwMqoiuTiaQ XNk3FKfDS2rQfSuOhnth99SFKHPCTbAN5ZLZXNN8i3wKGJT0EtrbuVmBGkATAgfe0xxv Eo9ajJvBulAVA1oBMIqFlJL3lgfxU+HcxKe/lqcNtHlnbbVEFWdr/sNHw/Q0kIbsU4+l FJsb+Mu94NEiWpdB/RNqds6nO8x4vcC20LPMLrcJu8E2oG1ZX+MFjNNT834MOsEY7wTs 8xci65aR+1uE/UY3RZuIPJBgXrt+/X2WgluSZE1FXNX7XQ28KiU5bsvfl5Aiz/eoKHo1 d8mQ==
X-Gm-Message-State:	APf1xPCWZRlW996zsQ7qgyni42Sk/2Y/Qk2hQ7TDUMZWArFHtgGXZKxG O849Vzx8zdOBCZkwXi2m63JtzRNqMMrddbnPsNdJlA==
X-Google-Smtp-Source:	AG47ELsQSFW1FPTeo15yJRPuD7d6DCV5d+KkZ0WT9UOyp/S3eelkus0z94PuzLtbjIMnsMCoqi7MdX7o0E8xyrTVl5I=
X-Received:	by 2002:a25:4cc6:: with SMTP id z189-v6mr269116yba.474.1519877171120; Wed, 28 Feb 2018 20:06:11 -0800 (PST)
MIME-Version:	1.0
From:	Steve Kelem <steve AT kelem DOT net>
Date:	Wed, 28 Feb 2018 20:06:10 -0800
Message-ID:	<CAJySyNLN7=ZFuh5Gjrf8vGKM0O8_--PHpSH+QzpEBfK3it+uTw@mail.gmail.com>
Subject:	Trouble running ssh-host-config
To:	cygwin AT cygwin DOT com

When I right-click cygwin.bat and run as Administrator, ssh-host-config -y
gets the following errors:

% ssh-host-config -y

*** Warning: Running this script typically requires administrator
privileges!
*** Warning: However, it seems your account does not have these privileges.
*** Warning: Here's the list of groups in your user token:

    None
    Users
    INTERACTIVE
    CONSOLE LOGON
    Authenticated Users
    This Organization
    Local account
    LOCAL
    NTLM Authentication
    Medium Mandatory Level

*** Warning: This usually means you're running this script from a non-admin
*** Warning: desktop session, or in a non-elevated shell under UAC control.

*** Warning: Make sure you have the appropriate privileges right now,
*** Warning: otherwise parts of this script will probably fail!

*** Query: Are you sure you want to continue?  (Say "no" if you're not sure
*** Query: you have the required privileges) (yes/no) yes

*** Warning: Can't set permissions on /var/empty!
*** Info: Generating missing SSH host keys
*** Warning: Can't create /etc/ssh/ssh_config because default version could
not be found.
*** Warning: Check '/etc/ssh/defaults'
*** Warning: Can't create /etc/ssh/sshd_config because default version
could not be found.
*** Warning: Check '/etc/ssh/defaults'
*** Info: Updating /etc/ssh/sshd_config file

*** Query: Do you want to install sshd as a service?
*** Query: (Say "no" if it is already installed as a service) (yes/no) yes
*** Query: Enter the value of CYGWIN for the daemon: []
*** Info: On Windows Server 2003, Windows Vista, and above, the
*** Info: SYSTEM account cannot setuid to other users -- a capability
*** Info: sshd requires.  You need to have or to create a privileged
*** Info: account.  This script will help you do so.

*** Info: It's not possible to use the LocalSystem account for services
*** Info: that can change the user id without an explicit password
*** Info: (such as passwordless logins [e.g. public key authentication]
*** Info: via sshd) when having to create the user token from scratch.
*** Info: For more information on this requirement, see
*** Info: https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-nopasswd1

*** Info: If you want to enable that functionality, it's required to create
*** Info: a new account with special privileges (unless such an account
*** Info: already exists). This account is then used to run these special
*** Info: servers.

*** Info: Note that creating a new user requires that the current account
*** Info: have Administrator privileges itself.

*** Info: The following privileged accounts were found: 'cyg_server' .

*** Info: This script plans to use 'cyg_server'.
*** Info: 'cyg_server' will only be used by registered services.
*** Query: Please enter the password for user 'cyg_server':
*** Query: Reenter:

/usr/bin/cygrunsrv: Error installing a service: OpenSCManager:  Win32 error
5:
Access is denied.

*** ERROR: Installing sshd as a service failed!

*** Warning: Host configuration exited with 4 errors or warnings!
*** Warning: Make sure that all problems reported are fixed,
*** Warning: then re-run ssh-host-config.

What am I doing wrong?
Thanks for any help you can give.
Steve

Cygwin 2.10.0-1
Windows 10 x64
Openssh 7.6p1-1
cyg_server exists as an account with admin privileges, as does my account.
Windows accounts as workgroup, not domain.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -