First: Running One-Liner to get services that don’t have Quotes in it’s Path

wmic service get name,displayname,pathname,startmode |findstr /i "auto" |findstr /i /v "c:\\windows\\\\" |findstr /i /v """

Second: Check if we have write access to the C:\ dir

icacls c:\\

And we don’t have access to do that!