diff --git a/src/driver/toks_driver_ctx.c b/src/driver/toks_driver_ctx.c
index 44fd9ef..8f460f7 100644
--- a/src/driver/toks_driver_ctx.c
+++ b/src/driver/toks_driver_ctx.c
@@ -365,7 +365,11 @@ int toks_get_driver_ctx(
 
 	if ((ntapi->tt_open_dev_object_directory(
 			&ctx->hsvcdir,
-			NT_DIRECTORY_ALL_ACCESS,
+			NT_SEC_READ_CONTROL
+				| NT_DIRECTORY_QUERY
+				| NT_DIRECTORY_TRAVERSE
+				| NT_DIRECTORY_CREATE_OBJECT
+				| NT_DIRECTORY_CREATE_SUBDIRECTORY,
 			toks_service_name,
 			&toks_daemon_default_guid)))
 		return toks_get_driver_ctx_fail(meta);