If you try to start the AOS service and get Error 5: Access is denied you should check that the service account is Local Admin. We have had installations the work fine but after a modelstore update run into problems and it was because this. Why the service was allowed to start before the update is unclear but should be seen more as pure luck. The account should be part of Local Admin.
Error 5: Access is denied