Give Users permission to start services

[Andrey Tarasevich]

Hello

Let's say I want to be able to start "Secondary Logon" service on
demand, i.e. I set this service's startup to "Manual". This creates no
problems under 'Administrator' account - the service starts
automatically first time I use 'runas' command. However, under some
account from 'Users' group 'runas' command doesn't work unless
"Secondary Logon" service is already running. It looks like the reason
for this problem is that 'Users' are not allowed to start services. Is
there any way to give 'Users' that permission?

 

[Torgeir Bakken (MVP)]

Let's say I want to be able to start "Secondary Logon" service on
demand, i.e. I set this service's startup to "Manual". This creates no
problems under 'Administrator' account - the service starts
automatically first time I use 'runas' command. However, under some
account from 'Users' group 'runas' command doesn't work unless
"Secondary Logon" service is already running. It looks like the reason
for this problem is that 'Users' are not allowed to start services. Is
there any way to give 'Users' that permission?

Hi

Relevant for WinXP/Win2k3 as well:

HOW TO: Grant Users Rights to Manage Services in Windows 2000
http://support.microsoft.com/?kbid=288129

For method 3 in the article above:

A new, bug-fixed version of SubInACL.exe is available for download here
(Win2k/WinXP/Win2k3):

http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b

SETACL (freeware) at http://setacl.sourceforge.net/ can also set permissions
on local or remote Win32 services.