Right to start/stop system services

[Guest]

Hello All,

Does anybody know how to allow/restrict users to start/stop some services?
Is there a possibilty to do it? I checked GP and couldnt find anything.

Any ideas?

Thanks in advance.

Mykhaylo

 

[Steven L Umbach]

There are a couple of ways such as using Group Policy/computer
configuration/Windows settings/security settings - services [you will not
see that in Local Group Policy], using secedit to import a security template
with the service setting defined as you need, or using subinacl. The link
below describes more and the user may also have be able to start services
that the service depends on. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;288129

 

[Torgeir Bakken \(MVP\)]

Hello All,

Does anybody know how to allow/restrict users to start/stop some services?
Is there a possibilty to do it? I checked GP and couldnt find anything.

Any ideas?

Hi,

Relevant for Windows XP/Win2k3 Server also:

HOW TO: Grant Users Rights to Manage Services in Windows 2000
http://support.microsoft.com/?kbid=288129


For method 3 in the article above:

A new, bug-fixed version of SubInACL.exe is available for download here
(Win2k/WinXP/Win2k3):

http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b

SETACL (freeware) at http://setacl.sourceforge.net/ can also set permissions
on local or remote Win32 services.