Services Permissions

[Paul Hadfield]

All,

How can you find out which users have permissions to stop/start a given
service within a Windows 2000 member server?

I have a Windows 2000 domain of which I have used GPO to give Read, Stop,
Start and Pause permissions for the Print Spooler service to a security
group on the domain. However, if I then remove that policy and set it back
to it's default state of Not Defined, members of the security group I
configured can still Read, Stop, Start and Pause the Print Spooler service.
I have made the changes over 24hours ago now and so GPO should have
replicated across the domain by now.

When making changes to Computer Config/Windows Settings/Security
Settings/System Services can I only make these changes at certain places
(i.e. only at the Default Domain Policy)?

If I remove a policy will those servers/services it effected just revert
back to their default permissions or do I have to set them back with another
GPO?

Is there a way of setting services permissions locally on a 2000 member
server?

Thanks again in advance.

Paul.

 

[Saravanan]

Hi check this link.
http://support.microsoft.com/kb/257247/EN-US/

regards
saravanan