Allow Access to Start Service

[E. Heaton]

I'm trying to run a program that creates a service in
WinXP as a Limited user. I get an access denied error when
ever it try to start the service.

Is it possible to give the User group permission to start
this program as a service, with out giving them the
permission to start any other program as one?

I tried giving them full access to the executable, but
that gave me the same result.

 

[Roger Abell]

See if you can get a copy of NTrights tool of the
resource kit, as it can set the rights on individual
services. However, it is rather odd that a service
needs to be established repeatedly. Why is this
not just being installed using an admin account
and then set to start ??

 

[E. Heaton]

I'm using the tool from SysInternals "PSExec" to run logon
routines as admin from a network drive, but it gives me
the error message "Could Not Start PSExec Service on
COMPUTERNAME: Access is Denied" when running from a
Limited User Account on a Machine

How do I use NTRights to set the permissions on a specific
service? Maybe PSExec is trying to run as some other type
of service...

 

[Roger Abell]

Yes, PSExec, and most of the sysinternal tools, are
unique in that they are not quite your normal service.
Rather they dynamically load a drivelike hook to
bootstrap when run.

Why are you using PSexec ?
Have you tried using startup rather than login script
if the issue is being able to install a software? The
login runs as the use, the startup as the machine.