Edit service permissions from Command-line

[Guest]

Hello all and thanks in advance. I'm trying to edit permissions using the
command-line - MS states that the tool SUBINACL.EXE can be used to pull this
information but I want to be able to set/change the information that's pulled
(without using GPO or Security Templates), can this be done from the command
line?

 

[Steven L Umbach]

Subinacl can be used to change service permissions also. There is another
tool that is free called setacl that may be a little more user
riendly. --- Steve

http://setacl.sourceforge.net/ --- Setacl
SetACL.exe -on "\\server1\W32Time" -ot srv -actn ace
-ace "n:domain1\group1;p:start_stop"Sets permissions to start and
stop the Windows time service on server 'server1' for group 'group1' in
domain 'domain1'.

 

[Torgeir Bakken \(MVP\)]

Hello all and thanks in advance. I'm trying to edit permissions using the
command-line - MS states that the tool SUBINACL.EXE can be used to pull this
information but I want to be able to set/change the information that's pulled
(without using GPO or Security Templates), can this be done from the command
line?

Hi,

You can use SC.exe for this (comes builtin with WinXP Pro).

See "Method 2" here for an example on setting permission on a service:

http://support.microsoft.com/kb/883821/