GUI available for editing service ACL?

[Robert Kochem]

Hi,

currently I am searching a program with GUI for editing the ACL descriptors
of windows services. This is for example pretty handy if you want to assign
a user or a group the permission to start a certain service.
Usually only administrators can start or stop services but working all the
time as administrator isn't the best from the security point of view - as
we all know.

I already found a cryptic command line utility called "scacl" which can do
what I want. But it is very difficult to use - if you don't know exactly
what to do you can easily kill a service ACL completly...
http://www.losoft.de/ls_scacl.html

Does anybody know a bit user friendly GUI which allows to edit the service
ACLs like the file/folder ACL dialog?

Robert

 

[Guest]

you can use Process Explorer

 

[Robert Kochem]

you can use Process Explorer

Are you sure? I searched the whole Process Explorer GUI but I do not found
anything for even displaying the service startup permissions. I only found
how to display the permissions of the running service (executables).

Could you please be more specific?

Robert