net stop use by user account

[ND]

I need to allow a user to run a batch job which will shutdown a service
occasionally. Is there anyway to allow the user to run "net stop ****"?

 

[Pegasus]

I need to allow a user to run a batch job which will shutdown a service
occasionally. Is there anyway to allow the user to run "net stop ****"?

Create a batch file with this command:

@echo off
runas /user:SomeAdmin "c:\windows\system32 net stop SomeService"

When your user runs this batch file then he must supply the local
admin password that you will have to give him. He can, of course,
abuse it for his own purposes . . .

 

[Ritchie]

I need to allow a user to run a batch job which will shutdown a service
occasionally. Is there anyway to allow the user to run "net stop ****"?

Use SetACL to modify the permissions on the service:-
http://setacl.sourceforge.net/, see example 23.

 

[ND]

Use SetACL to modify the permissions on the service:-
http://setacl.sourceforge.net/, see example 23.

Thanks. Is there a way to do this via NT 4 also?

 

[Torgeir Bakken \(MVP\)]

I need to allow a user to run a batch job which will shutdown a service
occasionally. Is there anyway to allow the user to run "net stop ****"?

Hi

Relevant for WinXP/Win2k3 as well:

HOW TO: Grant Users Rights to Manage Services in Windows 2000
http://support.microsoft.com/?kbid=288129

For method 3 in the article above:

A new, bug-fixed version of SubInACL.exe is available for download here
(Win2k/WinXP/Win2k3):

http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b

SETACL (freeware) at http://setacl.sourceforge.net/ can also set permissions
on local or remote Win32 services.

 

[Torgeir Bakken \(MVP\)]

Thanks. Is there a way to do this via NT 4 also?

Hi

Try the old version of SetACL, it supports NT 4.0:

http://www.helge.mynetcologne.de/setacl/