Non-Administrator Starting / Stopping Services

[=?ISO-8859-1?Q?Michael_Elsd=F6rfer?=]

Is there any possiblity to give users the right to start and stop
services, without granting them full-administrative rights.

I normally work on my xp machine as a non-priviliged users, but know I
need to start some services sometimes.

Michael

 

[Roger Abell]

To do this you need to modify the permissions on each service
that will have modification. The only way I know of to do this
is by use of security templates using the Security Configuration
and Analysys and the Security Templates snap-in, or by custom
code you write. If you do alter the security settings on a service
using this means, be sure to retain sufficient grants to System.
Although defaults are often less, there is a KB recommending
that you always grant System Full on a service.

 

[Torgeir Bakken (MVP)]

Is there any possiblity to give users the right to start and stop
services, without granting them full-administrative rights.

I normally work on my xp machine as a non-priviliged users, but know I
need to start some services sometimes.

Hi

I would think this one is relevant for WinXP as well:

HOW TO: Grant Users Rights to Manage Services in Windows 2000
http://support.microsoft.com/?kbid=288129


A new, bug-fixed version of SubInACL.exe is available for download here
(Win2k/WinXP/Win2k3):

http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b

 

[=?ISO-8859-1?Q?Michael_Elsd=F6rfer?=]

I would think this one is relevant for WinXP as well:

HOW TO: Grant Users Rights to Manage Services in Windows 2000
http://support.microsoft.com/?kbid=288129

First, thank you for that link. I think that was what i search for. I
tried out the second way, but now i have a new problem: When queried for
a security template, i choose one per random (which was a mistake I
guess). After doing as described in the HOW TO, i changed the rights for
a service (MySQL). Then I applied my changes.
I don't know what happend, but know I cannot access the MySQL service
any longer (System Error 5; Access denied), not even as an admin. When I
try to change the rights on that service again, the list of services in
the Security Configuration and Analysis snap-in is empty. When I try to
configure the computer in that snap-in, I get the following error in the
log (translated):

Error 1332: Allocations of account names and security key were not
completed.
Error when looking up all accounts.

Hope someone can help me out again ;-)

Michael