Remote service restart

[Michael Lawson]

I have a situation where I need to have a user be able to restart a couple
of services on a W2K server. I know this can be accomplished by using the
netsvc command, but that requires a user to have administrator rights.
Unfortunately, that grants them additional rights to the server they can not
have. I need to find a way that a domain user can restart a service on the
server without being at the server or having administrator rights. Any
ideas?

Thanks for your help,
Mike Lawson

 

[Torgeir Bakken \(MVP\)]

I have a situation where I need to have a user be able to restart a couple
of services on a W2K server. I know this can be accomplished by using the
netsvc command, but that requires a user to have administrator rights.
Unfortunately, that grants them additional rights to the server they can not
have. I need to find a way that a domain user can restart a service on the
server without being at the server or having administrator rights. Any
ideas?

Hi


HOW TO: Grant Users Rights to Manage Services in Windows 2000
http://support.microsoft.com/?kbid=288129

For method 3 in the article above:

A new, bug-fixed version of SubInACL.exe is available for download here
(Win2k/WinXP/Win2k3):

http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b

SETACL (freeware) at http://setacl.sourceforge.net/ can also set permissions
on local or remote Win32 services.

 

[Michael Lawson]

I'm sorry if I'm missing something here; but in looking at the articles I
still appears I need to grant administrative rights to the user I need to
allow the ability to restart a service. The restriction I have to follow is
that the user cannot be allowed to have any administrative rights on the
server. Did I misunderstand something in the articles?

Thanks,
Mike Lawson

 

[Torgeir Bakken \(MVP\)]

I'm sorry if I'm missing something here; but in looking at the articles I
still appears I need to grant administrative rights to the user I need to
allow the ability to restart a service. The restriction I have to follow is
that the user cannot be allowed to have any administrative rights on the
server. Did I misunderstand something in the articles?

Hi

You have misunderstood. It is only the user executing the changes to
the security configuration (so a ordinary user can manage a service)
that must have administrator rights.

 

[Thomas Harder]

Mike,

I've experienced the same issue as yourself. It appears
there's something else that needs to be tweaked. I've
tried giving this non admin additional user rights to the
system and I'm still getting access is denied when
testing.

 

[Thomas Harder]

Mike,

Try using SC.EXE. This tools seems to work for me
although I'd prefer using NETSVC due to the nice output.


Does anyone know why NETSVC won't work in this
situation.

 

[Guest]

Torgeir,

Can you verify this works on your side. I also haven't
found the NETSVC command to work after applying Knowledge
Base article 288129. I've verified the non admin user
has full access to the service I'm interested in but
still get access is denied...error code 5.

Thanks in advance.