Right to start/stop a service

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

G.J. Giezeman - 30 Nov 2004 16:07 GMT

I would like to give a particular user permission to start and stop a
particular service on a particular system (running XP), but am having a
hard time to find out how to do this.

I found out about Group Policy Objects, but then the Local Group Policy
does not have a System Services part, so this seems to be a dead end.

Any light shed on this subject would be much appreciated.

Reply to this Message

Wesley Vogel - 30 Nov 2004 20:12 GMT

User Configuration\Administrative Templates\Windows Components\Microsoft
Management Console\Restricted/Permitted\
Services

[[Permits or prohibits use of this snap-in.

If you enable this setting, the snap-in is permitted. If you disable the
setting, the snap-in is prohibited.

If this setting is not configured, the setting of the "Restrict users to the
explicitly permitted list of snap-ins" setting determines whether this
snap-in is permitted or prohibited.

-- If "Restrict users to the explicitly permitted list of snap-ins" is
enabled, users cannot use any snap-in except those explicitly permitted.

To explicitly permit use of this snap-in, enable this setting. If this
setting is not configured (or disabled), this snap-in is prohibited.

-- If "Restrict users to the explicitly permitted list of snap-ins" is
disabled or not configured, users can use any snap-in except those
explicitly prohibited.

To explicitly prohibit use of this snap-in, disable this setting. If
this setting is not configured (or enabled), the snap-in is permitted.

When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in
window in MMC. Also, when a user opens a console file that includes a
prohibited snap-in, the console file opens, but the prohibited snap-in does
not appear.]]

Signature

Hope this helps. Let us know.
Wes

> I would like to give a particular user permission to start and stop a
> particular service on a particular system (running XP), but am having
[quoted text clipped - 5 lines]
>
> Any light shed on this subject would be much appreciated.

Reply to this Message

Torgeir Bakken \(MVP\) - 30 Nov 2004 22:17 GMT

> I would like to give a particular user permission to start and stop a
> particular service on a particular system (running XP), but am having a
[quoted text clipped - 4 lines]
>
> Any light shed on this subject would be much appreciated.

Hi

Relevant for Windows XP also:

HOW TO: Grant Users Rights to Manage Services in Windows 2000
http://support.microsoft.com/?kbid=288129

For method 3 in the article above:

A new, bug-fixed version of SubInACL.exe is available for download here
(Win2k/WinXP/Win2k3):

http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf
-ed6985e3927b

SETACL (freeware) at http://setacl.sourceforge.net/ can also set permissions
on local or remote Win32 services.

Signature

torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx

Reply to this Message