Delegation of Services

  • Thread starter Thread starter Joresm
  • Start date Start date
J

Joresm

Hi,
I am trying to delegate service control to domain accounts to be able to
stop and start services. I am doing this through Group Policies. But when i
try the service the permission has not propogated to the server from AD.
According MS Article 257247, if i delete the
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\"Service"\Security
subkey and reboot the server i should get the new settings. I tested this
and the result was negative. the reboot did not generate the "security"
subkey. I tried just deleteing the value of the subkey and the same result.
Any ideas on how force the service policy from AD to the server?
Thx
 
Hi,
I am trying to delegate service control to domain accounts to be able to
stop and start services. I am doing this through Group Policies. But when i
try the service the permission has not propogated to the server from AD.
According MS Article 257247, if i delete the
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\"Service"\Security
subkey and reboot the server i should get the new settings. I tested this
and the result was negative. the reboot did not generate the "security"
subkey. I tried just deleteing the value of the subkey and the same result.
Any ideas on how force the service policy from AD to the server?
Thx
See tip 4673 and link in the 'Tips & Tricks' at http://www.jsiinc.com

Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com
 
Thanks Jerold. I tired that, but still the same problem. My concern is why
doesn't the GP roll down to the server. The article from Microsoft says
delete the registry subkey below and it will be regenerated next time you
reboot the server, but it acutally doesn't work either. very strange.
 
Back
Top