Right to start/stop a service

  • Thread starter Thread starter G.J. Giezeman
  • Start date Start date
G

G.J. Giezeman

I would like to give a particular user permission to start and stop a
particular service on a particular system (running XP), but am having a
hard time to find out how to do this.

I found out about Group Policy Objects, but then the Local Group Policy
does not have a System Services part, so this seems to be a dead end.

Any light shed on this subject would be much appreciated.
 
User Configuration\Administrative Templates\Windows Components\Microsoft
Management Console\Restricted/Permitted\
Services

[[Permits or prohibits use of this snap-in.

If you enable this setting, the snap-in is permitted. If you disable the
setting, the snap-in is prohibited.

If this setting is not configured, the setting of the "Restrict users to the
explicitly permitted list of snap-ins" setting determines whether this
snap-in is permitted or prohibited.

-- If "Restrict users to the explicitly permitted list of snap-ins" is
enabled, users cannot use any snap-in except those explicitly permitted.

To explicitly permit use of this snap-in, enable this setting. If this
setting is not configured (or disabled), this snap-in is prohibited.

-- If "Restrict users to the explicitly permitted list of snap-ins" is
disabled or not configured, users can use any snap-in except those
explicitly prohibited.

To explicitly prohibit use of this snap-in, disable this setting. If
this setting is not configured (or enabled), the snap-in is permitted.

When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in
window in MMC. Also, when a user opens a console file that includes a
prohibited snap-in, the console file opens, but the prohibited snap-in does
not appear.]]
 
G.J. Giezeman said:
I would like to give a particular user permission to start and stop a
particular service on a particular system (running XP), but am having a
hard time to find out how to do this.

I found out about Group Policy Objects, but then the Local Group Policy
does not have a System Services part, so this seems to be a dead end.

Any light shed on this subject would be much appreciated.
Click to expand...
Hi

Relevant for Windows XP also:

HOW TO: Grant Users Rights to Manage Services in Windows 2000
http://support.microsoft.com/?kbid=288129

For method 3 in the article above:

A new, bug-fixed version of SubInACL.exe is available for download here
(Win2k/WinXP/Win2k3):

http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b

SETACL (freeware) at http://setacl.sourceforge.net/ can also set permissions
on local or remote Win32 services.
 
Back
Top