Simple user should be allowed to shutdown services

[Ulf Schaper]

I have a user on a simple Windows 2000 Professional computer who
should be able to get read access to a file used by a service on that
machine. This means, the service has to be stopped before he can read
the file and has to be started again afterwards.

How can I permit the user to execute a command like "net start XX" or
"net stop XX"?

Is there a "su"/"sudo" program in Windows like many Unixes have one?
(Can a script gain Administrator priviledges by passing the password
to a special program?)

Or can I grant the user the right to start and stop all services?

Thankful for every piece of help,
Ulf Schaper

 

[Dmitry Korolyov [MVP]]

You can use built-in runas command to run applications in the context of another account, including account with administrativr rights.

Also, you can set permissions over specific service to allow your user perform certain maintenance such as starting and stopping the service. This can be done using Group Policy (on WinXP/W2k3 boxes run gpedit.msc and you will be able to configure the same settings locally and using the same interface).

Another thing is service control utility sc.exe from W2k resource kit, it allows you to view and set security descriptors on services, but not in very user-friendly way

--
Dmitry Korolyov [[email protected]]
MVP: Windows Server - Active Directory


I have a user on a simple Windows 2000 Professional computer who
should be able to get read access to a file used by a service on that
machine. This means, the service has to be stopped before he can read
the file and has to be started again afterwards.

How can I permit the user to execute a command like "net start XX" or
"net stop XX"?

Is there a "su"/"sudo" program in Windows like many Unixes have one?
(Can a script gain Administrator priviledges by passing the password
to a special program?)

Or can I grant the user the right to start and stop all services?

Thankful for every piece of help,
Ulf Schaper