Re: Restrict service access

From: Eric Fitzgerald [MSFT] (ericf@online.microsoft.com)
Date: 05/10/02 

From: "Eric Fitzgerald [MSFT]" <ericf@online.microsoft.com>
Date: Fri, 10 May 2002 10:57:34 -0700

Services have access-control lists that can be set programmatically. In
Windows 2000, you can use the "Security Templates" MMC snap-in to create a
template which defines ACLs for your services, and then apply the template
with SECEDIT.

You should try this on a test machine before you try it on any machine that
you depend on, so that you're comfortable with the process.

Eric 

--
Eric Fitzgerald
Program Manager, Windows Auditing and Intrusion Detection
Microsoft Corporation

"FF" <rumfo@yahoo.com> wrote in message
news:2ff8fba6.0205090833.55d4477a@posting.google.com...
> Is that a way to provide certain group ( group may belong to "User"
> group or "Power User" group) full access or start and stop for couple
> of services and restrict access for rest of the services.
>
> Smith

Relevant Pages

  • Promote from User to Power User?
    ... I was able to transfer all of the accounts, but when it asked which template to use, I picked User instead of Power User. ...
    (microsoft.public.windows.server.sbs)
  • Re: User Rights in Setup Security Template
    ... always analyze with a template before ... To change just a couple policies, ... > There are 2 accounts - Administrator and Power User. ...
    (microsoft.public.windowsxp.security_admin)
  • Editing User Rights Policies in MMC
    ... users on the test machine are able to run ... legacy apps but are also able to install apps. ... before applying the template they could NOT run legacy ...
    (microsoft.public.win2000.security)
  • Re: User Rights in Setup Security Template
    ... Somehow, when the template gets applied the first time, ... network settings seem to get munged and it requires a run of Networking ... Works OK under Admin but won't run under Power User. ...
    (microsoft.public.windowsxp.security_admin)
Quantcast