Re: Services snap in & Security

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 01/21/05 

Date: Thu, 20 Jan 2005 17:50:46 -0700

Well, as far as I know, there is no way that is surfaced in the user
interface tools (in any of the Windows servers).

One way to do this is to define a new, empty security configuration
template, load it, and define the desired security on those services.
Then, load and apply this template to the machine.
This is done with the Security Templates and the Security Configuration
and Analysis snap-ins for MMC consoles

Another way is to seek out the SetAcl project on the web and use it.

Make sure that System, and the launch account (if different than System)
are allowed Full permissions so that the service can start. 

-- 
Roger Abell
Microsoft MVP (Windows  Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Not a real man of genius" <Not a real man of
genius@discussions.microsoft.com> wrote in message
news:8C00D158-2ECE-4808-B011-7E1A27C942EA@microsoft.com...
> How do I give my web developers the ability to stop and start a few select
> services without giving them the ability to restart all services?
>
> I am pretty sure there is a way to do this on Windows server 2003.  I am
> just having trouble finding it.

Relevant Pages

  • Re: security template file import
    ... one of the more "well documented" features of the GPO based security policy. ... modify the security template - ...
    (microsoft.public.win2000.security)
  • Re: Installer and Security
    ... you have to import the template into a security database before you ... I think SECEDIT will also import the template to a database too, ... unless you find and run the ADMINPAK.MSI file to install the extra MMCs]. ...
    (microsoft.public.win2000.security)
  • Re: IAS - Security template for WAP, PEAP
    ... > I changed my security template, and lost the ability for my wireless ... > Is there an example template somewhere of what security settings need ... Windows Settings, rt-click Security Settings, and choose to import. ...
    (microsoft.public.windows.server.networking)
  • Re: Reset Security
    ... I notice no remote registry paths are defined in setup security Security ... Template and the password policy will allow blank passwords. ... will be disabled such as workstation, server, PNP, protected storage, ...
    (microsoft.public.windows.server.security)
  • Re: Reset Security
    ... I notice no remote registry paths are defined in setup security Security ... Template and the password policy will allow blank passwords. ... services will be disabled such as workstation, server, PNP, protected ...
    (microsoft.public.windows.server.security)
Quantcast