Re: Permissions or Policy

From: Herb Martin (news_at_LearnQuick.com)
Date: 12/29/04 

Date: Tue, 28 Dec 2004 17:44:21 -0600

<WilliamBeau> wrote in message news:uwkWJgR7EHA.2180@TK2MSFTNGP12.phx.gbl...
> Can anyone suggest a way to allow certain users to start and stop
particular
> services on a server?

Such can be done through delegation on the service
properties.

No matter how you do it this will be a permission but
you may distribute it to may machine by using a policy.

On each service there are properties -- on the secure
tab there are permissions available to be delegated.

> I have a group of developers who I wish not to grant administrative access
> to, but require the ability to bounce their applications which are service
> based. I've looked in the local security policy but do not see anything
> that stands out as being able to do this.

Look in the Services control panel or in a GPO->
Windows->Security->Services 

-- 
Herb Martin
>
> Thanks
>
>

Relevant Pages

  • Re: Joining Computers to Domain
    ... password of the new user that I delegated the permission to. ... >>"preset delegation task" for "Joining computer to the ... >>Derek Melber ... >>> Also, an afterthought on my personal user account, ...
    (microsoft.public.windows.group_policy)
  • Re: Delegate Account release
    ... The lockout property is an attribute called lockoutTime. ... The permission to write that value needs to be given. ... Once that delegation is done, you can use the GUI tools or the command line tool UNLOCK to unlock the user accounts. ...
    (microsoft.public.windows.server.security)
  • Specific permission needed to join computers to a domain?
    ... I ask because I am trying to widdle down the number of domain admins ... on our network and use delegation as needed. ... One of the things I was thinking about is what type of permission our ...
    (microsoft.public.windows.server.active_directory)
  • Re: terminal services
    ... "local security policy does not permit this user to logon interactivley" ... The user attempting to log on does not have the "logon locally" ... environment to grant the user or group this permission if you are running AD ...
    (microsoft.public.win2000.security)
  • Re: group policy
    ... Use the Delegation of Control Wizard, and delegate the permission to create ... workstations to domain" will not resrict the user to only a particular OU. ... > How can i give permission to a spesific user for joining workstations ...
    (microsoft.public.windows.server.active_directory)