Re: Permissions or Policy
From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 12/29/04
- Next message: Josie: "Is this a security issue or something else?"
- Previous message: Herb Martin: "Re: Permissions or Policy"
- In reply to: WilliamBeau: "Permissions or Policy"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 28 Dec 2004 17:47:52 -0700
IIRC the subinacl tool can set permissons on services if it is
the updated version,
http://support.microsoft.com/default.aspx?scid=kb;en-us;827209
else one may do this the long way using the Services section
of a group policy or of a security config template (the last being
the only alternative for a stand-alone).
http://support.microsoft.com/kb/256345/EN-US/
You must make sure that you do not remove the grant of Full to
System when modifying the permissions of services.
You may also seek out the third-party setacl utility which
can manipulate much, including service permissions.
-- Roger Abell Microsoft MVP (Windows Security) MCSE (W2k3,W2k,Nt4) MCDBA <WilliamBeau> wrote in message news:uwkWJgR7EHA.2180@TK2MSFTNGP12.phx.gbl... > Can anyone suggest a way to allow certain users to start and stop particular > services on a server? > I have a group of developers who I wish not to grant administrative access > to, but require the ability to bounce their applications which are service > based. I've looked in the local security policy but do not see anything > that stands out as being able to do this. > > Thanks > >
- Next message: Josie: "Is this a security issue or something else?"
- Previous message: Herb Martin: "Re: Permissions or Policy"
- In reply to: WilliamBeau: "Permissions or Policy"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
