Re: Permissions or Policy

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 12/30/04 

Date: Wed, 29 Dec 2004 22:37:13 -0700

What are the services?
Normally if you go to a machine where the third party
services are installed and use the Security Templates
snap-in to define a new template you will find that all
services that have registered for starting by the scm
will be in the list. 

-- 
Roger Abell
Microsoft MVP (Windows  Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
<WilliamBeau> wrote in message news:uoSqPZd7EHA.3944@TK2MSFTNGP12.phx.gbl...
> Herb, this appears to be true only for system services - those basically
> included in the OS/ machine build and do not offer services that are
> installed as a result of software intallation or services created that are
> non-OS related.
> Do you know if I can change the list of services available in the group
> policy in order to accomodate these types of services?
>
> Thanks!
>
> "Herb Martin" <news@LearnQuick.com> wrote in message
> news:%233xt7cT7EHA.1404@TK2MSFTNGP11.phx.gbl...
> > <WilliamBeau> wrote in message
> news:uwkWJgR7EHA.2180@TK2MSFTNGP12.phx.gbl...
> > > Can anyone suggest a way to allow certain users to start and stop
> > particular
> > > services on a server?
> >
> > Such can be done through delegation on the service
> > properties.
> >
> > No matter how you do it this will be a permission but
> > you may distribute it to may machine by using a policy.
> >
> > On each service there are properties -- on the secure
> > tab there are permissions available to be delegated.
> >
> > > I have a group of developers who I wish not to grant administrative
> access
> > > to, but require the ability to bounce their applications which are
> service
> > > based.  I've looked in the local security policy but do not see
anything
> > > that stands out as being able to do this.
> >
> > Look in the Services control panel or in a GPO->
> > Windows->Security->Services
> >
> > -- 
> > Herb Martin
> >
> >
> > >
> > > Thanks
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: Viewing Local Security Policy on Windows 2003 Member Server?
    ... Windows ships with a default security set up that is defined by regular security templates, ... Those templates can be view using the Security Templates editor MMC snap-in and can show you what the default settings are prior to joining a domain. ... Script Group Policy Settings with the GPExpert Scripting Toolkit for PowerShell! ... Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy Information Hub: ...
    (microsoft.public.windows.group_policy)
  • Re: Local Security Policy on domain controller?
    ... "This tool can also be used to directly configure local system security. ... Through its use of personal databases, you can import security templates ... the Group Policy object for the local computer. ... >> Domain Controller Security Policy tool should be used on a DC anyway, ...
    (microsoft.public.win2000.security)
  • Re: Local Security Policy on domain controller?
    ... Even though the esentutl tool didn't report any integrity problems, ... > "This tool can also be used to directly configure local system security. ... > created with the Security Templates snap-in, ... > the Group Policy object for the local computer. ...
    (microsoft.public.win2000.security)
  • Re: Secedit and Domain Controller Security Policy
    ... You configure the appropriate domain/OU Group Policy. ... security templates and the settings will apply to the computers in the OU ... domain controllers I suggest that instead of modifying the default Domain ...
    (microsoft.public.win2000.security)
  • Fwd: Oh Dear, Where to start?!
    ... It seems to me you need two things: an organizational policy, ... finish college and break into the real world of computer security. ... experience in the field of network security and policy ... updates, driver updates, and recommended updates. ...
    (Security-Basics)