Re: Role Based Security

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 07/31/05


Date: Sun, 31 Jul 2005 07:32:27 -0700

Rights for services is most effectively controlled by use of the
Services node in a GPO. For each service there are policy settings
for both the state (auto/manual/disabled) and also for the security
(who may start, stop, etc.). If you adjust the security of services
be sure that you include full grants to System and if the service
runs as other then System, then that account also, for example for
Local Service one enters Service when adjusting the policies).

-- 
Roger Abell
Microsoft MVP (Windows  Security)
"John" <John@discussions.microsoft.com> wrote in message
news:337B2ED4-F3BE-41F1-8EF2-61E83CC64269@microsoft.com...
> I have a group who needs the following rights across all of our servers:
>
> *Logon to server
> *Restart server
> *Restart services
>
> I know that you can assign the first two utilizing GPO's, but I can not
find
> anything regarding granting the right to restart services without making
the
> users local administrators, which I prefer not to do.
>
> Any suggestions?


Relevant Pages

  • Re: New to SMS - have a Collections question.
    ... local admin of both the SMS server and the server the database is on. ... However this is a security problem. ... Access to objects is based on Security Rights (if you scroll down the ...
    (microsoft.public.sms.admin)
  • Re: Problem sending emails
    ... you may want to review the security you've put into place and undo it to see ... The 5.7.1 event you're seeing is usually a permissions related issue on the ... SMTP virtual server. ... This posting is provided "AS IS" with no warranties, and confers no rights. ...
    (microsoft.public.exchange.connectivity)
  • Re: New to SMS - have a Collections question.
    ... You probably need to adjust the DCOM permissions on your server, ... I loaded the SMS Admin Console on the ... SMS security is a bit different from normal Windows security. ... Access to objects is based on Security Rights (if you scroll down the ...
    (microsoft.public.sms.admin)
  • Re: effective user rights
    ... This one is for security in Access, ... > Win Server 2k3. ... > Most users in same OU, all with same rights. ... > Want to install goldmine integration for outlook. ...
    (microsoft.public.access.security)
  • Re: effective user rights
    ... This one is for security in Access, ... >> Win Server 2k3. ... >> Most users in same OU, all with same rights. ... >> Want to install goldmine integration for outlook. ...
    (microsoft.public.access.security)