Re: Role Based Security
From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 07/31/05
- Previous message: Roger Abell: "Re: ANONYMOUS LOGON"
- In reply to: John: "Role Based Security"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 31 Jul 2005 07:32:27 -0700
Rights for services is most effectively controlled by use of the
Services node in a GPO. For each service there are policy settings
for both the state (auto/manual/disabled) and also for the security
(who may start, stop, etc.). If you adjust the security of services
be sure that you include full grants to System and if the service
runs as other then System, then that account also, for example for
Local Service one enters Service when adjusting the policies).
-- Roger Abell Microsoft MVP (Windows Security) "John" <John@discussions.microsoft.com> wrote in message news:337B2ED4-F3BE-41F1-8EF2-61E83CC64269@microsoft.com... > I have a group who needs the following rights across all of our servers: > > *Logon to server > *Restart server > *Restart services > > I know that you can assign the first two utilizing GPO's, but I can not find > anything regarding granting the right to restart services without making the > users local administrators, which I prefer not to do. > > Any suggestions?
- Previous message: Roger Abell: "Re: ANONYMOUS LOGON"
- In reply to: John: "Role Based Security"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|