Re: What built in group will allow users to restart services on a

It is not available within services.msc
You need to either use a utility like NTrights from the reskit, or
use a sce template.

"Mike B." <MikeB@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B79B3787-F167-433F-B176-84B45EEC8341@xxxxxxxxxxxxxxxx
> Okay, I am looking within the services mmc and I cannot find a tab for
> security.
> Is ther another place to add permissions for them. I have about 4
> services
> that may need to be restarted so setting them will not be a problem.
>
> Thanks,
>
> Mike B.
>
> "Roger Abell [MVP]" wrote:
>
>> Server Operators is not actually domain-wide, but rather is
>> in use on all DCs of the domain.
>> Power Users is an over-allotment of privilege, which you
>> right have said you want to avoid.
>> You can set individual premission on services, one by one,
>> to allow some new custom group to have the abilities with
>> the services only. The trouble is that you need to do this
>> for each service. This may be workable if there are only
>> a few services that are problematic for which you want to
>> delegate this right. There are a couple ways to do this, but
>> you may find NTrights the most direct if you do not have a
>> large farms of servers needing this change. If you do have to
>> apply this widely look into using a GPO that affects those
>> servers and very carefully use it to set the permissions on
>> the services involved. Search the KBs first as there are some
>> thing you definitely want to know about if you are going to
>> use the GPO based method.
>> "Mike B." <MikeB@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:01DC121F-F88A-4F4B-80D6-6799D6E7C51C@xxxxxxxxxxxxxxxx
>> > We have a help desk that from time to time needs access to restart
>> > services
>> > on a couple of our servers. I want to give them this permission to do
>> > this
>> > via a custom mmc that will help them do this. I don't want to give
>> > them
>> > too
>> > many permissions. Could the local "power users" do this? The only
>> > other
>> > group is the domain "server operators" which is domain wide which may
>> > be
>> > too
>> > much permission.
>> >
>> > Thanks,
>> >
>> > Mike B.
>>
>>
>>


.

Relevant Pages

  • Re: Error "The system cannot find the file specified" on files
    ... I will see if my customer can do this for me as I cannot easily get physical ... both of these servers are domain controllers. ... command line utilities and GUI tools, tried to set permissions. ... Security tab in Windows Explorer doesn't appear. ...
    (microsoft.public.windows.file_system)
  • Re: Disable program
    ... > Hi Roger. ... > I don't think NTrights can change service permissions but subinacls can ... I did post once that NTrights could do such but was in error I ... >>> loaded with the proper template, will allow you to change the ...
    (microsoft.public.win2000.security)
  • Re: Cant Mount Public Store
    ... Edit to the Exchange Domain Servers group to the servers that own the public ... This sounds like a permissions problem. ...
    (microsoft.public.exchange.setup)
  • Cant Mount the Public Store
    ... Edit to the Exchange Domain Servers group to the servers that own the public ... This sounds like a permissions problem. ...
    (microsoft.public.exchange.admin)
  • Re: Disable program
    ... I did post once that NTrights could do such but was in error I ... >> loaded with the proper template, will allow you to change the permissions ... Create a new database via the steps on the right side of the MMC ...
    (microsoft.public.win2000.security)