Re: security for system services

Simon Morris wrote on 18/05/2006 10:17

I'm running Windows 2003 R2. I want to give a specific user permissions to stop and start system services. I have the Group Policy Editor up in the Microsoft Management Console, but when I look in LocalComputerPolicy/ComputerConfiguration/WindowsSettings/SecuritySettings, I don't see the SystemServices field I was expecting, just AccountPolicies, LocalPolicies, PublicKeyPolicies, SoftwareRestrictionPolicies, and IPSecurityPoliciesOnLocalComputer.

How should I give the user the appropriate permissions?


I've worked out I need to use a security template. I've created one that gives the user the correct permissions. I've imported it into LocalComputerPolicy/ComputerConfiguration/WindowsSettings/SecuritySettings, and this didn't give any errors. I've done a "gpupdate". But the user still can't stop the service, and I don't know how to use the Group Policy Editor to check that the import worked OK.

Any suggestions?

--
Simon Morris
.