Re: security for system services

Simon Morris wrote on 18/05/2006 11:22
Simon Morris wrote on 18/05/2006 10:17

I'm running Windows 2003 R2. I want to give a specific user permissions to stop and start system services. I have the Group Policy Editor up in the Microsoft Management Console, but when I look in LocalComputerPolicy/ComputerConfiguration/WindowsSettings/SecuritySettings, I don't see the SystemServices field I was expecting, just AccountPolicies, LocalPolicies, PublicKeyPolicies, SoftwareRestrictionPolicies, and IPSecurityPoliciesOnLocalComputer.

How should I give the user the appropriate permissions?


I've worked out I need to use a security template. I've created one that gives the user the correct permissions. I've imported it into LocalComputerPolicy/ComputerConfiguration/WindowsSettings/SecuritySettings, and this didn't give any errors. I've done a "gpupdate". But the user still can't stop the service, and I don't know how to use the Group Policy Editor to check that the import worked OK.

Any suggestions?


In fact, if I redefine the service's startup in the security template, and then import it into the LocalComputerPolicy, the startup doesn't change. So the import seems to be failing. I'm logged on as Administrator when I try to import - what else might be going wrong?
.

Relevant Pages

  • Re: security for system services
    ... permissions to stop and start system services. ... How should I give the user the appropriate permissions? ... But the user still can't stop the service, and I don't know how to use the Group Policy Editor to check that the import worked OK. ... In fact, if I redefine the service's startup in the security template, and then import it into the LocalComputerPolicy, the startup doesn't change. ...
    (microsoft.public.win2000.security)
  • Re: programs keeps adding itself to the startup on launching
    ... program from starting via permissions, then how is the OP going to use the ... They do not give you the option to not load at startup. ... >> Some applications will recreate those entries if the entries are ... >> of permanently disabling an application from starting. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Trying to configure group policies on a stand alone server.
    ... a user through Group Policy Editor in the System Service Security ... Policy, the default permissions are start, stop, and pause.", the ... Security Settings, and then click System Services. ...
    (microsoft.public.win2000.active_directory)
  • Re: programs keeps adding itself to the startup on launching
    ... RealPlayer and QuickTime do not add themselves as startup programs. ... > Unfortunately this method is way off base - the programs the OP is speaking> of does have a checkbox to "Start with Windows" - also, it you disable the> program from starting via permissions, then how is the OP going to use the ... >>> Some applications will recreate those entries if the entries are ... >>> of permanently disabling an application from starting. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Securing Tables From Data Changes
    ... You would only need to set these permissions if users need to be able to ... delete permissions on the record source (the RWOP query). ... Create a startup form that is opened on ... Joan Wild ...
    (microsoft.public.access.security)