Re: security for system services

Simon Morris wrote on 18/05/2006 14:26
Simon Morris wrote on 18/05/2006 11:22
Simon Morris wrote on 18/05/2006 10:17

I'm running Windows 2003 R2. I want to give a specific user permissions to stop and start system services. I have the Group Policy Editor up in the Microsoft Management Console, but when I look in LocalComputerPolicy/ComputerConfiguration/WindowsSettings/SecuritySettings, I don't see the SystemServices field I was expecting, just AccountPolicies, LocalPolicies, PublicKeyPolicies, SoftwareRestrictionPolicies, and IPSecurityPoliciesOnLocalComputer.

How should I give the user the appropriate permissions?


I've worked out I need to use a security template. I've created one that gives the user the correct permissions. I've imported it into LocalComputerPolicy/ComputerConfiguration/WindowsSettings/SecuritySettings, and this didn't give any errors. I've done a "gpupdate". But the user still can't stop the service, and I don't know how to use the Group Policy Editor to check that the import worked OK.

Any suggestions?


In fact, if I redefine the service's startup in the security template, and then import it into the LocalComputerPolicy, the startup doesn't change. So the import seems to be failing. I'm logged on as Administrator when I try to import - what else might be going wrong?

OK. I needed to use Security Configuration and Analysis to import the security template into a database, and then use that database to configure the local computer. I think there should be a simpler way to do this, but never mind.

S.
.

Relevant Pages

  • Re: security for system services
    ... How should I give the user the appropriate permissions? ... Policy Editor to check that the import worked OK. ... In fact, if I redefine the service's startup in the security template, ...
    (microsoft.public.win2000.security)
  • Re: security for system services
    ... permissions to stop and start system services. ... How should I give the user the appropriate permissions? ... But the user still can't stop the service, and I don't know how to use the Group Policy Editor to check that the import worked OK. ... In fact, if I redefine the service's startup in the security template, and then import it into the LocalComputerPolicy, the startup doesn't change. ...
    (microsoft.public.win2000.security)
  • Re: access denied
    ... > reformated and reinstalled XP Pro on the NTFS drive. ... > First, I re-applied the Setup Security Template in MMC, ... > thinking it would reset all permissions. ... >>Documents and Settings folder before doing a complete new ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Customzing Security Template Files
    ... full permissions to the service. ... Windows Server 2003 given the version of guide you mention). ... > When configuring a service using the Security Template snapin, ... > the ramifications of configuring specific permissions on a service versus ...
    (microsoft.public.security)
  • XP Folder Ownership Problems - Same issue can be resolved on Win2k, but Not XP
    ... there seems to be no equivalent to the "Take Ownership" ... >permissions for whatever reason and there ... problematic folder tells me I ... >First, I re-applied the Setup Security Template in MMC, ...
    (microsoft.public.windowsxp.security_admin)