Re: security for system services

"Simon Morris" <simonm@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:446c8373$0$2588$db0fefd9@xxxxxxxxxxxxxxxxx
Simon Morris wrote on 18/05/2006 14:26
Simon Morris wrote on 18/05/2006 11:22
Simon Morris wrote on 18/05/2006 10:17

I'm running Windows 2003 R2. I want to give a specific user permissions
to stop and start system services. I have the Group Policy Editor up in
the Microsoft Management Console, but when I look in
LocalComputerPolicy/ComputerConfiguration/WindowsSettings/SecuritySettings,
I don't see the SystemServices field I was expecting, just
AccountPolicies, LocalPolicies, PublicKeyPolicies,
SoftwareRestrictionPolicies, and IPSecurityPoliciesOnLocalComputer.

How should I give the user the appropriate permissions?


I've worked out I need to use a security template. I've created one that
gives the user the correct permissions. I've imported it into
LocalComputerPolicy/ComputerConfiguration/WindowsSettings/SecuritySettings,
and this didn't give any errors. I've done a "gpupdate". But the user
still can't stop the service, and I don't know how to use the Group
Policy Editor to check that the import worked OK.

Any suggestions?


In fact, if I redefine the service's startup in the security template,
and then import it into the LocalComputerPolicy, the startup doesn't
change. So the import seems to be failing. I'm logged on as Administrator
when I try to import - what else might be going wrong?

OK. I needed to use Security Configuration and Analysis to import the
security template into a database, and then use that database to configure
the local computer. I think there should be a simpler way to do this, but
never mind.

S.

NTRights from the resource kit


.

Relevant Pages

  • Re: security for system services
    ... permissions to stop and start system services. ... How should I give the user the appropriate permissions? ... But the user still can't stop the service, and I don't know how to use the Group Policy Editor to check that the import worked OK. ... In fact, if I redefine the service's startup in the security template, and then import it into the LocalComputerPolicy, the startup doesn't change. ...
    (microsoft.public.win2000.security)
  • Re: access denied
    ... > reformated and reinstalled XP Pro on the NTFS drive. ... > First, I re-applied the Setup Security Template in MMC, ... > thinking it would reset all permissions. ... >>Documents and Settings folder before doing a complete new ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Customzing Security Template Files
    ... full permissions to the service. ... Windows Server 2003 given the version of guide you mention). ... > When configuring a service using the Security Template snapin, ... > the ramifications of configuring specific permissions on a service versus ...
    (microsoft.public.security)
  • XP Folder Ownership Problems - Same issue can be resolved on Win2k, but Not XP
    ... there seems to be no equivalent to the "Take Ownership" ... >permissions for whatever reason and there ... problematic folder tells me I ... >First, I re-applied the Setup Security Template in MMC, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Regedit Permissions
    ... program as the user still needs read/list/execute NTFS permissions to the ... registry key by going to permissions - advanced/auditing. ... name keys full control POLAR failed. ... new blank security template, then save template] from the compatws.inf ...
    (microsoft.public.win2000.security)