Re: Win2003 SP1 remotely restart service
From: Grant (gpsnett_at_hotmail.com)
Date: 06/23/05
- Next message: News Microsoft: "Security Templates"
- Previous message: Altria: "Re: detecting keyloogers"
- In reply to: Joe Richards [MVP]: "Re: Win2003 SP1 remotely restart service"
- Next in thread: Joe Richards [MVP]: "Re: Win2003 SP1 remotely restart service"
- Reply: Joe Richards [MVP]: "Re: Win2003 SP1 remotely restart service"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 23 Jun 2005 14:31:04 +0100
Hi Joe, I read your blog but am still confised, how would I enable a
standard domain user to restart 'Myservice' which is located on the domain
controller?
Could you provide an example of how you would acheive this?
Thanks for your help,
Grant
"Joe Richards [MVP]" <humorexpress@hotmail.com> wrote in message
news:eFMhZqbcFHA.1152@tk2msftngp13.phx.gbl...
> You can do two things.
>
> The first is use a tool that doesn't require enumerating the services in
> order to manage them. This tool will also have to properly open the
> SCManager to allow for this. Two tools fit this category to my knowledge
> right now
>
> sc.exe that comes with Windows Server 2003 SP1
> svcutil - http://www.joeware.net/win/free/tools/svcutil.htm
>
>
> alternatively, you can reopen up the enumeration permissions for
> authenticated users by modifying the ACL on the SCManager. For more info,
> please see
>
> http://blog.joeware.net/2005/06/12/38/
>
> joe
>
> --
> Joe Richards Microsoft MVP Windows Server Directory Services
> www.joeware.net
>
>
> PJ wrote:
>> Hi all,
>>
>> Have a problem after updating Win2003 to SP1.
>> On one of our servers I enable for one of users (not Admin on server) to
>> restart IISADMIN service remotely (user can do this ftom his workstation
>> using Computer Management MMC concole). But after upgrading server to SP1
>> this functionality broken - when user start Computer Management MMC on
>> his computer and connect to server, he can not enumerate services (Access
>> Denied" error).
>>
>> As I found - Win2003 SP1 changed SCM permissions :((
>>
>> How cam be this fixed.
>>
>> Thank You.
>>
>> .
- Next message: News Microsoft: "Security Templates"
- Previous message: Altria: "Re: detecting keyloogers"
- In reply to: Joe Richards [MVP]: "Re: Win2003 SP1 remotely restart service"
- Next in thread: Joe Richards [MVP]: "Re: Win2003 SP1 remotely restart service"
- Reply: Joe Richards [MVP]: "Re: Win2003 SP1 remotely restart service"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|