Re: Win2003 SP1 remotely restart service
From: Grant (gpsnett_at_hotmail.com)
Date: Thu, 23 Jun 2005 14:31:04 +0100
Hi Joe, I read your blog but am still confised, how would I enable a
standard domain user to restart 'Myservice' which is located on the domain
Could you provide an example of how you would acheive this?
Thanks for your help,
"Joe Richards [MVP]" <firstname.lastname@example.org> wrote in message
> You can do two things.
> The first is use a tool that doesn't require enumerating the services in
> order to manage them. This tool will also have to properly open the
> SCManager to allow for this. Two tools fit this category to my knowledge
> right now
> sc.exe that comes with Windows Server 2003 SP1
> svcutil - http://www.joeware.net/win/free/tools/svcutil.htm
> alternatively, you can reopen up the enumeration permissions for
> authenticated users by modifying the ACL on the SCManager. For more info,
> please see
> Joe Richards Microsoft MVP Windows Server Directory Services
> PJ wrote:
>> Hi all,
>> Have a problem after updating Win2003 to SP1.
>> On one of our servers I enable for one of users (not Admin on server) to
>> restart IISADMIN service remotely (user can do this ftom his workstation
>> using Computer Management MMC concole). But after upgrading server to SP1
>> this functionality broken - when user start Computer Management MMC on
>> his computer and connect to server, he can not enumerate services (Access
>> Denied" error).
>> As I found - Win2003 SP1 changed SCM permissions :((
>> How cam be this fixed.
>> Thank You.