Re: Giving users permission to an MMC
From: Grant (gpsnett_at_hotmail.com)
Date: 06/23/05
- Previous message: Roger Abell: "Re: Login Auditing"
- In reply to: Ishmealm: "Re: Giving users permission to an MMC"
- Next in thread: Giuseppe Nacci: "Re: Giving users permission to an MMC"
- Reply: Giuseppe Nacci: "Re: Giving users permission to an MMC"
- Reply: Ishmealm: "Re: Giving users permission to an MMC"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 23 Jun 2005 16:22:36 +0100
Does it matter if the service is on a 2003 domain controller? I crated a
group, added some users to it , ran the command specifying the group (got
users to log off and back in again) - but when I asked one of them to manage
the pc and browse to the domain controller, when I click the services it
comes up with the permissions error.
"Ishmealm" <Ishmealm@discussions.microsoft.com> wrote in message
news:22C5D637-0886-4F91-A2A8-6DB3D3A1F5AA@microsoft.com...
> This is how I allow developers to restart individual services on our
> servers.
> I have them do manage on their local pc's and then connect to the server.
> They only have rights to what you run the command against, even though
> they
> can see all the servers and stuff:
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;288129
>
> The command looks like this:
> SUBINACL /SERVICE \\Server-01\messenger /GRANT=sw\user=to
>
>
> "Grant" wrote:
>
>> Hi Giuseppe ,
>>
>> Security on the msc file:
>> domain\administrators - full control
>> System - Fuill control
>> Users(Domain\users) - Modify/read/write/execute
>>
>> I dont know what you mean by checking the ACL list. Where do I check
>> this?
>>
>>
>>
>>
>> "Giuseppe Nacci" <giuseppe.nacci@degennaro.biz> wrote in message
>> news:uW9jDk$dFHA.3616@TK2MSFTNGP09.phx.gbl...
>> > Check the ACL in a tab security list and report here what you see.
>> > Report here also the ACL in a tab security of .msc file
>> >
>> > --
>> > ---
>> > Giuseppe Nacci
>> > Microsoft Certified System Engineer
>> > Security Manager
>> >
>> > --------------------------------------------------------------------
>> > CONFIDENTIALITY NOTICE
>> > This message and its attachments are addressed solely to the persons
>> > above and may contain confidential information. If you have received
>> > the message in error, be informed that any use of the content hereof
>> > is prohibited. Please return it immediately to the sender and delete
>> > the message. Should you have any questions, please contact us by
>> > replying to supporto.informatico@degennaro.biz
>> > Thank you
>> > --------------------------------------------------------------------
>> >
>> >
>> > "Grant" <gpsnett@hotmail.com> ha scritto nel messaggio
>> > news:eEjeNM$dFHA.3328@TK2MSFTNGP09.phx.gbl...
>> >> user can open this file but they cannot see any services and they get
>> >> an
>> >> error message saying "Error 5: Access denied"
>> >>
>> >> How would I enable them to see and restart a service?
>> >>
>> >> thanks,
>> >> Grant
>> >>
>> >> "Giuseppe Nacci" <giuseppe.nacci@degennaro.biz> wrote in message
>> >> news:evU$MY%23dFHA.2180@TK2MSFTNGP12.phx.gbl...
>> >>> Are you talking about .msc file?
>> >>> Right click on .msc file, security and sharing, tab security, add
>> >>> user
>> >>> account how you prefer.
>> >>> Bye.
>> >>>
>> >>> Sorry for my english, I'm working on it ;-)
>> >>>
>> >>> --
>> >>> ---
>> >>> Giuseppe Nacci
>> >>> Microsoft Certified System Engineer
>> >>> Security Manager
>> >>>
>> >>> --------------------------------------------------------------------
>> >>> CONFIDENTIALITY NOTICE
>> >>> This message and its attachments are addressed solely to the persons
>> >>> above and may contain confidential information. If you have received
>> >>> the message in error, be informed that any use of the content hereof
>> >>> is prohibited. Please return it immediately to the sender and delete
>> >>> the message. Should you have any questions, please contact us by
>> >>> replying to supporto.informatico@degennaro.biz
>> >>> Thank you
>> >>> --------------------------------------------------------------------
>> >>>
>> >>>
>> >>> "Grant" <gpsnett@hotmail.com> ha scritto nel messaggio
>> >>> news:%23eyqfq9dFHA.3352@TK2MSFTNGP09.phx.gbl...
>> >>>>I have created an MMC which contains the services from one of our
>> >>>>domain
>> >>>>controllers (Win2k3 server).
>> >>>>
>> >>>> I have place the MMC on a share on the network and I would like to
>> >>>> enable certain users to have permission to open up this MMC and
>> >>>> restart
>> >>>> particular services. How would I achieve this?
>> >>>>
>> >>>> Thanks,
>> >>>> Grant
>> >>>>
>> >>>
>> >>>
>> >>
>> >>
>> >
>> >
>>
>>
>>
- Previous message: Roger Abell: "Re: Login Auditing"
- In reply to: Ishmealm: "Re: Giving users permission to an MMC"
- Next in thread: Giuseppe Nacci: "Re: Giving users permission to an MMC"
- Reply: Giuseppe Nacci: "Re: Giving users permission to an MMC"
- Reply: Ishmealm: "Re: Giving users permission to an MMC"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|