Re: set service start permissions to Administrator only



Hello,
Only administrators can start/stop services

These services are exceptions, they are called to impersonate Office through the MSI technology

If you create a fresh user, it should only do that once, no more.

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"George Valkov" <a@xxxxx> wrote in message news:eLg6HvR4HHA.4184@xxxxxxxxxxxxxxxxxxxxxxx
Hello everyone!
I'd like to know, how can I configure the permissions for a service so that
only Administrators can start it.


I have a problem with Microsoft Office 2007 installed on Windows 2003 SP2
Enterprise. When I start for example Word as an Administrators member - all
seems just fine. But if I change that account to User or Power User and
remove it from the Administrators group:

When Word is started as a limited user, it starts Windows Installer service
and Office Source Engine service. It takes about 2 minutes to complete the
installation and Word is ready for use. But the next time he starts Word, it
starts installing again.

On the other hand, if those two services are disabled, Word starts just fine
with no delays, no installations and is ready for use. So that's why I'd
like to prevent limited users from starting those two services.

Oh, by the way It will be much better if the limited users cannot start any
services or drivers at all. This will increase the security. Is there any
such setting or group policy, and where?


Thank You for any help or web-link!


George Valkov




.



Relevant Pages

  • Re: Quick: Where is the equivalent of the Display control panel in Vista?
    ... know they have a pocket administrators guide. ... elevated to full administrator status by UAC. ... Assuming Windows recognizes the installer as an installer, ...
    (comp.sys.mac.advocacy)
  • Re: Quick: Where is the equivalent of the Display control panel in Vista?
    ... know they have a pocket administrators guide. ... but you keep coming up with crap about setup ... Assuming Windows recognizes the installer as an installer, ... automatically ask for elevation. ...
    (comp.sys.mac.advocacy)
  • set service start permissions to Administrator only
    ... I have a problem with Microsoft Office 2007 installed on Windows 2003 SP2 ... When I start for example Word as an Administrators member - all ... When Word is started as a limited user, it starts Windows Installer service ... by the way It will be much better if the limited users cannot start any ...
    (microsoft.public.windows.server.security)
  • Re: set service start permissions to Administrator only
    ... Thank You for the replay, Mathieu, but this doesn't fix my problem. ... Disable and stop "Windows Installer" service ... |> only Administrators can start it. ... |> like to prevent limited users from starting those two services. ...
    (microsoft.public.windows.server.security)
  • Re: Error 1406 when installing a program
    ... Administrators and the SYSTEM group have full control over that key, ... Microsoft MVP [Windows XP Shell/User] ... I have Windows XP Home Edition SP2 and I get a Windows Installer Error 1406 ... When I install the same program on an XP Pro machine, ...
    (microsoft.public.windowsxp.help_and_support)