Re: set service start permissions to Administrator only


"Mathieu CHATEAU" wrote:
| why are you restoring from backup ?
Because I had just backed-up the system about 10 hours ago. And because It's
fast and I'm ready with the restore already.

| any eventog error ?
Too late, it's overwtitten by the restore...

| Which version of the Windows installer do you have (in add/remove
programs)
Latest (perhaps 3.1 v2) on Windows 2003 SP2 up to date.

I'll try a few tests on a virtual machine and post back soon...


| ?
|
|
| --
| Cordialement,
| Mathieu CHATEAU
| http://lordoftheping.blogspot.com
|
|
| "George Valkov" <a@xxxxx> wrote in message
| news:uZBEBNY4HHA.4400@xxxxxxxxxxxxxxxxxxxxxxx
| > "Mathieu CHATEAU" <gollum123@xxxxxxx> wrote in message
| > news:%23OBbn7X4HHA.3900@xxxxxxxxxxxxxxxxxxxxxxx
| > | did you try to repair the windows installer ?
| > |
| > | msiexec /unregister
| > --- OK
| >
| > | msiexec /register
| > -- Incorrect function
| >
| > Now there is no Windows Installer service at all.
| > I'll be back in 15 minutes, when the entire Windows directory is
restored
| > with a fresh backup...
| >
| >
| >
| > |
| > |
| > | --
| > | Cordialement,
| > | Mathieu CHATEAU
| > | http://lordoftheping.blogspot.com
| > |
| > |
| > | "George Valkov" <a@xxxxx> wrote in message
| > | news:OEhI$pX4HHA.2752@xxxxxxxxxxxxxxxxxxxxxxx
| > | > Thank You for the replay, Mathieu, but this doesn't fix my problem.
| > | >
| > | > I don't want any exceptions for any services. Limited uses must not
be
| > | > able
| > | > to start services.
| > | >
| > | >
| > | > Now about Your suggestion, this is what I did to test it:
| > | >
| > | > create account "testUser"
| > | > member in groups "Users", "Remote Desktop Users"
| > | > remote desktop to localhost, login as testUser
| > | > start Word, asks for Name and Initials...
| > | > Office 2007 setup starts and completes in 2 minutes.
| > | > Word displays "Privacy Options", I unchecked all
| > | > Quit Word.
| > | >
| > | > Start Word again... Office 2007 setup again...
| > | > Word is ready for use in 2 minutes,
| > | >
| > | > Disable and stop "Office Source Engine" service
| > | > Disable and stop "Windows Installer" service
| > | >
| > | > Start Word... 'An error occurred and this feature
| > | > is no longer functioning properly. Please run
| > | > Setup and select "Repair..." to restore this
| > | > application."
| > | >
| > | > Click OK -- Word shows and is ready to use!
| > | > No delays, no problems, no any kind of trouble!
| > | >
| > | > I've tried reinstalling or repairing Office, but
| > | > nothing helps! This problem is ever since I
| > | > installed it for the first time. I also had the
| > | > same problem with Office 2003. I also had the same
| > | > problem in my previous and my current installation
| > | > of Windows 2003 server.
| > | >
| > | > Well this could be because I've removed the "ShellNew"
| > | > for all of the office documents, of course Word wants
| > | > to restore it, but to prevent this I've set explicit
| > | > Deny permissions for changing that keys in the registry.
| > | >
| > | >
| > | >
| > | > George Valkov
| > | >
| > | >
| > | >
| > | > "Mathieu CHATEAU" wrote :
| > | > | Hello,
| > | > | Only administrators can start/stop services
| > | > |
| > | > | These services are exceptions, they are called to impersonate
Office
| > | > through
| > | > | the MSI technology
| > | > |
| > | > | If you create a fresh user, it should only do that once, no more.
| > | > |
| > | > | --
| > | > | Cordialement,
| > | > | Mathieu CHATEAU
| > | > | http://lordoftheping.blogspot.com
| > | > |
| > | > |
| > | > | "George Valkov" <a@xxxxx> wrote in message
| > | > | news:eLg6HvR4HHA.4184@xxxxxxxxxxxxxxxxxxxxxxx
| > | > | > Hello everyone!
| > | > | > I'd like to know, how can I configure the permissions for a
| > service
| > so
| > | > | > that
| > | > | > only Administrators can start it.
| > | > | >
| > | > | >
| > | > | > I have a problem with Microsoft Office 2007 installed on Windows
| > 2003
| > | > SP2
| > | > | > Enterprise. When I start for example Word as an Administrators
| > | > member -
| > | > | > all
| > | > | > seems just fine. But if I change that account to User or Power
| > User
| > | > and
| > | > | > remove it from the Administrators group:
| > | > | >
| > | > | > When Word is started as a limited user, it starts Windows
| > Installer
| > | > | > service
| > | > | > and Office Source Engine service. It takes about 2 minutes to
| > complete
| > | > the
| > | > | > installation and Word is ready for use. But the next time he
| > starts
| > | > Word,
| > | > | > it
| > | > | > starts installing again.
| > | > | >
| > | > | > On the other hand, if those two services are disabled, Word
starts
| > | > just
| > | > | > fine
| > | > | > with no delays, no installations and is ready for use. So that's
| > why
| > | > I'd
| > | > | > like to prevent limited users from starting those two services.
| > | > | >
| > | > | > Oh, by the way It will be much better if the limited users
cannot
| > | > start
| > | > | > any
| > | > | > services or drivers at all. This will increase the security. Is
| > there
| > | > any
| > | > | > such setting or group policy, and where?
| > | > | >
| > | > | >
| > | > | > Thank You for any help or web-link!
| > | > | >
| > | > | >
| > | > | > George Valkov
| > | > | >
| > | > | >
| > | > | >
| > | > |
| > | >
| > | >
| > |
| >
| >
|


.

Relevant Pages

  • Re: Windows Sever 2003 SP2/ Windows Installer
    ... I tried the Windows Installer 3.1 Redistributable and it said that what was on the system is newer and therefore cannot update. ... But when I look at the services I do not even see the Windows Installer service. ... Mathieu CHATEAU ... Everything I have read says that it is part of SP2 and it cannot be installed. ...
    (microsoft.public.windows.server.general)
  • Re: set service start permissions to Administrator only
    ... Which version of the Windows installer do you have? ... Mathieu CHATEAU ... login as testUser ... |> to restore it, but to prevent this I've set explicit ...
    (microsoft.public.windows.server.security)