Re: enabling certain services for only certain accounts

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 09/18/03 

Date: Thu, 18 Sep 2003 02:36:04 -0700

Normally, starting, pausing, resuming, and stopping services
are actions reserved to administrator accounts.
All services has a name that can be used with syntax
net stop dnscache
net start dnscache
(example stops and starts the caching DNS resolver)
So, you would only need determine the service names
and be an admin.
It might be more simple to set their version of BlackIce
to not run, and only enable it when you want to connect
to the office (one more manual step when you VPN in)
and run some other firewall the rest of the time. 

-- 
Roger Abell
Microsoft MVP (Windows, Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Chris Cowles" <NoSpam@For.me> wrote in message
news:ujKqUIXfDHA.2364@TK2MSFTNGP09.phx.gbl...
> I have a VPN client from my employer set up on my home workstation. Part
of
> the requirements are to install BlackIce. The VPN connection routinely
> checks if BlackIce is running and disconnects if it's not. The BlackIce
> install is locked so a user can't configure it.
>
> I believe BlackIce is interfering with my sharing resources my XP Pro
> workstation with a Win98 workstation connected by a 10mb hub and a WAP.
Both
> workstations access the web through a Westell DSL modem so are protected
at
> least nominally by a hardware firewall. My problem is that I have no way
to
> tweak Black Ice to allow connections from the Win98 workstation ip address
> to the XP workstation.
>
> My first step will be to manually disable the blackice service in System:
> Manage. If that enables connection, I'd like to figure out how to
> enable/disable black ice automatically for only one certain local account
on
> the XP workstation. Can that be done? I'm thinking of something like
> including or excluding an executable in an individual users 'startup'
menu,
> but I need to apply that logic to something running as a service rather
than
> as an application. I only use one account for connection to work and other
> accounts for personal use.
>
> Help is appreciated.
>
> Chris Cowles
> Gainesville, FL
>
>

Relevant Pages

  • enabling certain services for only certain accounts
    ... I have a VPN client from my employer set up on my home workstation. ... the requirements are to install BlackIce. ... checks if BlackIce is running and disconnects if it's not. ... If that enables connection, I'd like to figure out how to ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Disappearing Workstations
    ... Do you mean that the workstation record no longer exists in AD at all? ... machine accounts are disabled in AD or not working for logon? ... Run nltest and netdom to verify and fix any trust problems with the computer accounts ...
    (microsoft.public.windows.server.general)
  • Re: Changing Local Admin passwords from server ASAP
    ... when I navigate to my workstation from the SBS manage computer mmc and view ... the local users, it's definitely my workstation's local accounts I'm seeing, ... admin rights without increasing their rights elsewhere on the network. ... While certain domain accounts may have ...
    (microsoft.public.windows.server.sbs)
  • Re: Workgroup to Domain Transition
    ... Thanks for your over simplification but I would have appreciated it more if ... When all machines are joined to the Domain the workgroup simply ceases to ... Recreate the user accounts in the Domain that were used ... user's profiles from the local workstation to the Domian Accounts. ...
    (microsoft.public.windows.server.networking)
  • Re: Adding domain user remotely
    ... Not local accounts, domain accounts. ... > on a domain to a local workstation. ... >> Outgoing mail is certified Virus Free. ...
    (microsoft.public.windows.server.sbs)