Re: Services Security Rights

From: Torgeir Bakken (MVP) (Torgeir.Bakken-spam_at_hydro.com)
Date: 02/12/04 

Date: Thu, 12 Feb 2004 14:11:43 +0100

Eric Coidan wrote:

> I know that I can setup user security for services through the MMC but how
> do I do that via command line. You have cacls for the file system, regini
> for the registry but what is used for the services? I want to add the Users
> group permission to run the telephony service.

Hi

Relevant for WinXP as well:

HOW TO: Grant Users Rights to Manage Services in Windows 2000
http://support.microsoft.com/?kbid=288129

For method 3 in the article above:

A new, bug-fixed version of SubInACL.exe is available for download here
(Win2k/WinXP/Win2k3):

http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b

This free 3rd party utility can also help you:

SETACL (freeware) at
http://setacl.sourceforge.net/

SetACL can set permissions on:

Local or remote directories
Local or remote files
Local or remote printers
Local or remote registry keys
Local or remote Win32 services
Local or remote network shares 

--
torgeir
Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of the 1328 page
Scripting Guide: http://www.microsoft.com/technet/scriptcenter

Relevant Pages

  • Re: script registry editing
    ... > of remote machines. ... WMI and it's StdRegProv class: ... Documentation in regobj.doc and a remote registry example in registry.vbs ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windows.server.scripting)
  • Re: adding rights via command line
    ... > local file system AND registry rights to users on their own machines? ... Local or remote directories ...
    (microsoft.public.windowsxp.security_admin)
  • Re: retrieve remote registry variables
    ... > sresult should contain %systemdrive%\Documents and settings\Username ... WMI will always expand the registry values. ... (both support remote registry). ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.win32.programmer.wmi)
  • Re: How to disable XP SP1 Firewall either via Group Policy or Reg entry?
    ... > Some of the users have their XP firewall turned on, which makes remote ... > management and log collecting impossible for me. ... > Is there a registry value that I can import that will disable this? ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windowsxp.general)
  • Re: retrieve remote registry variables
    ... > As far as I know, WMI will always expand the registry values. ... > (both support remote registry). ... > torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway ...
    (microsoft.public.win32.programmer.wmi)
Quantcast