How do I give admin rights to a service?
i have user needs start , stop service running on server. not need controlled services, there start/stop option when launch gui application. on call application , far way have found able stop/start if add him local admin group. don't want him have control on server how set permissions have admin access 1 program?
i have tried full control application .exe under security tab, unable start , stop service.
approach 1 :
- create console “mmc.exe”
- created blank security template
- created security database store policy information
- change service permission user want give permission
- applied new security permission ( referred this blog)
approach works fine, have created 2 non admin user account in 1 virtual machine , set permission admin account, able start , stop service both non admin user accounts. approach not complete solution problem, involves lot of manual steps. start looking automate process. result of found approach 2
approach 2 : grant permission using “subinacl.exe”, subinacl command-line tool enables administrators obtain security information files, registry keys, , services, , transfer information user user, local or global group group, , domain domain.
followed same example of create 2 non admin user account , execute command subinacl /service \domainname\myservice /grant=domainname\users=top grant user start/stop service.
Windows Server > Windows Server General Forum
Comments
Post a Comment