How do I give admin rights to a service?


i have user needs start , stop service running on server. not need controlled services, there start/stop option when launch gui application. on call application , far way have found able stop/start if add him local admin group. don't want him have control on server how set permissions have admin access 1 program?

i have tried full control application .exe under security tab, unable start , stop service.


approach 1 :

  1. create console “mmc.exe”
  2. created blank security template
  3. created security database store policy information
  4. change service permission user want give permission
  5. applied new security permission ( referred this blog)

approach works fine, have created 2 non admin user account in 1 virtual machine , set permission admin account, able start , stop service both non admin user accounts. approach not complete solution problem, involves lot of manual steps. start looking automate process. result of found approach 2

approach 2 : grant permission using “subinacl.exe”, subinacl command-line tool enables administrators obtain security information files, registry keys, , services, , transfer information user user, local or global group group, , domain domain.

followed same example of create 2 non admin user account , execute command subinacl /service \domainname\myservice /grant=domainname\users=top grant user start/stop service.



Windows Server  >  Windows Server General Forum



Comments

Popular posts from this blog

directory stack

PowerShell List

Dns access list