Click here to get back home

Start and Stop Services Remotely Under Non-Administrative User

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Start and Stop Services Remotely Under Non-Administrative User Alfred Rapozo 04-26-2006
Posted by Alfred Rapozo on April 26, 2006, 5:01 pm
Please log in for more thread options
Hi,

I've been wanting to have a non-administrative user stop and start some
custom services on Windows 2000 and 2003 Server machines. I can give
them access locally without them being member of the administrators
group, but not remotely, what are the necessary permissions for that?

Alfred.

Posted by Roger Abell [MVP] on April 26, 2006, 11:58 pm
Please log in for more thread options
What kind of remote access. In other words, Log on over the network
user right is not covering their remote authenticated access?

> Hi,
>
> I've been wanting to have a non-administrative user stop and start some
> custom services on Windows 2000 and 2003 Server machines. I can give them
> access locally without them being member of the administrators group, but
> not remotely, what are the necessary permissions for that?
>
> Alfred.



Posted by mike.hubenschmidt on April 27, 2006, 7:35 am
Please log in for more thread options
Config a Group Policy for the server or servers and use the "Services"
branch of the computer account group policy. In here you can assign
explicit permissions for any user to stop, paus, restart start etc each
individual service. A small note, if its a custom/non-standard service
you will have to create the policy from the machine with that service
in order to see it.(i think). Anyhow, you can then use the resource
kit tools "netsvc.exe" to run a batch or command line remotely to stop,
start, query the specific service.

Hope it helps!


Posted by Alfred Rapozo on April 28, 2006, 10:51 am
Please log in for more thread options
mike.hubenschmidt@usda.gov wrote:
> Config a Group Policy for the server or servers and use the "Services"
> branch of the computer account group policy. In here you can assign
> explicit permissions for any user to stop, paus, restart start etc each
> individual service. A small note, if its a custom/non-standard service
> you will have to create the policy from the machine with that service
> in order to see it.(i think). Anyhow, you can then use the resource
> kit tools "netsvc.exe" to run a batch or command line remotely to stop,
> start, query the specific service.
>
> Hope it helps!
>

That's what i do right now, but they have to be logged on locally for
the permissions to work. I would like them to be able to connect
remotely using the Services mmc console and start and stop the services.

Similar ThreadsPosted
Re: Grant user right to remotely start stop server - can anybody help? March 10, 2006, 12:32 pm
Re: Grant user right to remotely start stop server - can anybody help? March 10, 2006, 12:41 pm
Re: Previous post should say Grant user right to remotely start stop Service - can anybody help? March 10, 2006, 1:04 pm
start/stop service as user from task scheduler April 3, 2006, 11:25 am
allow user to Start, Stop and Pause a Windows Service on a Workgroup Computer December 12, 2006, 10:18 am
allow start/stop a specific service through GPO November 14, 2006, 8:37 am
Certificate Services will not start ... October 11, 2005, 11:01 am
Allow user to restart service remotely July 27, 2007, 11:28 pm
Setting Permission to user to start a service October 19, 2006, 4:11 am
WAN stop respond June 1, 2006, 11:13 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap