|
Posted by Steven L Umbach on June 13, 2006, 11:08 pm
Please log in for more thread options Hmm. I can see it at the bottom of the page. Anyhow here it is. --- Steve
Example 23 SetACL.exe -on "\server1\W32Time" -ot srv -actn ace
-ace "n:domain1\group1;p:start_stop"Sets permissions to start and
stop the Windows time service on server 'server1' for group 'group1' in
domain 'domain1'.
>
> Thanks Steven for your quick response.
>
> One more issue -- I don't find example 23 in
> http://setacl.sourceforge.net/html/examples.html.
>
> Steven L Umbach wrote:
>> See if the following documents in the links below help on how to manage
>> service permissions. The free setacl utility will also work and is more
>> user
>> friendly then subinacl. A user will also need permission to start
>> services
>> that the service depends on, if any, in case they are stopped. It may
>> help
>> trying to use the sc command to start the service as you may get more
>> helpful information as to why it failed. Sc /? will show the details of
>> the
>> sc command. --- Steve
>>
>> http://support.microsoft.com/default.aspx?scid=kb;en-us;288129
>> http://setacl.sourceforge.net/html/examples.html --- see example 23
>> http://www.microsoft.com/technet/security/topics/serversecurity/serviceaccount/default.mspx
>> --- The Services and Service Accounts Security Planning Guide
>
begin 666 spacer.gif
K1TE&.#EA`0`!`( ``/___P```"'Y! $`````+ `````!``$```("1 $`.P``
`
end
|