|
Posted by Joe Richards [MVP] on June 25, 2005, 7:38 pm
Please log in for more thread options You would need to create an SDDL SD to apply with SC. Read about the SDDL format
here
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/secauthz/security/security_descriptor_definition_language.asp
To go back to the old ACL in RTM, the SDDL string is
D:(A;;CCLCRPRC;;;AU)(A;;CCLCRPWPRC;;;SY)(A;;KA;;;BA)S:(AU;FA;KA;;;WD)(AU;OIIOFA;GA;;;WD)
--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net
Grant wrote:
> Hi Joe, I read your blog but am still confised, how would I enable a
> standard domain user to restart 'Myservice' which is located on the domain
> controller?
>
> Could you provide an example of how you would acheive this?
>
> Thanks for your help,
> Grant
>
>
>
>>You can do two things.
>>
>>The first is use a tool that doesn't require enumerating the services in
>>order to manage them. This tool will also have to properly open the
>>SCManager to allow for this. Two tools fit this category to my knowledge
>>right now
>>
>>sc.exe that comes with Windows Server 2003 SP1
>>svcutil - http://www.joeware.net/win/free/tools/svcutil.htm
>>
>>
>>alternatively, you can reopen up the enumeration permissions for
>>authenticated users by modifying the ACL on the SCManager. For more info,
>>please see
>>
>>http://blog.joeware.net/2005/06/12/38/
>>
>> joe
>>
>>--
>>Joe Richards Microsoft MVP Windows Server Directory Services
>>www.joeware.net
>>
>>
>>PJ wrote:
>>
>>>Hi all,
>>>
>>>Have a problem after updating Win2003 to SP1.
>>>On one of our servers I enable for one of users (not Admin on server) to
>>>restart IISADMIN service remotely (user can do this ftom his workstation
>>>using Computer Management MMC concole). But after upgrading server to SP1
>>>this functionality broken - when user start Computer Management MMC on
>>>his computer and connect to server, he can not enumerate services (Access
>>>Denied" error).
>>>
>>>As I found - Win2003 SP1 changed SCM permissions :((
>>>
>>>How cam be this fixed.
>>>
>>>Thank You.
>>>
>>>.
>
>
>
| 
XML Sitemap