|
Posted by Roger Abell [MVP] on November 19, 2006, 5:45 am
Please log in for more thread options
Make an mmc tool with the Security templates snapin, define a new
template, set as desired, and save. If needed edit with notepad and
copy a service's line and change the name of the new line to be the
service name of the service that is not listed (if you make the new
template on the actual machine with the service then it should be
there). When done, import the template. I find it useful to add the
Security Config and Analysis snapin also so that I can analyze the
template against the system before deciding the template is done.
Be very careful that the security for any service includes System
and the account used to run the service (if different from System).
Query the knowledgebase about permissions for services as there
have been some errors in GPO application of service permissions,
and you do not state your OS version, so be careful - check the KBs!.
>I need to allow users/programs that have certan (old) ms-dos programs to
>start few specific (new) services through GPO on my domain controller. I
>found how to allow users to start services(Comp. config->win
>settings->Sec.settings->System Services) but these services aren't on the
>list of services in my GPO, is there a way to add them or something
> Been searching net but could not find.
>
| 
XML Sitemap