Non-Administrator Level Access Problem

[Guest jockel]

I want a select group of users to be able to access an Terminal Server

session with the ability to stop/start services and scheduled tasks but not

make them server administrators.

 

The server environment is Windows 2003 SP1. I have tried using Power Users

but this does not provide access to the services or scheduled tasks.

[Guest Munindra Das [MSFT]]

Re: Non-Administrator Level Access Problem

 

1) To allow non-admins to stop services, you can change the service ACL by

using the tool at

http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b&displaylang=en.

 

2) To schedule tasks, you will have to allow all non-admins and not a

specific user group. You can do this on a DC using this policy -

http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/gp/558.mspx?mfr=true

 

Both this tasks are admin specific and it is not recommended to allow

non-admins to do these two tasks. This is true particularly for the

scheduled tasks, since that gives a non-admin to schedule tasks that will

run as system. It is equivalent to giving that user admin permission.

 

--

 

Thanks!

 

This posting is provided "AS IS" with no warranties, and confers no rights.

 

"jockel" <jockel@discussions.microsoft.com> wrote in message

news:3CD949F7-E058-42DE-9B99-CE5CA2707F76@microsoft.com...

>I want a select group of users to be able to access an Terminal Server

> session with the ability to stop/start services and scheduled tasks but

> not

> make them server administrators.

>

> The server environment is Windows 2003 SP1. I have tried using Power

> Users

> but this does not provide access to the services or scheduled tasks.