Guest jockel Posted June 30, 2008 Posted June 30, 2008 I want a select group of users to be able to access an Terminal Server session with the ability to stop/start services and scheduled tasks but not make them server administrators. The server environment is Windows 2003 SP1. I have tried using Power Users but this does not provide access to the services or scheduled tasks.
Guest Munindra Das [MSFT] Posted July 3, 2008 Posted July 3, 2008 Re: Non-Administrator Level Access Problem 1) To allow non-admins to stop services, you can change the service ACL by using the tool at http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b&displaylang=en. 2) To schedule tasks, you will have to allow all non-admins and not a specific user group. You can do this on a DC using this policy - http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/gp/558.mspx?mfr=true Both this tasks are admin specific and it is not recommended to allow non-admins to do these two tasks. This is true particularly for the scheduled tasks, since that gives a non-admin to schedule tasks that will run as system. It is equivalent to giving that user admin permission. -- Thanks! This posting is provided "AS IS" with no warranties, and confers no rights. "jockel" <jockel@discussions.microsoft.com> wrote in message news:3CD949F7-E058-42DE-9B99-CE5CA2707F76@microsoft.com... >I want a select group of users to be able to access an Terminal Server > session with the ability to stop/start services and scheduled tasks but > not > make them server administrators. > > The server environment is Windows 2003 SP1. I have tried using Power > Users > but this does not provide access to the services or scheduled tasks.
Recommended Posts