Guest Nathan Posted July 16, 2007 Posted July 16, 2007 Hi, We are running Win2k3 x64 as a TS and the GPMC isn't supported. We have a need to allow a single user to be able to start/stop a couple of services for an application installed on the server. This worked ok on our 32bit TS install as we could load the GPMC and edit the services. So my question is, how can I use the GPMC to manage system services on a remote computer so I can allow this user to manage these services? TIA Nathan
Guest Mark Heitbrink [MVP] Posted July 16, 2007 Posted July 16, 2007 Re: Managing system services from remote computer with GPMC Hi, Nathan schrieb: > We are running Win2k3 x64 as a TS and the GPMC isn't supported. Simply install the GPMC it on XP or 2003 (x86). Mark -- Mark Heitbrink - MVP Windows Server - Group Policy Homepage: http://www.gruppenrichtlinien.de - deutsch Blog: gpupdate.spaces.live.com - english
Guest Nathan Posted July 16, 2007 Posted July 16, 2007 Re: Managing system services from remote computer with GPMC Hi Mark, I have done this, but how can I show the services that are installed on the remote computer? When I open the GPO it only shows the services from the machine that I am viewing the GPO on. Nathan "Mark Heitbrink [MVP]" <spam-only@gruppenrichtlinien.de> wrote in message news:u2g34P6xHHA.5068@TK2MSFTNGP05.phx.gbl... > Hi, > > Nathan schrieb: >> We are running Win2k3 x64 as a TS and the GPMC isn't supported. > > Simply install the GPMC it on XP or 2003 (x86). > > Mark > -- > Mark Heitbrink - MVP Windows Server - Group Policy > > Homepage: http://www.gruppenrichtlinien.de - deutsch > Blog: gpupdate.spaces.live.com - english
Guest Mark Heitbrink [MVP] Posted July 16, 2007 Posted July 16, 2007 Re: Managing system services from remote computer with GPMC Hi, Nathan schrieb: > I have done this, but how can I show the services that are installed on the > remote computer? > When I open the GPO it only shows the services from the machine that I am > viewing the GPO on. - create a GPO, not linked - edit a local service, no matter which one - open the created GptTmpl.inf with an editor (notepad) - remove the entry or replace bei yours - you have to use the Name from registry, not the Displayname - save it on your desktop - import the *.inf on "Security Settings" -> Context menu -> Import Done. They will be displayed with name you typed in. Alterntative: - Use the system, with the installed services - MMC -> SnapIn "Security TEmplates" - create a new on, edit the services in the UI - save *.inf - import into GPO like in the example above. Perhaps a littel bit easier, because you can edit the settings in the UI, especially much easier if you are not only define the startoptions, but security settings. Mark -- Mark Heitbrink - MVP Windows Server - Group Policy Homepage: http://www.gruppenrichtlinien.de - deutsch Blog: gpupdate.spaces.live.com - english
Guest Roger Abell [MVP] Posted July 16, 2007 Posted July 16, 2007 Re: Managing system services from remote computer with GPMC If you set service permissions this way, do it from a W2k3, not an XP (unless you have obtained and applied the post-SP2 patch for XP http://support.microsoft.com/kb/894794 ) Since this may be a one-time event, it might just be more simple to set the permissions with the sc utility using the sdshow action to get the current permissions, and then adding an ACE for the desired grantee and applying with sdset) Roger "Nathan" <nathan@123> wrote in message news:%23ZCt8T6xHHA.3328@TK2MSFTNGP03.phx.gbl... > Hi Mark, > > I have done this, but how can I show the services that are installed on > the remote computer? > > When I open the GPO it only shows the services from the machine that I am > viewing the GPO on. > > Nathan > > "Mark Heitbrink [MVP]" <spam-only@gruppenrichtlinien.de> wrote in message > news:u2g34P6xHHA.5068@TK2MSFTNGP05.phx.gbl... >> Hi, >> >> Nathan schrieb: >>> We are running Win2k3 x64 as a TS and the GPMC isn't supported. >> >> Simply install the GPMC it on XP or 2003 (x86). >> >> Mark >> -- >> Mark Heitbrink - MVP Windows Server - Group Policy >> >> Homepage: http://www.gruppenrichtlinien.de - deutsch >> Blog: gpupdate.spaces.live.com - english > >
Guest Nathan Posted July 18, 2007 Posted July 18, 2007 Re: Managing system services from remote computer with GPMC Thanks guys, I will give this a go. "Roger Abell [MVP]" <mvpNoSpam@asu.edu> wrote in message news:eTkgVg7xHHA.3684@TK2MSFTNGP02.phx.gbl... > If you set service permissions this way, do it from a W2k3, not an > XP (unless you have obtained and applied the post-SP2 patch for > XP http://support.microsoft.com/kb/894794 ) > > Since this may be a one-time event, it might just be more simple > to set the permissions with the sc utility using the sdshow action > to get the current permissions, and then adding an ACE for the > desired grantee and applying with sdset) > > Roger > > "Nathan" <nathan@123> wrote in message > news:%23ZCt8T6xHHA.3328@TK2MSFTNGP03.phx.gbl... >> Hi Mark, >> >> I have done this, but how can I show the services that are installed on >> the remote computer? >> >> When I open the GPO it only shows the services from the machine that I am >> viewing the GPO on. >> >> Nathan >> >> "Mark Heitbrink [MVP]" <spam-only@gruppenrichtlinien.de> wrote in message >> news:u2g34P6xHHA.5068@TK2MSFTNGP05.phx.gbl... >>> Hi, >>> >>> Nathan schrieb: >>>> We are running Win2k3 x64 as a TS and the GPMC isn't supported. >>> >>> Simply install the GPMC it on XP or 2003 (x86). >>> >>> Mark >>> -- >>> Mark Heitbrink - MVP Windows Server - Group Policy >>> >>> Homepage: http://www.gruppenrichtlinien.de - deutsch >>> Blog: gpupdate.spaces.live.com - english >> >> > >
Recommended Posts