Managing system services from remote computer with GPMC

[Guest Nathan]

Hi,

 

We are running Win2k3 x64 as a TS and the GPMC isn't supported.

 

We have a need to allow a single user to be able to start/stop a couple of

services for an application installed on the server. This worked ok on our

32bit TS install as we could load the GPMC and edit the services.

 

So my question is, how can I use the GPMC to manage system services on a

remote computer so I can allow this user to manage these services?

 

TIA

 

Nathan

[Guest Mark Heitbrink [MVP]]

Re: Managing system services from remote computer with GPMC

 

Hi,

 

Nathan schrieb:

> We are running Win2k3 x64 as a TS and the GPMC isn't supported.

 

Simply install the GPMC it on XP or 2003 (x86).

 

Mark

--

Mark Heitbrink - MVP Windows Server - Group Policy

 

Homepage: http://www.gruppenrichtlinien.de - deutsch

Blog: gpupdate.spaces.live.com - english

[Guest Nathan]

Re: Managing system services from remote computer with GPMC

 

Hi Mark,

 

I have done this, but how can I show the services that are installed on the

remote computer?

 

When I open the GPO it only shows the services from the machine that I am

viewing the GPO on.

 

Nathan

 

"Mark Heitbrink [MVP]" <spam-only@gruppenrichtlinien.de> wrote in message

news:u2g34P6xHHA.5068@TK2MSFTNGP05.phx.gbl...

> Hi,

>

> Nathan schrieb:

>> We are running Win2k3 x64 as a TS and the GPMC isn't supported.

>

> Simply install the GPMC it on XP or 2003 (x86).

>

> Mark

> --

> Mark Heitbrink - MVP Windows Server - Group Policy

>

> Homepage: http://www.gruppenrichtlinien.de - deutsch

> Blog: gpupdate.spaces.live.com - english

[Guest Mark Heitbrink [MVP]]

Re: Managing system services from remote computer with GPMC

 

Hi,

 

Nathan schrieb:

> I have done this, but how can I show the services that are installed on the

> remote computer?

> When I open the GPO it only shows the services from the machine that I am

> viewing the GPO on.

 

- create a GPO, not linked

- edit a local service, no matter which one

- open the created GptTmpl.inf with an editor (notepad)

- remove the entry or replace bei yours

- you have to use the Name from registry, not the Displayname

- save it on your desktop

- import the *.inf on "Security Settings" -> Context menu -> Import

Done.

 

They will be displayed with name you typed in.

 

Alterntative:

- Use the system, with the installed services

- MMC -> SnapIn "Security TEmplates"

- create a new on, edit the services in the UI

- save *.inf

- import into GPO like in the example above.

 

Perhaps a littel bit easier, because you can edit the settings

in the UI, especially much easier if you are not only define

the startoptions, but security settings.

 

Mark

--

Mark Heitbrink - MVP Windows Server - Group Policy

 

Homepage: http://www.gruppenrichtlinien.de - deutsch

Blog: gpupdate.spaces.live.com - english

[Guest Roger Abell [MVP]]

Re: Managing system services from remote computer with GPMC

 

If you set service permissions this way, do it from a W2k3, not an

XP (unless you have obtained and applied the post-SP2 patch for

XP http://support.microsoft.com/kb/894794 )

 

Since this may be a one-time event, it might just be more simple

to set the permissions with the sc utility using the sdshow action

to get the current permissions, and then adding an ACE for the

desired grantee and applying with sdset)

 

Roger

 

"Nathan" <nathan@123> wrote in message

news:%23ZCt8T6xHHA.3328@TK2MSFTNGP03.phx.gbl...

> Hi Mark,

>

> I have done this, but how can I show the services that are installed on

> the remote computer?

>

> When I open the GPO it only shows the services from the machine that I am

> viewing the GPO on.

>

> Nathan

>

> "Mark Heitbrink [MVP]" <spam-only@gruppenrichtlinien.de> wrote in message

> news:u2g34P6xHHA.5068@TK2MSFTNGP05.phx.gbl...

>> Hi,

>>

>> Nathan schrieb:

>>> We are running Win2k3 x64 as a TS and the GPMC isn't supported.

>>

>> Simply install the GPMC it on XP or 2003 (x86).

>>

>> Mark

>> --

>> Mark Heitbrink - MVP Windows Server - Group Policy

>>

>> Homepage: http://www.gruppenrichtlinien.de - deutsch

>> Blog: gpupdate.spaces.live.com - english

>

>

[Guest Nathan]

Re: Managing system services from remote computer with GPMC

 

Thanks guys,

 

I will give this a go.

 

 

"Roger Abell [MVP]" <mvpNoSpam@asu.edu> wrote in message

news:eTkgVg7xHHA.3684@TK2MSFTNGP02.phx.gbl...

> If you set service permissions this way, do it from a W2k3, not an

> XP (unless you have obtained and applied the post-SP2 patch for

> XP http://support.microsoft.com/kb/894794 )

>

> Since this may be a one-time event, it might just be more simple

> to set the permissions with the sc utility using the sdshow action

> to get the current permissions, and then adding an ACE for the

> desired grantee and applying with sdset)

>

> Roger

>

> "Nathan" <nathan@123> wrote in message

> news:%23ZCt8T6xHHA.3328@TK2MSFTNGP03.phx.gbl...

>> Hi Mark,

>>

>> I have done this, but how can I show the services that are installed on

>> the remote computer?

>>

>> When I open the GPO it only shows the services from the machine that I am

>> viewing the GPO on.

>>

>> Nathan

>>

>> "Mark Heitbrink [MVP]" <spam-only@gruppenrichtlinien.de> wrote in message

>> news:u2g34P6xHHA.5068@TK2MSFTNGP05.phx.gbl...

>>> Hi,

>>>

>>> Nathan schrieb:

>>>> We are running Win2k3 x64 as a TS and the GPMC isn't supported.

>>>

>>> Simply install the GPMC it on XP or 2003 (x86).

>>>

>>> Mark

>>> --

>>> Mark Heitbrink - MVP Windows Server - Group Policy

>>>

>>> Homepage: http://www.gruppenrichtlinien.de - deutsch

>>> Blog: gpupdate.spaces.live.com - english

>>

>>

>

>