starting and stoping services.

[Guest Fabio]

Hi all,

 

I am running windows2k3 server. Do I need to have administrator start

services(exchange services, sql services etc.) or can I have other accounts

start services? if so how can I accomplish that? I want to elimate

administrator for security purposes?

 

Most appreciative

[Guest SBS Rocker]

Re: starting and stoping services.

 

Edit the "Log on as a service" local policy.

 

"Fabio" <Fabio@discussions.microsoft.com> wrote in message

news:277A5002-C1A8-4A50-86F9-2D7BDEE3C0FB@microsoft.com...

> Hi all,

>

> I am running windows2k3 server. Do I need to have administrator start

> services(exchange services, sql services etc.) or can I have other

> accounts

> start services? if so how can I accomplish that? I want to elimate

> administrator for security purposes?

>

> Most appreciative

[Guest Fabio]

Re: starting and stoping services.

 

ok,

 

are there certain rights that I need to know so that I can give the new

service account administrator.

 

"SBS Rocker" wrote:

> Edit the "Log on as a service" local policy.

>

> "Fabio" <Fabio@discussions.microsoft.com> wrote in message

> news:277A5002-C1A8-4A50-86F9-2D7BDEE3C0FB@microsoft.com...

> > Hi all,

> >

> > I am running windows2k3 server. Do I need to have administrator start

> > services(exchange services, sql services etc.) or can I have other

> > accounts

> > start services? if so how can I accomplish that? I want to elimate

> > administrator for security purposes?

> >

> > Most appreciative

>

>

>

[Guest Mathieu CHATEAU]

Re: starting and stoping services.

 

Hello,

 

Do you want to be able to start service from a non administrator account or

do you want to run services with non privileged account ?

This is much different !

 

--

Cordialement,

Mathieu CHATEAU

http://lordoftheping.blogspot.com

 

 

"Fabio" <Fabio@discussions.microsoft.com> wrote in message

news:CBD3ABD6-ECEB-4785-A3B8-5C43EF7EDFC7@microsoft.com...

> ok,

>

> are there certain rights that I need to know so that I can give the new

> service account administrator.

>

> "SBS Rocker" wrote:

>

>> Edit the "Log on as a service" local policy.

>>

>> "Fabio" <Fabio@discussions.microsoft.com> wrote in message

>> news:277A5002-C1A8-4A50-86F9-2D7BDEE3C0FB@microsoft.com...

>> > Hi all,

>> >

>> > I am running windows2k3 server. Do I need to have administrator start

>> > services(exchange services, sql services etc.) or can I have other

>> > accounts

>> > start services? if so how can I accomplish that? I want to elimate

>> > administrator for security purposes?

>> >

>> > Most appreciative

>>

>>

>>

[Guest Fabio]

Re: starting and stoping services.

 

I want to create a user account that doesnt need to have domain admin rights.

just to start services.

 

"Mathieu CHATEAU" wrote:

> Hello,

>

> Do you want to be able to start service from a non administrator account or

> do you want to run services with non privileged account ?

> This is much different !

>

> --

> Cordialement,

> Mathieu CHATEAU

> http://lordoftheping.blogspot.com

>

>

> "Fabio" <Fabio@discussions.microsoft.com> wrote in message

> news:CBD3ABD6-ECEB-4785-A3B8-5C43EF7EDFC7@microsoft.com...

> > ok,

> >

> > are there certain rights that I need to know so that I can give the new

> > service account administrator.

> >

> > "SBS Rocker" wrote:

> >

> >> Edit the "Log on as a service" local policy.

> >>

> >> "Fabio" <Fabio@discussions.microsoft.com> wrote in message

> >> news:277A5002-C1A8-4A50-86F9-2D7BDEE3C0FB@microsoft.com...

> >> > Hi all,

> >> >

> >> > I am running windows2k3 server. Do I need to have administrator start

> >> > services(exchange services, sql services etc.) or can I have other

> >> > accounts

> >> > start services? if so how can I accomplish that? I want to elimate

> >> > administrator for security purposes?

> >> >

> >> > Most appreciative

> >>

> >>

> >>

>

>

[Guest Mathieu CHATEAU]

Re: starting and stoping services.

 

2 ways:

-through GPO

-Locally.

 

I would prefer GPO as it will survive a reinstall, can apply many server and

is self documented (if someone replace you he will have a chance to see it)

GPO way:

Create a new gpo,

go to computer section

Windows settings

Security settings

System Services

Edit the services you want to allow someone to stop/start

Click edit security

Add a user, or better a group

check "Start, Stop and pause a service"

Then replicate between DC and issue a gpupdate

 

After, user may stop/start service with:

sc myserver stop XXX

sc myserver start XXX

 

 

 

 

 

--

Cordialement,

Mathieu CHATEAU

http://lordoftheping.blogspot.com

 

 

"Fabio" <Fabio@discussions.microsoft.com> wrote in message

news:2F1DC422-7DC9-416A-8B24-CEAE46832654@microsoft.com...

>I want to create a user account that doesnt need to have domain admin

>rights.

> just to start services.

>

> "Mathieu CHATEAU" wrote:

>

>> Hello,

>>

>> Do you want to be able to start service from a non administrator account

>> or

>> do you want to run services with non privileged account ?

>> This is much different !

>>

>> --

>> Cordialement,

>> Mathieu CHATEAU

>> http://lordoftheping.blogspot.com

>>

>>

>> "Fabio" <Fabio@discussions.microsoft.com> wrote in message

>> news:CBD3ABD6-ECEB-4785-A3B8-5C43EF7EDFC7@microsoft.com...

>> > ok,

>> >

>> > are there certain rights that I need to know so that I can give the new

>> > service account administrator.

>> >

>> > "SBS Rocker" wrote:

>> >

>> >> Edit the "Log on as a service" local policy.

>> >>

>> >> "Fabio" <Fabio@discussions.microsoft.com> wrote in message

>> >> news:277A5002-C1A8-4A50-86F9-2D7BDEE3C0FB@microsoft.com...

>> >> > Hi all,

>> >> >

>> >> > I am running windows2k3 server. Do I need to have administrator

>> >> > start

>> >> > services(exchange services, sql services etc.) or can I have other

>> >> > accounts

>> >> > start services? if so how can I accomplish that? I want to elimate

>> >> > administrator for security purposes?

>> >> >

>> >> > Most appreciative

>> >>

>> >>

>> >>

>>

>>