Guest Fabio Posted August 22, 2007 Posted August 22, 2007 Hi all, I am running windows2k3 server. Do I need to have administrator start services(exchange services, sql services etc.) or can I have other accounts start services? if so how can I accomplish that? I want to elimate administrator for security purposes? Most appreciative
Guest SBS Rocker Posted August 22, 2007 Posted August 22, 2007 Re: starting and stoping services. Edit the "Log on as a service" local policy. "Fabio" <Fabio@discussions.microsoft.com> wrote in message news:277A5002-C1A8-4A50-86F9-2D7BDEE3C0FB@microsoft.com... > Hi all, > > I am running windows2k3 server. Do I need to have administrator start > services(exchange services, sql services etc.) or can I have other > accounts > start services? if so how can I accomplish that? I want to elimate > administrator for security purposes? > > Most appreciative
Guest Fabio Posted August 22, 2007 Posted August 22, 2007 Re: starting and stoping services. ok, are there certain rights that I need to know so that I can give the new service account administrator. "SBS Rocker" wrote: > Edit the "Log on as a service" local policy. > > "Fabio" <Fabio@discussions.microsoft.com> wrote in message > news:277A5002-C1A8-4A50-86F9-2D7BDEE3C0FB@microsoft.com... > > Hi all, > > > > I am running windows2k3 server. Do I need to have administrator start > > services(exchange services, sql services etc.) or can I have other > > accounts > > start services? if so how can I accomplish that? I want to elimate > > administrator for security purposes? > > > > Most appreciative > > >
Guest Mathieu CHATEAU Posted August 22, 2007 Posted August 22, 2007 Re: starting and stoping services. Hello, Do you want to be able to start service from a non administrator account or do you want to run services with non privileged account ? This is much different ! -- Cordialement, Mathieu CHATEAU http://lordoftheping.blogspot.com "Fabio" <Fabio@discussions.microsoft.com> wrote in message news:CBD3ABD6-ECEB-4785-A3B8-5C43EF7EDFC7@microsoft.com... > ok, > > are there certain rights that I need to know so that I can give the new > service account administrator. > > "SBS Rocker" wrote: > >> Edit the "Log on as a service" local policy. >> >> "Fabio" <Fabio@discussions.microsoft.com> wrote in message >> news:277A5002-C1A8-4A50-86F9-2D7BDEE3C0FB@microsoft.com... >> > Hi all, >> > >> > I am running windows2k3 server. Do I need to have administrator start >> > services(exchange services, sql services etc.) or can I have other >> > accounts >> > start services? if so how can I accomplish that? I want to elimate >> > administrator for security purposes? >> > >> > Most appreciative >> >> >>
Guest Fabio Posted August 22, 2007 Posted August 22, 2007 Re: starting and stoping services. I want to create a user account that doesnt need to have domain admin rights. just to start services. "Mathieu CHATEAU" wrote: > Hello, > > Do you want to be able to start service from a non administrator account or > do you want to run services with non privileged account ? > This is much different ! > > -- > Cordialement, > Mathieu CHATEAU > http://lordoftheping.blogspot.com > > > "Fabio" <Fabio@discussions.microsoft.com> wrote in message > news:CBD3ABD6-ECEB-4785-A3B8-5C43EF7EDFC7@microsoft.com... > > ok, > > > > are there certain rights that I need to know so that I can give the new > > service account administrator. > > > > "SBS Rocker" wrote: > > > >> Edit the "Log on as a service" local policy. > >> > >> "Fabio" <Fabio@discussions.microsoft.com> wrote in message > >> news:277A5002-C1A8-4A50-86F9-2D7BDEE3C0FB@microsoft.com... > >> > Hi all, > >> > > >> > I am running windows2k3 server. Do I need to have administrator start > >> > services(exchange services, sql services etc.) or can I have other > >> > accounts > >> > start services? if so how can I accomplish that? I want to elimate > >> > administrator for security purposes? > >> > > >> > Most appreciative > >> > >> > >> > >
Guest Mathieu CHATEAU Posted August 22, 2007 Posted August 22, 2007 Re: starting and stoping services. 2 ways: -through GPO -Locally. I would prefer GPO as it will survive a reinstall, can apply many server and is self documented (if someone replace you he will have a chance to see it) GPO way: Create a new gpo, go to computer section Windows settings Security settings System Services Edit the services you want to allow someone to stop/start Click edit security Add a user, or better a group check "Start, Stop and pause a service" Then replicate between DC and issue a gpupdate After, user may stop/start service with: sc myserver stop XXX sc myserver start XXX -- Cordialement, Mathieu CHATEAU http://lordoftheping.blogspot.com "Fabio" <Fabio@discussions.microsoft.com> wrote in message news:2F1DC422-7DC9-416A-8B24-CEAE46832654@microsoft.com... >I want to create a user account that doesnt need to have domain admin >rights. > just to start services. > > "Mathieu CHATEAU" wrote: > >> Hello, >> >> Do you want to be able to start service from a non administrator account >> or >> do you want to run services with non privileged account ? >> This is much different ! >> >> -- >> Cordialement, >> Mathieu CHATEAU >> http://lordoftheping.blogspot.com >> >> >> "Fabio" <Fabio@discussions.microsoft.com> wrote in message >> news:CBD3ABD6-ECEB-4785-A3B8-5C43EF7EDFC7@microsoft.com... >> > ok, >> > >> > are there certain rights that I need to know so that I can give the new >> > service account administrator. >> > >> > "SBS Rocker" wrote: >> > >> >> Edit the "Log on as a service" local policy. >> >> >> >> "Fabio" <Fabio@discussions.microsoft.com> wrote in message >> >> news:277A5002-C1A8-4A50-86F9-2D7BDEE3C0FB@microsoft.com... >> >> > Hi all, >> >> > >> >> > I am running windows2k3 server. Do I need to have administrator >> >> > start >> >> > services(exchange services, sql services etc.) or can I have other >> >> > accounts >> >> > start services? if so how can I accomplish that? I want to elimate >> >> > administrator for security purposes? >> >> > >> >> > Most appreciative >> >> >> >> >> >> >> >>
Recommended Posts