Guest Steve Roy Posted September 13, 2007 Posted September 13, 2007 Hi !, sorry for my english, i'm french speaking. Since many years, some users can start/stop service remotly on our Win2K0 SP4 server. The domain admin created GPO for this (giving acces for stop/start/pause some service). Since few weeks, we installed another server (Windows 2K3 SP1), with same setting, same ACL, same software. The GPO was deployed but this users cannot now start/stop this services. The only difference between this 2 installation is: 1 is Windows 2000SP4 and the other Win2K3 SP1. There is some limitation, or security setting with Win2K3 ? Can someone help me please ! Thanks ! Steve
Guest Mathieu CHATEAU Posted September 13, 2007 Posted September 13, 2007 Re: Start/Stop service with non-admin user Hello, what is the targeted service ? Are you sure it has the same name ? Did you reboot ? -- Cordialement, Mathieu CHATEAU http://lordoftheping.blogspot.com "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message news:E1FD391D-859E-4BBA-B175-A10AC2885675@microsoft.com... > Hi !, > sorry for my english, i'm french speaking. > > Since many years, some users can start/stop service remotly on our Win2K0 > SP4 server. The domain admin created GPO for this (giving acces for > stop/start/pause some service). Since few weeks, we installed another > server > (Windows 2K3 SP1), with same setting, same ACL, same software. The GPO > was > deployed but this users cannot now start/stop this services. The only > difference between this 2 installation is: 1 is Windows 2000SP4 and the > other > Win2K3 SP1. There is some limitation, or security setting with Win2K3 ? > Can > someone help me please ! > > Thanks ! > Steve
Guest Steve Roy Posted September 13, 2007 Posted September 13, 2007 Re: Start/Stop service with non-admin user Bonjour Mathieu, J'ai 2 services livelink97_1 et livelink97_1Admin, oui ils sont bien défini et oui j'ai rebooté le serveur. Je fouille partout et je ne trouve rien. Merci de m'aider "Mathieu CHATEAU" wrote: > Hello, > > what is the targeted service ? Are you sure it has the same name ? > Did you reboot ? > > -- > Cordialement, > Mathieu CHATEAU > http://lordoftheping.blogspot.com > > > "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message > news:E1FD391D-859E-4BBA-B175-A10AC2885675@microsoft.com... > > Hi !, > > sorry for my english, i'm french speaking. > > > > Since many years, some users can start/stop service remotly on our Win2K0 > > SP4 server. The domain admin created GPO for this (giving acces for > > stop/start/pause some service). Since few weeks, we installed another > > server > > (Windows 2K3 SP1), with same setting, same ACL, same software. The GPO > > was > > deployed but this users cannot now start/stop this services. The only > > difference between this 2 installation is: 1 is Windows 2000SP4 and the > > other > > Win2K3 SP1. There is some limitation, or security setting with Win2K3 ? > > Can > > someone help me please ! > > > > Thanks ! > > Steve > >
Guest Mathieu CHATEAU Posted September 13, 2007 Posted September 13, 2007 Re: Start/Stop service with non-admin user re, please keep in english..(post to the french group next time!) So you rebooted and the service you want to get managed by users are livelink97_1 and livelink97_1Admin From GPMC, can you make a Group Policy Results to be sure GPO is applied ? -- Cordialement, Mathieu CHATEAU http://lordoftheping.blogspot.com "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message news:9D1F8F4E-88F0-4164-BE4D-26CDCC7FFAA1@microsoft.com... > Bonjour Mathieu, > J'ai 2 services livelink97_1 et livelink97_1Admin, oui ils sont bien > défini > et oui j'ai rebooté le serveur. Je fouille partout et je ne trouve rien. > Merci de m'aider > > "Mathieu CHATEAU" wrote: > >> Hello, >> >> what is the targeted service ? Are you sure it has the same name ? >> Did you reboot ? >> >> -- >> Cordialement, >> Mathieu CHATEAU >> http://lordoftheping.blogspot.com >> >> >> "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message >> news:E1FD391D-859E-4BBA-B175-A10AC2885675@microsoft.com... >> > Hi !, >> > sorry for my english, i'm french speaking. >> > >> > Since many years, some users can start/stop service remotly on our >> > Win2K0 >> > SP4 server. The domain admin created GPO for this (giving acces for >> > stop/start/pause some service). Since few weeks, we installed another >> > server >> > (Windows 2K3 SP1), with same setting, same ACL, same software. The GPO >> > was >> > deployed but this users cannot now start/stop this services. The only >> > difference between this 2 installation is: 1 is Windows 2000SP4 and the >> > other >> > Win2K3 SP1. There is some limitation, or security setting with Win2K3 >> > ? >> > Can >> > someone help me please ! >> > >> > Thanks ! >> > Steve >> >>
Guest Steve Roy Posted September 13, 2007 Posted September 13, 2007 Re: Start/Stop service with non-admin user Hi , sorry for the french , yes the GPO are applied : Livelink97_1 (Mode de démarrage : Automatique)masquer AutorisationsType Nom Autorisation Autoriser BUILTIN\Administrateurs Contrôle total Autoriser PROD\gMRQ-Démarre-Service-Livelink Démarrage, arrêt et pause Autoriser AUTORITE NT\SYSTEM Contrôle total Autoriser AUTORITE NT\Utilisateurs authentifiés Lecture Idem for the other service. the group gMRQ-Démarre-Service-Livelink is a domain group where the users are member. "Mathieu CHATEAU" wrote: > re, > > please keep in english..(post to the french group next time!) > > So you rebooted and the service you want to get managed by users are > livelink97_1 and livelink97_1Admin > > From GPMC, can you make a Group Policy Results to be sure GPO is applied ? > > -- > Cordialement, > Mathieu CHATEAU > http://lordoftheping.blogspot.com > > > "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message > news:9D1F8F4E-88F0-4164-BE4D-26CDCC7FFAA1@microsoft.com... > > Bonjour Mathieu, > > J'ai 2 services livelink97_1 et livelink97_1Admin, oui ils sont bien > > défini > > et oui j'ai rebooté le serveur. Je fouille partout et je ne trouve rien. > > Merci de m'aider > > > > "Mathieu CHATEAU" wrote: > > > >> Hello, > >> > >> what is the targeted service ? Are you sure it has the same name ? > >> Did you reboot ? > >> > >> -- > >> Cordialement, > >> Mathieu CHATEAU > >> http://lordoftheping.blogspot.com > >> > >> > >> "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message > >> news:E1FD391D-859E-4BBA-B175-A10AC2885675@microsoft.com... > >> > Hi !, > >> > sorry for my english, i'm french speaking. > >> > > >> > Since many years, some users can start/stop service remotly on our > >> > Win2K0 > >> > SP4 server. The domain admin created GPO for this (giving acces for > >> > stop/start/pause some service). Since few weeks, we installed another > >> > server > >> > (Windows 2K3 SP1), with same setting, same ACL, same software. The GPO > >> > was > >> > deployed but this users cannot now start/stop this services. The only > >> > difference between this 2 installation is: 1 is Windows 2000SP4 and the > >> > other > >> > Win2K3 SP1. There is some limitation, or security setting with Win2K3 > >> > ? > >> > Can > >> > someone help me please ! > >> > > >> > Thanks ! > >> > Steve > >> > >> > >
Guest Mathieu CHATEAU Posted September 13, 2007 Posted September 13, 2007 Re: Start/Stop service with non-admin user did the user logoff/logon since member of the group ? any event log / security audit fail ? -- Cordialement, Mathieu CHATEAU http://lordoftheping.blogspot.com "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message news:8DC656B8-50D6-4B37-B58D-A18A3413BF66@microsoft.com... > Hi , sorry for the french , yes the GPO are applied : > Livelink97_1 (Mode de démarrage : Automatique)masquer > AutorisationsType Nom Autorisation > Autoriser BUILTIN\Administrateurs Contrôle total > Autoriser PROD\gMRQ-Démarre-Service-Livelink Démarrage, arrêt et pause > Autoriser AUTORITE NT\SYSTEM Contrôle total > Autoriser AUTORITE NT\Utilisateurs authentifiés Lecture > > Idem for the other service. the group gMRQ-Démarre-Service-Livelink is a > domain group where the users are member. > > "Mathieu CHATEAU" wrote: > >> re, >> >> please keep in english..(post to the french group next time!) >> >> So you rebooted and the service you want to get managed by users are >> livelink97_1 and livelink97_1Admin >> >> From GPMC, can you make a Group Policy Results to be sure GPO is applied >> ? >> >> -- >> Cordialement, >> Mathieu CHATEAU >> http://lordoftheping.blogspot.com >> >> >> "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message >> news:9D1F8F4E-88F0-4164-BE4D-26CDCC7FFAA1@microsoft.com... >> > Bonjour Mathieu, >> > J'ai 2 services livelink97_1 et livelink97_1Admin, oui ils sont bien >> > défini >> > et oui j'ai rebooté le serveur. Je fouille partout et je ne trouve >> > rien. >> > Merci de m'aider >> > >> > "Mathieu CHATEAU" wrote: >> > >> >> Hello, >> >> >> >> what is the targeted service ? Are you sure it has the same name ? >> >> Did you reboot ? >> >> >> >> -- >> >> Cordialement, >> >> Mathieu CHATEAU >> >> http://lordoftheping.blogspot.com >> >> >> >> >> >> "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message >> >> news:E1FD391D-859E-4BBA-B175-A10AC2885675@microsoft.com... >> >> > Hi !, >> >> > sorry for my english, i'm french speaking. >> >> > >> >> > Since many years, some users can start/stop service remotly on our >> >> > Win2K0 >> >> > SP4 server. The domain admin created GPO for this (giving acces for >> >> > stop/start/pause some service). Since few weeks, we installed >> >> > another >> >> > server >> >> > (Windows 2K3 SP1), with same setting, same ACL, same software. The >> >> > GPO >> >> > was >> >> > deployed but this users cannot now start/stop this services. The >> >> > only >> >> > difference between this 2 installation is: 1 is Windows 2000SP4 and >> >> > the >> >> > other >> >> > Win2K3 SP1. There is some limitation, or security setting with >> >> > Win2K3 >> >> > ? >> >> > Can >> >> > someone help me please ! >> >> > >> >> > Thanks ! >> >> > Steve >> >> >> >> >> >>
Guest Steve Roy Posted September 13, 2007 Posted September 13, 2007 Re: Start/Stop service with non-admin user Hi ! yes the user logoff/logon and there is no audit fail. "Mathieu CHATEAU" wrote: > did the user logoff/logon since member of the group ? > > any event log / security audit fail ? > > -- > Cordialement, > Mathieu CHATEAU > http://lordoftheping.blogspot.com > > > "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message > news:8DC656B8-50D6-4B37-B58D-A18A3413BF66@microsoft.com... > > Hi , sorry for the french , yes the GPO are applied : > > Livelink97_1 (Mode de démarrage : Automatique)masquer > > AutorisationsType Nom Autorisation > > Autoriser BUILTIN\Administrateurs Contrôle total > > Autoriser PROD\gMRQ-Démarre-Service-Livelink Démarrage, arrêt et pause > > Autoriser AUTORITE NT\SYSTEM Contrôle total > > Autoriser AUTORITE NT\Utilisateurs authentifiés Lecture > > > > Idem for the other service. the group gMRQ-Démarre-Service-Livelink is a > > domain group where the users are member. > > > > "Mathieu CHATEAU" wrote: > > > >> re, > >> > >> please keep in english..(post to the french group next time!) > >> > >> So you rebooted and the service you want to get managed by users are > >> livelink97_1 and livelink97_1Admin > >> > >> From GPMC, can you make a Group Policy Results to be sure GPO is applied > >> ? > >> > >> -- > >> Cordialement, > >> Mathieu CHATEAU > >> http://lordoftheping.blogspot.com > >> > >> > >> "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message > >> news:9D1F8F4E-88F0-4164-BE4D-26CDCC7FFAA1@microsoft.com... > >> > Bonjour Mathieu, > >> > J'ai 2 services livelink97_1 et livelink97_1Admin, oui ils sont bien > >> > défini > >> > et oui j'ai rebooté le serveur. Je fouille partout et je ne trouve > >> > rien. > >> > Merci de m'aider > >> > > >> > "Mathieu CHATEAU" wrote: > >> > > >> >> Hello, > >> >> > >> >> what is the targeted service ? Are you sure it has the same name ? > >> >> Did you reboot ? > >> >> > >> >> -- > >> >> Cordialement, > >> >> Mathieu CHATEAU > >> >> http://lordoftheping.blogspot.com > >> >> > >> >> > >> >> "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message > >> >> news:E1FD391D-859E-4BBA-B175-A10AC2885675@microsoft.com... > >> >> > Hi !, > >> >> > sorry for my english, i'm french speaking. > >> >> > > >> >> > Since many years, some users can start/stop service remotly on our > >> >> > Win2K0 > >> >> > SP4 server. The domain admin created GPO for this (giving acces for > >> >> > stop/start/pause some service). Since few weeks, we installed > >> >> > another > >> >> > server > >> >> > (Windows 2K3 SP1), with same setting, same ACL, same software. The > >> >> > GPO > >> >> > was > >> >> > deployed but this users cannot now start/stop this services. The > >> >> > only > >> >> > difference between this 2 installation is: 1 is Windows 2000SP4 and > >> >> > the > >> >> > other > >> >> > Win2K3 SP1. There is some limitation, or security setting with > >> >> > Win2K3 > >> >> > ? > >> >> > Can > >> >> > someone help me please ! > >> >> > > >> >> > Thanks ! > >> >> > Steve > >> >> > >> >> > >> > >> > >
Guest Mathieu CHATEAU Posted September 13, 2007 Posted September 13, 2007 Re: Start/Stop service with non-admin user can you confirm that this output comes from Group Policy Results ? -- Cordialement, Mathieu CHATEAU http://lordoftheping.blogspot.com "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message news:8DC656B8-50D6-4B37-B58D-A18A3413BF66@microsoft.com... > Hi , sorry for the french , yes the GPO are applied : > Livelink97_1 (Mode de démarrage : Automatique)masquer > AutorisationsType Nom Autorisation > Autoriser BUILTIN\Administrateurs Contrôle total > Autoriser PROD\gMRQ-Démarre-Service-Livelink Démarrage, arrêt et pause > Autoriser AUTORITE NT\SYSTEM Contrôle total > Autoriser AUTORITE NT\Utilisateurs authentifiés Lecture > > Idem for the other service. the group gMRQ-Démarre-Service-Livelink is a > domain group where the users are member. > > "Mathieu CHATEAU" wrote: > >> re, >> >> please keep in english..(post to the french group next time!) >> >> So you rebooted and the service you want to get managed by users are >> livelink97_1 and livelink97_1Admin >> >> From GPMC, can you make a Group Policy Results to be sure GPO is applied >> ? >> >> -- >> Cordialement, >> Mathieu CHATEAU >> http://lordoftheping.blogspot.com >> >> >> "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message >> news:9D1F8F4E-88F0-4164-BE4D-26CDCC7FFAA1@microsoft.com... >> > Bonjour Mathieu, >> > J'ai 2 services livelink97_1 et livelink97_1Admin, oui ils sont bien >> > défini >> > et oui j'ai rebooté le serveur. Je fouille partout et je ne trouve >> > rien. >> > Merci de m'aider >> > >> > "Mathieu CHATEAU" wrote: >> > >> >> Hello, >> >> >> >> what is the targeted service ? Are you sure it has the same name ? >> >> Did you reboot ? >> >> >> >> -- >> >> Cordialement, >> >> Mathieu CHATEAU >> >> http://lordoftheping.blogspot.com >> >> >> >> >> >> "Steve Roy" <SteveRoy@discussions.microsoft.com> wrote in message >> >> news:E1FD391D-859E-4BBA-B175-A10AC2885675@microsoft.com... >> >> > Hi !, >> >> > sorry for my english, i'm french speaking. >> >> > >> >> > Since many years, some users can start/stop service remotly on our >> >> > Win2K0 >> >> > SP4 server. The domain admin created GPO for this (giving acces for >> >> > stop/start/pause some service). Since few weeks, we installed >> >> > another >> >> > server >> >> > (Windows 2K3 SP1), with same setting, same ACL, same software. The >> >> > GPO >> >> > was >> >> > deployed but this users cannot now start/stop this services. The >> >> > only >> >> > difference between this 2 installation is: 1 is Windows 2000SP4 and >> >> > the >> >> > other >> >> > Win2K3 SP1. There is some limitation, or security setting with >> >> > Win2K3 >> >> > ? >> >> > Can >> >> > someone help me please ! >> >> > >> >> > Thanks ! >> >> > Steve >> >> >> >> >> >>
Recommended Posts