Which rights does a user need to control an windows service?

Posted: 03-23-2007, 01:06 PM
Hi,

I want to give a user the right(s) to control an already installed windows
service. The user runs an application which start a specific windows service
at application startup and stops the windows service when it does close /
exit.

Back in Windows XP this was working but it looks like, that non-admin users
can't control windows services anymore.

Does somebody know how or which rights a user needs to start & stop a
windows service? The windows service is already installed.

Thanks,
Olcay
Reply With Quote

Responses to "Which rights does a user need to control an windows service?"

Dave R.
Guest
Posts: n/a
 
Re: Which rights does a user need to control an windows service?
Posted: 03-23-2007, 03:18 PM

"Olcay" <Olcay@discussions.microsoft.com> wrote in message
news:F3CEE943-C130-4DF4-9BEB-C5FDE304D88D@microsoft.com...
> Hi,
>
> I want to give a user the right(s) to control an already installed
> windows
> service. The user runs an application which start a specific windows
> service
> at application startup and stops the windows service when it does
> close /
> exit.
>
> Back in Windows XP this was working but it looks like, that non-admin
> users
> can't control windows services anymore.
>
> Does somebody know how or which rights a user needs to start & stop a
> windows service? The windows service is already installed.
>
I don't know about giving a user the rights to start and stop services
in general, that seems like too much of a security problem to me. I've
normally just changed the specific service's security descriptor to
allow a user or group of users to start and stop it. You can use the sc
command as an administrator to do this. Here's what I use, which gives
start/stop/query permissions for servicename to Authenticated Users:

sc sdset servicename
"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;LCRPW P;;;AU)(A;;CCLCSWLOCRRC;;;IU)(A;;CCDCLCSWRPWPDTLOC RSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO ;;;WD)"

Regards,

Dave


Reply With Quote
Dave R.
Guest
Posts: n/a
 
Re: Which rights does a user need to control an windows service?
Posted: 03-23-2007, 03:23 PM

"Dave R." <dwragle at drbsystems dot com> wrote in message
news:4603e1af$0$97273$892e7fe2@authen.yellow.readf reenews.net...
>
> "Olcay" <Olcay@discussions.microsoft.com> wrote in message
> news:F3CEE943-C130-4DF4-9BEB-C5FDE304D88D@microsoft.com...
>> Hi,
>>
>> I want to give a user the right(s) to control an already installed
>> windows
>> service. The user runs an application which start a specific windows
>> service
>> at application startup and stops the windows service when it does
>> close /
>> exit.
>>
>> Back in Windows XP this was working but it looks like, that non-admin
>> users
>> can't control windows services anymore.
>>
>> Does somebody know how or which rights a user needs to start & stop a
>> windows service? The windows service is already installed.
>>
> I don't know about giving a user the rights to start and stop services
> in general, that seems like too much of a security problem to me.
> I've normally just changed the specific service's security descriptor
> to allow a user or group of users to start and stop it. You can use
> the sc command as an administrator to do this. Here's what I use,
> which gives start/stop/query permissions for servicename to
> Authenticated Users:
>
> sc sdset servicename
> "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;LCRPW P;;;AU)(A;;CCLCSWLOCRRC;;;IU)(A;;CCDCLCSWRPWPDTLOC RSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO ;;;WD)"
>
BTW, that should have been all one line, I forgot it would get broken
up.

Regards,

Dave


Reply With Quote
 
LinkBack Thread Tools Display Modes
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
Windows XP User Rights Gary Customize Windows XP 1 09-09-2003 09:10 PM
Admistrator rights / User rights Debby Windows XP Security & Administration 1 08-15-2003 11:26 AM
Windows Updates - user rights q's Chris Windows XP Security & Administration 0 07-09-2003 04:05 PM
windows XP service control problem mark Windows XP Performance & Maintenance 0 07-09-2003 02:56 AM
Windows MM2 user rights Dave Windows XP Video 0 07-03-2003 12:12 PM


1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90