Changing service owner

Changing service owner

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Changing service owner rounner 04-11-2006
Posted by on April 11, 2006, 1:29 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello,

I have been unsuccesfully trying to do something for a while and I dont
know what to do.

Changing a service owner to a user using the services gui works fine,
but if I do it programmatically, whether using WMI, sc.exe or whatever,
it does not tell the local policy that the user has log on as service
rights. The Domains group policy says they can, but if I look at the
local policy the list of users with this right arent there.

What is the extra step the services manager gui does to add the user to
the local security policy?

I dont understand why this issue isnt better publicised.


Posted by Steven L Umbach on April 11, 2006, 9:41 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I don't think you mean service owner, maybe service logon account. Changes
to Local Security Policy will not be "effective" policy if that user right
is enforced by domain level Group Policy which can be checked by running
rsop.msc on the XP Pro/W2003 computer. You can use the RK tool NTRights to
add a user to a service [SeServiceLogonRight] user right on the local
computer such as logon as a service. --- Steve

http://support.microsoft.com/kb/279664/EN-US/ --- NTRights. User rights
are case sensitive.

> Hello,
>
> I have been unsuccesfully trying to do something for a while and I dont
> know what to do.
>
> Changing a service owner to a user using the services gui works fine,
> but if I do it programmatically, whether using WMI, sc.exe or whatever,
> it does not tell the local policy that the user has log on as service
> rights. The Domains group policy says they can, but if I look at the
> local policy the list of users with this right arent there.
>
> What is the extra step the services manager gui does to add the user to
> the local security policy?
>
> I dont understand why this issue isnt better publicised.
>



Similar ThreadsPosted
CREATOR OWNER assigning issue August 24, 2006, 12:27 pm
Can change owner of folder when deny in place February 28, 2006, 5:19 am
NTFS folder permissions - Creator Owner issue (I think) January 20, 2006, 2:14 pm
Re: NTFS folder permissions - Creator Owner issue (I think) January 24, 2006, 1:20 pm
Changing password July 19, 2005, 3:56 pm
Changing lockout in XP Pro SP 2 January 9, 2007, 9:05 pm
outside source changing passwords? October 27, 2006, 2:47 pm
Firewall Ports Keep Changing for Exchange August 4, 2005, 5:33 pm
Re: Changing https to http on Win2K3 October 4, 2005, 3:42 am
changing the ecret answer to your question April 11, 2006, 3:59 pm

The site map in XML format XML site map

Contact Us | Privacy Policy