Securing Windows services

Securing Windows services

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Securing Windows services SC1959 06-03-2008
Posted by =?Utf-8?B?U0MxOTU5?= on June 3, 2008, 1:13 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Is there a way natively with Windows to secure a specific service such that a
non-admin user can start/stop it but not any others (or have other admin
access on the system)? I thought perhaps you could set an ACL on a service
but the Control Panel UI doesn't seem to provide for that.

If this is not doable by default, are there any open source or commercial
products that provide something like this?

Thanks in advance.

Posted by Steve Riley [MSFT] on June 4, 2008, 2:46 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
You could change the security descriptor of the service. Alas, there's no UI
way to do that, you'd have to bone up on SDDL.

Tell me more about what the service is and your need for giving users
control over it.

--
Steve Riley
steve.riley@microsoft.com
http://blogs.technet.com/steriley
http://www.protectyourwindowsnetwork.com



> Is there a way natively with Windows to secure a specific service such
> that a
> non-admin user can start/stop it but not any others (or have other admin
> access on the system)? I thought perhaps you could set an ACL on a
> service
> but the Control Panel UI doesn't seem to provide for that.
>
> If this is not doable by default, are there any open source or commercial
> products that provide something like this?
>
> Thanks in advance.


Posted by S. Pidgorny on June 7, 2008, 10:45 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
http://support.microsoft.com/?id=288129

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

> Is there a way natively with Windows to secure a specific service such
> that a
> non-admin user can start/stop it but not any others (or have other admin
> access on the system)? I thought perhaps you could set an ACL on a
> service
> but the Control Panel UI doesn't seem to provide for that.
>
> If this is not doable by default, are there any open source or commercial
> products that provide something like this?
>
> Thanks in advance.



Similar ThreadsPosted
Windows ME securing files with a password July 8, 2007, 3:48 am
Windows Vista and TPM Services December 29, 2006, 5:06 pm
Services - Windows Server 2003 R2 November 6, 2006, 10:48 am
WSFU - Windows services for Unix - SECURITY June 4, 2007, 7:52 am
Windows 2003 , MSDE 2000, Terminal Services January 12, 2008, 3:23 am
Certificate Services features vs Windows 2003 server editions May 24, 2006, 3:17 pm
Help! Securing a file February 12, 2006, 12:57 pm
RE: Securing NT after support withdrawn November 23, 2005, 2:27 pm
Securing NT after support withdrawn November 21, 2005, 10:25 am
Securing corporate data December 5, 2005, 3:14 pm

The site map in XML format XML site map

Contact Us | Privacy Policy