part II how to start stop service without the password

part II how to start stop service without the password

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
part II how to start stop service without the password light_wt 02-08-2008
Posted by =?Utf-8?B?bGlnaHRfd3Q=?= on February 8, 2008, 11:43 am
If you were  Registered and logged in, you could reply and use other advanced thread options
sorry that a simliar queustion may have answered before. this has a new
twist. :)

I have a domain user account started a service. For reason unknown, Local
admin can't restart it, or starting it after it was stopped. only one domain
user have to start it using the password of the domain user.

how can I have it so all users belonging to the group local admin can start
stop the service without the password of that domain user.

here is the currently output from accesschk. thanks.

C:\>accesschk "DomainName\user1" -vc MSSQLSERVER

AccessChk v4.02 - Check access of files, keys, objects, processes or services
Copyright (C) 2006-2007 Mark Russinovich
Sysinternals - www.sysinternals.com

RW MSSQLSERVER
SERVICE_ALL_ACCESS

--
ps: the reply button on my browser doesn't work.

Posted by =?Utf-8?B?S2VzaGF2?= on February 9, 2008, 8:45 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I presume this problem is becuase of the permissions set on the service. The
users (including local administrators) should have appropriate
start/stop/pause permissions on the service before they can start or stop the
service. Service permissions are explained in the below link:

http://technet2.microsoft.com/windowsserver/en/library/a958b9d2-3ec1-4ab0-9f9f-7cb396605f3e1033.mspx?mfr=true

Service permissions can be set either using Security templates (recommended
for workgroup computers) or using Group Policy (recommended for domain
computers).

Using Group Policy:

http://technet2.microsoft.com/windowsserver/en/library/1687ef1d-b382-49c7-b184-a4cc888be5251033.mspx?mfr=true

You can also use SC command to set/modify service permissions:

http://technet2.microsoft.com/windowsserver/en/library/0a658e97-51d5-4109-b461-a474c799964e1033.mspx?mfr=true

SC command method is recommended for work group computers.

Hope this helps. Post back if you have any questions.

-Keshav

-------------------------------------------------------------------------------
Was this a useful post? If yes, click "Yes" below and let others know.



"light_wt" wrote:

> sorry that a simliar queustion may have answered before. this has a new
> twist. :)
>
> I have a domain user account started a service. For reason unknown, Local
> admin can't restart it, or starting it after it was stopped. only one domain
> user have to start it using the password of the domain user.
>
> how can I have it so all users belonging to the group local admin can start
> stop the service without the password of that domain user.
>
> here is the currently output from accesschk. thanks.
>
> C:\>accesschk "DomainName\user1" -vc MSSQLSERVER
>
> AccessChk v4.02 - Check access of files, keys, objects, processes or services
> Copyright (C) 2006-2007 Mark Russinovich
> Sysinternals - www.sysinternals.com
>
> RW MSSQLSERVER
> SERVICE_ALL_ACCESS
>
> --
> ps: the reply button on my browser doesn't work.

Similar ThreadsPosted
Any Way to Stop Service Start and Stop Over Network? September 28, 2007, 2:19 pm
Retrict Access to Start/Stop Service July 11, 2006, 12:34 pm
Security Center service won't start June 11, 2006, 5:12 am
What SIDS need permisions to start my service? May 8, 2007, 10:16 am
maximum services service account can start April 27, 2006, 4:09 pm
The Wicked Access by Mark service was successfully sent a start co January 3, 2006, 6:43 am
change service password December 13, 2006, 3:17 am
Service accounts with password expiration August 15, 2008, 2:36 pm
IE part of the operating system January 17, 2006, 3:44 pm
Is Welfare Part of Capitalism? March 31, 2006, 7:19 am

The site map in XML format XML site map

Contact Us | Privacy Policy