• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 353
  • Last Modified:

Group policy and System Services

Hi - from within Group Policy you can assign access rights to system services so that non admins can stop, start, restart services etc. Does anyone know how to add services to the list?i.e I have a member server with a service not in the default list and I need to allow a non admin rights to restart it??
0
nisters10
Asked:
nisters10
  • 2
1 Solution
 
spareticusCommented:
FInd the service short name using services.msc.  In the properties of the service, you will see the name of the service next to "Service Name"
Once you know the service name, you can add it to the text file in the policy under [Service General Setting]<sysvol>\sysvol\<domain>\Policies\<policy GUID>\MACHINE\Microsoft\Windows NT\SecEdit\GptTmpl.inf

Once it is added into the text file, open your gp editing tool (are you using GPMC yet?), and change the security.
Have you seen the place for setting security in this, or did you need assistance with that as well.
0
 
nisters10Author Commented:
Found the service name but not sure of the next step? I know how to set the permissions on the services I just can't add any new services to the policy. any help greatly appreciated..
0
 
spareticusCommented:
browse to the following directory on your DC

<sysvol>\sysvol\<domain>\Policies\<policy GUID>\MACHINE\Microsoft\Windows NT\SecEdit\

edit the gpttmpl.inf file and add your service name to [Service General Setting]

then edit the actual GPO and set the security the way you want it.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now