Solved

Minimun Permission for Access Security Log and Restart services

Posted on 2006-11-07
10
859 Views
Last Modified: 2013-11-21
I am looking for a possible way to grant support team to access the server but they can only able to as below tasks:

1. Access Security Log
2. Restart the services

I know the Remote Desktop Users group can only access the server via RDP, but they can't do either both tasks. Any idea?

Thanks in advance!
0
Comment
Question by:plusign
10 Comments
 
LVL 14

Expert Comment

by:inbarasan
ID: 17887617
Dear plusign,
I think server operators can do this. Just check it

Cheers!
0
 

Author Comment

by:plusign
ID: 17887632
In windows 2003 server, i don't see any server operator, you mean backup operator?
0
 

Author Comment

by:plusign
ID: 17887674
Access security log is secondary.
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 84

Accepted Solution

by:
oBdA earned 125 total points
ID: 17887922
1. You can do that with a local or group security policy; Computer Configuration\Windows Settings\Security Settings\Local Policies\User Permissions, "Management of Audit and Security Logs" (or similar, not using an English version).
2. There are several ways to do this for specific services; check this article:
How to grant users rights to manage services in Windows 2000
http://support.microsoft.com/?kbid=288129
Download details: SubInACL (SubInACL.exe)
http://www.microsoft.com/downloads/details.aspx?FamilyId=E8BA3E56-D8FE-4A91-93CF-ED6985E3927B&displaylang=en
0
 
LVL 10

Assisted Solution

by:Phadke_hemant
Phadke_hemant earned 125 total points
ID: 17888307
Performance monitor users can monitor the security logs
server operators/ backup operators (please check which one, but i think server operators should) can restart the services

you will find these groups as "Builtin" groups on server
0
 

Author Comment

by:plusign
ID: 17904764
let me test it
0
 

Author Comment

by:plusign
ID: 17928426
server operators only exists in NT 4.0 era.
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Changing names of Physical Servers 1 52
Server 2012 R2 missing roles and features 2 136
IBMi supported MySQL versions. 2 61
Server 2012 r2 licensing CALs 3 55
Remote Apps is a feature in server 2008 which allows users to run applications off Remote Desktop Servers without having to log into them to run the applications.  The user can either have a desktop shortcut installed or go through the web portal to…
In this article we will discuss all things related to StageFright bug, the most vulnerable bug of android devices.
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question