Solved

Minimun Permission for Access Security Log and Restart services

Posted on 2006-11-07
10
856 Views
Last Modified: 2013-11-21
I am looking for a possible way to grant support team to access the server but they can only able to as below tasks:

1. Access Security Log
2. Restart the services

I know the Remote Desktop Users group can only access the server via RDP, but they can't do either both tasks. Any idea?

Thanks in advance!
0
Comment
Question by:plusign
10 Comments
 
LVL 14

Expert Comment

by:inbarasan
ID: 17887617
Dear plusign,
I think server operators can do this. Just check it

Cheers!
0
 

Author Comment

by:plusign
ID: 17887632
In windows 2003 server, i don't see any server operator, you mean backup operator?
0
 

Author Comment

by:plusign
ID: 17887674
Access security log is secondary.
0
The curse of the end user strikes again      

You’ve updated all your end user’s email signatures. Hooray! But guess what? They’re playing around with the HTML, adding stupid taglines and ruining the imagery. Find out how you can save your signatures from end users today.

 
LVL 83

Accepted Solution

by:
oBdA earned 125 total points
ID: 17887922
1. You can do that with a local or group security policy; Computer Configuration\Windows Settings\Security Settings\Local Policies\User Permissions, "Management of Audit and Security Logs" (or similar, not using an English version).
2. There are several ways to do this for specific services; check this article:
How to grant users rights to manage services in Windows 2000
http://support.microsoft.com/?kbid=288129
Download details: SubInACL (SubInACL.exe)
http://www.microsoft.com/downloads/details.aspx?FamilyId=E8BA3E56-D8FE-4A91-93CF-ED6985E3927B&displaylang=en
0
 
LVL 10

Assisted Solution

by:Phadke_hemant
Phadke_hemant earned 125 total points
ID: 17888307
Performance monitor users can monitor the security logs
server operators/ backup operators (please check which one, but i think server operators should) can restart the services

you will find these groups as "Builtin" groups on server
0
 

Author Comment

by:plusign
ID: 17904764
let me test it
0
 

Author Comment

by:plusign
ID: 17928426
server operators only exists in NT 4.0 era.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many people tend to confuse the function of a virus with the one of adware, this misunderstanding of the basic of what each software is and how it operates causes users and organizations to take the wrong security measures that would protect them ag…
Know what services you can and cannot, should and should not combine on your server.
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

862 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now