Minimun Permission for Access Security Log and Restart services

I am looking for a possible way to grant support team to access the server but they can only able to as below tasks:

1. Access Security Log
2. Restart the services

I know the Remote Desktop Users group can only access the server via RDP, but they can't do either both tasks. Any idea?

Thanks in advance!
Who is Participating?
oBdAConnect With a Mentor Commented:
1. You can do that with a local or group security policy; Computer Configuration\Windows Settings\Security Settings\Local Policies\User Permissions, "Management of Audit and Security Logs" (or similar, not using an English version).
2. There are several ways to do this for specific services; check this article:
How to grant users rights to manage services in Windows 2000
Download details: SubInACL (SubInACL.exe)
Dear plusign,
I think server operators can do this. Just check it

plusignAuthor Commented:
In windows 2003 server, i don't see any server operator, you mean backup operator?
Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

plusignAuthor Commented:
Access security log is secondary.
Phadke_hemantConnect With a Mentor Commented:
Performance monitor users can monitor the security logs
server operators/ backup operators (please check which one, but i think server operators should) can restart the services

you will find these groups as "Builtin" groups on server
plusignAuthor Commented:
let me test it
plusignAuthor Commented:
server operators only exists in NT 4.0 era.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.