Solved

Minimun Permission for Access Security Log and Restart services

Posted on 2006-11-07
10
857 Views
Last Modified: 2013-11-21
I am looking for a possible way to grant support team to access the server but they can only able to as below tasks:

1. Access Security Log
2. Restart the services

I know the Remote Desktop Users group can only access the server via RDP, but they can't do either both tasks. Any idea?

Thanks in advance!
0
Comment
Question by:plusign
10 Comments
 
LVL 14

Expert Comment

by:inbarasan
ID: 17887617
Dear plusign,
I think server operators can do this. Just check it

Cheers!
0
 

Author Comment

by:plusign
ID: 17887632
In windows 2003 server, i don't see any server operator, you mean backup operator?
0
 

Author Comment

by:plusign
ID: 17887674
Access security log is secondary.
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 83

Accepted Solution

by:
oBdA earned 125 total points
ID: 17887922
1. You can do that with a local or group security policy; Computer Configuration\Windows Settings\Security Settings\Local Policies\User Permissions, "Management of Audit and Security Logs" (or similar, not using an English version).
2. There are several ways to do this for specific services; check this article:
How to grant users rights to manage services in Windows 2000
http://support.microsoft.com/?kbid=288129
Download details: SubInACL (SubInACL.exe)
http://www.microsoft.com/downloads/details.aspx?FamilyId=E8BA3E56-D8FE-4A91-93CF-ED6985E3927B&displaylang=en
0
 
LVL 10

Assisted Solution

by:Phadke_hemant
Phadke_hemant earned 125 total points
ID: 17888307
Performance monitor users can monitor the security logs
server operators/ backup operators (please check which one, but i think server operators should) can restart the services

you will find these groups as "Builtin" groups on server
0
 

Author Comment

by:plusign
ID: 17904764
let me test it
0
 

Author Comment

by:plusign
ID: 17928426
server operators only exists in NT 4.0 era.
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I don't know if many of you have made the great mistake of using the Cisco Thin Client model with the management software VXC. If you have then you are probably more then familiar with the incredibly clunky interface, the numerous work arounds, and …
Know what services you can and cannot, should and should not combine on your server.
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

815 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now