• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 865
  • Last Modified:

Minimun Permission for Access Security Log and Restart services

I am looking for a possible way to grant support team to access the server but they can only able to as below tasks:

1. Access Security Log
2. Restart the services

I know the Remote Desktop Users group can only access the server via RDP, but they can't do either both tasks. Any idea?

Thanks in advance!
0
plusign
Asked:
plusign
2 Solutions
 
inbarasanCommented:
Dear plusign,
I think server operators can do this. Just check it

Cheers!
0
 
plusignAuthor Commented:
In windows 2003 server, i don't see any server operator, you mean backup operator?
0
 
plusignAuthor Commented:
Access security log is secondary.
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 
oBdACommented:
1. You can do that with a local or group security policy; Computer Configuration\Windows Settings\Security Settings\Local Policies\User Permissions, "Management of Audit and Security Logs" (or similar, not using an English version).
2. There are several ways to do this for specific services; check this article:
How to grant users rights to manage services in Windows 2000
http://support.microsoft.com/?kbid=288129
Download details: SubInACL (SubInACL.exe)
http://www.microsoft.com/downloads/details.aspx?FamilyId=E8BA3E56-D8FE-4A91-93CF-ED6985E3927B&displaylang=en
0
 
Phadke_hemantCommented:
Performance monitor users can monitor the security logs
server operators/ backup operators (please check which one, but i think server operators should) can restart the services

you will find these groups as "Builtin" groups on server
0
 
plusignAuthor Commented:
let me test it
0
 
plusignAuthor Commented:
server operators only exists in NT 4.0 era.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now