Link to home
Start Free TrialLog in
Avatar of GrahamR99
GrahamR99

asked on

Microsoft, Windows , Windows Server 2003 2000, Windows Service Security

Hi Expects Exchange Members
I need to give a user the ability to view windows services are running on a server, but I dont want the user to have admin rights on the server.

How would I best achieve this?

Thank you for reading.

Regards
GrahamR99
Avatar of merowinger
merowinger
Flag of Germany image

what about a script:
'~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
strComputer = "."
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\CIMV2")
Set colItems = objWMIService.ExecQuery("SELECT * FROM Win32_Service WHERE STATE='RUNNING'")
For Each objItem in colItems
    Wscript.Echo "Service Name: " & objItem.Name & vbCrlf
Next
'~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Avatar of GrahamR99
GrahamR99

ASKER

Hi Merowinger
Thank you for your answer, but I am hoping to achieve this by using standard Windows tools, if its not possible then I will go the script route.

Regards

GrahamR99
ASKER CERTIFIED SOLUTION
Avatar of PowerIT
PowerIT
Flag of Belgium image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I agree with PowerIT that services.msc is the way to go, however, the user in question probably doens't need to remote desktop or login at the console.

You could add the user to the default server group "Performance Monitor Users" which will allow the members of the group to be able to monitor the system.  

Then the user can open services.msc or right-click on their "My Computer" and select manage.  Once into either tool, have the user right-click on the services (local) or on Computer Management (local) and select "Connect to another computer..."

Hope this helps
do mind that the "Performance Monitor Users" will allow them to create prefmon logs, and start / stop those...
Hi
I have added a user to the domain "Performance Monitor Users" Group, but the user was not able to access services on a remote server, using Manage and changing the computer I wish to manage.

I was unable to find a local group called "Performance Monitor Users" do I have to create it on the local sever, but I think that won't work either.

Does the user have to logon to the machine for this to be able to work?

Regards

GrahamR99
Like I said: connect through remote desktop.
First make sure that the user as added to the 'Remote Desktop Users' local group of that machine.

J.
Hi merowinger
It looks like I need to resolve the problem I am going to use your Script, but I have difficulties using it.

I have copied the code you supplied to a VB app, but it would not run, is there any points you could give me to help me resolve the issue.

Regards

GrahamR99
Forced accept.

Computer101
EE Admin