[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Allow non-administrators ability to Start/Stop services

Posted on 2007-08-06
8
Medium Priority
?
673 Views
Last Modified: 2013-11-05
I need to allow my QA group the ability to start/stop services on a member server and also allow them to be able to update a .bmp in the Windows directory. There is a .bmp that displays pertinent information on the desktop upon login. I do not want them to have full admin rights if I don't have to. If I add them as a power user, they are able to add themselves as a local admin. Thanks for the help.
0
Comment
Question by:jhwebb55
  • 5
  • 3
8 Comments
 
LVL 31

Accepted Solution

by:
merowinger earned 2000 total points
ID: 19641785
on your memberserver make the following:

start->run->mmc

File->Add/Remove SnapIn->Security Templates->Add->OK
Now Expand the whole tree and make a rightclick
-> New Template -> Type a Name ->OK
->Expand your new Template->Go to Systemservices->and Define your settings on the specified service
->Right Click on your template->Save as -> Yourname.inf

So u created a template, now u have to import it to your local gpo
Start->Run->gpedit.msc
->Computer Configuration ->Windows Settings->Rightclick Security Settings->Import Security Template


Thats it :)
0
 
LVL 2

Author Comment

by:jhwebb55
ID: 19641849
Ok. After I posted this I saw the spot in GPMC where I can do this. The only problem is I can only see default system services, not ones that we have added for specific apps. I need them to be able to start/stop on all member servers in the domain. Will your steps above allow this on all member servers?
0
 
LVL 31

Expert Comment

by:merowinger
ID: 19641885
sorry (my english) :) what do u mean with "i saw the spot"

When u create the template file on a server with the specified services,
they are included in the list!

For more servers....dont start gpedit.msc....create a policy or take a exsisting and make the same steps, as in gpedit.msc. Configure the security settings of this policy, that only specified servers shell apply this policy
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 
LVL 31

Assisted Solution

by:merowinger
merowinger earned 2000 total points
ID: 19641907
with the bmp do u mean bginfo.exe?

I would make this with file security settings (create a own group which only can list items in the windows folder....share the folder as \\server\win$
0
 
LVL 31

Expert Comment

by:merowinger
ID: 19641910
..and for the pic give read rights
0
 
LVL 2

Author Comment

by:jhwebb55
ID: 19641988
Sorry. I meant I saw the location in the group policy editor where I could make that change. I have imported the template and configured it. I will check to see if it worked in a bit.

Yes, merowinger, I am talking about the bginfo.exe file. I will make that change at the file level and see if that works. Stay tuned. Thanks for the help.
0
 
LVL 2

Author Comment

by:jhwebb55
ID: 19649127
Both of your solutions worked perfectly. Thanks
0
 
LVL 31

Expert Comment

by:merowinger
ID: 19649214
tanks too!
0

Featured Post

Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
this video summaries big data hadoop online training demo (http://onlineitguru.com/big-data-hadoop-online-training-placement.html) , and covers basics in big data hadoop .
Despite its rising prevalence in the business world, "the cloud" is still misunderstood. Some companies still believe common misconceptions about lack of security in cloud solutions and many misuses of cloud storage options still occur every day. …

872 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question