?
Solved

unable to open service control manager database

Posted on 2007-10-04
5
Medium Priority
?
6,548 Views
Last Modified: 2013-12-04
I've given my HelpDesk rights to restart Print Spoolers on our servers via GPO but when they to go open services remotely they get error 'unable to open service control manager database'.

They only way I can get them in to restart the service is allow them terminal services access.  I would prefer no doing this.

I'm using Windows 2003 servers SP1 some SP2
0
Comment
Question by:dunersbsquad
  • 2
  • 2
5 Comments
 
LVL 70

Expert Comment

by:KCTS
ID: 20015177
0
 
LVL 23

Expert Comment

by:Jeremy Weisinger
ID: 20015223
Put them in the Print Operators group. That should give them the access they need.
0
 
LVL 23

Expert Comment

by:Jeremy Weisinger
ID: 20015247
Sorry, disregard my post.
0
 

Author Comment

by:dunersbsquad
ID: 20015270
NET STOP will not stop/start for a remote server
0
 

Accepted Solution

by:
dunersbsquad earned 0 total points
ID: 20015769
In case anyone is interested I found the issue.  It is a SP1 problem.

Here is the fix
Run this on the command line.
sc sdset scmanager
D:(A;;CCLCRPRC;;;AU)(A;;CCLCRPWPRC;;;SY)(A;;KA;;;BA)S:(AU;FA;KA;;;WD)(AU;OIIOFA;GA;;;WD)
0

Featured Post

Automating Your MSP Business

The road to profitability.
Delivering superior services is key to ensuring customer satisfaction and the consequent long-term relationships that enable MSPs to lock in predictable, recurring revenue. What's the best way to deliver superior service? One word: automation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A hard and fast method for reducing Active Directory Administrators members.
Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question