Assign limited user account ability to start/stop service
Posted on 2008-10-30
Hi Experts. I have a small batch file that I wrote to stop and start three local services that relate to Websense so that I could backup the config and database files. Since I will be running this through Task Scheduler, I realized I would have to provide a user account with the ability to stop/start those services. I would rather not store the local admin username and password in Task Scheduler so the question is, what is the best practice for assigning an account to start and stop this service?
I wanted to use something like a "services" account that would only be able to control the local services, not anything else. I wasn't sure how to assign the local service account through Task Scheduler. Any help would be appreciated. This is a Windows 2003 server that is not a DC but does belong to an AD domain.
** I did do several google searches and found various SC commands but I wasn't sure how to use them. Please don't provide just a link. Make sure you add how to use the command. Thanks.