How to enable to  run a particular service with a local admin privilege via group policy in windows 2012 R2 Domain

shamnad
shamnad used Ask the Experts™
on
Need to run GFI Lan Attendant service run under an domain account having local admin privilege in the client machine via group policy so as to enable GFI LAN guard to scan and update the patches.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
JohnBusiness Consultant (Owner)
Most Valuable Expert 2012
Expert of the Year 2018

Commented:
The normal way is to run the service via Task Scheduler. Set it to run when Windows start, and in the task configuration options, use local administrator privileges. This will allow it to start. Look at the tasks in Scheduler and use one for an example. Several tasks start on my computer with admin authority.
Top Expert 2016

Commented:
A service can always run with administrative authority.. just assign the account that it runs under as 'SYSTEM'

Author

Commented:
the question is specific i need to run this particular service with local administrative previlege on client machines on a domain level
JohnBusiness Consultant (Owner)
Most Valuable Expert 2012
Expert of the Year 2018

Commented:
You can do what you need with Task Scheduler as suggested above.
"Batchelor", Developer and EE Topic Advisor
Top Expert 2015
Commented:
Putting aside I don't see why LocalSystem does not suffice: You can't do that directly, but you can set up the service by a startup script. You should need that only run once, though:
sc stop "LANGuard"
sc config "LANGuard" obj= TheDomain\TheAdmin password= ThePassword
sc start "LANGuard"

Open in new window

Replace everything as needed.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial