Non-Administrative control of remote services

[pgoss]

All right here's the situation, i need to farm out the starting and stopping of services on some of my servers to the helpdesk. I do not want to give Helpdesk any more rights then they need on the servers, and if i can leave them as domain users and still be able to have them start and stop services on certain servers that would be great. Any ideas?

tia
- pat

 

[ErikButler]

What services are you talking about. If it is spooler or something like that i think print operators group has the ability to do that.

Thanks
Erik Butler
2000 MCSE
erikbutler@centurytel.net

 

[pgoss]

I'm talking about normal services within service manager on a windows 2000 server. So far i have only been able to make it work by making the user a local admin on the box. I am really trying to avoid that, but i'm not sure you can in a nt 4 domain.

 

[ErikButler]

your write if they need access to all then make them local admins. I hate doing that but give them a bogus name like ASSTADMIN and then deny access to other system functions. Thanks
Erik Butler
2000 MCSE
erikbutler@centurytel.net

 

[pgoss]

That might be the apporach, give them local admin and deny everything else. I didn't even think of that!

Thanks
- pat