Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Rhinorhino on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Services Permission
- Thread starter Akart
- Start date
- Thread starter
- #4
Ok,
It is an NT4 Server. Clients are NT4, NT5 & XP but i am only concerned with the users who log on to the server to perform various tasks.
I want a user to be able to log on to the server and stop and start services.
If i add a user to the server operator group. They can start services but not stop them.
Regards,
Akart
It is an NT4 Server. Clients are NT4, NT5 & XP but i am only concerned with the users who log on to the server to perform various tasks.
I want a user to be able to log on to the server and stop and start services.
If i add a user to the server operator group. They can start services but not stop them.
Regards,
Akart
have you looked at user rights policy on the server -
Start User Manager for Domains, and then on the Policies menu, click User Rights.
The User Rights Policy dialog box appears.
You can assign groups/users more rights than they normally have. to do stuff on the server. I'm not near an NT server atm so i cant check what possibilities there are. Maybe there's one there that will help you.
Just a thought I had.
===============
Security Forums
Start User Manager for Domains, and then on the Policies menu, click User Rights.
The User Rights Policy dialog box appears.
You can assign groups/users more rights than they normally have. to do stuff on the server. I'm not near an NT server atm so i cant check what possibilities there are. Maybe there's one there that will help you.
Just a thought I had.
===============
Security Forums
Yeps, thats correct. You'll need to add the user to the load & unload device drivers. This will give them the ability to stop and start the services but won't be able to access and change the service attibutes. i.e. They can click the stop and start or maybe you can script it - (net stop servicename /yes). Hope that helps.
- Thread starter
- #7
Hi,
I checked the user rights and i had already allowed drivers to be installed/uninstalled.
I have basically given permission to all user rights except change folder permissions and check security logs.
I also tried to net stop [service] however i don't know the service name.
EG ClipBook Server service can't be stopped by typing
net stop ClipBook Server, it must have another name somewhere.... besides from previous experience, if a user does not have permission to use something, it will not work using a scripted method either.
Perhaps an upgrade to win2k would fix this.....
Regards,
Akart
I checked the user rights and i had already allowed drivers to be installed/uninstalled.
I have basically given permission to all user rights except change folder permissions and check security logs.
I also tried to net stop [service] however i don't know the service name.
EG ClipBook Server service can't be stopped by typing
net stop ClipBook Server, it must have another name somewhere.... besides from previous experience, if a user does not have permission to use something, it will not work using a scripted method either.
Perhaps an upgrade to win2k would fix this.....
Regards,
Akart
- Status
Similar threads
