part II how to start stop service without the password

[light_wt]

sorry that a simliar queustion may have answered before. this has a new
twist.

I have a domain user account started a service. For reason unknown, Local
admin can't restart it, or starting it after it was stopped. only one domain
user have to start it using the password of the domain user.

how can I have it so all users belonging to the group local admin can start
stop the service without the password of that domain user.

here is the currently output from accesschk. thanks.

C:\>accesschk "DomainName\user1" -vc MSSQLSERVER

AccessChk v4.02 - Check access of files, keys, objects, processes or services
Copyright (C) 2006-2007 Mark Russinovich
Sysinternals - www.sysinternals.com

RW MSSQLSERVER
SERVICE_ALL_ACCESS

--
ps: the reply button on my browser doesn't work.

 

[Keshav]

I presume this problem is becuase of the permissions set on the service. The
users (including local administrators) should have appropriate
start/stop/pause permissions on the service before they can start or stop the
service. Service permissions are explained in the below link:

http://technet2.microsoft.com/windo...3ec1-4ab0-9f9f-7cb396605f3e1033.mspx?mfr=true

Service permissions can be set either using Security templates (recommended
for workgroup computers) or using Group Policy (recommended for domain
computers).

Using Group Policy:

http://technet2.microsoft.com/windo...b382-49c7-b184-a4cc888be5251033.mspx?mfr=true

You can also use SC command to set/modify service permissions:

http://technet2.microsoft.com/windo...51d5-4109-b461-a474c799964e1033.mspx?mfr=true

SC command method is recommended for work group computers.

Hope this helps. Post back if you have any questions.

-Keshav

-------------------------------------------------------------------------------
Was this a useful post? If yes, click "Yes" below and let others know.



"light_wt" wrote:

> sorry that a simliar queustion may have answered before. this has a new
> twist.
>
> I have a domain user account started a service. For reason unknown, Local
> admin can't restart it, or starting it after it was stopped. only one domain
> user have to start it using the password of the domain user.
>
> how can I have it so all users belonging to the group local admin can start
> stop the service without the password of that domain user.
>
> here is the currently output from accesschk. thanks.
>
> C:\>accesschk "DomainName\user1" -vc MSSQLSERVER
>
> AccessChk v4.02 - Check access of files, keys, objects, processes or services
> Copyright (C) 2006-2007 Mark Russinovich
> Sysinternals - www.sysinternals.com
>
> RW MSSQLSERVER
> SERVICE_ALL_ACCESS
>
> --
> ps: the reply button on my browser doesn't work.