M
Marco
Hello everybody.
I hope that I'm on the right place.....I've a little question: I need
to grant to an user on a client, that is part of Backup Operators, to
have full access to the services on a Windows XP computers. Precisely,
this user have to verify if a service exist and eventually create this
service on the client computer.
On the event viewer of the client, I activate the audit for the object
access and I received this error on the event viewer:
************************************************************************************************************
Object Open:
Object Server: SC Manager
Object Type: SC_MANAGER OBJECT
Object Name: ServicesActive
Handle ID: -
Operation ID: {0,1276636}
Process ID: 508
Image File Name: C:\WINNT\system32\services.exe
Primary User Name: computer$
Primary Domain: ADDOMAIN
Primary Logon ID: (0x0,0x3E7)
Client User Name: BackupAdmin
Client Domain: ADDOMAIN
Client Logon ID: (0x0,0x12A1D1)
Accesses: DELETE
READ_CONTROL
WRITE_DAC
Connect to service controller
Create a new service
Enumerate services
Lock service database for exclusive access
Query service database lock state
Set last-known-good state of service database
Privileges: SeTakeOwnershipPrivilege
Restricted Sid Count: 0
************************************************************************************************************
Have you some idea on how to solve this problem?
Thank you very much in advance.
Marco Sciarrone
I hope that I'm on the right place.....I've a little question: I need
to grant to an user on a client, that is part of Backup Operators, to
have full access to the services on a Windows XP computers. Precisely,
this user have to verify if a service exist and eventually create this
service on the client computer.
On the event viewer of the client, I activate the audit for the object
access and I received this error on the event viewer:
************************************************************************************************************
Object Open:
Object Server: SC Manager
Object Type: SC_MANAGER OBJECT
Object Name: ServicesActive
Handle ID: -
Operation ID: {0,1276636}
Process ID: 508
Image File Name: C:\WINNT\system32\services.exe
Primary User Name: computer$
Primary Domain: ADDOMAIN
Primary Logon ID: (0x0,0x3E7)
Client User Name: BackupAdmin
Client Domain: ADDOMAIN
Client Logon ID: (0x0,0x12A1D1)
Accesses: DELETE
READ_CONTROL
WRITE_DAC
Connect to service controller
Create a new service
Enumerate services
Lock service database for exclusive access
Query service database lock state
Set last-known-good state of service database
Privileges: SeTakeOwnershipPrivilege
Restricted Sid Count: 0
************************************************************************************************************
Have you some idea on how to solve this problem?
Thank you very much in advance.
Marco Sciarrone
