Windows 2003 starting and stoping services.

  • Thread starter Thread starter Fabio
  • Start date Start date
F

Fabio

Hi all,

I am running windows2k3 server. Do I need to have administrator start
services(exchange services, sql services etc.) or can I have other accounts
start services? if so how can I accomplish that? I want to elimate
administrator for security purposes?

Most appreciative
 
Edit the "Log on as a service" local policy.

"Fabio" <Fabio@discussions.microsoft.com> wrote in message
news:277A5002-C1A8-4A50-86F9-2D7BDEE3C0FB@microsoft.com...
> Hi all,
>
> I am running windows2k3 server. Do I need to have administrator start
> services(exchange services, sql services etc.) or can I have other
> accounts
> start services? if so how can I accomplish that? I want to elimate
> administrator for security purposes?
>
> Most appreciative
 
ok,

are there certain rights that I need to know so that I can give the new
service account administrator.

"SBS Rocker" wrote:

> Edit the "Log on as a service" local policy.
>
> "Fabio" <Fabio@discussions.microsoft.com> wrote in message
> news:277A5002-C1A8-4A50-86F9-2D7BDEE3C0FB@microsoft.com...
> > Hi all,
> >
> > I am running windows2k3 server. Do I need to have administrator start
> > services(exchange services, sql services etc.) or can I have other
> > accounts
> > start services? if so how can I accomplish that? I want to elimate
> > administrator for security purposes?
> >
> > Most appreciative
>
>
>
 
Hello,

Do you want to be able to start service from a non administrator account or
do you want to run services with non privileged account ?
This is much different !

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"Fabio" <Fabio@discussions.microsoft.com> wrote in message
news:CBD3ABD6-ECEB-4785-A3B8-5C43EF7EDFC7@microsoft.com...
> ok,
>
> are there certain rights that I need to know so that I can give the new
> service account administrator.
>
> "SBS Rocker" wrote:
>
>> Edit the "Log on as a service" local policy.
>>
>> "Fabio" <Fabio@discussions.microsoft.com> wrote in message
>> news:277A5002-C1A8-4A50-86F9-2D7BDEE3C0FB@microsoft.com...
>> > Hi all,
>> >
>> > I am running windows2k3 server. Do I need to have administrator start
>> > services(exchange services, sql services etc.) or can I have other
>> > accounts
>> > start services? if so how can I accomplish that? I want to elimate
>> > administrator for security purposes?
>> >
>> > Most appreciative
>>
>>
>>
 
I want to create a user account that doesnt need to have domain admin rights.
just to start services.

"Mathieu CHATEAU" wrote:

> Hello,
>
> Do you want to be able to start service from a non administrator account or
> do you want to run services with non privileged account ?
> This is much different !
>
> --
> Cordialement,
> Mathieu CHATEAU
> http://lordoftheping.blogspot.com
>
>
> "Fabio" <Fabio@discussions.microsoft.com> wrote in message
> news:CBD3ABD6-ECEB-4785-A3B8-5C43EF7EDFC7@microsoft.com...
> > ok,
> >
> > are there certain rights that I need to know so that I can give the new
> > service account administrator.
> >
> > "SBS Rocker" wrote:
> >
> >> Edit the "Log on as a service" local policy.
> >>
> >> "Fabio" <Fabio@discussions.microsoft.com> wrote in message
> >> news:277A5002-C1A8-4A50-86F9-2D7BDEE3C0FB@microsoft.com...
> >> > Hi all,
> >> >
> >> > I am running windows2k3 server. Do I need to have administrator start
> >> > services(exchange services, sql services etc.) or can I have other
> >> > accounts
> >> > start services? if so how can I accomplish that? I want to elimate
> >> > administrator for security purposes?
> >> >
> >> > Most appreciative
> >>
> >>
> >>
>
>
 
2 ways:
-through GPO
-Locally.

I would prefer GPO as it will survive a reinstall, can apply many server and
is self documented (if someone replace you he will have a chance to see it)
GPO way:
Create a new gpo,
go to computer section
Windows settings
Security settings
System Services
Edit the services you want to allow someone to stop/start
Click edit security
Add a user, or better a group
check "Start, Stop and pause a service"
Then replicate between DC and issue a gpupdate

After, user may stop/start service with:
sc myserver stop XXX
sc myserver start XXX





--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"Fabio" <Fabio@discussions.microsoft.com> wrote in message
news:2F1DC422-7DC9-416A-8B24-CEAE46832654@microsoft.com...
>I want to create a user account that doesnt need to have domain admin
>rights.
> just to start services.
>
> "Mathieu CHATEAU" wrote:
>
>> Hello,
>>
>> Do you want to be able to start service from a non administrator account
>> or
>> do you want to run services with non privileged account ?
>> This is much different !
>>
>> --
>> Cordialement,
>> Mathieu CHATEAU
>> http://lordoftheping.blogspot.com
>>
>>
>> "Fabio" <Fabio@discussions.microsoft.com> wrote in message
>> news:CBD3ABD6-ECEB-4785-A3B8-5C43EF7EDFC7@microsoft.com...
>> > ok,
>> >
>> > are there certain rights that I need to know so that I can give the new
>> > service account administrator.
>> >
>> > "SBS Rocker" wrote:
>> >
>> >> Edit the "Log on as a service" local policy.
>> >>
>> >> "Fabio" <Fabio@discussions.microsoft.com> wrote in message
>> >> news:277A5002-C1A8-4A50-86F9-2D7BDEE3C0FB@microsoft.com...
>> >> > Hi all,
>> >> >
>> >> > I am running windows2k3 server. Do I need to have administrator
>> >> > start
>> >> > services(exchange services, sql services etc.) or can I have other
>> >> > accounts
>> >> > start services? if so how can I accomplish that? I want to elimate
>> >> > administrator for security purposes?
>> >> >
>> >> > Most appreciative
>> >>
>> >>
>> >>
>>
>>
 
Back
Top