Need some special privileges for NON-Admin user

[Guest Marco]

Hello everybody.

I hope that I'm on the right place.....I've a little question: I need

to grant to an user on a client, that is part of Backup Operators, to

have full access to the services on a Windows XP computers. Precisely,

this user have to verify if a service exist and eventually create this

service on the client computer.

 

On the event viewer of the client, I activate the audit for the object

access and I received this error on the event viewer:

 

************************************************************************************************************

Object Open:

Object Server: SC Manager

Object Type: SC_MANAGER OBJECT

Object Name: ServicesActive

Handle ID: -

Operation ID: {0,1276636}

Process ID: 508

Image File Name: C:\WINNT\system32\services.exe

Primary User Name: computer$

Primary Domain: ADDOMAIN

Primary Logon ID: (0x0,0x3E7)

Client User Name: BackupAdmin

Client Domain: ADDOMAIN

Client Logon ID: (0x0,0x12A1D1)

Accesses: DELETE

READ_CONTROL

WRITE_DAC

Connect to service controller

Create a new service

Enumerate services

Lock service database for exclusive access

Query service database lock state

Set last-known-good state of service database

 

Privileges: SeTakeOwnershipPrivilege

Restricted Sid Count: 0

 

************************************************************************************************************

 

Have you some idea on how to solve this problem?

 

Thank you very much in advance.

 

Marco Sciarrone