Home / server / Questions / 166641
Accepted
Cédric Boivin
Asked: 2010-08-04 04:49:29 +0800 CST

How to give rights to one user for the restart of a service

  • 772

It's there a way i can give the rights to a specific user, for restart a specific service on windows server 2008 ?

windows-server-2008 service permissions user-permissions

2 Answers

  1. Best Answer

    You can use the sc command to set permissions on a specific service.

    The format is a little difficult to understand, but first you will need to find the user or group's SID to use the command (something like "S-1-5-21-....").

    sc myserver sdset spooler D:(A;;RPWP;;;place-sid-here)

    A couple notes on that command:

    • RP Allows service start
    • WP Allows service stop

    Replace myserver with your server's name and spooler with the service you want to edit.

    More information is available at the following locations:

    http://technet.microsoft.com/en-us/library/cc742037(WS.10).aspx

    http://msmvps.com/blogs/erikr/archive/2007/09/26/set-permissions-on-a-specific-service-windows.aspx

    • 7

  2. Waiting for my VMs to spin up, but it looks like this should work (from reading this)

    • Open group policy to Computer Configuration\Policies\Windows Settings\Security Settings\System Services
    • Edit the service in question, enable "define policy setting" and then "edit security"
    • Add the user and give them "read" and "start, stop, and pause" rights

    I'll swing by after I've tried this out, but good question! I had no idea this had been added.

    This might also work: Remotely restarting a service for a non-administrator user

    • 1