How To Change Permissions On Indiviual Services On Microsoft Server 2003

I had a need recently to allow a local user group on a Microsoft Server 2003 box to stop and start a specific service without giving them any sort of elevated rights.

This is how I did it:

Firstly, download and install the Windows Server 2003 Resource Kit Tools from here

Then open a command prompt (Start – Run or Windows key ‘R’) and navigate to the resource kit tools install folder:

cd C:\Program Files\Windows Resource Kits\Tools

Now we’re going to use the subinacl.exe tool to grant the stop and start permissions to the designated group on the designated service.

subinacl /SERVICE \\machinename\servicename /GRANT=machinename\groupname=TO

This grants start (T) and stop (O) rights to the specified group, you can also use domain\user or whatever you need.


Tags: , ,

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

%d bloggers like this: