How To Change Permissions On Indiviual Services On Microsoft Server 2003
I had a need recently to allow a local user group on a Microsoft Server 2003 box to stop and start a specific service without giving them any sort of elevated rights.
This is how I did it:
Firstly, download and install the Windows Server 2003 Resource Kit Tools from here
Then open a command prompt (Start – Run or Windows key ‘R’) and navigate to the resource kit tools install folder:
cd C:\Program Files\Windows Resource Kits\Tools
Now we’re going to use the subinacl.exe tool to grant the stop and start permissions to the designated group on the designated service.
subinacl /SERVICE \\machinename\servicename /GRANT=machinename\groupname=TO
This grants start (T) and stop (O) rights to the specified group, you can also use domain\user or whatever you need.