Controlling permissions on customised services via group policy

[PJamesD]

Hi,

some of the application servers in our domain have customised services not listed in the standard group policy templates. I would like to allow non-administrators the rights to remotely manage these permissions.

Can anyone point me to a link which would help me to

# 1 - Add the customised services to group policy

# 2 - Grant the users in question permission to manage these services.


I've been searching around and have not found anything helpful, - any help much appreciated




MCSA (2003)

 

[PJamesD]

Okay I have answered my own questions:

# 1 - When editing the policy from the individual application servers the bespoke services appear in the group policy editor

# 2 - Granting permissions to specific users to manage services can be done on each specific services, - after defining the policy, you can edit security....

My next question is, - does anyone know another method of granting non-administrative users the rights to manage services, as I do not want to definte the behaviour of the services within group policy (some services need to be stopped etc at times for various reasons)

Any help much appreciated!!



MCSA (2003)

 

[PJamesD]

Bump for anyone who has a bright idea of allowing "operators" to perform regular checks that services are running without giving them administrator rights. Surely this can't be too difficult! I can't even make use of the RunAs command as they'll need the administrator password! Argh!!!

MCSA (2003)