Re: Apply GPO to service startup but not permissions?
- From: "Mark Heitbrink [MVP]" <spam-only@xxxxxxxxxxxxxxxxxxxxx>
- Date: Wed, 16 Nov 2005 11:02:09 +0100
Hi,
Dennis Joray schrieb:
> Is it possible to create a GPO that will modify the startup configuration of
> a service, but not alter the permissions? [...]
If you use an ADM Templates instead of "Services"? Yes. :-)
The other possibility is to edit the security template offline.
Open MMC, integrate SnapIn Security Templates and create a new one.
Edit the service settings withou editing the security settings and
save it. After that you can import it to your GPO.
----- sampleservice.adm -----
CLASS MACHINE
CATEGORY "Services and Driver"
POLICY "Name of Service or Driver"
KEYNAME "System\CurrentControlSet\Services\KeynameofService"
PART "Behavior" DROPDOWNLIST
VALUENAME "Start"
ITEMLIST
NAME "Boot" VALUE NUMERIC 0
NAME "Systemstart" VALUE NUMERIC 1
NAME "Automatic" VALUE NUMERIC 2 DEFAULT
NAME "Manual" VALUE NUMERIC 3
NAME "Deactivated" VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
END CATEGORY
----- sampleservice.adm -----
Just make a copy from "POLCIY" to "END POLICY" for every Service
you want to control and edit its settings.
Mark
--
Mark Heitbrink - MVP Windows Server
Homepage: www.gruppenrichtlinien.de
W2K FAQ : http://w2k-faq.ebend.de
PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.
.
- Prev by Date: GURU ADVICE NEEDED: security settings for service application
- Next by Date: RSoP.msc not showing User Rights Assignment (vs. GPEdit.msc)
- Previous by thread: Re: Apply GPO to service startup but not permissions?
- Next by thread: SQL Express 2005 Installation
- Index(es):
Relevant Pages
|
