RE: Remotely Manage Windows Service
- From: john d <johnd@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Tue, 11 Jul 2006 12:21:02 -0700
Not much luck with the SC command and I can't seem to find much of any
resources regarding this issue on the web. The sc results are below and I
have replaced the server and service names.
C:\sc start \\server w3svc
[SC] StartService: OpenService FAILED 123:
The filename, directory name, or volume label syntax is incorrect.
C:\sc \\server query
[SC] OpenSCManager FAILED 5:
Access is denied.
C:\sc \\server getkeyname servicename
[SC] OpenSCManager FAILED 5:
Access is denied.
Any ideas? If not to resolve this, perhaps another method for allowing a
remote user to start/stop a service without being an administrator.
"Erik Szewczyk [MVP]" wrote:
It's been a while since I've played with granting non-admins privilages to.
services however as memory serves they arent going to be able to do it with
the MMC since they only get privilages over the service (not the database).
Some things to check/try:
* Make sure you've applied the policy with the "Configure Computer Now"
command (otherwise it will get defined in the database but never applied to
the computer).
* I'd also try starting/stopping the service using the "SC" command to see
if it also gets access denied.
Good luck,
Erik
--
MCSE:Messaging 2003, MVP
This post is provided "AS IS" and without warranty, expressed or implied. In
no event shall I be liable for any damages resulting from the application of
the posted content
"john d" wrote:
I need to allow a user to remotely start and stop a single designated service
on a 2003 server machine without making them a local administrator.
I attempted to use a security template on the server to specify permissions
for this user for the desired service as per KB 325349,
http://support.microsoft.com/kb/325349/en-us. However, the user still cannot
start or stop the service using both the MMC or the netsvc utility. When
using MMC, the error is "Unable to open service control manager database on
\\server Error 5: Access is denied." When using the netsvc command, the
error is also "Access is denied."
Please note that if I make the user a local administrator, they can access
all services via the MMC for the server, but the netsvc command still says
"Access is Denied". On the other hand, if I log in as one of the domain
admin accounts, which is also a member of the local administrator group, and
run the netsvc command, I can successfully start and stop the service.
At this point I am stuck and either need to resolve one of the existing
issues with MMC or NETSVC or come up with an alternate solution.
- Follow-Ups:
- RE: Remotely Manage Windows Service
- From: Erik Szewczyk [MVP]
- RE: Remotely Manage Windows Service
- Prev by Date: Re: Mapped drive delay
- Next by Date: Need procedures for Restoring Exchange
- Previous by thread: Re: Mapped drive delay
- Next by thread: RE: Remotely Manage Windows Service
- Index(es):
Relevant Pages
|
Loading
