Remotely accessing services after sp1 for Win 2003

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Hi,
When sp1 is applied to a server, all of the services that are added
after that change have different security than if they were added
before. Specifically, my developers can't remotely view the services
which causes problems for several of our applications. I have applied
the fix found at http://support.microsoft.com/kb/907460/ and this works

for any service that was installed before sp1 was applied. But, the
services we add after sp1 aren't visible remotely unless you are an
admin. I checked the sddl (using sc sdshow myservicename) for the
individual services and the ones that were on the box before sp1 have
this for authenticated users: (A;;CCLCSWLOCRRC;;;AU). The ones we add

after sp1 only have this: (A;;CR;;;AU) which doesn't allow them to
see that service. I know I can do a sc sdset myservicename on each
service to get the security we need, but we have several hundred
services and new ones coming everyday. So I was hoping one of you out
there might know a way to set the default security that every new
service receives. That way I could set it once per box and have the
new services get the needed security when they are added.

Thanks in advance for any suggestions you have.
Ken

.

Relevant Pages

  • Re: DCOM access denied error on Windows 2003 server SP1
    ... >running on Windows 2003 server with SP1 installed. ... > the client to the server. ... > in order to relax the security added in SP1 we have changed the following ...
    (microsoft.public.windows.server.security)
  • Win2003 SP1 goes RTM
    ... Windows 2003 SP1 has finally gone RTM and there is a list of the features ... %3a%2f%2fgo.microsoft.com%2ffwlink%2f%3flinkID%3d36940> Server 2003 SP1 ... enhances security infrastructure by providing new security tools such as ...
    (NT-Bugtraq)
  • Re: Amazon Says Vista SP1 to Arrive Tuesday
    ... SEATTLE -- A major package of updates and security fixes for Microsoft ... Corp.'s Windows Vista operating system will be available for download ... Microsoft said it is on track to release SP1 ...
    (alt.sys.pc-clone.dell)
  • Re: Administrative Templates: Windows 2003 SP1 or Windows XP SP2 ?
    ... The paragraph has stated a scenario: in most cases, ADM in new release ... I believe win2k3 sp1 has covered XP ... Windows Firewall, Post Setup Security Updates, and the Security ...
    (microsoft.public.windows.group_policy)
  • Re: WMI and Windows 2003 SP1
    ... Microsoft MVP (Windows Server: Security) ... WMI repository is accessed, or remote? ... I have an issue were WMI is giving an acces denied error when I try and ... The serverin question are 2003 Standard Edition SP1 boxes and I ...
    (microsoft.public.windows.server.security)